Privacy Policy

GENERAL TERMS

Personal Information. You can visit the Service without submitting your personal information to us, but you will be required to provide your personal information in order to sign up for an account on the Service (where that option is available), to order or purchase products or services using the Service (where that option is available), and to use certain other tools and features of the Service. We will collect any personal information from or about you that you choose to provide to us, which may include, without limitation, your first and last name, physical address, telephone number, email address, and payment information. To sign up for an account on the Service, where that option is available, you may be required or given the opportunity to provide additional types of information (as described below). Any such information that you choose to submit will be collected by NDX. We will use your personal information as described below in this Privacy Policy and for any purposes we may disclose to you at the point of collection.

Phone Numbers. If you provide a mobile or other telephone number to us, you consent to receiving text messages and telephone calls from us at that telephone number for the purpose of communicating with you, but only to the extent permitted by applicable law.

SMS Terms and Conditions. Upon messaging opt-in, the end user agrees to receive messages from NDX regarding case Follow-ups and general inquiries. End users can opt-out by replying STOP or request more information by replying HELP. Message frequency varies. Message and data rates may apply. If you need assistance or have questions about our SMS service, reply with “HELP” to any SMS message you receive, or contact our customer support team at 800-678-4140.

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Registration and Logins. To sign up for an account, you must provide specific information, including without limitation, personal information, such as your email address, account number, telephone number, and/or registration number (each, as applicable). Once you are registered (where that option is available), when you login to your account, we will collect your login username, password, and email address (if applicable).

Order & Payment Information. We request information from you when you fill purchase products or services through the Service. To purchase products or services using the Service, where that option is available, you must provide your contact information (e.g., name and shipping address) and the applicable payment information. All purchases made using the Service must be made by under your existing account with us through the process agreed to between NDX and you. NDX does not directly access, handle, or store credit or debit card information submitted through the Service. To make a purchase using the Service, you may need to provide your name and your credit or debit card type, number, expiration date, security code, and billing address (as applicable). This information is used for billing purposes and to fill your orders. If we have trouble processing an order, we may use this information to contact.

Job Applications. If you submit a resume, job application, or related materials or other information to us, we may use that information to evaluate your qualifications and consider or respond to your inquiry or application. Your submission of a resume, job application, or related information does not in any way require NDX to review that information or consider you for employment. To view career opportunities at NDX or to submit a job application, you may be redirected to an online career portal operated by a third party. We encourage you to review any terms and privacy policies posted on that portal (if applicable).

Contact Form, Quotes, Requests for Support. To contact us for more information, quotes for our applicable products and services, or to request support via the Service, you will need to provide your personal information as applicable, details of the products or services, the organization you work for or represent, and the subject matter in which you are interested.

Health and Related Data. NDX, as a dental laboratory, requires certain information to perform the Services and provide its products. As such, our dental provider customers provide us dental patient information that may include dental health information (for example, dental imaging records, patient names, patient addresses, and other patient information as necessary for us to provide the products and Services) and background information such as age, race, ethnicity, and/or gender. We only use this information to provide the Services and products.

Marketing Communications. If you sign up or otherwise opt in to receive promotions, newsletters, or other promotional communications from us, you will need to provide your email address. We will use this information to send you NDX updates and promotional and other electronic communications. You may opt out of receiving updates and other emails from us at any time by following the unsubscribe instructions in the applicable email or by contacting us using the contact information provided below under “Contact Information.” Note that, even if you opt out of receiving promotional communications from NDX, you may still receive administrative communications from us with respect to your use of the Service. We may use third-party email providers to deliver these communications to you.

OUR DATA COLLECTION PRACTICES

Information We Collect. We collect information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer, household, or device (“Personal Information”). Personal Information does not include:

• Publicly available information.
• Deidentified or aggregated consumer information.
• Information excluded from applicable data privacy laws’ scope, like:
  • health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA), clinical trial data, or other qualifying research data;
  • personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FCRA), the Gramm-Leach-Bliley Act (GLBA), and the Driver's Privacy Protection Act of 1994.

Regardless of what personal data we collect from you, we may use it for the following activities.

