Terms of Agreement and Privacy, Data Usage and Sharing Statement

Updated: 17 May, 2021

Natural Xpression (hereafter ‘we’ or NXP) provides bespoke health supplements based on on lab data (microbiome, DNA), cognitive testing, questionnaires, and other user-directed input.  This Privacy policy applies to all information we collect about or from you, including your account information, testing kit information, your customizations of and activity within your portal and on our site and mobile application. and strictly limited portions of your lab reports. This privacy policy does not include or apply to any anonymized information that has been aggregated or otherwise de-identified and cannot be used to identify you.

We may change this privacy policy from time to time however will notify you by portal message prior to implementing any changes, and by revising the update date at the top of this page. If you do not agree with any portion of this Privacy Policy, you should immediately stop using our Services. Your use indicates your continued approval. Terms utilized on this page but not identified with this Policy will carry the definition given in other portions of this site, such as ‘Informed Consent’ or ‘Wellness Portal’.

 

COLLECTION OF INFORMATION

Information Provided by You or via your interactions with our website, mobile application, or the Wellness Portal.

We collect information not limited to: 

  • Health information. Your purchase, registration, and use testing kit or related platforms, applications and services (“Testing Kit”) implies you consent to our collection, use, and disclosure (back to you only, or via anonymized aggregation) not limited to, your health and/or disease-related information and conditions (such as current symptoms, medical history, current medical conditions and associated treatments), clinical and other information necessary to process and report the results of your Testing Kit, and any other information exchanged in emails, texts, chats or calls between you and NXP or the Independent Health Care Professionals or partner Labs, and their professional entities. 
  • Personal information you voluntarily provide to us. Including but not necessarily limited to collection of information you provide directly to us relating to our ‘Services’, namely but not limited to: when you create an account, register your testing kit(s), submit or post content through our Services, and communicate directly with us for purposes of initial questionnaires, setting up of Daily Reminders and Check-Ins, Customer Support communications, and making of purchases. The types of personal information we may collect include your name, email address, postal address, phone number, credit card and other payment information, and any other information you choose to provide.
  • Testing Kit information. In order for your Testing Kit to be processed, you must create a Wellness Portal account, register your Testing Kit, produce the saliva, stool, or other sample as directed by the Testing Kit instructions and ship the completed Testing Kit to our partner laboratory. As part of the Testing Kit registration and processing requirements, you will be prompted to review and, for some, accept the terms of this Privacy Policy, as well as other forms. Once received, our partner Lab will process the Testing Kit and provide the results to your Wellness Portal. Furthermore, we have negotiated with our partner lab to provide you extra services at no extra cost that they offer to some of their own retail customers. Should you choose to accept these services (i.e. the Ancestry elements of our DNA lab partner), you will be asked by them to enter some data.  We have no access to nor involvement in that process and that data you may choose to submit via their registration process.

Other Information We Collect When You Interact with Us

When you access or use our Services or otherwise transact business with us, we automatically collect information about your activities, including:

  • Transactional Information: When you make a purchase or return, we collect information about the transaction, such as product details, purchase price, and date and location of the transaction.
  • Activity Information: We collect information about your activity on our Services, such as completing questionnaires, receiving and reviewing lab results, or purchasing nutritional supplements. Additionally, with your consent and registered test kit, we will extract a purpose-based and deliberately limited portion of your genetic information from your submitted saliva sample report and analyze it to provide you with product recommendations, related reports, and desired information. 
  • Device and Usage Information: We collect information about how you access our Services, including device information and network used. We also collect information about your activity on our Services, such as access times, pages viewed, links clicked, and the page you visited before navigating to our Services.
  • Information Collected by Cookies and Similar Tracking Technologies: We (and our service providers) use tracking technologies, such as cookies and web beacons, to collect information about you. Cookies are small data files stored on your hard drive or in device memory that help us improve our Services and your experience, see which areas and features of our Services are popular, and count visits. Web beacons (also known as “pixel tags” or “clear GIFs”) are electronic images that may be used in our Services or emails and help deliver cookies, count visits, and understand usage and campaign effectiveness. For more information about cookies and how to disable them, see our Cookie Policy and the Your Choices section below.

