Love Hurts

General Information

Protecting your personal information is our priority. This privacy policy ("Policy" or "Privacy Policy") describes the data practices of Love Hurts, Inc. and its subsidiaries (collectively, "we", "us," "our," or "Company"), covering the services under its control, including the websites https://lovehurts.com, any additional websites owned or controlled by Company, along with the Company software application, and any other Company products, software applications, and other data processing activities (collectively "Services"). By using the Services, entering into agreements with Company, or otherwise communicating with Company, you are consenting to this Policy and the processing of your data in the manner set forth in this Policy. This Policy should be read in conjunction with the Company's Terms of Service, as amended from time to time (the "Terms"), which are incorporated herein by reference. If you do not agree with the terms set forth in this Policy or the terms and conditions set forth in the Terms, please do not use the Services or submit any communications to Company.

THE SERVICES ARE NOT INTENDED FOR CHILDREN. IF YOU ARE NOT AT LEAST 18 YEARS OLD, THEN YOU MAY NOT USE OR ACCESS SERVICES IN ANY MANNER.

We reserve the right to change this Privacy Policy at any time in our sole discretion. We will provide you with notice of such a change. Notice of any changes to the Privacy Policy will be accomplished upon Company sending you a message to the phone number or email address listed in your account notifying you of such changes and/or Company announcing such changes through the Services. Such changes will go into effect immediately upon your access of the Services after you are given notice, as described herein. Your continued use of the Services following the notice of any changes to this Privacy Policy constitutes your acceptance of such changes. Any information collected by the Services will be dealt with in accordance with the version of this Privacy Policy that was in place at the time of collection.

1. Information Collected

User Provided Information

To provide users ("Users"), with the best possible experience, we may collect personally identifiable information ("Personal Information"). Personal Information is any information that can be used to identify you or your household or to contact you online or offline and includes, but is not limited to, your name, address, email, phone number, and payment information. The Services may collect Personal Information when it is provided to us, such as when you use our Services, or attempt to contact us.

Information that is Automatically Collected

We and our analytics service providers use cookies, which are small text files that help store user preferences and activity, similar technologies such as web beacons, pixels, ad tags, logs, and SDKs, which are blocks of code provided by our service providers that may be installed in our mobile and online applications, to recognize you when you visit our Services, and to collect information such as the number of visits, which features, pages, or content are popular, and to measure your browsing activities. These technologies allow us to optimize the operation of our Services, including by allowing us to help ensure our Services are functioning properly and ultimately improve the Services. Examples of Personal Information collected via cookies includes, but is not limited to, your Internet Protocol ("IP") address, other unique user identifiers, your mobile device and browser type identifiers, software and system type, and information about your use of the Services, including the duration of time you access or use the Services and information about Services performance analytics, including crashing, network, and tracing. You can prevent the storage of cookies by a corresponding setting of your browser software; however, please note that if you do this, you may not be able to use all the features of the Services to the fullest extent possible.

Our Services also collect information about your interactions, including navigation paths, search queries, crashes, timestamps, purchases, clicks and shares, and referral URLs. We may combine this data with Personal Information and DII. For efficiency's sake, information about your interactions may be transmitted to our servers while you are not using the Services.

Categories of Personal Information We Collect

Google Analytics

In addition to the foregoing, we have integrated Google Analytics into the Services. Google Analytics is a web analytics service. Web analysis is the gathering, collection and analysis of data about the behavior of visitors to websites. Among other things, a web analysis service collects data on which website directed a user to the Services (so-called referrers), which subpages of the website were accessed or how often and for which period of time a subpage was viewed. We mainly use this analysis to optimize our websites and for the cost-benefit analysis of Internet advertising.

The operator of the Google Analytics component is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

Google Analytics uses cookies. The information generated by the cookie about your use of the Services is usually transmitted to and stored in a Google server in the United States. Google might transfer the Personal Information collected via this technical procedure to third party sub processors to accomplish the purpose for which we use Google Analytics.

On behalf of the Company, Google will use this information to evaluate your use of the Services, compile reports on the Services, and to provide us with further services related to the Services. The IP address transferred through your browser to Google Analytics will not be combined with other data held by Google.

You may prevent the collection of the data generated by the cookie and related to your use of the Services (including your IP address) by Google as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=e This browser add-on informs Google Analytics via JavaScript that no data and information about website visits may be transmitted to Google Analytics. Additionally, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software programs.