• To help maintain the safety, security, and integrity of our Service, products and services, databases and other technology assets, and business.
• For testing, research, analysis, and product development, including to develop and improve our Service, products, and services.
• To comply with any court order, law, or legal process, including to respond to any government or regulatory request.
• As described to you when collecting your personal information.
• To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by us about our users is among the assets transferred.
• To the extent permitted by applicable law, to aggregate personal information and other Collected Information for our business purposes.
• To enforce or apply our Terms of Use and other agreements, including for billing and collection purposes.
• If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of NDX, our customers, or others.
• With your consent, we may use and share your personal information and other Collected Information in ways not specifically described in this Privacy Policy.

In addition to, and consistent with, the uses and sharing described above, NDX and its suppliers may use and disclose Collected Information as described below:

CONSUMER USERS OF OUR SERVICES

Generally, when you engage with our Services:

• We may collect identifier, financial, commercial and inference information relating to you. We also may collect health, demographic, and account related information from you, which may be considered “sensitive” under privacy laws.
• We use this information to provide you with our Services, including operating and administering our business internally, as well as performing analytics, enhancing our products and Services offerings and to communicate with you. We also may use your non-sensitive information to market and advertise our products and Services.
• We generally collect this information from you directly.
• We may disclose this information to our service providers, affiliates, and operational vendors.
• For a complete and specific description of how we may collect, use and disclose personal data relating to you when you engage with our Services, please see the chart below:

WEBSITE VISITORS

When you visit our Website, we may automatically collect the below personal data from you for the specified purposes.

• We may collect online identifier, geolocation, internet, electronic network activity and device information relating to you.
• We may use this information to operate our Website and provision it to you, personalize your use of our Website, measure and track and analyze trends and usage in connection with your use or the performance of our Website and to advertise our Services.
  • We generally collect this information from you directly, although we may collect information from referring websites, third-party data providers or from our information technology, security and site hosting providers.
  • We may disclose this information to our service providers, affiliates, operational vendors and our advertising and marketing partners.
  • We may share this information with our marketing vendors for the purposes of targeted advertising or cross-contextual behavioral advertising.

For a complete and specific description of how we may collect, use and disclose personal data relating to you when you engage with our Website, please see the chart below:

CURRENT OR PROSPECTIVE BUSINESS PARTNERS

If you are an employee of one of our customers, vendors or other entity and who is involved in our relationship with your employer, or if you engage with us as a proprietor of your own business, we may collect the following information about you for the described purposes and disclose it to the described recipients:

• We may collect business identifier and professional information relating to you.
• We may use this information to administer and facilitate our relationship with you or your employer, market and advertise our Services as well as to develop, maintain and enhance our Sites, products and Services.
• We generally collect this information from you directly, although we may collect information from referral sources as well as publicly-available databases. We may disclose this information to our service providers, affiliates, and operational vendors.

For a complete and specific description of how we may collect, use and disclose personal data relating to you when you engage with us in a business-to-business capacity, please see the below charts:

SHARING AND SELLING PERSONAL INFORMATION

We may share your personal information by disclosing it to a third party for a business purpose. A common understanding of “selling” information is that it involves a company taking information it has learned about you and exchanging that information with an unrelated third party for money, who will then use that data for a new purpose that you did not intend. We do not do this sell your information for money. However, certain state privacy laws have a much broader definition of “sell” which encompasses activities beyond the traditional common understanding of “selling” for money, such as disclosing personal information for certain analytics, targeted advertising or cross-contextual behavioral advertising.

There are certain activities we perform that do fall under the very broad definition of “share” and “sale.” You have the right to opt-out of the share and sale of your personal information as described below.

We will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes without providing you notice.

SENSITIVE INFORMATION

Certain jurisdictions provide special categories of personal data that are considered sensitive under the applicable law. We collect and use the following special categories of personal data when voluntarily provided to us:

• Personal health data; and
• Race and ethnicity.

We collect and use the foregoing special categories of personal data for the following legitimate business purposes:

• to carry out our obligations under applicable law;
• for the performance of an agreement with you or to provide services and/or products requested by you and as reasonably expected in the context of such performance;
• to protect our legal interests and to ensure the physical safety of ourselves and other individuals; and
• as otherwise required by law.