Information We Collect from Other Sources

We may also obtain information about you from other sources. For example, we may collect information about you from healthcare providers and clinics (including licensed medical professionals), testing labs, and others in the event, and only in the event that you initiate and authorize the transfer of your information.

USE OF INFORMATION

We use the information we collect to provide, maintain, and improve our Services including, but not limited to, customizing your Wellness Center platform and related artificial intelligence capability around formulation updates and newsfeed curation. The information may also used to conduct research and collaborate with licensed medical professionals and their related institutions on such research. We also use the information we collect to:

  • Share information with your physician or another medical professional request upon your request
  • Process account creation, kit registration, and other transactions and send you related information, including products, kits, confirmations, receipts, invoices, customers experience surveys, and recall notices
  • Market and communicate with you about events, products, services, news, or changes in your account, or, subject to any consents or authorizations that are required by applicable law, those of our third-party partners
  • Provide you technical notices, security alerts, and support and administrative messages and to respond to your comments, questions, and to provide you customer service;
  • Provide and administer our loyalty program and referral point credits;
  • Monitor and analyze trends, usage, and activities in connection with our Services; 
  • Personalize your online experience and the advertisements presented to you when you use our Services, based on your preferences, interests, and browsing and purchasing behavior and review your interactions with our online ads (de-personalized and anonymized upon aggregation), including by counting ad impressions and verifying positioning and quality of ad impressions;
  • Facilitate contests, sweepstakes, and promotions and process and deliver entries and rewards; 
  • Detect, investigate, and prevent security incidents and other malicious, deceptive, fraudulent, or illegal activity, and protect the rights and property of NXP and others;
  • Troubleshoot and correct any technical errors in our Services; 
  • Comply with our legal and financial obligations; and
  • Carry out any other purpose described to you at the time the information was collected.

SHARING OF INFORMATION

We share personal information in the following circumstances or as otherwise described in this policy: 

  • With vendors, service providers, and consultants that need access to personal information in order to perform services for us, such as licensed medical providers who order and oversee sample collection and interpret, analyze, and deliver lab results, and companies that assist us with web hosting, shipping and delivery, payment processing, fraud prevention, customer service, analytics, marketing, and advertising;
  • With licensed medical professionals, collaborative research partners and research institutions for research purposes, but only with your explicit consent. For instructions on how to review and provide your explicit consent to participate in such research, please review our Consent for Research Form;
  • Publicly on our Services if you submit a product review or post content such as a blog or other influencer posting in another public area of our Services;
  • If required by any applicable law or legal process, including lawful requests by public authorities to meet national security or law enforcement requirements;
  • If we believe your actions are inconsistent with our user agreements or policies and we believe you have violated the law, or to protect the rights, property, and safety of Natural Xpression, our users, the public, or others;
  • With our lawyers and other professional advisors where necessary to obtain advice or otherwise protect and manage our business interests;
  • In connection with sale of company assets to another company, and done expressly with the purposes of insuring a smooth continued delivery of current services; in depersonalize and anonymized or aggregated form only for related negotiations of any merger or sale, financing, or acquisition. 
  • Between and among NXP and our current and future parents, affiliates, subsidiaries, and other companies under common control and ownership; and
  • With your consent and at your direction. 

Please note, only de-identified or aggregated information is shared with our collaborative research partners. 

SOCIAL SHARING FEATURES 

The Services may offer social sharing features and other integrated tools, such as the ability to register and login using your third-party social media account details (like your LinkedIn or Facebook login). The information we receive about you in connection with your log in varies depending on the social media provider but will be shared with you at the time of your account creation. We will use the information we receive as described in this Privacy Policy or for purposes made clear at the time to you. Please note that we do not control, and are not responsible for, other uses of your personal information by your social media provider third parties. 

