KEDPLASMA App Privacy Policy

Effective and last updated: 13 December 2024

Kedplasma LLC (“we,” “us,” “our”) provide this Privacy Policy (the “Policy”) to explain how we collect, use, and disclose your personal information through the Kedplasma mobile application (the “App”). This Policy only describes our collection, use, and disclosure of personal information through the App. By using or continuing to use the App, you acknowledge and agree to the collection, use, disclosure, and other processing of your personal information as described in this Policy.

California Notice at Collection

If you are a California resident, the Additional Information for Residents of California section below includes information that we provide pursuant to the California Consumer Privacy Act (“CCPA”). That section includes information regarding the categories of information to be collected, the purposes for which the categories of information are collected or used, whether the information is sold or shared for cross-context behavioral advertising, and how long the information is retained.

Personal Information Collection

We may collect personal information directly from you and automatically when you use the App, as further described below.

Information You Provide Us Directly Through the App

We may collect personal information from you when you provide it to us through the App, such as when you register as a user on the App. This personal information may include:

Contact and identity verification information, such as your name, email, phone number, date of birth, and the donor identification number we assign to you.
Responses to questionnaires and surveys we may provide, including to obtain onboarding information prior to your visit to a plasma donation center or after you donate plasma.
Information that you choose to communicate with us through the App, including through online chat functionality that we make available through the App, which may be accessed, recorded, or otherwise processed by or through third-party service provider(s).

Information We Collect Automatically Through the App

We may also collect certain device, usage, and other information automatically when you use the App, including through cookies, which are small files placed on your device to store data that can be recalled by the App, such as the following:

Device Information: When you visit the App, we will collect certain information about your device automatically, such as information about your device and your browser. For example, we may receive device identifiers such as IP address and MAC address, and operating system type and version.
Usage and Log Information: When you use the App, we will collect certain information about how you use the App, such as features visited and used, date of visit or usage, type of device, device or user ID, operating system version, clicks, text entered, time spent using the App or particular features, errors, log files, including for query tracking, events, and errors, and other details of your actions on the App. Technologies we use to collect this information may include session replay and other tools provided by our third-party service provider(s). The service provider(s) may also receive the data we collect through their tools.
Our third-party service provider(s) may also receive or collect log files and other information related to bugs or errors in the App on our behalf, including your activity at the time of the error and related device information like that described above.
Information Collected in Connection with Analytics Technology: We may use various technologies to learn more about how visitors use the App, such as App Insight. We may also use other technologies to monitor your activities on our App.
Precise Geolocation Information. Depending on your device settings, we may obtain your precise geolocation, such as when you use the App to identify the closest plasma donation center to your current location.

When you use the App, our partners, service providers and other third parties with whom we work may use cookies and other similar technologies to collect this information and other information about your online activities over time and across third-party websites or online services.

We may also collect or generate information about you in connection with our loyalty and rewards programs through the App, including your loyalty and rewards points balances and prize redemptions.

Information Collected Through Plasma Donation Centers That Is Processed By the App

The App may receive access to, process, and make available within the App personal information from your visits to plasma donation centers. This personal information may include:

Identity verification information.
Plasma collection type.
Information regarding your registration for and participation in our plasma donation program, including your registration date, the plasma donation center you visit, how many visits you make to plasma donation centers, the types and dates of your visits to plasma donation centers, your registration date, and your program code.
Health metric information, including measurements of your pulse, blood pressure, weight, temperature, hematocrit, and protein.
Payment and rewards delivery information, including records of payments or rewards delivery and related transactions.
Donor deferral information, including deferral status, effective date, and expiration date.

Referrals

If others sign up for the App using a personal code or link, we may receive information about you that confirms that you referred the new user.

Information Received from Third Party Sources

We may also receive information about you from third parties, such as service providers that administer and support our loyalty and rewards programs like gift card providers. Information we may receive from those third parties may include your gift card balance, gift card transaction history, and rewards point balances.