Where we have a legitimate need to process special categories of personal information for purposes not identified above and where required by applicable law, we will only do so after providing you with notice and, if required by applicable law, obtaining prior consent.

Please note that the Services are not subject to HIPAA and the personal health data you may provide to us therefore does not constitute Protected Health Information or PHI (as defined by HIPAA).

WEBSITE TECHNOLOGY DISCLOSURES

As you navigate and use the Service, certain information can be passively collected—that is, gathered without the user actively providing the information or being concurrently made aware of the collection of information—using various technologies. We passively collect a variety of types of information in a variety of ways, including:

IP Addresses and Related Data. The servers used to operate and provide the Service may collect data pertaining to you and the equipment, software, and communication methods you use to access the Internet and the Service, including Internet protocol (“IP”) addresses assigned to the computers and other devices from where you access the Internet, your Internet service provider (ISP), device ID numbers and unique identifiers, your media access control (MAC) address, your operating system, your computer screen resolution, your web browser type, the pages you access on the Service, the websites you access before and after visiting the Service, the length of time you spend on the Service, date and time stamps, clickstream data, your approximate geographic location, performance statistics, and usage data. NDX may use this information to administer the Service and its servers, to generate statistical information, to monitor and analyze Service traffic and usage patterns, to monitor and help prevent fraud, to investigate complaints and violations of our policies, and to improve the Service.

We may combine this information with other Collected Information (including personal information) and information obtained from third parties for security reasons and to protect our rights or the rights of others. The suppliers that we use to provide the Service may collect information about your visits to the Service and other websites. Some of this information may be collected using cookies and similar tracking technologies as explained below under “Cookies and Tracking Technologies.”

Analytics. The Service uses third-party analytics tools (e.g., Google Analytics) to collect and process data about your use of the Service, including when you visit the Service, URLs of the websites that you visit prior to visiting the Service and when you visit those websites, and IP addresses assigned to the devices from where you access the Internet. Our analytics providers may set and read cookies to collect this data and your web browser will automatically send data collected by those cookies to our analytics providers. Our analytics providers use this data to provide us with reports that we will use to improve the Service’s structure and content.

For more information on how Google uses this data, visit Google’s Privacy Policy and Google’s page on How Google uses data when you use our partners’ sites or apps. To prevent this data from being used by Google Analytics, follow the instructions to download and install the Google Analytics Opt-out Browser Add-on for each browser you use. Using the Google Analytics Opt-out Browser Add-on will not prevent NDX from using other analytics tools and will not prevent data from being sent to the Service itself or to Google. For more information about how Google Analytics uses cookies to measure user interactions on websites, visit Google Analytics Cookie Usage on Websites. You may disable cookies as discussed below, but that may impact your use and enjoyment of the Service.

Advertising Networks, Personalized Advertising, Remarketing, & Retargeting. From time to time the Service may use or participate in advertising networks and related advertising services that are managed and provided by third-party advertising servers, advertising agencies, technology vendors, and research firms, including, without limitation, Google Ads and advertising services provided by Adobe and LinkedIn. These services collect information about your visits to and interactions with the Service and other websites and will use that information to target advertisements for goods and services and to display those advertisements on other websites. The information collected may be associated with your personal information.

Advertising networks often gather data about consumers who view advertisements to make inferences about a consumer’s interests and preferences, which enables their computers to deliver advertisements directly targeted to the consumer’s specific interests. This practice is often referred to as “online behavioral advertising.” For example, a third-party advertising network might collect the type of web browser you use, the type of computer operating system you use, the domain name of a website you visit, whether or not you visit specific pages of the Service and other websites, the location of your Internet service provider, the date and time of a visit to a website, and other interactions between you and a website.

Through Google Ads, Google uses your Internet searches, cookies, and similar identifiers (e.g., pixel tags) to collect information about your visits to the Service and your interaction with our products and services to generate targeted advertisements to you on other websites that you visit across the Internet.