Further information and Google's applicable privacy regulations can be found at https://policies.google.com/privacy and https://marketingplatform.google.com/about. For more information on how Google uses and processes data, please visit: https://policies.google.com/technologies/partner-sites.

2. Information Collected

We do not knowingly collect or maintain Personal Information from persons under 18 years of age. If we learn that Personal Information of persons under 18 years of age has been collected on or through the Services, we will take the necessary and appropriate steps to delete the Personal Information.

3. How Company Uses Your Personal Information

We use the information we collect from our Services to provide, fulfill, maintain, protect, and improve our Services, to develop new Services and offerings, and to protect us and our users.

Personal Information is primarily used for business purposes, such as for sending you occasional communications and updates, responding to inquiries, logins, and providing and maintaining the Services. When you contact us, we may keep a record of your communication as well as the other information to help solve any issues you might be facing. We may use your email address to inform you about our Services, such as letting you know about changes or improvements.

We process Health Data, including PHI, in order to, at your direction, (i) inform designated contacts that they have been exposed to certain sexually transmitted infections and other conditions and (ii) to provide you with notifications that you may have been exposed to the same.

We share Personal Information with companies, outside organizations, and individuals for the limited reasons, outlined below:

1. With your consent - We will share Personal Information with companies, outside organizations or individuals if we have your consent to do so.

2. For external processing - We provide Personal Information to our affiliates, service providers, processors, or other trusted businesses or persons to process it for us, based on our instructions and in compliance with this Policy and any other appropriate confidentiality and security measures. We may share Personal Information with companies that provide services to us, including companies that assist us with hosting, payment processing services, providing data process services, providing analytics services, account management, technical support, marketing, measurement, and similar services.

3. For legal reasons - We will use and/or share Personal Information with companies, outside organizations or individuals if we have a good-faith belief that access, use, preservation or disclosure of the information is reasonably necessary to meet any applicable law, regulation, legal process or enforceable governmental request, detect, prevent, or otherwise address fraud, security or technical issues or protect against harm to the rights, property or safety of our users or the public as required or permitted by law.

4. In case of a sale or asset transfer - If we become involved in a merger, acquisition or other transaction involving the sale of some or all our assets, user information, including Personal Information collected from you through your use of our Services, could be included in the transferred assets. Should such an event occur, we will use reasonable means to notify you, either through email and/or a prominent notice on the Services.

5. In aggregated form for business purposes - We may use or share anonymized aggregated information and DII with our partners such as businesses with whom we have a relationship. For example, we may share information to show trends about the general use of our Services.

6. To generate and obtain analytics to improve our Services.

7. To send you personalized marketing information regarding our Services.

8. We use DII to operate our Services and manage user sessions, including analyzing usage of our Services, preventing malicious behavior and fraud, improving the content, to link your identity across devices and browsers, to provide you with a more seamless experience online.

Some of the information we process includes sensitive personal information ("Sensitive Information"), as defined by California Civil Code Section 1798.140(ae) and laws of similar purpose and effect, including the PHI and other health information you provide to us, as identified above. We only process such information for the purposes set forth herein and we do not process such information to profile or infer characteristics about our users.

4. How Company Shares Information with Third Parties

WE DO NOT SELL, LEASE, OR OTHERWISE TRANSFER YOUR PERSONAL INFORMATION TO THIRD PARTIES FOR THEIR OWN USE. FURTHER, WE DO NOT USE YOUR INFORMATION TO CREATE PROFILES INCLUDING PROFILES FOR THE PURPOSE OF AUTOMATED DECISION MAKING.

However, there are certain circumstances in which we may transfer your Personal Information to third parties, without further notice to you, as set forth herein.

We may disclose your Personal Information to our owners, employees, and third-party contractors for the purpose of using such information to improve the Services. YOUR PERSONAL INFORMATION IS SUBJECT TO ELECTRONIC DISCLOSURE.

We may disclose your Personal Information, without notice, if required to do so by law or in the good faith belief that such action is necessary to: (i) conform to the edicts of the law or comply with legal process served on Company; (ii) protect and defend the rights or property of Company; and/or (iii) act under exigent circumstances to protect the personal or economic safety of users, or the general public.

Notwithstanding the foregoing, we may disclose your Personal Information to other third parties with your consent and direction to do so. When you broadcast information to third-party services, such information is no longer under our control and is subject to the terms of use and privacy policies of such third parties.

