1. Overview of Privacy Policy

Summary – Policy Overview

2. Categories of Information We May Process

Summary – Categories of Information We May Process

• Personal Information: Your name; username or login information; password; areas or topics of interest; information provided when answering quizzes or surveys or using certain health-related programs (such as weight goals and calorie intake); and photographs (if you or other users post photographs on the Services).
• Demographic Information: Gender; age/date of birth; nationality; title; job title, company information, educational background, work experience and other professional information; and language preferences.
• Contact Information: Postal address; telephone and/or mobile number; email address; and your public social media accounts or profiles.
• Consent Records: Records of any consent you may have given, including the date and time, the manner in which consent was given, and any relevant information (for example, the subject matter of the consent).
• Location Information: Location data that describes the precise geographic location of your device ("Precise Location Data").
• Purchase and Payment Details: Purchase and price records; invoice records; payment records; billing address; payment method; cardholder or account holder name; payment amount; and payment date.
• Employer Details: Where you interact with us in your capacity as an employee, the relevant contact information of your employer (including name, address, telephone number and email address).
• Opinions and Views: Any opinions or views about us that you or other users choose to send to us or publicly post on social media platforms or Services (including forums).

• Information about your use of the Services, such as usage data and statistics, which may be aggregated.
• Browsing history, including websites or other services you visited before and after interacting with the Services.
• Search and interactive e-commerce opportunities, such as merchants and offers included in the Services.
• Non-precise information about the approximate physical location (e.g., at the city or postal code level) of your computer or device derived from the IP address of your computer or device ("GeoIP Data").
• Device Identification ("ID") is a unique number associated with a smartphone or similar handheld device, distinct from the hardware serial number.
• Advertising ID is a unique, user-resettable advertising identifier associated with a device (for example, iOS uses the Advertising Identifier (or "IDFA"), and Android uses the Google Advertising ID).
• Internet Protocol ("IP") address, a unique string of numbers automatically assigned to your device each time you access the internet.
• Information collected through the use of cookies, eTags, Javascript, pixel tags, device ID tracking, anonymous identifiers and other technologies, including information collected using such methods and technologies regarding: (i) your access to, interaction with, and engagement with Services, content and advertisements on third-party websites, applications, platforms and other media channels ("Channels"); (ii) your interaction with emails (including content and advertisements therein) (collectively referred to as "Online Data").
• Device type, settings and software used.
• Log files which may include IP addresses, browser type, ISP referrer/exit pages, operating system, date/time stamps and/or clickstream data, including any clicks on custom links.
• Web beacons are electronic files that allow a website to count the number of users who have visited a page or accessed certain cookies.
• Pixel tags, also known as clear GIFs, beacons, spotlight tags or web bugs, are a method of passing information from a user's computer to a third-party website.
• Local shared objects (such as Flash cookies) and local storage (such as HTML5).
• Mobile analytics to understand how our mobile applications and software function on your phone.

3. Sensitive Personal Information

Summary – Sensitive Personal Information

4. How We Collect or Create Information

Summary – Collection and Creation of Information

User Information Collection

• Data You Provide: We may obtain your personal information when you provide it to us through our Services (for example, when you register for emails, newsletters or text messages; register as a website member or create a profile or account on any part of the Services; participate in sweepstakes, competitions, contests or prize draws; participate in surveys and quizzes; perform search queries through the Services; contact us via email, telephone or any other means; make purchases; etc.).
• Relationship Data: In the normal course of our relationship with you, we may collect or obtain your personal information (for example, if you purchase services from us).
• Data You Disclose Publicly: We may collect or obtain personal information that you have explicitly chosen to disclose publicly, including through social media (for example, if you publicly post content about us, we may collect information from your social media profile) or through chats, forums or communities on our Services.
• Service Data: When you access, download, use or register to use any part of our Services, we may collect or obtain your personal information.
• Content and Advertising Information: If you choose to interact with any third-party content or advertisements on the Services or Channels, we may receive User Information about you from the relevant third parties.
• Third-Party Information: We may collect or obtain your personal information from third parties that provide information to us. This may include offline channels such as telephone or direct mail; from customers, suppliers, third parties, commercial or public sources (such as data brokers, data aggregators, public databases, etc.); third-party affiliate network operators; referral sources; and social networking sites or services (such as Facebook, Twitter, LinkedIn, etc.). If you use a third-party connection or login (such as Facebook Connect, Twitter or Google+) to access the Services, create a membership or profile on any part of the Services, access our content or forward our content to other people, platforms or services, we may also receive your username or email address from these third-party services, or other information about you obtained from these services.