ADVERTISING AND ANALYTICS SERVICES PROVIDED BY OTHERS

We allow others to provide analytics services and serve advertisements on our behalf across the web and in mobile apps. These entities may use cookies, web beacons, device identifiers and other technologies to collect information about your use of our Services and other websites and applications, including your IP address, web browser, mobile network information, pages viewed, time spent on pages or in mobile apps, links clicked, and conversion information. This information may be used by NXP and others to, among other things, analyze and track data, determine the popularity of certain content, deliver advertising and content targeted to your interests on our Services and other websites, and better understand your online activity. For more information about interest-based ads, or to opt out of having your web browsing information used for behavioral advertising purposes, please visit www.aboutads.info/choices (if in the US) or http://www.youronlinechoices.eu/ (if in the EU). Your device may also include a feature (“Limit Ad Tracking” on iOS or “Opt Out of Interest-Based Ads” or “Opt Out of Ads Personalization” on Android) that allows you to opt out of having certain information collected through mobile apps used for behavioral advertising purposes.

We also work with third parties to serve ads to you as part of customized campaigns on third-party platforms (such as Facebook). As part of these ad campaigns, we or third-party platforms may convert information about you, such as your email address and phone number, into a unique value that can be matched with a user account on these platforms to allow us to learn about your interests and serve you advertising that is customized to your interest. Note that the third-party platforms may offer you choices about whether you see these types of customized ads.

NXP does not respond to Do Not Track (“DNT”) signals to the extent received from a web browser. Because there currently is not a universally accepted technological or legal standard for recognizing or honoring DNT signals as reflections of user choice, we do not respond to them at this time. Once such technology is created and has received applicable regulatory approval, we will consider (a) whether it is possible; and (b) if so, how it can be incorporated within our environment in the future.

TRANSFER OF INFORMATION TO THE U.S. AND OTHER COUNTRIES

NXP is headquartered in the United States, and we have operations and service providers within the United States and India.  Therefore, we and our service providers may transfer your personal information to, or store or access it in, jurisdictions that may not provide equivalent levels of data protection as your home jurisdiction. We will take reasonable steps to ensure that your personal information receives an adequate level of protection in the jurisdictions in which we process it.

REGIONAL SPECIFIC AND USER DAILY CONTROLLABLE SETTINGS

Account Information

You may update and correct certain account information you provide to us at any time by logging into your account, emailing us at support@NXP.com or submitting this form. If you wish to deactivate your account, please email us at support@NXP.com, but note that we may retain certain information as required by law or for legitimate business purposes. We may also retain cached or archived copies of information about you.

Cookies

Most web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove or reject browser cookies. Please note that removing or rejecting cookies could affect the availability and functionality of some of our Services. For more information about cookies and how to disable them, see our Cookie Policy.

Promotional Communications

You may opt out of receiving promotional emails or text messages from NXP by following the instructions in those communications or by managing your communication preferences in your account settings menu. If you opt out, we may still send you non-promotional emails, such as those about your account or our ongoing business relations. You may also opt out of receiving promotional emails or text messages from third parties with whom we’ve shared your personal information as described in the “Sharing of Information” section above by following the instructions provided by such companies in their promotional communications to you.

Mobile Push Notifications

With your consent, we hope to send push notification reminders and ‘wellness query ’check-ins’ to your mobile device. You can deactivate these messages at any time by changing the notification settings on your mobile device.

YOUR CALIFORNIA PRIVACY RIGHTS 

The California Consumer Privacy Act or “CCPA” (California Civil Code Section 1798.100 et seq.) and the “Shine the Light” Law (California Civil Code section 1798.83) afford consumers residing in California certain rights with respect to their personal information. If you are a California resident, this section applies to you. 

California Consumer Privacy Act

In the preceding 12 months, we have collected the following categories of personal information: 

  • identifiers (such as name, postal address, unique personal identifier, online identifier, internet protocol address, email address, or other similar identifiers); 
  • any categories of personal information described in California Civil Code Section 1798.80(e), including health information;
  • characteristics of protected classifications under California or federal law (such as, but not limited to, age, race, sex, sexual orientation, medical or health conditions),
  • commercial information such as records of products or services purchased, obtained, or considered by you; 
  • biometric information; 
  • internet or other electronic network activity information (such as browsing history, search history, and information regarding a consumer’s interaction with an internet website, application, or advertisement);
  •  professional or employment-related information; and 
  • inferences drawn from any of the information identified in this subdivision to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. 

For examples of the precise data points we collect and the categories of sources of such collection, please see Collection of Information above. We collect personal information for the business and commercial purposes described in Use of Information above. 