We may also enable and implement the following Google Analytics Advertising Features on the Service: Remarketing with Analytics, Demographics and Interest reporting, Campaign Manager integration, Display & Video 360 integration, Google Display Network (“GDN”) Impression Reporting, and Segments. Remarketing with Analytics uses Google Analytics cookies to serve advertisements to you across the Internet based on your visits to the Service. Demographics and Interest reporting uses a third-party cookie to collect information about our Service traffic by tracking users across websites and across time, which generates a report for us to better understand Service users. Campaign Manager integration allow us to view, analyze, and create remarketing lists using our Campaign Manager data in Google Analytics. Display & Video 360 integration allows us to create remarketing lists in Google Analytics and have those lists available in Display & Video 360. GDN Impression Reporting allows us to measure the impact of unclicked GDN Display ad impressions on website behavior and conversions. Segments allows us to isolate and analyze subsets of Service users by sorting our Google Analytics data.

To opt out of remarketing advertising provided through Google, to customize your ad preferences, or to limit Google’s collection or use this information, visit Google’s Safety Center and Google’s Ad Settings and follow Google’s personalized ad opt-out instructions. Opting out will not affect your use of the Service.

Social Media. The Service may allow you to connect to and share information with social media platforms and we may be required to implement cookies, plug-ins, and APIs provided by those social media platforms in order to facilitate those communications and features. We may share information that you provide us or that we may collect about your use of the Service with those platforms and that information will be subject to their privacy policies. We encourage you to review the privacy policy of any social media platform that you use in connection with the Service. In addition, by choosing to use any third-party social media platform or choosing to share content or communications with any social media platform, you allow us to share information with the designated social media platform. We cannot control any policies or terms of such third party platform. As a result, we cannot be responsible for any use or disclosure of your information or content by third-party platforms, which you use at your own risk.

NDX is active on social media. You may have the opportunity to comment on those social media platforms regarding NDX and the products we offer and/or to submit or upload related photographs and other materials. NDX reserves the right to post on the Service, other websites, and social media pages any comments, photographs, or content that you post on our social media pages or provide to us through social media.

Cookies and Tracking Technologies. We use “cookies” on the Service. A cookie is a piece of data stored on a Service visitor’s hard drive by the visitor’s web browser. We use cookies to help us improve your access to the Service (for example, by remembering your contact and other information when you access or use the Service), to identify repeat visitors to the Service, to track how you access and use the Service, to learn when and how users visit the Service, to learn whether our Service and/or its pages are popular, to learn which search terms are used to find the Service, to learn which websites direct you to the Service, to help display certain information on the Service, and to improve your enjoyment of the Service The Service may use both cookies that we implement, and cookies implemented by our suppliers and other third parties. “First-party” cookies allow your browser to talk to the actual website that you are visiting, whereas “third-party” cookies allow your browser to talk to third-party websites, such as the source of an ad that appears on the website you are visiting or a third-party analytics provider. Additionally, a cookie can either be a “session” cookie or a “persistent” cookie. Session cookies exist only for so long as you are visiting the applicable website. Session cookies are typically deleted or removed when you exit or quit your browser application. Persistent cookies exist for a set period of time, for example, six months or one year. Each time you visit a website that has implemented a persistent cookie, that cookie will remain active until its predetermined expiration date.

Our suppliers may use cookies and tracking technologies, such as pixel tags, to track Service visitors across the Internet to understand how you get to the Service and for the analytics purposes disclosed in this Privacy Policy. We do not have access or control over these cookies and this Privacy Policy does not cover the use of third-party cookies.

The types of information collected by a cookie and the purposes for which that information is used depends on the type of cookie. By way of illustration, the types of cookies used, the types of information collected by those cookies, and the purposes for which that information are used are described below. We may combine information collected by cookies with other Collected Information.

We, our marketing partners, affiliates, and analytics or service providers use cookies and other similar technologies. We group the cookies that we collect into the following categories based upon their function (note that all types of cookies, as described above, may be found in each category):

Most browsers automatically accept cookies. Browsers generally also allow users to manage cookies in the browser’s settings. For example, a browser may allow you to reject cookies from certain websites, reject certain types of cookies regardless of the website, reject or disable all cookies from all websites, and/or delete cookies stored previously. Some browsers also give you the option of being notified every time a cookie is sent to your browser by a website. You can disable or limit cookies but doing so may impact your use and enjoyment of the Service and other websites. For example, the Service may not be able to be personalized for you, may no longer capture or remember your preferences or other choices you have made on the Service in the past, and may not remember your name or contact information.

