Privacy Policy – Corium Inc.

Corium, Inc. Website Privacy Policy

Effective Date: June 1, 2020

Purpose

This Privacy Policy explains how Corium, Inc. (“Corium”, “us”, or “we”) collects, uses, and discloses personal information about you (“Personal Information”) when you use any Corium-operated or controlled website, including www.coriumintl.com (“Site”), as well as the privacy rights available to you.

Unless otherwise defined in this Privacy Policy, terms used in this Privacy Policy have the same meanings as in our Terms of Use, accessible at https://www.coriumintl.com/terms-of-use-2/.
Personal Information We Collect
1. Information You Give Us
  
  When you use this Site, you may provide us with Personal Information, including but not limited to your name, email address, other contact information, and information about your medical condition.
2. Usage Information
  1. We may automatically collect information about how you access and use the Site, which may include information such as your computer’s internet protocol address (i.e., IP address), mobile carrier, mobile advertising and other unique identifiers, your browser type and/or version, the pages of our site that you visit, the time and date of your visit, the time spent on those pages, and unique device identifiers and other diagnostic data.
  2. We may collect information using cookies, pixel tags, or similar technologies. Cookies are files with a small amount of data, which may include a unique identifier. Cookies are sent to your browser from a website and are stored on your device. Examples of cookies we use are:
    - Session cookies: We use session cookies to operate our Site
    - Preference cookies: We use preference cookies to remember your preferences and various settings
    - Security cookies: We use security cookies for security purposes
    A pixel tag (also known as a web beacon) is a piece of embedded code that collects information about users’ engagement on that web page. We use pixel tags to record, for example, that you have visited a particular web page or clicked on a particular advertisement.
3. Public Information
  
  We may get information about you from publicly available sources. For example, if you access our services through a third-party application, we may collect information about you from that third-party application that you have made public via your privacy settings.
How We May Use, Transfer, and Disclose Your Personal Information
1. Use of Personal Information
  
  Corium may use Personal Information for a variety of purposes, which may include:
  - Providing services or communications you have requested or otherwise opted to receive
  - Providing customer care and support
  - Verifying or maintaining the quality or safety of our site
  - Notifying you about changes to our Site
  - Auditing relating to consumer interactions, transactions and legal compliance
  - Providing and maintaining the Site
  - Allowing you to use interactive features of our Site when you choose to do so
  - Conducting analysis and research so we can improve, upgrade or enhance the Site, our products, and our services
  - Monitoring the usage of the Site
  - Detecting, preventing, and addressing technical and security incidents
  - Debugging to identify and repair errors that impair website functionality
  - Auditing relating to consumer interactions, transactions and legal compliance
  - Creating de-identified and aggregated information, which may be shared pursuant to Section III.C, below.
2. Transfer of Personal Information
  1. We may transfer your Personal Information to, and maintain it on, computers located outside of your state, province, country, or other governmental jurisdictions where applicable data protection laws may differ from those of your jurisdiction. If you are located outside United States and choose to provide Personal Information to us, please note that we transfer this information to the United States and process it there.
  2. We have taken appropriate safeguards to require that your personal information will remain protected and require our third-party service providers and partners to have appropriate safeguards as well. Further details can be provided upon request.
3. Disclosure of Personal Information
  
  Corium does not sell your Personal Information, nor has it sold your Personal Information in the preceding 12 months, as the term “sell” is defined under the California Consumer Privacy Act (CCPA). Corium may have disclosed the following categories of Personal Information to third parties for a business purpose in the past 12 months:
  - Identifiers (e.g. a real name, alias, unique personal identifier, online identifier, Internet Protocol address, email address)
  - Personal Information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) (e.g. a name, signature, physical characteristics or description, address, telephone number, medical information)
  - Internet or other electronic network activity (e.g. browsing history, information on a consumer’s interaction with an internet website, application, or advertisement)
  - Inferences drawn from other personal information to create a profile about a consumer (e.g. profile reflecting a consumer’s preferences)
  The categories of third parties to whom we disclose personal information for business purposes are set out below:
  1. Corium may disclose your Personal Information to third parties who perform services on our behalf (“Service Providers”), including your name, contact information, medical information, and your use of and interaction with the Site. These Service Providers have access to your Personal Information only to perform these tasks on our behalf and are obligated to securely protect the information and not to disclose or use it for any other purpose.
  2. Corium may disclose your Personal Information in good faith if doing so is necessary to comply with a legal obligation or respond to the request of a government agency, protect and defend the rights or property of Corium, or protect against legal liability, prevent or investigate possible wrongdoing, or protect the personal safety of users of the Site or the public.
  3. Corium may share de-identified and/or aggregated reports with third parties, which do not contain Personal Information.
  4. Corium may share Personal Information with our affiliated companies.
  5. Corium may disclose, sell, or transfer your Personal Information to third parties in connection with a corporate transaction such as a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, purchase or sale of assets, or transition of service to another provider, as permitted by law and/or contract.
  6. We may provide Personal Information to business partners with whom we jointly offer products or services. In such cases, our business partner’s name will appear along with ours.
Your Privacy Rights
1. General
  