Purposes for Processing Personal Information

We may use, disclose, transmit, transfer, store, and otherwise process your personal information for various purposes, including:

Providing the App and associated functionality and programs, such as helping you plan plasma donations and locate donation centers, providing you information about health metrics collected through plasma donation centers, and operating our loyalty, rewards, and referrals programs, including by delivering you rewards and providing targeted promotions to you.
Communicating with and providing information to contractors, service providers, vendors, and other third parties we use to support our organization and our App, including through chat functionality we make available through the App which may be accessed, recorded, or otherwise processed by or through our third-party service provider(s).
Communicating with you, including by responding to your inquiries, fulfilling your requests, and promoting the App and our other products, services, and offerings.
Providing, developing, maintaining, personalizing, protecting, and improving our App, our operations, other products, services, and offerings, and our organization.
Operating, evaluating, identifying, and repairing issues, and effectuating functional enhancements to the App.
Understanding how you and others use our App, performing analytics, analyzing, and reporting on usage and performance of our App.
For legal and safety purposes, such as investigating or preventing unlawful activities or misuse of our App, enforcing our policies, terms of use, contracts, or other legal rights, protecting the legal rights, property, safety, and security of us, our users, our employees, and others, and protecting against malicious, deceptive, fraudulent, or illegal activity, including participating in any prosecution or enforcement of laws or agreements meant to prevent or punish such activity.
Maintaining the safety, security, and integrity of our App, technology assets, operations, and our organization.
Evaluating or participating in an actual or potential merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of, or investment in, some or all of our assets, including as part of bankruptcy, liquidation, or similar proceedings.
Creating aggregate or deidentified data, which will not be subject to this Policy and that we may process for any lawful purpose.
Complying with law and other legal obligations.
Such other purposes as you may authorize or that we otherwise disclose.

Parties to Which We May Disclose Personal Information

We may disclose personal information we collect for the purposes described in the How We Use Your Information section above, including to the parties described below:

To our corporate affiliates and subsidiaries, which you can view here.
To our contractors, service providers, vendors, and other third parties we use to support our organization and our App, including providers of technologies and services that we use to automatically collect or otherwise process device, usage, and other data from you.
To other users who referred you to the App using their personal code or link. For example, we may offer rewards to users who refer us another individual who makes two successful plasma donations. In that scenario, if another user referred you to the App and you made qualifying donations, we would provide rewards to the user who referred you and delivery of those rewards may indicate to the referring user that you have made two successful plasma donations or engaged in other activity that qualifies for referral rewards.
To an actual or potential investor, buyer, successor, or other person or organization in the event of an actual or potential merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of, or investment in, some or all of our assets, including as part of bankruptcy, liquidation, or similar proceedings.
To other parties for the purposes described in the How We Use Your Information section above. For example, we disclose personal to other parties for legal and safety purposes, such as complying with law and other legal obligations, investigating or preventing unlawful activities or misuse of our App, enforcing our policies, terms of use, contracts, or other legal rights, protecting the legal rights, property, safety, and security of us, our users, our employees, and others, and protecting against malicious, deceptive, fraudulent, or illegal activity, including participating in any prosecution or enforcement of laws or agreements meant to prevent or punish such activity; to provide, develop, maintain, personalize, protect, and improve our App, our operations, other products, services, and offerings, and our organization; and third-party business partners with whom we may collaborate on offerings or initiatives.
To other parties as you may authorize or that we otherwise disclose to you.

Your Choices

You also may choose not to provide the personal information we request through the App. However, not providing information we request may restrict your ability to use certain features of the App. For example, you may be able to restrict the collection of personal information or functionality through your device’s operating system but doing so may prevent you from using features of the App that use that information. “Do-not-track” browser signals are not relevant to the App and the App will not respond to those signals. We may allow third parties to use the App to collect personal information about your online activities over time and across different websites, applications, and other online products or services.

You may also request to modify your personal information at a plasma donation center. You may also delete your mobile account as described in the App End User License Agreement.

You may also opt out of receiving marketing or other promotional email communications by following the opt-out link or other unsubscribe instructions provided in the email message we send you. You may still receive some email communications from us, such as appointment confirmations, that relate to your transactions with us.
You may make additional requests regarding your personal information, including a request to withdraw consents given with respect to your personal information, by contacting us using the email address in the “Contacting Us” section below.

