Ovia Health by Labcorp Non-App Privacy Policy

Data Access & Collection · Company practice

This Policy governs Ovia's business contacts and corporate website operations

This Privacy Policy describes how Ovuline, Inc., doing business as Ovia Health by Labcorp ("Ovia"), a subsidiary of Labcorp, collects, uses and shares personal data collected from business contacts, prospective business contacts, and other individuals who may come into contact with Ovia as part of Ovia's internal operations, management and administration or through Ovia's corporate website — a scope the Policy defines as "Ovia Operations".

Supporting quotations

This Privacy Policy (“Policy”) describes how Ovuline, Inc., doing business as Ovia Health by Labcorp (“Ovia”) collects, uses and shares personal data collected by Ovia from business contacts, prospective business contacts, and other individuals who may come into contact with Ovia as part of Ovia’s internal operations, management and administration or through Ovia’s corporate website (“Ovia Operations”). Ovia Health by Labcorp is a subsidiary of Labcorp, a global life-sciences leader.

Data Access & Collection · Restriction or exception

Policy excludes employee/applicant data and app users, who are directed to other notices

This non-app Policy does not apply to personal data collected from job applicants and employees, which is governed by privacy notices given during recruitment, application and employment, and does not apply to personal data collected from users of the Ovia and Ovia Parenting apps and health coaching services. App users are directed to review the separate Ovia Health App Privacy Policy.

Supporting quotations

This Policy does not apply to personal data collected from job applicants and employees, which is governed by privacy notices provided as part of the recruitment, application and employment process. This Policy does not apply to personal data collected from users of the Ovia and Ovia Parenting apps and health coaching services. If you are a user of the Ovia or Ovia Parenting apps, you should review the Ovia Health App Privacy Policy

Qualifications & exceptions

• Applies to the non-app (business/website) policy only; the apps privacy policy is a separate, linked document not supplied in this source

Not stated here

• The linked Ovia Health App Privacy Policy's text is not supplied in this source; this card cannot say what that separate policy provides for app users

Cross-references

• contrast (model-proposed): Personal information may transfer in a merger, sale or bankruptcy of Ovia's assets — The scope section excludes personal data collected from job applicants and employees from this Policy, yet the asset-transfer purpose clause refers to a transfer of assets "in which personal information held by Ovia about employees is among the assets transferred". The provisions pull in different directions on paper; the source does not reconcile the wording, and this records the tension without resolving it.

Data Access & Collection · Context

Definitions: "personal data" and "you"

In this Policy, "personal data" means information relating to an identified or identifiable individual, and "you" means individuals who come into contact with Ovia.

Details not recorded for this card

Supporting quotations

In this Policy, the term “personal data” refers to information relating to an identified or identifiable individual. The term “you” refers to individuals who come into contact with Ovia.

Data Access & Collection · Company practice

Ovia collects seven listed categories of personal data for Ovia Operations

In connection with Ovia Operations, Ovia collects the following categories of personal data: identifiers (name, email address, postal address; device identifiers such as IP address, AdID, IDFA); general personal information including employment, education and health information (examples given: employer, job title); legally protected classifications such as race or gender (example given: gender); purchase histories or interests (interest in Ovia products based on your browsing history); internet and app activity information (Ovia website and white paper browsing history, Ovia email opens and views; device type, operating system, other device parameters); professional and employment-related information (name of employer, title, job type, industry); and inferences (Ovia product interest).

Supporting quotations

We collect the following categories of personal data in connection with Ovia Operations:

Device identifiers such as IP address, AdID, IDFA

General personal information including employment, education, health information

Legally protected classifications such as race or gender

Interest in Ovia products based on your browsing history

Ovia website and white paper browsing history, Ovia email opens and views

Name of employer, title, job type, industry

Ovia product interest

Qualifications & exceptions

• The "general personal information" category is described as including employment, education and health information, although the row's stated examples are only employer and job title; the examples do not show health data being collected from this policy's business-contact audience

Data Access & Collection · Company practice

Personal data is collected directly through sales and marketing interactions

Ovia collects personal data directly from your interaction with Ovia's sales and marketing activities — for example when you attend an Ovia event or webinar, meet Ovia representatives at a trade show or other public event, respond to an Ovia survey, or subscribe to an Ovia email list.

Supporting quotations

Direct collection from your interaction with Ovia’s sales and marketing activities We collect personal data when you attend an Ovia event or webinar, meet Ovia representatives at a trade show or other public event, respond to an Ovia survey, or subscribe to an Ovia email list.