California law requires that we provide transparency about personal information we “sell,” which for purposes of the CCPA broadly means scenarios in which we have shared personal information with third parties in exchange for valuable consideration. As described in this Privacy Policy, we may share your personal information with our partners, third parties or affiliates for our marketing or other purposes, including such third parties’ own purposes. To the extent such sharing is considered a “sale” under the CCPA, as a California resident, you have the right to opt out of these sales at any time by submitting this form found by visiting our “Do Not Sell My Personal Information” webpage or emailing us at support@NXP.com. [We do not knowingly sell personal information about consumers under the age of 16.] 

Subject to certain limitations, you have the right to (1) request to know more about the categories and specific pieces of personal information we collect, use, disclose, and sell, (2) request deletion of your personal information, (3) opt out of any “sales” of your personal information that may be occurring, and (4) not to be discriminated against for exercising these rights. You may make these requests by submitting this form or emailing us at ian.support@natural-xpression.com. We will verify your request by asking you to provide information related to your registered account or a recent interaction with us. We will not discriminate against you if you exercise your rights under the CCPA.

If we receive your request from an authorized agent, we may ask for evidence that you have provided such agent with power of attorney or that the agent otherwise has valid written authority to submit requests to exercise rights on your behalf. If you are an authorized agent seeking to make a request, please contact us

We may offer you certain financial incentives permitted by the CCPA. They include the following:

  • Periodic Contests or Sweepstakes. Each contest or sweepstake have its own terms and conditions describing how an eligible consumer may opt-in as well as withdraw from the contest or sweepstake. 
  • Loyalty Program. Earn points for qualifying submissions to or purchases from NXP. A member of the loyalty program can opt-in by creating a NXP account and can withdraw at any time from this program by submitting this form found on our “Do Not Sell My Personal Information” webpage or emailing us at ian.support@natural-xpression.com.

Shine the Light

California law permits residents of California to request certain details about how their information is shared with third parties for their direct marketing purposes. If you are a California resident and would like to make such a request, please by submit this form or email us at ian.support@natural-xpression.com. 

ADDITIONAL DISCLOSURES FOR INDIVIDUALS IN EUROPE

If you are located in the European Economic Area, the United Kingdom or Switzerland, you have certain rights and protections under the law regarding the processing of your personal information, and this section applies to you.

Legal Basis for Processing

When we process your personal information, we will do so in reliance on the following lawful bases:

  • To perform our responsibilities under our contract with you (e.g., processing payments for and providing the products you have ordered and Services you have requested). 
  • When we have a legitimate interest in processing your personal information to operate our business or protect our interests (e.g., to provide, maintain and improve our products and services, conduct data analytics, and communicate with you).
  • When we find such processing is necessary to comply with a legal obligation to which we are subject (e.g., to maintain a record of your consents and track those who have opted-out of marketing communications).
  • When we have your consent to do so (e.g., when you agree to receive marketing communications from us). When consent is the legal basis for our processing your personal information, you may withdraw such consent at any time.

Data Retention

We store personal information for as long as is necessary for the purpose(s) for which we originally collected it, for as long as your account remains open, and for other legitimate business purposes, including to meet our legal, regulatory, or other compliance obligations (such as, but not limited to, the Clinical Laboratory Improvement Amendments of 1988, California Business and Professions Code Section 1265, and the College of American Pathologists accreditation requirements). 

Data Subject Requests 

You have the right to request access to the personal information we hold about you and to ask that your personal information be corrected, erased, or transferred. You may also have the right to object to, or request that we restrict certain processing. If you would like to exercise any of these rights, please email us at ian+support@natural-xpression.com. 

Questions or Complaints

If you have a concern about our processing of personal information that we are not able to resolve, you have the right to lodge a complaint with the data privacy authority where you reside. Contact details of your Data Protection Authority can be found using the links below:

For individuals in the EEA: http://ec.europa.eu/justice/data-protection/article-29/structure/data-protection-authorities/index_en.htm 

For individuals in the UK: https://ico.org.uk/global/contact-us/ 

For individuals in Switzerland: https://www.edoeb.admin.ch/edoeb/en/home/the-fdpic/contact.html

CONTACT US

If you have any questions about this Privacy Policy, please contact us at: 

Email address: ian+support@natural-xpression.com.