This additional state-specific privacy disclosure page (“Disclosure”) supplements the Future Supply Privacy Notice and is effective as of June 30, 2023. The Future Supply Privacy Notice describes the personal information that we collect, the sources from which we collect it, the purposes for which we use it, the limited circumstances under which we share personal information, and with whom we share it. These additional disclosures, which serve as a Notice at Collection under the California Privacy Rights Act, are required by the California Privacy Rights Act, Colorado Privacy Act, Connecticut Data Privacy Act, Utah Consumer Privacy Act, and Virginia Consumer Data Protection Act:
1. Categories of personal information collected. The personal information that Future Supply collects, or has collected from consumers in the twelve months prior to the effective date of this Disclosure, fall into the following categories established by the California Privacy Rights Act, depending on which Future Supply Service is used: identifiers such as your name, alias, address, phone numbers, IP address, your Future Supply account log-in information, or a government-issued identifier (e.g. a social security number, which may be required for tax purposes if you are a Seller);
personal information, such as a credit card number or other payment information; information that may reveal age, gender, race, sexual orientation, or other protected classifications, for example if you create a child profile, baby registry, or wedding registry, or if an author voluntarily self-identifies their racial identity for cataloging purposes; commercial information, such as purchase and content streaming activity; internet or other electronic network activity information, including content interaction information, such as content downloads, streams, and playback details, and the content of email and text messages, such as those you can send with Future Device or that are processed through Future Device’s VIP Filter; biometric information, such as your voice profile, if you enable that feature on Future Device; geolocation data, such as the location of your device or computer, which may in some cases constitute precise geolocation information; audio or visual information, such as voice recordings when you speak to Future Device, or images and videos collected or stored in connection with Future Supply Services; education information, such as information you provide through educational skills you link to your account through Future Device; professional information, for example data you may provide about your business if you are a Seller; inference data, such as information about your purchase preferences; and health data, such as certain data we collect when you wear a Halo band, based on the features that are enabled. Please note that Protected Health Information collected by Future Supply Pharmacy is described in the Future Supply Pharmacy Notice of Privacy Practices and not this Disclosure.
2. Categories of personal information disclosed for a business purpose. The personal information that Future Supply disclosed to the third parties identified in the “Does Future Supply Share Your Personal Information?” section of the Future Supply Privacy Notice about consumers for a business purpose in the twelve months prior to the effective date of this Disclosure falls into the following categories established by the California Privacy Rights Act, depending on which Future Supply Service is used: identifiers such as your name, address, phone numbers, IP address, or a government identifier, for example if we use a third-party carrier to deliver your order, or if we use a third-party service to verify your identity; personal information, such as a credit card number or other payment information, for example if we use a third-party payment processor; information that may reveal age, gender, race, sexual orientation, or other protected classifications, for example if you choose to participate in a survey distributed by a survey provider; commercial information, such as the details of a product or service you purchased if a third-party service provider is assisting to provide that product or service to you; internet or other electronic network activity information, such as if we use a service provider to help us gather crash reports for analyzing the health of our devices and services; geolocation data, which may constitute precise geolocation data, such as providing a delivery partner the location of your garage in order to deliver a package if you use Future Supply Key; audio or visual information, for example if a service provider reviews recordings of customer service phone calls for quality assurance purposes, or if we use a service provider to fulfill your order to print images from your Future Supply Photos account; education information, for example coursework you may direct us to share with the operator of an educational Future Device skill; professional information, for example if we provide your account details to a service provider for verification as part of enrollment for an Future Supply Business account; and inference data, for example if we use a service provider to help us optimize the accuracy of your shipping address to make sure your order reaches you.