Additional Information for Residents of California

This section applies only to residents of the State of California and generally describes how we collect, use, and disclose the personal information of California residents and their households collected through the App (“California Personal Information”). However, for the purposes of this Policy, California Personal Information does not include, and this Policy does not apply to, information subject to applicable exceptions from the CCPA, such as deidentified information.

California Personal Information We Collect

The categories of California Personal Information we may collect, and may have collected in the preceding 12 months, include the following:

Identifiers, including online identifiers.
Commercial information.
Characteristics of protected classifications under California or federal law.
Internet or other electronic network activity information.
Inferences drawn from other California Personal Information.
Geolocation data.
Other categories of personal information described in California law.
Personal information defined as “sensitive personal information” under the CCPA.

The “Personal Information Collection” section above describes our collection of this information in further detail.

We retain California Personal Information for as long as necessary to carry out the processing activities described in this Policy, including but not limited to providing the App and other offerings, compliance with applicable laws, regulations, rules and requests of relevant law enforcement and/or other governmental agencies, and protecting our and our employees’ rights, property, or safety, and the rights, property, or safety of others.

Sources of California Personal Information We Collect

We collect California Personal Information from the sources described in the “Personal Information Collection” section of this Policy.

Purposes for Using, Disclosing, and Otherwise Processing California Personal Information

We may collect and use the categories of California Personal Information described in the “California Personal Information We Collect” section above for one or more of the business and commercial purposes described in the “Purposes for Processing Personal Information” section above. Notwithstanding the foregoing, we do not use, disclose, or otherwise process California Personal Information defined as “sensitive personal information” under the CCPA for purposes other than those specified in California Code of Regulations § 7027(m).

Disclosures of California Personal Information for a Business Purpose

In the preceding 12 months, we may have disclosed the categories of California Personal Information listed below to the categories of third parties identified below for a business purpose:

Identifiers, including online identifiers—with our affiliates, service providers, and as otherwise described in the “Disclosure of Personal Information” section above.
Commercial information—with our affiliates, service providers, and as otherwise described in the “Disclosure of Personal Information” section above.
Characteristics of protected classifications under California or federal law—with our affiliates, service providers, and as otherwise described in the “Disclosure of Personal Information” section above.
Internet or other electronic network activity information—with our affiliates, service providers, and as otherwise described in the “Disclosure of Personal Information” section above.
Inferences drawn from other California Personal Information—with our affiliates, service providers, and as otherwise described in the “Disclosure of Personal Information” section above.
Geolocation data—with our affiliates, service providers, and as otherwise described in the “Disclosure of Personal Information” section above.
Other categories of personal information described in California law—with our affiliates, service providers, and as otherwise described in the “Disclosure of Personal Information” section above.
Personal information defined as “sensitive personal information” under the CCPA—with our affiliates, service providers, and as otherwise described in the “Disclosure of Personal Information” section above. Notwithstanding the foregoing, we do not use, disclose, or otherwise process California Personal Information defined as sensitive under the CCPA for purposes inconsistent with those in California Code of Regulations § 7027(m).

Sales of California Personal Information and Sharing of California Personal Information for Cross- Context Behavioral Advertising

We do not sell California Personal Information collected through the App or share California Personal Information collected through the App for cross-context behavioral advertising purposes. We have not sold California Personal Information collected through the App or shared California Personal Information collected through the App for cross-context behavioral advertising purposes in the preceding 12 months. We do not have actual knowledge that we sell California Personal Information of consumers under 16 years of age or share the California Personal Information of consumers under the age of 16 for cross-context behavioral advertising purposes.

California Personal Information Rights and Choices

The CCPA provides consumers with specific rights regarding their California Personal Information. This section describes those rights and explains how to exercise those rights to the extent we direct the purposes and means of the processing of your California Personal Information.

