State Privacy Rights & Do Not Sell/Share (DNSMPI)
Comprehensive state privacy rights and opt-out mechanisms
Owner & Contact
Owner/Operator: Spyface Tech Company, LLC (d/b/a "ClinicBooking") · 30 N Gould St Ste N, Sheridan, WY 82801, USA · Contact: hello@spyface.com (corporate), care@clinicbooking.com (support)
On This Page
Scope & Relationship to Our Privacy Policy
This page supplements our Privacy Policy for residents of U.S. states with comprehensive privacy laws, including California (CCPA/CPRA), Colorado (CPA), Connecticut (CTDPA), Virginia (VCDPA), Utah (UCPA), Oregon (OCPA), and Texas (TDPSA). It explains your state-specific rights and how to exercise them on ClinicBooking.
For data that may qualify as "consumer health data," please also see our separate Consumer Health Data Notice.
Key Definitions (Sale, Sharing, Targeted Ads, Sensitive PI)
- "Sale" (CA): disclosing personal information to a third party for monetary or other valuable consideration.
- "Sharing" (CA): disclosing personal information for cross-context behavioral advertising (interest-based ads across websites/apps).
- "Targeted Advertising" (CO/CT/VA/UT/OR/TX): ads based on personal data obtained from your activities across non-affiliated sites/apps over time (excludes first-party context, measurement, or processing you request).
- "Sensitive Personal Information" (Sensitive PI): may include precise geolocation, government IDs, account logins with credentials, racial/ethnic origin, union membership, contents of messages, genetic/biometric data, or health-related data (state definitions vary).
State Rights Matrix (summary)
= generally available right · — = not required/varies by state. This is a high-level summary; state laws differ. We apply rights broadly where feasible.
Right
Know/Access (incl. categories & specific pieces)
Right
Delete personal information
Right
Correct inaccuracies
Right
Data portability
Right
Opt out of sale
Right
Opt out of sharing / targeted ads
Right
Opt out of certain profiling
Right
Limit use/disclosure of Sensitive PI
Right
Appeal denials
| Right | CA | CO | CT | VA | UT | OR | TX |
|---|---|---|---|---|---|---|---|
| Know/Access (incl. categories & specific pieces) | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Delete personal information | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Correct inaccuracies | ✓ | ✓ | ✓ | ✓ | — | ✓ | ✓ |
| Data portability | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Opt out of sale | ✓ | ✓* | ✓* | ✓* | ✓* | ✓* | ✓* |
| Opt out of sharing / targeted ads | ✓ (sharing) | ✓ (targeted) | ✓ (targeted) | ✓ (targeted) | ✓ (targeted) | ✓ (targeted) | ✓ (targeted) |
| Opt out of certain profiling | — | ✓ | ✓ | ✓ | — | ✓ | ✓ |
| Limit use/disclosure of Sensitive PI | ✓ | — | — | — | — | — | — |
| Appeal denials | — | ✓ | ✓ | ✓ | — | ✓ | ✓ |
* Many states treat "sale" broadly (monetary or other valuable consideration). "Sharing" (CA) roughly aligns with "targeted advertising" (others). We apply opt-out tools consistently across states.
Rights Matrix — Definitions & Footnotes
- Profiling opt-out: Some states provide an opt-out from profiling used to make decisions that produce legal or comparably significant effects (e.g., eligibility decisions). Our service does not engage in such automated decision-making about eligibility for healthcare, employment, housing, or credit.
- Sale vs. Sharing vs. Targeted Ads: California distinguishes "sale" (valuable consideration) and "sharing" (cross-context ads). Other states group similar activity under "targeted advertising." We provide a unified opt-out via cookie settings/GPC.
- Sensitive PI: California provides a "Limit Use/Disclosure" right for Sensitive PI. Other states primarily require consent or impose heightened obligations for certain sensitive data uses. We minimize sensitive data processing and offer layered controls.
- Appeals: CO/CT/VA/OR/TX require an appeal mechanism if we decline a request. Use the same request channel and choose Appeal. If denied again, you may contact your state Attorney General.
- Verification: The strength of verification scales with request sensitivity. Requests for "specific pieces" may require additional verification for security.