Changing your cookie preferences in one browser will not necessarily carry over to other browsers, so you may need to adjust your preferences each time you get a new computer, install a new browser, upgrade an existing browser, or alter or delete a browser’s cookie file.

The Service may also use the following types of tracking technologies: web beacons (also called clear GIFs), flash cookies, and pixels (also called pixel tags). Web beacons are tiny graphics with unique identifiers that functions similar to how cookies function but, in contrast to cookies, web beacons are embedded invisibly on websites. Flash cookies collect and store information about your use of a website and are commonly used for advertisements and videos. Pixel tags can be placed on websites or within emails to track your interactions with those websites and when emails are opened.

How To Opt-Out Of Tracking And Restrict Cookies. You can see what cookies we place and/or collect and for what purposes by clicking “Cookie Settings” on the cookie banner when you first visit the site. If you are not presented with a cookie banner, please delete your cookies and re-visit the site. You can choose to restrict all non-necessary cookies by clicking “Reject All” on the cookie banner when you first visit the site or choose which specific non-necessary cookies to accept or reject by clicking “Cookie Settings.”

You can opt-out of the tracking of your online behavior by:

• visiting the Network Advertising Initiative (NAI) opt-out at the following link: http://www.networkadvertising.org/choices;
• visiting the Digital Advertising Alliance (DAA) opt-out at the following link: http://www.aboutads.info/; and
• downloading and installing the Google browser plug-in from the following link: http://tools.google.com/dlpage/gaoptout.

You can control and delete cookies through your browser settings through the following:

• Google Chrome
• Mozilla Firefox
• Safari
• Opera
• Microsoft Internet Explorer
• Microsoft Edge
• Safari for iOS (iPhone and iPad)
• Chrome for Android

Please be aware that restricting cookies may impact the functionality of the Website. For example, refusing cookies will not allow Squire to present the Website in your preferred language or remember your log-in information. Additional general information about cookies, including how to be notified about the placement of new cookies and how to disable cookies, can be found at www.allaboutcookies.org.

Alternatively, you may visit the U.S. Federal Trade Commission’s website www.consumer.ftc.gov to obtain comprehensive general information about cookies and how to adjust the cookie settings on various browsers.

Do Not Track and User-Selected Universal Opt-Out Mechanism.

Do Not Track (“DNT”) is an optional browser setting that allows you to express your preferences regarding tracking across websites. Most modern web browsers give you the option to send a Do Not Track signal to the websites you visit, indicating that you do not wish to be tracked. However, there is no accepted standard for how a website should respond to this signal, so we do not take any action in response to this signal. NDX does not have a mechanism in place to respond to DNT signals.

We a support certain universal opt-out mechanism(s) mandated by applicable privacy law (“UOOM”). a UOOM is a browser-based opt-out preference signal that communicates your privacy preferences to the websites you visit. For example, we support the UOOM called the Global Privacy Control. If NDX recognizes an UOOM, NDX’s policy is to opt you out of the use or disclosure of your cookie-based personal information for online targeted advertising and website analytics purposes for the browser or device on which you have a recognized UOOM enabled.

Embedded Content.The Service incorporates content, including feeds, scripts embedded in the Service’s code, and visible content (e.g., videos), provided by third parties. In some cases, those third parties collect data about how you interact with their content. For example, Google Maps or YouTube.

Google Maps. Our Services may include Google Maps features and content. Google Maps features and content is subject to the then-current versions of Google Maps/Google Earth Additional Terms of Service at https://maps.google.com/help/terms_maps.html and Google Privacy Policy at https://www.google.com/policies/privacy/.

