You Have Rights Over Your Personal Data

We respect your privacy and make it easy for you to exercise your rights under applicable privacy laws.

Last Updated: November 29, 2024

Important: Patient Health Information (PHI)

Table of Contents

1. Understanding Your Rights
2. How to Submit a Request
3. Privacy Rights Request Form
4. Verification Process
5. Response Timeline
6. Denial of Requests
7. Appeal Process
8. Global Privacy Control
9. Do Not Sell My Information
10. Sensitive Personal Information
11. Contact Information

1. Understanding Your Rights

Depending on where you live, you may have certain rights regarding the personal information we collect about you. Below is a summary of rights that may be available to you.

Rights for Maryland Residents (MODPA)

If you are a Maryland resident, the Maryland Online Data Privacy Act (MODPA) provides you with the following rights:

• Right to Confirm — You have the right to confirm whether we are processing your personal data.
• Right to Access — You have the right to access the personal data we have collected about you.
• Right to Correct — You have the right to request correction of inaccurate personal data.
• Right to Delete — You have the right to request deletion of personal data we have collected from or about you.
• Right to Data Portability — You have the right to obtain a copy of your personal data in a portable, readily usable format.
• Right to Opt-Out — You have the right to opt out of the sale of your personal data, targeted advertising, and profiling.
• Right to Withdraw Consent — Where processing is based on consent, you have the right to withdraw that consent at any time.
• Right to Appeal — If we deny your request, you have the right to appeal that decision.
• Right to Non-Discrimination — You will not be discriminated against for exercising your rights.

Rights for California Residents (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with the following rights:

• Right to Know — You have the right to request disclosure of categories and specific pieces of personal information collected, sources, purposes, and third parties with whom we share.
• Right to Delete — You have the right to request deletion of personal information we collected from you.
• Right to Correct — You have the right to request correction of inaccurate personal information.
• Right to Opt-Out of Sale/Sharing — You have the right to opt out of the sale or sharing of your personal information. Note: We do not sell personal information.
• Right to Limit Sensitive Information — You have the right to limit the use and disclosure of sensitive personal information.
• Right to Non-Discrimination — You will not face retaliation for exercising your rights.

Rights for European Residents (GDPR)

If you are a resident of the European Economic Area, the General Data Protection Regulation (GDPR) provides you with the following rights:

• Right of Access — You have the right to obtain confirmation of whether we process your data and access to that data.
• Right to Rectification — You have the right to have inaccurate personal data corrected.
• Right to Erasure — You have the right to request deletion of your personal data in certain circumstances.
• Right to Restrict Processing — You have the right to request restriction of processing in certain circumstances.
• Right to Data Portability — You have the right to receive your data in a structured, commonly used format.
• Right to Object — You have the right to object to processing based on legitimate interests.
• Right to Withdraw Consent — Where processing is based on consent, you may withdraw consent at any time.
• Right to Lodge Complaint — You have the right to lodge a complaint with a supervisory authority.

2. How to Submit a Request

We provide multiple methods for submitting privacy rights requests. Choose the method that works best for you.

Online Request Form (Preferred)

The fastest way to submit a privacy rights request is through our form below. Scroll down to the Privacy Rights Request Form section.

Email

Email: contact@chwellnessgroup.com
Subject Line: "Privacy Rights Request - [Type of Request]"

Please include:

• Your full name
• Your state or country of residence
• The specific right you wish to exercise
• Enough information for us to verify your identity
• Preferred contact method for our response

Mail

You may submit a written request by mail to:

Complete Health Wellness Group LLC
Attn: Privacy Rights Request
815 Ritchie Highway, Suite 205
Severna Park, MD 21146

Please include all information listed above for email requests.

Phone

Phone: (443) 367-1333

We will guide you through the request process. Some requests may require written follow-up for verification purposes.

3. Privacy Rights Request Form

Submit Your Privacy Rights Request

To exercise your privacy rights, please contact us using one of the methods above or complete a request by providing the following information:

Required Information:

• Full Legal Name — Your legal name as it appears in our records
• Email Address — For communication about your request
• State/Country of Residence — Determines which rights apply to you
• Type of Request — Select from the options below

Optional Information:

• Phone Number — Alternative contact method
• Mailing Address — If you prefer a written response

Types of Requests You Can Make

• Access / Know — I want to know what personal data you have about me
• Delete — I want you to delete my personal data
• Correct — I want to correct inaccurate personal data
• Data Portability — I want a copy of my data in portable format
• Opt-Out of Sale — I want to opt out of sale of my personal data
• Opt-Out of Targeted Advertising — I want to opt out of targeted advertising
• Opt-Out of Profiling — I want to opt out of profiling
• Withdraw Consent — I want to withdraw my consent for processing

Verification Requirements

When submitting your request, you acknowledge that:

• You may be asked to verify your identity before your request can be processed
• You certify that you are the individual whose data is the subject of the request, or you are authorized to act on behalf of that individual

Authorized Agent Requests

If you are submitting a request as an authorized agent on behalf of another individual, we will contact you to request proof of authorization.

By submitting a request, you agree that we may process your information to respond to your request. See our Privacy Policy for details.