Data Access & Collection · Company practice

Contact lists are built from third-party directories and list rentals and purchases

Ovia builds its contact lists through use of third-party sources — including LinkedIn, social networks, business directories and list providers — and through list rentals and purchases.

Supporting quotations

Third party directories, including LinkedIn, social networks, business directories, list providers. We build our contact lists through use of third party sources and list rentals and purchases

Data Access & Collection · Company practice

Technical and device information is gathered via tracking technologies to gauge interest

Ovia obtains technical and device information through tags, pixels, cookies, IP addresses, AdID, IDFA and similar tracking technologies — which this source collectively defines as "tracking technologies" — and uses them to identify your interactions with Ovia's website and content and to gauge your interest in Ovia's products.

Supporting quotations

Technical and device information through tags, pixels, cookies, IP addresses, AdID, IDFA and similar tracking technologies (“tracking technologies”) We use technical device information and tracking technologies to identify your interactions with Ovia’s website and content and to gauge your interest in our products.

Use & Processing · Company practice

Personal data is used for Ovia Operations including products, security and legal compliance

Ovia collects and uses your personal data, in all of the categories discussed above, for Ovia Operations, including: developing, advertising, marketing and providing Ovia's products and services and conducting surveys; operating and maintaining the security of Ovia's products, services, equipment and networks; and complying with law and law enforcement requests. The list is introduced with "including", so these are examples rather than an exhaustive statement of purposes.

Supporting quotations

We collect and use your personal data, in all of the categories discussed above, for Ovia Operations, including:

Developing, advertising, marketing and providing Ovia’s products and services and conducting surveys

Operating and maintaining the security of Ovia’s products, services, equipment and networks

To comply with law and law enforcement requests

Sharing & Disclosure · Company practice

Personal information may transfer in a merger, sale or bankruptcy of Ovia's assets

Ovia uses personal data to conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Ovia's assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by Ovia is among the assets transferred.

Supporting quotations

To conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Ovia’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by Ovia about employees is among the assets transferred

Qualifications & exceptions

• The clause as written says the transferred assets include "personal information held by Ovia about employees", although the Policy's scope section excludes personal data collected from job applicants and employees; the source does not reconcile this wording

Not stated here

• Whether the asset-transfer clause is meant to cover data of this Policy's business-contact audience generally, or only the employee data its text literally names, is not resolved within the supplied source

Cross-references

• contrast (model-proposed): Policy excludes employee/applicant data and app users, who are directed to other notices — The scope section excludes personal data collected from job applicants and employees from this Policy, yet the asset-transfer purpose clause refers to a transfer of assets "in which personal information held by Ovia about employees is among the assets transferred". The provisions pull in different directions on paper; the source does not reconcile the wording, and this records the tension without resolving it.

Legal Rights & Agreement Rules · Company practice

Processing relies on consent, contract, legal obligation or legitimate interests

Ovia collects, uses and otherwise processes personal data as allowed under applicable law, including where processing is based on one or more of: the consent you provide at the point of collection of your personal information; the performance of the contract Ovia has with you; the compliance of a legal obligation to which Ovia is subject; and the legitimate interests of Ovia, you or a third party, where not overridden by your interests, fundamental rights or freedoms — Ovia's legitimate interests include the lawful conduct of its business.

Supporting quotations

Lawful Processing. We collect, use and otherwise process personal data as allowed under applicable law, including where based on one or more of the following:

– The consent you provide to us at the point of collection of your personal information;

– The performance of the contract we have with you;

– The compliance of a legal obligation to which we are subject;

– The legitimate interests of Ovia, you or a third party, where not overridden by your interests, fundamental rights or freedoms. Ovia’s legitimate interests include the lawful conduct of its business.

Sharing & Disclosure · Company practice

B2B customer data is processed and stored by named service providers

Ovia's B2B customer data is processed and stored by service providers working on Ovia's behalf, including its cloud services provider Amazon Web Services, its marketing automation solution Eloqua, and Salesforce, which provides Ovia with customer relationship management systems.

Supporting quotations

Ovia’s B2B customer data is processed and stored by service providers working on Ovia’s behalf, including our cloud services provider Amazon Web Services, our marketing automation solution Eloqua, and Salesforce, which provides us with customer relationship management systems.