YouTube. Our Services may use YouTube to make content in video format available to you. By accessing a part of the Services where videos are available, watching an embedded video, or otherwise interacting with any content made available through YouTube, you signify your agreement with YouTube’s terms and conditions. YouTube collects and otherwise has access to usage data (e.g., what videos you accessed and watched) through videos embedded in the Services as further described in YouTube’s Privacy Policy. YouTube adheres to Google’s privacy policies and principles, part of which allow you to control certain privacy settings and which data are collected. For more information, please visit https://www.youtube.com/howyoutubeworks/user-settings/privacy/.

Information from Other Sources. We may obtain data about Service users from various third-party companies and public sources, whether offline or online (such as publicly available social media profiles), and we may combine that data with Collected Information. This enhances our existing information about our users and customers and improves our ability to contact you and our marketing’s relevancy.

YOUR PRIVACY RIGHTS

There are a number of international countries and local provinces and states that provide specific consumer rights to residents of those jurisdictions regarding personal data. This section of this Policy describes the rights available to those individuals who are entitled to them.

What U.S. Data Rights Do You Have (Non-California)?

Please note that if you are a resident of California, you have access to special data rights and disclosures that are described in this Policy under a separate section titled Your California Privacy Rights and Disclosures.

If you are a consumer living in Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Nevada, Oregon, Rhode Island, Tennessee, Texas, Utah or Virginia, you have the following rights with regards to your personal data. These rights are explained in further detail below:

• Right to Confirmation and Access.You may have the right to confirm whether or not NDX is processing your personal data and to access such personal data. The general categories of personal data that we collect, process and disclose are listed above under the section: Data Collection Practices. If you wish to access the specific pieces of personal data that we process about you, please submit a request as directed in the section titled Exercising Your Rights.
• Right to Correct. You may have the right to request that NDX correct inaccurate personal data that we maintain about you, taking into account the nature of the personal data and the purposes of the processing of the personal data.
• Right to Delete. You may have the right to request that NDX delete the personal data that NDX maintains about you.
• Right to Portability. You may have the right to request to receive your personal data in a portable and readily usable format, to the extent technically feasible.
• Right to Opt-Out of Sale/Targeted Advertising. You may have the right to request to opt out of a “sale” of your personal data or processing of your personal data for purposes of targeted advertising (if any). “Targeted advertising” generally means displaying advertisements where the advertisement is selected based on personal data obtained from your activities over time and across websites or online applications to predict your preferences or interests.
• Right to Opt-Out of Profiling. You may have the right to request to opt out of automated profiling using your personal data that produces legal or similarly significant effects concerning you (if any). Applicable state laws allow you to opt out of the application of automated profiling when it relates to substantive decision making, such as denial of financial or lending services, housing, insurance, education enrollment or opportunity, criminal justice, employment opportunities, health-care services, or access to essential goods or services.
• Right to Information About Third Parties. Oregon, Maryland and Delaware residents may have the right to request, at our option, a list of specific third parties, other than natural persons, to which NDX has disclosed either your personal data or any personal data in general.
• Right to Question the Results of Profiling. Minnesota residents may have the right to question the results of any automated processing of their personal data to evaluate, analyze, or predict personal aspects related to their economic situation, health, personal preferences, interests, reliability, behavior, location, or movements in furtherance of decisions that produce legal or similarly significant effects concerning them.
  If we engage in this profiling practice, you may have the right to (i) question the result of that profiling and (ii) be informed of the reason that the profiling resulted in the decision, and, if feasible, to be informed of what actions you might have taken to secure a different decision and the actions that you might take to secure a different decision in the future. You also may have the right to (iii) review your personal data used in the profiling and (iv) correct any incorrect personal data used to perform the profiling and have the profiling decision reevaluated based upon the corrected personal data.

YOUR CALIFORNIA PRIVACY RIGHTS AND DISCLOSURES

Your California Consumer Privacy Act Rights

The California Consumer Privacy Act (“CCPA”) provides the residents of California with the right to request the data rights as described in this section.