4. Verification Process

To protect your privacy and prevent unauthorized access to personal data, we must verify your identity before processing certain requests.

How We Verify Your Identity

For Most Requests:

• We will match information you provide with information we already have on file
• We may ask you to confirm details such as email address, approximate date you provided information, or type of interaction you had with us

For Sensitive Requests (deletion, access to specific data):

• We may require additional verification steps
• We may ask you to provide additional identifying information
• We will use a reasonable method to verify your identity without collecting unnecessary data

Authorized Agents:

• If an authorized agent submits a request on your behalf, we will require signed written permission and verification of the agent's identity
• We may contact you directly to verify the request

We Will NOT:

• Require you to create an account to submit a request
• Charge a fee for processing your first request within a 12-month period
• Ask for more information than necessary to verify identity and process the request

5. Response Timeline

What You Will Receive:

• Confirmation that we received your request
• Timeline for our response
• If applicable, request for additional verification information
• Our substantive response within the applicable timeframe
• If we cannot fulfill your request, an explanation of why

6. Denial of Requests

We may deny your request in certain circumstances, including:

• We cannot verify your identity
• The request is manifestly unfounded or excessive (e.g., repetitive requests)
• The data is subject to legal exceptions (legal obligations, security, litigation hold)
• The data is protected under HIPAA (different process applies)
• The request conflicts with other legal requirements
• An exemption under applicable law applies

If We Deny Your Request:

• We will explain the reason for denial
• We will inform you of your right to appeal (where applicable)
• We will provide information about how to file a complaint with regulatory authorities

7. Appeal Process

If we deny your privacy rights request, you have the right to appeal that decision.

How to Appeal

1. Submit an appeal within 30 days of receiving our denial
2. Send your appeal to:
   • Email: contact@chwellnessgroup.com (Subject: "Privacy Rights Appeal")
   • Mail: Complete Health Wellness Group LLC, Attn: Privacy Appeal, 815 Ritchie Hwy Ste 205, Severna Park, MD 21146
3. Include:
   • Your original request reference (if provided)
   • Reason you believe the denial was incorrect
   • Any additional information supporting your appeal

Appeal Response: We will respond to your appeal within 45 days. If we deny your appeal, we will inform you how to file a complaint with the Maryland Attorney General or other applicable regulator.

8. Global Privacy Control (GPC)

We Honor GPC Signals

Global Privacy Control is a browser setting that signals your privacy preferences to websites you visit. When we detect a GPC signal from your browser, we treat it as a valid opt-out request for:

• Sale of personal information
• Sharing for cross-context behavioral advertising
• Targeted advertising

How to Enable GPC

GPC is supported by various browsers and browser extensions:

• Firefox: Enable in Privacy & Security settings
• Brave: Enabled by default
• DuckDuckGo: Enabled by default in their browser and extension
• Privacy Badger: Extension available for Chrome, Firefox, Edge, and Opera

Learn more at globalprivacycontrol.org

9. Do Not Sell My Information

We Do Not Sell Personal Information

Complete Health Wellness Group LLC does not sell your personal information to third parties in exchange for monetary compensation.

However, some privacy laws define "sale" broadly to include sharing data for valuable consideration, including advertising purposes. To ensure compliance with all applicable laws:

• We honor Global Privacy Control signals
• You may submit an opt-out request using the methods described above
• We will not share your information for targeted advertising purposes if you opt out

Opt-Out Methods

• Enable GPC in your browser (automatic opt-out)
• Submit a request via our Privacy Rights Request Form
• Contact us by phone at (443) 367-1333
• Email us at contact@chwellnessgroup.com

10. Sensitive Personal Information

Sensitive personal information includes data that may require additional protections, such as:

• Precise geolocation data
• Racial or ethnic origin
• Religious or philosophical beliefs
• Health information (outside of HIPAA-covered treatment)
• Sexual orientation
• Citizenship or immigration status
• Genetic or biometric data
• Contents of mail, email, or text messages (not directed to us)
• Financial account information

Our Practices

• We collect sensitive personal information only when necessary for specific purposes
• We do not use sensitive personal information for purposes beyond what is necessary
• You have the right to limit our use of sensitive personal information
• HIPAA-protected health information is governed by our HIPAA Notice of Privacy Practices

11. Contact Information

If you have questions about this page or wish to exercise your privacy rights, please contact us:

Complete Health Wellness Group LLC
815 Ritchie Highway, Suite 205
Severna Park, MD 21146

• Phone: (443) 367-1333
• Email: contact@chwellnessgroup.com

Regulatory Contacts

Maryland Attorney General
Consumer Protection Division
200 St. Paul Place
Baltimore, MD 21202
Phone: (410) 576-6300
Website: www.marylandattorneygeneral.gov

California Attorney General
Office of the Attorney General
P.O. Box 944255
Sacramento, CA 94244-2550
Website: oag.ca.gov

Related Policies

• Privacy Policy — Full details about our data practices
• HIPAA Notice of Privacy Practices — For patient health information
• Cookie Policy — How we use cookies
• Non-Discrimination Notice — Our commitment to equal access
• View All Legal Notices

Questions About Your Privacy?

We're here to help you understand and exercise your privacy rights. Contact us if you need assistance.