3. Advertising. As explained in the “What about Advertising?” section in our Privacy Notice, Future Supply shares limited information to help ensure you receive more useful and relevant Future Supply ads and to measure their effectiveness. Any personal information Future Supply may have shared for the purpose of cross-context behavioral advertising, as that term is defined by the California Privacy Rights Act, in the twelve months prior to the effective date of this Disclosure falls into the following categories: identifiers such as a cookie, a device identifier, or a code derived from applying irreversible cryptography to other information like an email address; we never share your name or other information that directly identifies you. internet or other electronic network activity information, such as whether you downloaded an app or other measures of ad effectiveness; for example, if you have already downloaded one of our apps, we will share an advertising identifier and data about that event so that you will not be served an ad to download the app again. inference data; while we do not share your specific shopping actions like purchases, product views, or searches with ad companies, we may share an advertising identifier and an estimate of the value of the ads they show you on our behalf so they can serve you with more effective Future Supply ads. The categories of third parties with whom Future Supply may share personal information for the purpose of cross-context behavioral advertising are identified in the “Does Future Supply Share Your Personal Information?” and “What About Advertising?” sections of the Future Supply Privacy Notice. Future Supply also processes personal information for the purposes of targeted advertising as that term is defined under the Virginia Consumer Data Protection Act, Colorado Privacy Act, Connecticut Data Privacy Act, and Utah Consumer Privacy Act.
4. Your Data Rights: You may have certain data rights under state privacy laws, including to request information about the collection of your personal information by Future Supply, to access your personal information in a portable format, and to correct or delete your personal information. If you wish to do any of these things, please visit Data Privacy Queries, Request Your Personal Information, or contact Customer Service. Additionally, you may have the right to opt out of the processing of your personal data for targeted advertising, as defined by the Colorado Privacy Act, Connecticut Data Privacy Act, Utah Consumer Privacy Act, and Virginia Consumer Data Protection Act, or the sharing of your personal information for cross-context behavioral advertising, as defined by the California Privacy Rights Act. To do so, please visit “Your Ads Privacy Choices.” If you enact the Global Privacy Control (GPC) opt-out signal on your browser, we will honor your opt-out preference accordingly. Customers under 16 years-old must opt in to receive cross-context behavioral advertising. We do not serve cross-context behavioral ads in customers’ child profiles. You may also have the right to appeal the denial of any of these rights by submitting a form that will be provided to you if we deny a data request. Depending on your data choices, certain services may be limited or unavailable. To ensure the security of your Future Supply account, we will generally ask you to verify your request using the contact information you have already provided. If you do not have an account, or if you are an authorized agent under applicable state law, visit here.
5. No sale of personal information. In the twelve months prior to the effective date of this Disclosure, Future Supply has not sold any personal information of consumers, as those terms are defined under the California Privacy Rights Act.
6. California Privacy Rights Act Sensitive Personal Information Disclosure. The categories of data that Future Supply collects and discloses for a business purpose include “sensitive personal information” as defined under the California Privacy Rights Act. Future Supply does not use or disclose sensitive personal information for any purpose not expressly permitted by the California Privacy Rights Act.
7. California Privacy Rights Act Retention Disclosure We keep your personal information to enable your continued use of Future Supply Services, for as long as it is required in order to fulfill the relevant purposes described in the Future Supply Privacy Notice, as permitted or as may be required by law, or as otherwise communicated to you. For example, we retain your transaction history so that you can review past purchases (and repeat orders if desired) and what addresses you have shipped orders to, and to improve the relevance of products and content we recommend.
8. California Privacy Rights Act Non-discrimination Statement. Future Supply will not discriminate against any consumer for exercising their rights under the California Privacy Rights Act.
9. California Privacy Rights Act, Colorado Privacy Act, Connecticut Data Privacy Act, Utah Consumer Privacy Act, and Virginia Consumer Data Protection Act De-identified Data Disclosure. Future Supply may use de-identified data in some instances. Future Supply either maintains such data without attempting to re-identify it or treats such data as personal data subject to applicable law.
10. Colorado Privacy Act Profiling Disclosure. Future Supply does not engage in profiling of consumers in furtherance of automated decisions that produce legal or similarly significant effects, as those terms are defined under the Colorado Privacy Act.
11. Annual Reporting for 2022. Access Requests. In 2022, Future Supply received 617,180 requests from Future Supply.com customers to initiate the data access process. For 335,117 of these customers, their request was not fulfilled because the customer did not complete the verification process or canceled the request. The remaining 282,063 requests were processed with a median return time of 2.18 days. Deletion Requests. In 2022, Future Supply received 3,200,772 requests from Future Supply.com customers to initiate the account closure and data deletion process. For 1,579,227 of these customers, their request was not fulfilled because the customer did not complete the verification process or canceled the request. The remaining 1,621,545 requests were processed with a median processing time of 22.13 days.