Qualifications & exceptions

• Stated for Ovia's B2B customer data; the named providers work on Ovia's behalf (processor role)

Sharing & Disclosure · Company practice

Marketing materials and ads may let Ovia and vendors track interaction via tracking technologies

Ovia's marketing materials and ads may contain tracking technologies (the term this source uses for tags, pixels, cookies, IP addresses, AdID, IDFA and similar technologies), which allow Ovia and the vendors it works with to collect technical information from your mobile device — such as IP address and AdID — to track your interaction with Ovia's content and ads.

Supporting quotations

Our marketing materials and ads may contain tracking technologies which allow Ovia and the vendors we work with to collect technical information from your mobile device (such as IP address, AdID) to track your interaction with our content and ads.

Technical and device information through tags, pixels, cookies, IP addresses, AdID, IDFA and similar tracking technologies (“tracking technologies”) We use technical device information and tracking technologies to identify your interactions with Ovia’s website and content and to gauge your interest in our products.

Sharing & Disclosure · Company practice

Device technical information is shared with analytics companies

Ovia shares technical information from your device with analytics companies to understand the performance of its marketing and website.

Supporting quotations

We share technical information from your device with analytics companies to understand the performance of our marketing and website.

Sharing & Disclosure · Company practice

Device data may be shared with social media networks to measure advertising, excluding key identifiers by default

Ovia may share device data with social media networks to measure the effectiveness of advertising on those networks. This device data is configured to exclude key device identifiers unless you have elected, via your on-device controls, to share data with the social media network.

Supporting quotations

We may share device data with social media networks to measure the effectiveness of advertising on those networks. This device data is configured to exclude key device identifiers unless you have elected, via your on-device controls, to share data with the social media network.

Qualifications & exceptions

• Default configuration excludes key device identifiers; the exception applies only if you elect, via on-device controls, to share data with the social media network

Sharing & Disclosure · Company practice

Data may be shared with parent Labcorp, commonly controlled companies and successors

Ovia may share data with its parent company Labcorp and with companies under common control, and with any successors in the event of a merger, acquisition, or similar transaction.

Supporting quotations

We may share data with our parent company Labcorp and with companies under common control, and with any successors in the event of merger, acquisition, or similar transaction.

Cross-references

• referred to by (model-proposed): Personal data may transfer to a buyer or successor and be shared with affiliated companies — The Other Issues passage on sale/merger/change of ownership and transfer to affiliates parallels the sharing table's Affiliates and Successors row: both cover transfer to a buyer/successor on merger or similar transaction and sharing with affiliates under common ownership or control, phrased independently in two places.

Sharing & Disclosure · Company practice

Personal data may be provided to courts, law enforcement and authorities when required

Ovia may provide personal data to courts, law enforcement, and governmental authorities and other third parties if required by law, subpoena, directive from a regulatory authority, or as otherwise necessary to comply with legal requirements or to protect the rights or property of Ovia or third parties. The source also points readers to a separate "How Does Ovia Respond to Data Requests" page in the same table cell.

Supporting quotations

Ovia may provide personal data to courts, law enforcement, and governmental authorities and other third parties if required by law, subpoena, directive from a regulatory authority or as otherwise necessary to comply with legal requirements or to protect the rights or property of Ovia or third parties.

Please also see

Not stated here

• The linked page "How Does Ovia Respond to Data Requests" is not supplied in this source; this card cannot say how Ovia responds to data requests or what conditions that page adds

Cross-references

• referred to by (model-proposed): Data may be provided to authorities and preserved even against a deletion request — The Legal requirements passage in Other Issues parallels the sharing table's Government Authorities and Recipients of Compelled Disclosures row: both state that Ovia may provide personal data to courts, law enforcement and governmental authorities when required by law or to protect rights or property, with slightly different supporting conditions (the table row adds subpoena and regulatory directives; the Other Issues passage adds preservation against deletion requests).

Sharing & Disclosure · Company commitment

Ovia commits that it does not sell or share collected personal data for advertising

Ovia states that it does not sell or share for advertising the personal data it collects, and that its marketing technology vendors act as processors and service providers to Ovia when they process personal data about your interaction with Ovia websites and communications.

Supporting quotations

Ovia does not sell or share for advertising the personal data we collect. Our marketing technology vendors act as processors and service providers to Ovia when they process personal data about your interaction with Ovia websites and communications.