In the past 12 months, we have shared the following Personal Information for the purposes described herein:

Category 1: Identifiers
Category 2: Information that identifies or can be associated with a particular individual
Category 3: Internet activity and electronic network information
Category 4: Geolocation
Category 5: Health information

4.1 STI Exposure Notices

As part of the Services, when Users provide us with information regarding individuals' STI status and possible exposure, we will send a message to the phone numbers of the individuals provided by you. These notifications are entirely anonymous and do not contain Personal Information about the individual who provided the notice.

5. Health Data Privacy Policy

As part of the Services, we may collect User Health Data. "User Health Data" means Personal Information that is linked or reasonably linkable to you and that identifies your Health Information. "Health Information" means information regarding past, present, or future physical or mental health status. You may request a copy of this Section 5 or the Privacy Policy by emailing us at dataprivacy@lovehurts.com

Health Data We Collect

Health Data We Share with Third Parties

As part of our Services, we may share health conditions and medical history with third parties at your direction in a manner that does not include your Personal Information. We may share anonymized aggregate User Health Data provided by all users for research and public health purposes, including tracking trends in rates of sexually transmitted infections. The categories of User Health Data we share are health conditions and medical history that you provide to us, including sexually transmitted infection status and sexual activity.

Individuals: We will share Health Information with individual contacts for the purpose of informing such individuals that they may have been exposed to certain sexually transmitted infections and other conditions. When we share Health Information with individuals, we do not include your Personal Information. Such individuals will only receive a notice that they may have been exposed to a sexually transmitted infection and the sexually transmitted infection or variant that you select. Such individuals will not receive any other personal information including any other details pertaining to your Personal Information.

Communications Service Providers: We will share Health Information with our communications service providers, including Twilio, for the purpose of notifying contacts that they have been exposed to certain sexually transmitted infections and other conditions. When we share Health Information with our communications service providers, we do not include your Personal Information.

Hosting and Storage Service Providers: Our hosting and data storage providers may have access to Health Data in anonymous or aggregate form in order to support our services and to facilitate notifications to contacts that they have been exposed to certain sexually transmitted infections and other conditions. Health Data accessible to our hosting and data storage providers will be stored in a form in which your Personal Information will not be accessible to the service provider.

Universities and Government Agencies: We may share anonymized aggregate Health Information for research and public health purposes. Health Information shared with universities and government agencies will not include any user's Personal Information, and such Health Information will be anonymized and presented in aggregate form and will not include any Personal Information.

Your Rights with respect to Health Data

If you are a Washington resident or your Health Data is collected in Washington, you have the following rights with respect to your Health Data:

The right to confirm the collection, sharing, or selling of your Health Data. You can confirm whether Company is collecting, sharing, or selling your Health Data. You can access such Health Data and a list of all third parties and affiliates with whom Company shares your Health Data, including an online mechanism that you may use to contact these third parties. You can make such requests by emailing us at dataprivacy@lovehurts.com.

The right to withdraw consent. You have the right to withdraw your consent at any time where Company relied on your consent to collect or share your Health Data. You can withdraw your consent by emailing us at dataprivacy@lovehurts.com.

The right to delete your Health Data. You can request deletion of your Health Data by emailing us at dataprivacy@lovehurts.com.

We may ask you to verify your identity before we can act on your request. Making a verifiable consumer request does not require that you create an account with us. You must provide us with sufficient information to verify your identity, however we will only use Personal Information provided in a verifiable consumer request to verify the requestor's identity.

Consent

By providing us with Health Data, you are consenting to our collection and sharing of health conditions and medical history, specifically STI status, to third parties anonymously at your direction for the purpose of informing contacts that they have been exposed to certain sexually transmitted infections and other conditions. We will share the Health Data to the third parties to whom you direct us to share such Health Data anonymously and we will not share your name or contact information with third parties. You can withdraw your consent at any time by emailing us at dataprivacy@lovehurts.com.

6. More on Third Parties

While we strive to work with reputable companies with good privacy practices, this Policy does not apply to services offered by other companies or individuals, including products or sites that may be displayed or linked to you on the Services. We also do not control the privacy policies and your privacy settings with third parties, including social networks and ad networks. We encourage you to be aware when you leave the Services and to read the privacy statements of any other site or application that collects Personal Information.

7. More on Cookies and Do Not Track Signals

Generally, we use cookies to collect additional service usage data, to improve the Services, and to personalize your experience. Using cookies helps ensure a safe experience; and prevent spam, scammers, and phishing. However, we do not share cookies with third parties, except for Google Analytics, as described herein.

We may keep track of user behavior, within the Services to understand said behavior. This data is used to enhance the Services.

Like most companies, we will not follow any browser, extension, or other application's Do Not Track signal or any other similar anti-tracking signals. However, we offer other choices with respect to third parties. Many third parties participate in self-regulation to offer you a choice regarding receiving targeted ads. Please note that you'll still see generic ads after opting out, but they won't be based on your activities online. On the web, you can opt out of participating companies by visiting the following sites:

If you wish to similarly opt out of cross-app advertising on mobile devices, you can enable the Limit Ad Tracking flag on the device. Enabling Limit Ad Tracking sends a flag to third parties that you wish to opt out of targeted advertising on that device, and major mobile platforms require companies to honor this flag. Screenshots on how to find these options on various devices are available here: http://www.networkadvertising.org/mobile-choices. To learn how to opt out on other devices, please visit the platform/device's privacy policies for more information.

In addition to the above, if you wish to opt out of receiving targeted ads or otherwise limit ad-tracking, you may email us at dataprivacy@lovehurts.com.

8. Security of your Personal Information and Data Transfer

We will take reasonable and appropriate security measures to protect your Personal Information from unauthorized access, disclosure, alteration, or destruction. Unfortunately, no data transmission over the Internet or any mobile or wireless network is 100% secure. As a result, while we strive to protect your Personal Information, you agree and acknowledge that: (i) there are security and privacy limitations inherent to the Internet and wireless and mobile networks which are beyond our control; and (b) security, integrity, and privacy of all information and data exchanged between you and Company cannot be guaranteed. We recommend that you do your part in protecting your Personal Information. This includes guarding against unauthorized access to your email, phone number, and social media accounts including via 2-factor authentication, if applicable, by ensuring no one else uses your device or computer when you are logged in, by logging off from the Services when they are not in use, by keeping your password and other Personal Information confidential, and by taking precautionary steps to guard the physical safety and security of your device or computer.

Our Services are located in the United States and your Personal Information may be transferred or stored in the United States. The data protection laws and rules in the United States may be different than those where you live. We rely on various legal mechanisms to help lawfully support transfers of information outside the country of collection where appropriate. To the maximum extent permitted by applicable law, you hereby authorize Company to process your information in the United States or any other locations where we operate.

9. How Long Will Your Information Be Stored

We generally store Personal Information for as long as we need it to accomplish the business purpose for which such Personal Information is processed. Notwithstanding the foregoing, we may retain your Personal Information where such retention is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person. We retain PHI consistent with our obligations under HIPAA and under our Business Associate agreements with Covered Entities. If you submit Personal Information to us, we will retain a summary of the messages you have directed us to send, including the Health Data and the date sent. We will not access your Personal Information unless you request our technical support. If another User has provided your name and/or phone number for the purposes of sending a communication regarding STI health status, such information is deleted immediately upon sending the communication and we do not store or otherwise transfer such information. If you delete your account, we will anonymize your Personal Information and only use your Personal Information in aggregate form for data analysis.

10. Communication

From time to time, we may contact you via email or text for the purpose of providing announcements, promotional offers, alerts, confirmations, surveys, and/or other general communication regarding the Services. To improve the Services, we may receive a notification when you open an email from Company or click on a link therein.

If you would like to stop receiving such communications via email from Company, you may opt out of such communications by clicking on the UNSUBSCRIBE button and/or by emailing us at dataprivacy@lovehurts.com.

If you have received any communications from Company, you may opt out of receiving future communications by clicking on the UNSUBSCRIBE button in email communications, or by following the text message instructions to opt out of text message communications.

11. Merger or Sale

The information collected pursuant to this Policy, including Personal Information, is considered an asset of Company. In the event Company or some or all of the assets related to the Services are acquired by another entity through a sale, merger, or some other change of ownership transaction, Company reserves the right to transfer or assign the information, collected pursuant to this Privacy Policy.

12. Contact Information

We welcome your questions or comments regarding this Privacy Policy. If you believe that we have not adhered to this Privacy Policy, or if you have any other questions or concerns regarding this Privacy Policy please contact dataprivacy@lovehurts.com.