This California Notice of Collection and Privacy Notice (the “Notice”), together with our Online Services Privacy and Security Practices (“Privacy Policy”), describes Wellabe Inc., and its affiliates’ (the “Company,” “we” or “us”) privacy practices with respect to personal information we collect, use, disclose, and share through both online and offline interactions with California residents that are covered by the California Consumer Privacy Act and California Privacy Rights Act (collectively, the “CCPA”). This Notice also describes how you can exercise your privacy rights. In this Notice, personal information has the meanings described below.
Personal information is defined as information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Personal information includes, for example, information collected directly from you if you use certain services available on our sites or personal information that you voluntarily provide, such as information you provide to request a free quote, or if you apply for a job on our Careers site, or to do business with us. Personal information also includes “sensitive personal information” as defined in this Notice but does not include protected health information covered by the Health Insurance Portability and Accountability Act (“HIPAA”), nonpublic personal information under the Gramm-Leach-Bliley Act (“GLBA”), or any other information which is exempt from the CCPA. Personal information also does not include publicly available information or information that has been de-identified or aggregated.
Sensitive personal information is defined as personal information that reveals, a social security number, driver's license number, state identification card number, passport number, precise geolocation, racial or ethnic origin, citizenship or immigration status, religious or philosophical beliefs, union membership, genetic data, neural data, biometric information, account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account. Sensitive personal information also includes the contents of a consumer's mail, email, and text messages unless the Company is the intended recipient of the communication, or a job applicant or employee’s health, sex life, or sexual orientation.
We may collect, use, disclose, or share the following categories of personal information:
This may include full name, date of birth, physical address, email address, phone number, emergency contact details, Internet Protocol (IP) address, or other similar identifiers.
This may include bank account number, credit card number, debit card number, or any other financial information.
This may include insurance policy number or health insurance information.
This may include age, race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth, and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).
If you apply for a job on our Careers site or you are an employee who resides in California, this may include your employment and education history, position applied for, information relating to your compensation, benefits, information from background checks or references, information relating to your performance evaluations, and other information that may be provided on your resume.
This may include products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
This may include physical location or movements when using our website or mobile applications. It may also include precise geolocation that is used or intended to be used to locate you within a small geographic area. For employees, this may include device location from your company-owned devices, or your mobile device when used to access company email.
This may include online identifiers, browsing history, search history, or information on a consumer’s interaction with a website, application, or advertisement.
This may include audio, electronic, or visual information, such as call recordings, or audio-visual information.
This may include information drawn from any of the personal information listed above to create a profile or summary about an individual’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.
In addition to any sensitive personal information listed in the categories above, this may include online account name and password, federal or state issued identification numbers including social security number, driver’s license number, passport number, or other government identification number. It may also include personal information collected and analyzed concerning your health.
We, including our service providers and third parties, may collect, use, disclose, or share personal information about you for the following business purposes:
We do not collect, use, disclose, or share your sensitive personal information for purposes other than those listed above. We do not sell your personal information for any purpose.
We may have disclosed or shared the following categories of personal information to service providers and third parties for the business purposes listed above in the past twelve months:
We only disclose or share your personal information with trusted service providers and third parties with whom we have a contractual relationship with and are obligated to safeguard and protect your personal information, subject to appropriate confidentiality and use restrictions.
We may collect from or use, disclose, or share your personal information to one or more of the following parties:
Subject to legal limitations and exceptions, you may be able to exercise some or all of the following rights:
We will not discriminate against you for exercising your privacy rights.
You can exercise your privacy rights by submitting a consumer privacy rights request or by calling 800-228-6080. You may also authorize an agent to make a consumer privacy rights request on your behalf. In such instances, authorized agents may use the same methods as you to submit the request on your behalf. To be an authorized agent, the individual must be a natural person or business entity that you have authorized to act on your behalf, such as a power of attorney. For verification purposes, we will contact you for documentation showing they have permission to submit a request on your behalf. If we do not receive sufficient documentation, we will not accept the request.
Upon receipt of a request, we may require additional information to respond to your request or to verify your identity. To verify your identity, we will attempt to match information that you provide in your request with sources of information we have collected to reasonably verify your identity.
We will respond to a verifiable consumer privacy rights request within 45 days of its receipt. If we require more time (up to 45 additional days), we will inform you of the reason and extension period in writing. We will deliver our written response by mail. In some instances, we may decline all or part of a consumer privacy rights request related to personal information exempt from the privacy laws. We will describe the basis for the denial, including any conflict with federal or state law, unless prohibited from doing do by law.
We do not charge a fee to process or respond to your verifiable consumer privacy rights request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
We do not offer an opt out from the sale of personal information because we do not and have not, within the last 12 months, sold personal information about you.
We do not knowingly collect or process personal information from children under the age of 16. If you learn that a child has provided us with personal information, you may contact us and ask us to remove content or data. Please note that your request does not ensure complete or comprehensive removal of the content or data as, for example, some of your content or data may have been reposted by another user.
We may change or update this Notice periodically. When we do, we will post the revised Notice on this webpage indicating when the Notice was last updated.
We will retain your personal information collected as long as is reasonably necessary to fulfill the purposes for which it was collected. In doing so, we will consider the type of products and services requested by or provided to you, the nature and length of our relationship with you or the business entity you are associated with, and mandatory retention periods under applicable law. We will also retain your information, including after your relationship with us ends, as long as necessary to enforce or comply with our legal or contractual rights and obligations, to resolve disputes and defend claims, and to reserve our legal rights.
If you have any questions about our Notice, you may contact us by phone at 800-228-6080, email at customerservice@wellabe.com, or by sending a letter via U.S. mail to:
Wellabe, Inc.
Attn: Privacy Officer
P.O. Box 10386
Des Moines, IA 50306-0386
800-228-6080
Last published February 2025