Creation of User Information

5. Purposes for Which We Process Your Information

Summary – Purposes for Processing Your Information

• Providing Services to You: To provide you with Services offered by Everyday Health or its partners, including (i) providing competitions, chat areas, forums and communities, (ii) managing your account, and (iii) customer support and relationship management.
• Providing and Improving Services: To operate and manage the Services for you; to provide you with personalized content; to communicate and interact with you through the Services; to identify service issues and plan improvements or create new services; and to notify you of changes to any of our Services.
• Identification: To use information from third parties to verify your information in order to provide Services (for example, verifying your mailing address to send you requested products or services).
• Surveys and Quizzes: To interact with you to obtain your views on our Services and to learn more about your interests, including your interests in third parties and their products.
• Research: To analyze, benchmark and conduct research based on User Information and your interactions with the Services.
• Communications: We will communicate with you by any means (including email, telephone, text message, social media, mail or in person) to provide you with content and other information that may be of interest to you, provided that such communications comply with applicable law; we will maintain and update your contact information as appropriate; and obtain your prior consent when necessary. We may conduct direct marketing to you as described in Section 6 below.
• Advertising: To provide advertisements based on your interests and interactions with the Services and Channels, including using User Information to serve you with advertisements on the Services and Channels, and authorizing some User Information to third parties. For more information, please see Section 7 below.
• Audience Interaction: To identify and develop audience interaction, advertising and promotional strategies across various platforms and channels, both within the Services and on Channels.
• User Engagement and Purchases: To track purchase traffic and activities on the Services and Channels, including viewing your browsing history (if available); to provide analytics and measure the relationship between traffic costs and generated revenue.
• Commercial Offers: To use Cookies to track your browsing history and the amount you spend on specific third-party merchant websites in order to provide coupons and other offers relevant to your shopping experience.
• Lead Generation: To generate customer leads through marketing campaigns (including but not limited to email marketing and website placements) and share these leads with third-party advertisers.
• Customer-Facing Marketing: We may market to existing customers, potential customers and their employees who have expressed an interest in doing business with HKPD or who have previously done business with HKPD to further develop and promote our business. Such marketing activities may include sending marketing emails or making telephone calls to promote advertising purchases, our lead generation, recruitment websites and other commercial services offered by HKPD.
• IT Management: To be responsible for the management of HKPD's information technology systems; network and device management; network and device security; implementing data security and information system policies; conducting compliance audits related to internal policies; identifying and mitigating fraudulent activities; and complying with legal requirements.
• Security: Electronic security measures (including monitoring login records and access details) to help reduce risks and provide the ability to identify and respond to security incidents.
• Financial Management: For general business and financial management purposes, including: economic, financial and administrative management; planning and reporting; personnel development; sales; accounting; finance; corporate auditing; and complying with legal and regulatory requirements.
• Investigations: To detect, investigate and prevent violations of policies and criminal acts in accordance with applicable law.
• Legal Proceedings: To establish, exercise and defend legal rights.
• Legal Compliance: To the extent permitted by applicable law, we reserve the right to disclose any Service user's information if we have reason to believe that the user has violated our Terms of Service or other posted guidelines, or has engaged in (or we have reason to believe is engaging in) any illegal activity; we also reserve the right to disclose information in response to court and government orders, other requests from government agencies, civil subpoenas, discovery requests, and legal or regulatory obligations. In addition, we may disclose User Information when we believe in good faith that disclosure is necessary to protect the rights, property, safety or security of HKPD, any of our users or the public, or in response to emergencies.

6. Direct Marketing

Summary – Direct Marketing

7. Cookies, Similar Technologies and Online Behavioral Advertising

Summary – Cookies, Similar Technologies and Online Behavioral Advertising

8. What is the Legal Basis for Processing Personal Information?

Summary – Legal Basis for Processing User Information

• Consent: We may process your User Information with your prior explicit consent (this legal basis is used only for fully voluntary processing – not for any necessary or mandatory processing);
• Contractual Necessity: We may process your User Information if processing is necessary for the performance of any contract you may have with us;
• Compliance with Applicable Law: We may process your User Information if required to do so by applicable law;
• Vital Interests: We may process your User Information if processing is necessary to protect the vital interests of any individual; or
• Legitimate Interests: We may process your User Information if we have a legitimate interest in doing so for the purposes of managing, operating or promoting our business, and that legitimate interest does not override your interests, fundamental rights or freedoms.