Right to Access Specific California Personal Information. You have the right to request to receive certain information about our collection, use, and disclosure of your California Personal Information during the applicable period of time for your request. If we receive and confirm a verifiable consumer request from you pursuant to the “How to Exercise Your Rights” section below, we will disclose to you, depending on the scope of the request:
- The categories of California Personal Information we collected about you.
- The categories of sources for the California Personal Information we collected about you.
- Our business or commercial purpose for collecting California Personal Information about you, selling California Personal Information about you, or sharing California Personal Information about you for cross-context behavioral advertising purposes.
- The categories of third parties to whom we disclose your California Personal Information generally.
- The specific pieces of California Personal Information we collected about you.
  If we disclose your California Personal Information for a business purpose, a list of the categories of third parties to whom we disclosed California Personal Information for a business purpose identifying the categories of California Personal Information disclosed to those parties during the applicable period of time for your request.
Right to Data Portability. You may request to receive a copy of your California Personal Information in a readily usable format to the extent technically feasible.
Right to Deletion. You may request that we delete your Personal Information, subject to certain exceptions.
Right to Correct Inaccuracies. You may request that we correct California Personal Information about you that is inaccurate. We will take into account the nature of the California Personal Information and the purposes of our processing when we address your request.
Right to Non-discrimination. Subject to certain exceptions, you have the right to not receive discriminatory treatment for exercising your access, data portability, and deletion rights described above.

How to Exercise Your Rights

If you would like to request to exercise the access, data portability, deletion, or correction rights described in the “California Personal Information Rights and Choices” section above, please submit a verifiable consumer request to us by either:

Calling us at 1-201-242-8900
Using our webform at https://www.kedplasma.us/donor-app-privacy-policy/#form

These requests can be exercised free of charge unless they are excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision, and we reserve the right to either refuse to act on your request or charge you a reasonable fee to complete your request if it is excessive, repetitive, or manifestly unfounded.

Before we can respond to your request, California law requires us to verify your identity. Your request must provide information sufficient to verify you are the person about whom we collected California Personal Information or an authorized agent of that person. In order to verify your request, we may ask you to provide information such as your name, street address, city, state, zip code, and e-mail address or phone. Your request must include sufficient detail for us to properly understand, evaluate, and respond to it. If we are not able to verify your request, we will contact you for more information. If we are unable to verify your identity or authority to make the request and confirm the California Personal Information relates to you, we may not be able to respond to your request.

You may designate someone to submit requests and act on your behalf as an authorized agent. We may mandate additional requirements for requests submitted through an authorized agent, such as requiring you to verify your identity directly with us or to directly confirm the authorized agent’s permission to act on your behalf. Either way, you and/or your authorized agent must provide sufficient information to us that would allow us to verify your identity.

Making a verifiable consumer request does not require you to create an account with us. However, if you have a password-protected account with us we may consider requests made through that account sufficiently verified when the request relates to California Personal Information associated with that specific account.

Any disclosures we provide will only cover the 12-month period preceding our receipt of the verifiable request. If we cannot fulfill or are permitted to decline, your request then we will alert you or your authorized agent. For data portability requests, we will select a format to provide your California Personal Information that is readily usable.

Notice of Financial Incentive for California Residents

We offer voluntary loyalty and rewards programs that provide App users the opportunity to earn payments or additional rewards points to redeem gift cards in exchange for providing survey responses or other personal information, such as when you would consider visiting a plasma donation center. We may also offer targeted promotions to you based on specific activities.

Because we may ask you to provide survey responses or other personal information in exchange for potential payments or rewards points redeemable for gift cards, our loyalty and rewards programs may be considered a “financial incentive” under the CCPA. The value of the personal information we collect through these programs is inherently variable and depends on the level of each participant’s participation and reward redemption activity. We estimate, however, that the value of the personal information we collect from each program participant is equivalent to the expenses related to our providing the program to that program participant, including the cost of payments or gift cards that the participant earns.

You can opt in to participate in these programs by registering for them as described in the KEDPLASMA LOYALTY PROGRAM. You may request to withdraw from these programs at any time by contacting us as described in the Contacting Us section of this Policy below or as otherwise provided in other terms or conditions that govern the applicable program(s).

Additional Information for Residents of Nevada Regarding Consumer Health Data

This section of the Policy supplements the rest of the information in this Policy for Nevada consumers who interact with us in an individual or household capacity and applies only to personal information defined as “consumer health data” subject to the Nevada Consumer Health Data Privacy Act (the “Nevada Act”). Such “consumer health data” a subset of personal information that identifies Nevada consumers past, present, or future physical or mental health status (“Nevada Consumer Health Data”). This section does not apply to information generated by your interactions with us, such as downloading or opening the App, that does not identify your health status. This section also does not apply to deidentified data derived from personal information. To the extent we process deidentified information, we will maintain and use the information in deidentified form and will not attempt to reidentify the information unless permitted by applicable law.

