California Notice at Collection

The CCPA/CPRA requires us to provide certain disclosures at or before our collection of personal information from California residents. The below CCPA/CPRA Notice at Collection for Online Sources provides you with information about how we collect and use, sell, or share your personal information in the online context. When you use or interact with our Services online, including when you communicate with GRAIL by e-mail, complete, or submit forms to us on our Sites or portals, or when you visit our Sites or interact with us on social media, we may collect and use and the following categories of information:

Category of CCPA/CPRA Personal InformationPurpose for Collection and UseIs the information sold or shared?
Identifiers (e.g. A real name, alias, postal address, IP address, email address, account name, and other similar identifiers)Market and communicate about our products, services, events, and other offerings

Administer user accounts

Provide, support, personalize, and develop our products, services, events, and other offerings

Provide service to our customers
We do not sell or share any personal information to third parties for money.

We may share IP address and other similar identifiers through analytics and advertising cookies with third party advertising companies that collect information about your activity on certain portions of the GRAIL Site and with other online services for advertising purposes.
Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) (e.g. Name, address, signature, telephone number, driver’s license number, credit card number or other financial information, education, employment, employment history, and health or medical information (where that information is processed in those situations outside the scope of either HIPAA or CMIA). Some personal information included in this category may overlap with other categories.)Market and communicate about our products, services, events, and other offerings

Administer user accounts

Provide, support, personalize, and develop our products, services, events, and other offerings

Provide service to our customers, which include Providers

Process payments, administer fees, provide users with invoices, or resolve billing issues
We do not sell or share any personal information to third parties for money
Internet or other similar network activity (e.g. Browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement)Market and communicate about our products, services, events, and other offerings

Conduct research and analysis

Quality improvement activities
We do not sell or share any personal information to third parties for money.

We may share internet or other similar network activity through analytics and advertising cookies with third party advertising companies that collect information about your activity on certain portions of the GRAIL Site and with other online services for advertising purposes.
Professional or employment-related information (e.g. Current or past job history or performance evaluations)Administer user accounts

Process applications for employment
We do not sell or share any personal information to third parties for money


 

Sensitive Personal Information Collected from Online Sources.

GRAIL only collects sensitive personal information, as defined by the CCPA/CPRA—including racial or ethnic origin—through online sources in connection with the job application process.

Retaining Your Personal Information

We seek to only retain personal information for as long as necessary to fulfill the purposes for which we collected such data, as set out in this Privacy Policy, including for the purposes of satisfying any legal, accounting, or reporting requirements, subject to your rights, in certain circumstances, to have your personal information erased. We may be required by law to hold certain personal information for specific periods. In other cases, we will retain your personal information for an appropriate period after our relationship ends to protect ourselves from legal claims or to administer our business. To determine the appropriate retention period for personal information, we consider the amount, nature and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.

For additional information about our privacy practices, please visit our Privacy Notice for California Residents.

Last Updated: January 1, 2023.