• Right to Know: California residents have the right to know what personal information NDX has collected about them. This includes the categories of personal information, the categories of sources from which the personal information is collected in the past 12 months, the business or commercial purpose for collecting, selling, or sharing personal information, the categories of third parties to whom NDX discloses personal information, and the specific pieces of personal information NDX has collected about them.
  The general categories of personal information that we collect, process and disclose are listed above under the section: Data Collection Practices. If you wish to access the specific pieces of personal data that we process about you, please submit a request as directed in the section titled Exercising Your Rights.
• Right to Delete: California residents have the right to request the deletion of their personal information maintained by NDX .
• Right to Correct:California residents have the right to request that a business correct inaccurate personal information about them.
• Right to Non-Discrimination:California residents have the right to not be discriminated against due to the exercise of their privacy rights under the CCPA.
• Right to Opt-Out: California residents have the right to opt-out of the “sale” or “sharing” of their personal information.
  A common understanding of “selling” information is that it involves a company taking information it has learned about you and exchanging that information with an unrelated third party for money, who will then use that data for a new purpose that you did not intend. We do not do this.
  However, California law has a much broader definition of “sell” which encompasses activities beyond the traditional common understanding of “selling” for money, such as disclosing, disseminating, making available, transferring or otherwise communicating by electronic or other means, a consumer’s personal information for money or other “valuable” consideration.
  There are certain activities we perform that do fall under the very broad definition of “sale.” You have the right to opt-out of the sale of your personal information. Please note that your right to opt-out does not apply to our sharing of data with service providers, who are parties who are engaged to perform a function on our behalf and are contractually obligated to use the data only for that function.
  Additionally, California law provides for a right to opt out of having your information “shared” for the purpose of delivering cross-context behavioral advertising. We also do this. We do not have actual knowledge that we have sold or shared the personal information of a California resident under 16 years of age.
  With regards to the “selling” or “sharing” of your online browsing information, you can opt-out by clicking the “Privacy Preferences” icon on the left hand side of the particular site that you are visiting. Please disable all cookies other than “Strictly Necessary” cookies, which are required for the operation of the Site.
  Even if you opt-out of targeted advertising, you may still see NDX ads because we may advertise through other methods that are not based upon your behavior.
• Right to Limit Use and Disclosure of Sensitive Personal Information: California residents have the right to direct a business to limit its use and disclosure of their “sensitive” personal information.
  California residents can request that a business limit its use or disclosure of their “sensitive” personal information to that use or disclosure which is necessary to perform the services or provide the goods reasonably expected by an average consumer, or to those uses or disclosures otherwise authorized by California law in CCPA regulation § 7027(m).
  While we may collect pieces of sensitive personal information as defined by the CCPA, such information is either exempt from the CCPA or is only used or disclosed to provide the Klarna Services or for other purposes permitted by the CCPA. Therefore, we have no obligation to provide you the right to limit the use or disclosure of sensitive personal information under the CCPA.
• Right to Make Requests Through an Authorized Agent: California residents can designate an authorized agent to make a request under the CCPA on their behalf.
  California residents can designate an authorized agent to make requests under the CCPA on their behalf relating to the residents’ personal information. Only you as a California resident, or a person you have designated in writing as your authorized agent, may make a consumer request related to your personal information.
  If you wish to have an authorized agent make a verifiable consumer request on your behalf, they will need to provide us with sufficient written proof that you have designated them as your authorized agent, such as a power of attorney pursuant to California Probate Code sections 4000 to 4465. We will still require you to provide sufficient information to allow us to reasonably verify that you are the person about whom we have collected personal information.
  We can deny any request made by a purported authorized agent who does not submit proof that they have been authorized by the California resident to act on the California resident’s behalf.

Submitting A Request Through An Authorized Agent

You may designate an authorized agent to make a request to “out-opt” of sale, profiling or targeted advertising, as those rights are described above. An authorized agent should make a request through the same mechanisms that are available to individuals as described in this policy. The request should clearly identify that the request is being made by an authorized agent and must include evidence of authorization. If we receive a request from an individual or an entity purporting to making the request on behalf of another individual, we can only comply with the request if we are able to sufficiently authenticate both the identity of the individual as well as the authorized agent’s authority to act on that individual’s behalf. California has special rules regarding submitting requests through agents, so please review the appropriate disclosure in the section titled Your California Consumer Privacy Act Rights.