How to Submit, Verify & Appeal Requests
Submit a request
- Types: access/know, delete, correct, portability, opt-out (sale/sharing/targeted ads), limit Sensitive PI (CA), profiling opt-out (where available).
- Timing: We aim to respond within 45 days (extendable as permitted).
Verification & appeals
- Verification: confirm account/email control and limited identifiers; stronger checks for higher-risk requests.
- Authorized agents: see Section 8 for documentation required.
- Appeals: CO/CT/VA/OR/TX allow appeals. Select Appeal in the request form. If denied again, contact your state AG.
"Do Not Sell or Share" & Targeted Advertising Opt-Out
ClinicBooking does not sell your personal information for money. We may use cookies and similar tools with partners for advertising measurement and relevance, which could be deemed "sharing" under California law or "targeted advertising" in other states. You can opt out at any time:
- Cookie controls: disable "Advertising/Targeting" in our cookie banner/settings.
- Global Privacy Control (GPC): we honor browser GPC signals (see Section 9).
- Authorized agents: may submit DNSMPI on your behalf (verification applies).
Limit the Use of Sensitive Personal Information (CA)
Where California's "Limit Use of Sensitive Personal Information" right applies, you may instruct us to use Sensitive PI only as allowed by law (e.g., to provide requested services, security, integrity, short-term transient use, or limited non-profiling purposes).
Submit a Limit Sensitive PI RequestAuthorized Agents, Minors & Non-Discrimination
- Authorized agents: provide (i) signed permission from the consumer, (ii) your ID, and (iii) proof you verified the consumer's identity, or we will contact the consumer directly.
- Minors: if a minor's data is involved, the request must come from a parent/guardian with proof of authority; additional verification may be required.
- Non-discrimination: we will not deny goods/services, charge different prices, or provide a different level/quality of service because you exercised your rights, subject to permitted differences (e.g., value-for-data programs with consent). We currently do not offer financial incentive programs; if we later do, we will provide a "Notice of Financial Incentive."
Global Privacy Control (GPC)
When your browser broadcasts a valid GPC signal, we treat it as a request to opt out of "sale"/"sharing"/"targeted advertising" for that browser. Because cookies are browser-specific, set GPC (or your cookie preferences) on each device/browser you use and while logged in to ensure it persists.
Recordkeeping & Metrics
We maintain records of requests (type, outcome, timing) to demonstrate compliance and publish metrics where required by law.
Per-State Disclosures
California (CCPA/CPRA)
- Categories collected: identifiers (e.g., account, contact); internet/network activity; geolocation (approx.); inferences; user content; limited professional info from providers; and, where applicable, sensitive PI (e.g., login credentials) restricted to permitted purposes.
- Purposes: service delivery, account and security, fraud prevention, analytics, debugging, short-term transient use, internal R&D, quality and safety, advertising measurement/relevance (opt-out available).
- Sale/Sharing: we do not sell for money; certain advertising/measurement may be "sharing." Opt out via cookie settings or GPC.
- Sensitive PI: you may Limit Use/Disclosure to permitted purposes.
- Rights: know (categories/specific pieces), delete, correct, portability, opt-out (sale/sharing), limit sensitive PI, and non-discrimination.
Colorado (CPA)
- Rights: access, delete, correct, portability, opt-out of sale and targeted advertising, and opt-out of profiling for decisions with legal/comparably significant effects.
- Appeals: available via the same request channel.
- Targeted ads: disable Advertising/Targeting cookies or use GPC.
Connecticut (CTDPA)
- Rights: access, delete, correct, portability, opt-out of sale and targeted advertising, opt-out of certain profiling.
- Appeals: available via the same request channel.
Additional state disclosures for Virginia, Utah, Oregon, and Texas follow similar patterns with state-specific requirements.
Contact
Support: care@clinicbooking.com
Corporate: hello@spyface.com
Address: Spyface Tech Company, LLC (d/b/a "ClinicBooking"), 30 N Gould St Ste N, Sheridan, WY 82801, USA
This page is intended to complement, not replace, our Privacy Policy. If there is a conflict, the version most protective of consumers' state-law rights controls to the extent required by law.