In this Policy, the term “personal data” refers to information relating to an identified or identifiable individual. The term “you” refers to individuals who come into contact with Ovia.

Sharing & Disclosure · Company practice

Purchased advertising may share device data with social networks, under third-party ad platform policies

When Ovia purchases advertising from third parties, it may share device data with social media networks to measure the effectiveness of advertising on those networks. This device data is configured to exclude key device identifiers unless you have elected, via your on-device controls, to share data with the social media network. Personal data collected through your interaction with Ovia's advertising will be governed by the privacy policies of the third-party advertising platform, not by Ovia's privacy policies.

Supporting quotations

When Ovia purchases advertising from third parties, we may share device data with social media networks to measure the effectiveness of advertising on those networks. This device data is configured to exclude key device identifiers unless you have elected, via your on-device controls, to share data with the social media network. Personal data collected through your interaction with our advertising will be governed by the privacy policies of the third party advertising platform, not by Ovia’s privacy policies.

Qualifications & exceptions

• Key device identifiers are excluded by default unless you elected via on-device controls to share data with the social media network
• Data collected through interaction with the advertising is governed by the third-party ad platform's privacy policies, not Ovia's

Sharing & Disclosure · Company commitment

To its knowledge, Ovia does not sell or share personal data of consumers under 16

Ovia states that, to its knowledge, it does not sell or share any personal data of consumers under 16. The commitment is expressly limited by the company's knowledge.

Supporting quotations

To its knowledge, Ovia does not sell or share any personal data of consumers under 16.

Qualifications & exceptions

• Limited to Ovia's knowledge; the source does not describe any age-verification or knowledge-basis process

Sharing & Disclosure · Company practice

Identifiers and internet/app activity are disclosed for business purposes including to ad platforms and to purchase ads

For business purposes, Ovia discloses identifiers and internet and app activity information to cloud computing providers, data analytics providers, vendors who provide email, marketing, and survey systems, advertising sales platforms, advertising networks, advertising platforms, and advertising technology providers — for internal operations (hosting, marketing, analytics) and to purchase ads.

Supporting quotations

Identifiers

Cloud computing providers, data analytics providers, vendors who provide email, marketing, and survey systems, advertising sales platforms, advertising networks, advertising platforms, and advertising technology providers.

For internal operations (hosting, marketing, analytics) and to purchase ads.

Internet and app activity information

Cloud computing providers, data analytics providers, vendors who provide email, marketing, and survey systems, advertising sales platforms, advertising networks, advertising platforms, and advertising technology providers.

For internal operations (hosting, marketing, analytics) and to purchase ads.

Sharing & Disclosure · Company practice

Five other categories are disclosed for internal operations (hosting, marketing, analytics)

For business purposes, Ovia discloses general personal information, legally protected classifications such as race and gender, purchase histories or interests, professional and employment-related information, and inferences to cloud computing providers, data analytics providers, and vendors who provide email, marketing, and survey systems — for internal operations (hosting, marketing, analytics).

Supporting quotations

General personal information

Cloud computing providers, data analytics providers, vendors who provide email, marketing, and survey systems.

For internal operations (hosting, marketing, analytics).

Legally protected classifications such as race, gender

Purchase histories or interests

Professional and employment related

Inferences

Qualifications & exceptions

• The purchase histories row's recipient cell carries a stray comma and period in the source text ("survey systems,."); the listed recipients are read as the same set as the neighboring rows

Retention & Deletion · Company practice

Personal information is retained five years after last activity, then deleted

Ovia retains your personal information for a period of five years after last activity. After this retention period ends, Ovia deletes your data.

Supporting quotations

We retain your personal information for a period of five years after last activity. After this retention period ends, we delete your data.

Cross-references

• contrast (model-proposed): Second Data Retention section: storage during the relationship plus an anticipated-interest period, then deletion — The Policy contains two "Data Retention" sections stating different standards: a fixed five years after last activity, and relationship-active storage plus an open-ended period of reasonably anticipated continued interest. The source presents both without saying which applies to which data or audience; a Choices-section passage calls them Ovia's "standard retention periods" (plural), so they may coexist, but the provisions pull in different directions as written and this records the tension without resolving it.

Retention & Deletion · User right or choice

You can delete your data at any time despite the standard retention periods

While the five-year period is Ovia's standard retention period, you can delete your data at any time, as described in the next section of the Policy.

Supporting quotations

While these are our standard retention periods, you can delete your data at any time as described in the next section.