APPEALS AND COMPLAINTS

If you disagree with our decision to reject your request or with any portion of our response, you have the right to appeal within a reasonable period of time. If you wish to appeal, please clearly and plainly describe your basis of disagreement with our decision by responding through the same means by which we communicated our refusal or by submitting your appeal through the information provided under Contact Information. We will review your appeal and either change our decision or reject your appeal, and in either case, we will provide a written explanation of the reason for the decision. This decision will be final.

For U.S. residents, if you still disagree with our decision, you have the right to submit a complaint to your attorney general of your state of residence. Your attorney general may have an online portal with details regarding how to submit complaints:

ADDITIONAL INFORMATION FOR CANADIAN RESIDENTS

The following section of this Privacy Policy only applies to Canadian residents. Under various Canadian laws and regulations, you have certain rights in regard to our collection of personal information. These rights include:

• The right to request access to your personal information;
• The right to request corrections to your personal information;
• The right to lodge a complaint with the Office of the Privacy Commissioner of Canada and/or the applicable Canadian provincial regulatory body if you consider that the collection and use of your personal information violates this Privacy Policy or applicable law.
• The above rights are only exercisable by you where applicable law in the jurisdiction in which you reside actually grant you the right being exerted

EXERCISING YOUR RIGHTS

To exercise your rights described above, please submit a request by either:

• Calling us at (866) 242-2781

Only you, or someone legally authorized to act on your behalf, may make a request to know or delete related to your personal information. Whether making the request on behalf of yourself, we have the right to authenticate your authority to act and your identity. Without limiting the foregoing, your request must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative:
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. You do not need to create an account with us to submit a request to know or delete.

We will only use personal information provided in the request to verify the requestor’s identity or authority to make it. We endeavor to respond to a verifiable consumer request within the time period under applicable law. If we require more time, we will inform you of the reason and extension period in writing.

Any disclosures we provide will only cover the 12-month period preceding our receipt of your request. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily usable and should allow you to transmit the information from one entity to another entity without hindrance.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will inform you why we made that decision and provide you with a cost estimate before completing your request.

If we deny your request or exercise of a specific data privacy right, you can appeal by reaching out to us through our Contact Us page.

CHILDREN

The Services are not directed at children under 16 years of age. We do not knowingly collect or use information from children under the age of 16 through the Services.

RETENTION OF INFORMATION

We retain each category of your information for as long as necessary to fulfill the purposes for which it was collected, including as described in this Privacy Notice, and for as long as necessary for legal, tax, audit, investigative, and/or security purposes and then we securely delete or destroy the information.

NON-DISCRIMINATION

We will not discriminate against you for exercising any of your rights under applicable law. Unless permitted by applicable law, we will not:

• Deny you goods or services.
• Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
• Provide you a different level or quality of goods or services.
• Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

THIRD PARTY WEBSITES

The Services may link to, or be linked to, websites, or services not maintained or controlled by us. We are not responsible for the privacy policies or practices of any third parties or any third-party websites, applications, or services. This Privacy Policy does not apply to any third-party websites, applications, or services or to any personal or other information that you may provide to such third parties. We encourage you to read the privacy policy for each website, application, and service you visit, use, or interact with.

CROSS-BORDER TRANSFER

Due to the fact our business is international, we have centralized elements of our business and our processing of Collected Information, including, without limitation, personal information. Accordingly, where we are permitted to do so under applicable law, we may transfer your personal information outside of the nation where you reside. Where required by applicable law, your prior consent will be obtained for such transfers, or we have ensured that your personal information included in such a transfer is adequately protect through the use of contractual clauses or other adequate measures allowed under such applicable law.

CHANGES TO OUR PRIVACY POLICY

We reserve the right to amend this Privacy Policy at our discretion and at any time. When we make changes to this Privacy Policy, we will post the updated notice on the Service and update the notice’s effective date.Your continued use of our Sites following the posting of changes constitutes your acceptance of such changes.

CONTACT INFORMATION

If you have any questions or comments about this Privacy Policy, the ways in which NDX collects and uses your information described here, your choices and rights regarding such use, or wish to exercise your rights under applicable law, please do not hesitate to contact us at: