Privacy policy

2.1 We may collect PI you voluntarily provide to Qosina, such as by:

• Visiting one of our Sites
• Creating an account
• Placing an order for products or services via our Sites, by mail, by e-mail, over the phone or in person
• Using one of our catalogs
• Filling in contact forms on our Sites asking for your queries or suggestions
• Interacting with our customer support team
• Subscribing to our monthly newsletter (whether through a Site or otherwise)
• Participating in contests or surveys
• Applying for a job
• Otherwise participating in activities we offer that might require information about you

2.2 We may also collect PI through automated processes, such as by:

• Cookies, web pixels, web beacons or other technologies we or others place via your Internet browser

The types of PI we collect include your name, company name, shipping/mailing address, billing address, telephone number and e-mail address. TABLE 1, below, outlines the categories of PI we collect.

We may use the PI we collect as shown in TABLE 1, below. This includes:

• To perform a contract with you: For example, where you have ordered or requested products or services from us, we use your contact details and payment information to process your order and deliver the products or services to you.
• To communicate with you. For example, we may contact you to respond to your inquiry or complaint. We may also contact you directly or through a third-party service provider regarding products or services you purchased from us, such as necessary transactional or service related communications. We may also contact you with offers for additional services we think you may find valuable if you give us consent, or where allowed based upon legitimate interests. These contacts may include via e-mail, text (SMS) messages, telephone calls or automated phone calls or text messages.
• With your consent: For example, where you have provided PI to us to complete a survey or access secured content. You may withdraw your consent at any time by contacting us at [info@qosina.com or info@qosmedix.com].
• Our legitimate business interests: For example, where it is necessary for us to understand our customers, enhance and promote our goods, products and services and operate effectively as an international distributer of various products. Our legitimate business interests may include creating and publicizing new products and services, and offering our customers a better experience. We may perform analytics as necessary to provide you with a tailored experience and so that we can improve, maintain and manage our products and services in a way that meets your expectations as a customer.
• Compliance with law: For example, where we are subject to a legal obligation and need to use your PI in order to comply with that obligation.

We do not disclose your PI to third parties, except:

• To vendors, service providers and other entities with whom we have a business relationship to provide products and services for and on behalf of us, such as processing credit card payments, communicating with you, including by way of e-mail or survey delivery, or for customer relationship management. We restrict these third parties by contract from utilizing, sharing or retaining your PI for any purpose other than for which they have been contracted.
• To our affiliates, in connection with the purposes described in this Privacy Notice.
• To comply with law, rule regulation or legal process, such as in response to a subpoena.
• For the purpose of facilitating and allowing a merger, acquisition or sale of a business or all or substantially all of our assets, in which case the acquiring company should continue to utilize your PI in the manner for which it was provided and intended.

We currently use Nodus Technologies to process credit card orders. Note that when you enter your credit card information to make a purchase, you are redirected from our Sites to a Nodus Technologies controlled website. We do not collect any credit card information, and Nodus Technologies is responsible for that transaction.

We follow generally accepted standards to safeguard the PI we collect, both during transmission and once received and stored, including encryption where appropriate. PI you submit through the Sites is encrypted with secure server software (SSL) that encodes the information before your browser software sends it to us. The SSL software decodes the data only after it reaches our server, meaning that your data will be encrypted were hackers to intercept it while in transit. Once it reaches our server, your PI will be protected by the same security software we use to safeguard our essential business data of similar nature.

We retain PI only for as long as necessary to provide the products or services you requested, and for additional periods where there are legitimate legal or business purposes, such as:

• When mandated by law, rule, regulation, contract or similar obligations applicable to our business operations
• For preserving, resolving, defending or enforcing our legal and contractual rights
• When needed to maintain adequate and accurate business and financial records

We do not knowingly collect PI from children under 18, nor do we target our Sites to such children. Please contact us if you have reason to believe we may have PI of children.

The Sites may contain links to third-party websites. We are not responsible for the privacy practices of those websites. You should refer to the privacy notices of any other websites you visit for their PI practices.

Certain data protection laws require that we disclose specific information regarding the categories of PI we collect, and may grant you rights with regard to that PI. They include:

• California Privacy Rights Act (CPRA), Cal. Civ. Code § 1798.100, et seq.; the California Online Privacy Protection Act (CalOPPA), Cal. Civ. Code §§ 22575 – 22579; and the California Shine the Light Law, Cal. Civ. Code § 1798.83, for consumers in California;
• Nevada's Act Regarding Security and Privacy of Personal Information (NSPPIA), NRS 603A.010 et seq., for consumers in Nevada;
• Virginia Consumer Data Protection Act (VCDPA), VA Code Ann. § 59.1-571, et seq., for consumers in Virginia;
• Colorado Privacy Act (CPA), Col. Rev. Stat. § 6-1-1301, et seq., for consumers in Colorado;
• Utah Consumer Privacy Act (UCPA), Utah Code Ann. § 13-61-101 to 13-61-404, for consumers in Utah; and
• Connecticut's An Act Concerning Personal Data Privacy and Online Monitoring (CPDPA), CT Senate Bill No. 6, Public Act No. 22-15, for consumers in Connecticut.

TABLE 2, below, provides examples of specific types of PI within each category identified in Table 1, above.

This section pertains to California consumers, and addresses the CPRA.

As a California consumer, under the CPRA you have the right to:

• Notice of our PI collection, use and disclosure practices
• Request the—
  • Categories of PI collected [in the last 12 months]
  • Categories of sources from which PI is collected
  • Business or commercial purpose for collecting, selling or sharing PI [in the last 12 months]
  • Categories of third parties to whom PI is disclosed
  • Categories of PI sold or shared, if any [in the last 12 months]
  • Categories of third parties to whom PI was sold or shared [in the last 12 months]
  • Categories of PI disclosed for a business purpose [in the last 12 months]
  • Categories of persons to whom PI was disclosed for a business purpose [in the last 12 months]
  • Specific pieces of PI collected [in the last 12 months]
  • Correction of inaccurate PI
  • Deletion of PI
• Opt-out (or opt-in for children under 16) to the sale or sharing of PI
• Equal service (no retaliation or discriminatory practices for exercising your CPRA rights)
• Correct inaccurate PI
• Limit use of sensitive PI to that necessary to perform the services or provide the goods reasonably expected by an average consumer

You may exercise your CPRA rights via your online account, or by e-mailing us at [info@qosina.com or info@qosmedix.com] or calling us at [631-242-3000 (Qosina) or 631-242-3270 (Qosmedix)].

Under the CPRA, sell means selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, In writing, or by electronic or other means, a consumer's PI by the business to a third party for monetary or other valuable consideration.

We do not sell your PI.

Under the CPRA, share means the shoring, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, In writing, or by electronic or other means, o consumer's personal Information by the business to a third party for cross-context behavioral advertising, whether or not for monetary or other valuable consideration, including transactions between a business and o third party for cross-context behavioral advertising for the benefit of a business In which no money is exchanged.

We do not share your PI.

. If we used or disclosed sensitive PI (other than as permitted by the CPRA), this sensitive PI may be used, or disclosed to a service provider or contractor, for additional, specified purposes. As a California consumer, you have the right to limit the use or disclosure of your sensitive PI.

We do not use sensitive PI.

This section pertains to California consumers, and addresses the CalOPPA.

"Do Not Track" Policy. Our website does not respond to Do Not Track (DNT) signals. Some websites keep track of your browsing activities. If you are visiting such websites, you can set your preferences in your web browser to inform websites that you do not want to be tracked. You may be able to enable or disable DNT by visiting the preferences or settings page of your web browser.