Qualifications & exceptions

• The deletion procedure is described in the following "What Are Your Choices?" section of the Policy, not in this passage

Cross-references

• has exception (model-proposed): Data may be provided to authorities and preserved even against a deletion request — The Choices section states you can delete your data at any time despite the standard retention periods; the Legal requirements passage in Other Issues states Ovia may access, use and preserve data to comply with law, in anticipation of litigation, or to protect rights or property, expressly 'even if the data is subject to a deletion request from you'. The Legal requirements clause operates as a stated exception to the delete-at-any-time right.

Account & Service Control · User right or choice

You may opt out of Ovia marketing emails at any time

You may opt out of Ovia marketing emails at any time, either by using the 'unsubscribe' link at the bottom of any Ovia marketing email or by contacting Ovia at support@oviahealth.com.

Supporting quotations

You may opt-out of Ovia marketing emails at any time by using the ‘unsubscribe’ link at the bottom of any Ovia marketing email or by contacting us at

Account & Service Control · User right or choice

You may access, correct and delete your personal data at any time, subject to identity verification

You may access, correct and delete the personal data Ovia holds about you at any time, and Ovia honors any consumer data rights provided by applicable law. You can email Ovia at support@oviahealth.com to exercise these rights. Ovia may require you to verify your identity in order to exercise these rights. Authorized agents seeking to exercise data subject rights on behalf of any Ovia users should contact support@oviahealth.com with their request.

Supporting quotations

Access, Deletion and Correction

You may access, correct and delete the personal data Ovia holds about you at any time. Ovia honors any consumer data rights provided by applicable law.

You can email Ovia at support@oviahealth.com to exercise these rights.

Ovia may require you to verify your identity in order to exercise these rights.

Any authorized agents seeking to exercise data subject rights on behalf of any Ovia users should contact support@oviahealth.com with their request.

Qualifications & exceptions

• Ovia may require identity verification before granting these rights
• Elsewhere in this Policy, Ovia reserves the right to retain personal data as permitted by applicable law even if rights are exercised, and states it may access, use and preserve data to comply with law even if the data is subject to a deletion request

Account & Service Control · Company commitment

Ovia commits not to discriminate or retaliate for exercising data subject rights

Ovia states that it does not discriminate or retaliate for the exercise of data subject rights.

Supporting quotations

Ovia does not discriminate or retaliate for the exercise of data subject rights.

Account & Service Control · Company commitment

Ovia respects browser 'do not sell' signals but says GPC controls are not applicable to its activities

Ovia respects 'do not sell' signals sent by your browser. However, because Ovia states it does not sell your personal data (see the Policy's no-sale-for-advertising commitment), it says these controls are not applicable to Ovia's activities.

Supporting quotations

Global Privacy Control

Ovia respects ‘do not sell’ signals sent by your browser. However, as Ovia does not sell your personal data, these controls are not applicable to Ovia’s activities.

Ovia does not sell or share for advertising the personal data we collect. Our marketing technology vendors act as processors and service providers to Ovia when they process personal data about your interaction with Ovia websites and communications.

Qualifications & exceptions

• The 'not applicable' conclusion rests on Ovia's own statement elsewhere in this Policy that it does not sell personal data

Account & Service Control · Procedure

Refused rights requests may be appealed to Ovia's Legal Department, resolved within 30 days

If your request to exercise your rights is refused, you may send your notice of appeal by email to legal@oviahealth.com for review by Ovia's Legal Department. Ovia will resolve your appeal within 30 days of the date of receipt of your email.

Supporting quotations

Appeal Rights

If your request to exercise your rights is refused, you may send your notice of appeal by email to legal@oviahealth.com, for review by Ovia’s Legal Department. We will resolve your appeal within 30 days of the date of receipt of your email.

Retention & Deletion · Restriction or exception

Ovia reserves the right to retain personal data as permitted by law even if rights are exercised

Even if you exercise the rights described above, Ovia reserves the right to retain personal data as permitted by applicable law. This qualifies the access, correction and deletion rights stated in the same Choices section.

Supporting quotations

Other Relevant Information

Even if you exercise your rights described above, Ovia reserves the right to retain personal data as permitted by applicable law.

In this Policy, the term “personal data” refers to information relating to an identified or identifiable individual. The term “you” refers to individuals who come into contact with Ovia.

