California Notice at Collection
The CCPA/CPRA requires us to provide certain disclosures at or before our collection of personal information from California residents. The below CCPA/CPRA Notice at Collection for Online Sources provides you with information about how we collect and use, sell, or share your personal information in the online context. When you use or interact with our Services online, including when you communicate with GRAIL by e-mail, complete, or submit forms to us on our Sites or portals, or when you visit our Sites or interact with us on social media, we may collect and use and the following categories of information:
| Category of CCPA/CPRA Personal Information | Purpose for Collection and Use | Is the information sold or shared? |
| Identifiers (e.g. A real name, alias, postal address, IP address, email address, account name, and other similar identifiers) | Market and communicate about our products, services, events, and other offerings Administer user accounts Provide, support, personalize, and develop our products, services, events, and other offerings Provide service to our customers | We do not sell or share any personal information to third parties for money. We may share IP address and other similar identifiers through analytics and advertising cookies with third party advertising companies that collect information about your activity on certain portions of the GRAIL Site and with other online services for advertising purposes. |
| Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) (e.g. Name, address, signature, telephone number, driver’s license number, credit card number or other financial information, education, employment, employment history, and health or medical information (where that information is processed in those situations outside the scope of either HIPAA or CMIA). Some personal information included in this category may overlap with other categories.) | Market and communicate about our products, services, events, and other offerings Administer user accounts Provide, support, personalize, and develop our products, services, events, and other offerings Provide service to our customers, which include Providers Process payments, administer fees, provide users with invoices, or resolve billing issues | We do not sell or share any personal information to third parties for money |
| Internet or other similar network activity (e.g. Browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement) | Market and communicate about our products, services, events, and other offerings Conduct research and analysis Quality improvement activities | We do not sell or share any personal information to third parties for money. We may share internet or other similar network activity through analytics and advertising cookies with third party advertising companies that collect information about your activity on certain portions of the GRAIL Site and with other online services for advertising purposes. |
| Professional or employment-related information (e.g. Current or past job history or performance evaluations) | Administer user accounts Process applications for employment | We do not sell or share any personal information to third parties for money |
Sensitive Personal Information Collected from Online Sources.
GRAIL only collects sensitive personal information, as defined by the CCPA/CPRA—including racial or ethnic origin—through online sources in connection with the job application process.
Retaining Your Personal Information
We seek to only retain personal information for as long as necessary to fulfill the purposes for which we collected such data, as set out in this Privacy Policy, including for the purposes of satisfying any legal, accounting, or reporting requirements, subject to your rights, in certain circumstances, to have your personal information erased. We may be required by law to hold certain personal information for specific periods. In other cases, we will retain your personal information for an appropriate period after our relationship ends to protect ourselves from legal claims or to administer our business. To determine the appropriate retention period for personal information, we consider the amount, nature and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.
For additional information about our privacy practices, please visit our Privacy Notice for California Residents.
Last Updated: January 1, 2023.