  You have certain choices about your Personal Information. If you have consented to the collection and use of your Personal Information, you may withdraw that consent at any time and prevent further use of by contacting us as described below. Even if you opt out, we may still collect and use non-personal information regarding your activities on our website and for other legal purposes as described above.
2. Email and Telephone Communications
  1. If you receive an unwanted email from us, you can use the unsubscribe link found at the bottom of the email to opt out of receiving future emails. Note that you will continue to receive transaction-related emails regarding products or services you have requested. We may also send you certain non-promotional communications (e.g. communications regarding this Privacy Policy), and you will not be able to opt out of those communications.
  2. We process requests to be placed on do-not-mail, do-not-phone and do-not-contact lists as required by applicable law.
3. Your Privacy Rights
  
  In accordance with applicable law, you may have the right to:
  1. Access to Personal Information about you consistent with legal requirements. In addition, you may have the right in some cases to receive or have your electronic Personal Information transferred to another party.
  2. Request correction of your Personal Information where it is inaccurate or incomplete.
  3. Request deletion of your Personal Information, subject to certain exceptions.
  4. Request restriction of or object to our use of your Personal Information, if applicable, where such requests are permitted by law, including opting out of the sale of information to third parties, as applicable.
Other Important Information

Google Analytics

Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our site. These data are shared with other Google services. Google may use the collected data to contextualize and personalize the ads of its own advertising network.
You can opt out of having made your activity on the site available to Google Analytics by going to http://tools.google.com/dlpage/gaoptout, or installing the Google Analytics opt-out browser add-on. The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js, and dc.js) from sharing information with Google Analytics about your activity on our Site.

For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: https://policies.google.com/privacy?hl=en

Cookies

We use cookies and similar tracking technologies to track the activity on our site and hold certain information. You can instruct your browser to refuse all cookies or indicate when a cookie is being sent. However, if you reject all cookies, you may not be able to use some portions of our site.
Do Not Track

Do Not Track (“DNT”) is a privacy setting in some web browsers that allows users to request that websites and services not collect certain information about users as they move across different websites or online services overtime. This Website does not recognize or respond to browser-initiated DNT signals. For information about “do-not-track”, visit http://www.allaboutdnt.org.
Links to Other Sites

Our site may contain links to other sites that are not operated by us. If you click on a third-party link, you will be directed to that third party’s site. We strongly advise that you review the Privacy Policy of every site you visit. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites or services.
Data Retention

We store the Personal Information we receive as described in this Privacy Policy for as long as you use our Services or as necessary to fulfill the purpose(s) for which it was collected, provide our Services, resolve disputes, establish legal defenses, conduct audits, pursue legitimate business purposes, enforce our agreements, and comply with applicable laws.
Security of Your Information.

We take steps to ensure that your information is treated securely and in accordance with this Privacy Policy. Unfortunately, no system is 100% secure, and we cannot ensure or warrant the security of any information you provide to us. To the fullest extent permitted by applicable law, we do not accept liability for unintentional disclosure.

By using the Services or providing Personal Information to us, you agree that we may communicate with you electronically regarding security, privacy, and administrative issues relating to your use of the Services. If we learn of a security system’s breach, we may attempt to notify you electronically by posting a notice on the Services, by mail or by sending an e-mail to you.
Supervisory Authority

If you are located in the European Economic Area or the UK, you have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal information violates applicable law.
Children’s Privacy

Our site does not address anyone younger than 18 years of age (a “Child” or “Children”), and we do not knowingly collect personally identifiable information from anyone younger than 18 years old. If you are a parent or guardian and you are aware that your Children have provided us with Personal Information, please contact us. If we become aware that we have collected Personal Information from a Child without verified parental consent, we will remove that information from our servers, unless we are legally required to retain it, and limit the Child’s access to our Services.
Changes to this Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page with an updated “effective date” at the top of this page. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
Contact Us

If you have any questions about this Privacy Policy, please contact:

Corium, Inc.
Attn: Privacy
235 Constitution Drive
Menlo Park, CA 94025
privacy@coriumintl.com
+1 833 445 2009