Security & Safeguards · Company commitment

Industry-standard security measures including background checks and encryption; incident notice as required by law

Ovia protects personal data with security measures consistent with industry standards, including background checks on all employees and data encryption in transit and at rest. Ovia will notify you of security incidents as required by law.

Supporting quotations

Ovia protects personal data with security measures that are consistent with industry standards, including background checks on all employees and data encryption in transit and at rest. We will notify you of security incidents as required by law.

Qualifications & exceptions

• Security incident notification is committed only 'as required by law'

Retention & Deletion · Company practice

Second Data Retention section: storage during the relationship plus an anticipated-interest period, then deletion

A second "Data Retention" section states that Ovia stores personal data for the period that your relationship with Ovia is active and then for a further retention period reflecting the period during which Ovia reasonably anticipates you may remain interested in information about Ovia; after that retention period ends, Ovia deletes your data.

Supporting quotations

We store personal data for the period that your relationship with Ovia is active and then for a further retention period that reflects the period during which we reasonably anticipate you may remain interested in information about Ovia. After this retention period ends, we delete your data.

Qualifications & exceptions

• This second Data Retention section states a different standard from the first one (five years after last activity); the source presents both without reconciling which applies to which data, although a Choices-section passage refers to Ovia's 'standard retention periods' in the plural

Not stated here

• Which retention rule applies to which category of data or audience is not stated in the supplied source

Cross-references

• contrast (model-proposed): Personal information is retained five years after last activity, then deleted — The Policy contains two "Data Retention" sections stating different standards: a fixed five years after last activity, and relationship-active storage plus an open-ended period of reasonably anticipated continued interest. The source presents both without saying which applies to which data or audience; a Choices-section passage calls them Ovia's "standard retention periods" (plural), so they may coexist, but the provisions pull in different directions as written and this records the tension without resolving it.

Account & Service Control · Procedure

Privacy-choice contacts are routed to the What Are Your Choices? section

To contact Ovia to exercise your privacy choices, the Policy directs you to the "What Are Your Choices?" section above.

Details not recorded for this card

Supporting quotations

To contact Ovia to exercise your privacy choices, please see “What Are Your Choices?” above.

Account & Service Control · Company practice

Ovia designates a Data Protection Officer with a Westborough, MA contact address

Ovia has designated a Data Protection Officer. To contact the Data Protection Officer, or for questions or complaints about Ovia's processing of personal data, contact: Data Protection Officer, Ovuline, Inc., dba Ovia Health by Labcorp, 3400 Computer Drive, Westborough, MA 01581, legal@oviahealth.com.

Supporting quotations

Ovia has designated a Data Protection Officer. To contact our Data Protection Officer or for questions or complaints about Ovia’s processing of personal data, contact us at:

Data Protection Officer

Ovuline, Inc., dba Ovia Health by Labcorp

3400 Computer Drive

Westborough, MA 01581

legal@oviahealth.com

Account & Service Control · User right or choice

EEA/UK data subjects may contact the DPO or Ovia's EU and UK representative

Data subjects located in the EEA or UK may contact the Data Protection Officer at the address above, or Ovia's EU and UK representative at dpo@labcorp.com.

Supporting quotations

Data subjects located in the EEA or UK may contact the Data Protection Officer at the address above or Ovia’s EU and UK representative at

Qualifications & exceptions

• Applies to data subjects located in the EEA or UK

Not stated here

• The representative address is presented as a link in the source whose text is the email address dpo@labcorp.com; the link's target is malformed in the saved extraction, so the exact destination cannot be confirmed from the supplied bytes

Account & Service Control · User right or choice

You may have the legal right to lodge a complaint with your local authority

You may also have the legal right to lodge a complaint about Ovia's data processing with your local consumer protection or data protection authority.

Details not recorded for this card

Supporting quotations

You may also have the legal right to lodge a complaint about Ovia’s data processing with your local consumer protection or data protection authority.

Qualifications & exceptions

• Stated as a right you 'may' have under law; the Policy does not itself create it

Data Access & Collection · Company commitment

Ovia does not knowingly collect children's data under Ovia Operations

Ovia does not knowingly collect personal data under Ovia Operations from children under 13 (for the US), or from individuals for whom parental consent is required for collection or processing of personal data. The commitment is limited by knowledge.

Supporting quotations

Children: Ovia does not knowingly collect personal data under Ovia Operations from children under 13 (for the US) or from individuals for whom parental consent is required for collection or processing of personal data.