Categories of Nevada Consumer Health Data We Collect

As described in the “Personal Information Collection” subsection above, the App may process certain information about bodily functions or vital signs, including measurements of your pulse, blood pressure, weight, temperature, hematocrit, and protein, which is a category of Nevada Consumer Health Data under the Nevada Act.

Sources of Nevada Consumer Health Data We Collect

We collect California Personal Information from the sources described in the “Personal Information Collection” section of this Policy.

Nevada Consumer Health Data Sharing

We may disclose all categories of Nevada Consumer Health Data described in the “Categories of Nevada Consumer Health Data We Collect” section above to the parties described in “Disclosure of Personal Information” section above. As discussed in the “Your Choices” section above, we may allow third parties to use the App to collect personal information, which may include Nevada Consumer Health Data, about your online activities over time and across different websites, applications, and other online products or services.

Purposes for Collecting, Using, and Sharing Nevada Consumer Health Data

We collect, use, and share Nevada Consumer Health Data for the same purposes for which we process personal information as described in the “Purposes for Processing Personal Information” section above.
We may process Nevada Consumer Health Data in the same manner in which we generally process personal information as described in this Policy.

Nevada Consumer Health Data Rights and Choices

The Nevada Act may provide Nevada residents with additional rights regarding our processing of Nevada Consumer Health Data. As the rights described below are provided by the Nevada Act, there may be limitations or exceptions that apply to your request in accordance with applicable legal requirements. We have described these rights generally, without noting all applicable or potentially applicable limitations or exceptions. When you make a request, we may provide more detailed information regarding any legal requirements applicable to or your request and whether any exception or limitation applies.

Subject to certain limitations and exceptions, the Nevada Act provides residents of Nevada with the following rights to:

Confirm whether we collect, share, or sell (as those terms are defined by the Nevada Act) process their Nevada Consumer Health Data
Cease collecting or disclosing Nevada Consumer Health Data.
Delete Nevada Consumer Health Data.
Review and request changes to Nevada Consumer Health Data we collect.

Additional Information for Residents of Texas

Texas privacy law may provide Texas residents with additional rights regarding our processing of their personal information subject to that law, as described below. As the rights described below are provided by law, there may be limitations or exceptions that apply to your request in accordance with applicable legal requirements. We have described these rights generally, without noting all applicable or potentially applicable limitations or exceptions. When you make a request, we may provide more detailed information regarding any legal requirements applicable to or your request and whether any exception or limitation applies.
Subject to certain limitations and exceptions, Texas privacy law provides residents of Texas with rights to:

Confirm whether we process their personal information.
Access personal information we have collected about them.
Delete personal information.
Receive a copy of their personal information in a portable and, to the extent technically feasible, readily usable format.
Correct inaccuracies in their personal information, taking into account the information’s nature and purposes for processing.

To exercise any of these rights, please contact us either using the https://www.kedplasma.us/donor-app-privacy-policy/#form and completing the fields, or using a method described in the “Contacting Us” section below and clearly identifying the exercise of one of your privacy rights as the reason you are contacting us. To appeal a decision regarding a request to exercise these rights, please describe the issue and request an appeal by responding to the communication of our decision, at https://www.kedplasma.us/donor-app-privacy-policy/#form or otherwise contacting us as described in the “Contacting Us” section below.
We will maintain and use deidentified information that does not constitute personal information in deidentified form and will not attempt to reidentify such deidentified information except to the extent permitted under applicable law. We process personal information as described in this Policy.

Changes to this Policy

We may update this Policy to reflect changes in our privacy practices at any time and without prior notice to you. When we do so, we will update the effective and last updated date above. We encourage you to periodically review this Policy for the latest information on our privacy practices.

Contacting Us

If you have any questions or comments about this Policy or our privacy practices, or you would like to contact us regarding choices you may have with regard to personal information, you may email us at [email protected].

Privacy Rights Request

Depending on the jurisdiction in which you reside, you may have certain rights with respect to our processing of your personal information. To contact us regarding privacy rights described in our Privacy Policy, please complete and submit the form below.