Qualifications & exceptions

• The under-13 age threshold is stated 'for the US'; the parental-consent branch is not tied to a specific age or jurisdiction in the supplied text

Legal Rights & Agreement Rules · Company practice

Ovia is not responsible for privacy practices of third-party sites, apps, advertisers or sponsors

Some Ovia properties may take you to websites or apps operated by other companies. Ovia is not responsible for the privacy practices of its advertisers, sponsors or others, and you should review the privacy policies of those sites and apps.

Supporting quotations

Third Party Websites or Apps: Some Ovia properties may take you to websites or apps that are operated by other companies. Ovia is not responsible for the privacy practices of its advertisers, sponsors or others. You should review the privacy policies of those sites and apps.

Sharing & Disclosure · Company practice

Data may be provided to authorities and preserved even against a deletion request

Ovia may provide personal data to courts, law enforcement and governmental authorities if required by law or to protect the rights or property of Ovia or third parties. Ovia may also access, use and preserve data to comply with law, in anticipation of litigation, or to protect the rights or property of Ovia or third parties — even if the data is subject to a deletion request from you. Ovia may also provide information to law enforcement or authorities to protect the safety of users of the apps or others.

Supporting quotations

Legal requirements: Ovia may provide personal data to courts, law enforcement and governmental authorities if required by law or to protect the rights or property of Ovia or third parties. Ovia may access, use and preserve data to comply with law, in anticipation of litigation, or to protect the rights or property of Ovia or third parties, even if the data is subject to a deletion request from you. We may also provide information to law enforcement or authorities to protect the safety of users of the apps or others.

Qualifications & exceptions

• The preservation right applies expressly 'even if the data is subject to a deletion request from you', qualifying the deletion rights stated in the Choices section
• The final sentence refers to 'users of the apps', although this Policy's scope excludes personal data collected from users of the Ovia and Ovia Parenting apps; the wording is preserved as written

Cross-references

• exception to (model-proposed): You can delete your data at any time despite the standard retention periods — The Choices section states you can delete your data at any time despite the standard retention periods; the Legal requirements passage in Other Issues states Ovia may access, use and preserve data to comply with law, in anticipation of litigation, or to protect rights or property, expressly 'even if the data is subject to a deletion request from you'. The Legal requirements clause operates as a stated exception to the delete-at-any-time right.
• refers to (model-proposed): Personal data may be provided to courts, law enforcement and authorities when required — The Legal requirements passage in Other Issues parallels the sharing table's Government Authorities and Recipients of Compelled Disclosures row: both state that Ovia may provide personal data to courts, law enforcement and governmental authorities when required by law or to protect rights or property, with slightly different supporting conditions (the table row adds subpoena and regulatory directives; the Other Issues passage adds preservation against deletion requests).

Sharing & Disclosure · Company practice

Personal data may transfer to a buyer or successor and be shared with affiliated companies

If Ovia Health merges with another company, or its equity securities or all or part of its assets are sold to a third party, your personal data may be transferred to the buyer or successor entity. Your personal data may also be shared with affiliated companies under common ownership or control with Ovia.

Supporting quotations

Sale, merger, or change of ownership, transfer to affiliates: If Ovia Health merges with another company, or its equity securities or all or a part of its assets are sold to a third party, your personal data may be transferred to the buyer or successor entity. Your personal data may also be shared with affiliated companies under common ownership or control with Ovia.

Cross-references

• refers to (model-proposed): Data may be shared with parent Labcorp, commonly controlled companies and successors — The Other Issues passage on sale/merger/change of ownership and transfer to affiliates parallels the sharing table's Affiliates and Successors row: both cover transfer to a buyer/successor on merger or similar transaction and sharing with affiliates under common ownership or control, phrased independently in two places.

Legal Rights & Agreement Rules · Company practice

Ovia may modify the Policy from time to time by posting an updated version

Ovia may modify this Policy from time to time by posting an updated version of the Policy. The passage states no advance-notice or direct-notification commitment.

Supporting quotations

Ovia may modify this Policy from time to time by posting an updated version of the Policy.

Qualifications & exceptions

• No advance-notice, direct-notification or consent mechanism is stated in the supplied passage

Legal Rights & Agreement Rules · Context

This Policy version is dated January 9, 2026

The Policy states it was last updated on January 9, 2026; this is the dated version analyzed here.

Details not recorded for this card

Supporting quotations

Last updated: January 9, 2026