9. What Information Do We Disclose to Third Parties?

Summary – Disclosure of User Information to Third Parties

• Legal and regulatory authorities as required, or to report any actual or suspected violation of applicable laws or regulations;
• External professional advisors (such as accountants, auditors or lawyers) who are subject to binding confidentiality contractual obligations;
• Third-party Processors located anywhere in the world (such as analytics providers, data centers, etc.) who are subject to the requirements described below in this Section 9;
• Any relevant party, law enforcement agency or court to the extent necessary to establish, exercise or defend legal rights;
• Any relevant party for the prevention, investigation, detection or prosecution of criminal offenses or the execution of criminal penalties, including the protection and prevention of threats to public security;
• Any relevant third-party acquirer if we sell or transfer all or any relevant part of our business or assets (including in the event of reorganization, dissolution or liquidation);
• Any relevant third-party providers if our Services use third-party advertisements, plug-ins or content. If you choose to interact with any such advertisements, plug-ins or content, information about your activities on the Services and Channels may be shared with the relevant third-party providers to serve you with targeted advertisements based on your interests. If you click on, tap or otherwise interact with an advertisement, the advertiser may consider you to meet the criteria of their target audience;
• Sponsors of any contest, competition, sweepstakes, prize promotion or content offering, where we will use registration data for such activities as part of User Information and may share it with sponsors and other parties in accordance with this policy and the sponsor's privacy policy. We may also share your information with third-party vendors involved in managing such activities. For contests, competitions, sweepstakes and prize promotions, please carefully read the official rules or terms and conditions before submitting information;
• We may disclose your information to third parties not covered by this Privacy Policy (for example, third-party goods and service providers, marketing and advertising companies and agencies, content publishers and retailers). In accordance with applicable law, we may share Other Information with other parties who already have your personal information to refine their records about you or enhance their ability to provide products and services.

10. International Transfer of Information

Summary – International Transfer of Information

Law Enforcement Authorities

Complaint Mechanisms

11. Data Security

Summary – Data Security

12. Data Accuracy

Summary – Data Accuracy

13. Data Minimization

Summary – Data Minimization

14. Data Retention

Summary – Data Retention

15. Your Rights Regarding Personal Information

Your Rights:

• Right to Withdraw Consent: If you were required to consent to the processing of your personal information, you have the right to withdraw your consent at any time.
• Right to Know: You have the right to know what personal information we collect, process, share or sell. This policy is designed to increase transparency regarding the use of your data. If you have additional questions, please send an email to privacy@everydayhealth.com.
• Right to Access: You may request a copy of the personal information we have collected about you.
• Right to Deletion/Erasure: You may request that we delete all information we have collected about you. Please note that exercising the right to deletion may result in your inability to access your account and any purchase records, points or features associated with it. If you wish to cancel your account or request that we stop using some or all of your information to provide you with services, please contact us.
• Right to Correction: If you find any personal information we process to be inaccurate, you may contact us to correct it. We will cancel or delete your information, but may retain and use copies of your information as needed to fulfill our legal obligations, resolve disputes and enforce our agreements. For certain requests, we may require you to provide additional information.
• (California) Right to Opt Out of Sale or Sharing for Targeted Advertising: In certain circumstances, we may sell or share personal data you provide to us to serve you with advertisements that match your interests. If you do not want your data to be sold or shared, you may opt out of such sale or sharing by submitting a request through our privacy portal or sending an email to privacy@everydayhealth.com. We may require you to provide additional information to verify your request.
• Right to Object to Processing: In specific circumstances, you may object to our processing of your personal information through our privacy portal. After objecting to processing, you may not be able to access some or all of our Services. This right is limited to personal data processed for commercial purposes.
• Right to Object to Use of Sensitive Personal Information: You have the right to object to our use of your sensitive personal information. Sensitive personal information refers to information about your health condition, race, religious beliefs, sexual orientation, gender identity, political opinions or philosophical beliefs. You should always be cautious about the personal information you share online, especially sensitive information.
• Right to Object to Automated Processing: You have the right to object to the use of your data for automated decision-making about you.
• Right to Non-Discrimination: You have the right not to be discriminated against when exercising your rights.
• Right to Lodge a Complaint (EU, UK, Switzerland): If you wish to file a complaint about our collection or use of your information, you have the right to do so without affecting any other rights you may have. You may file a complaint with your local data protection authority.
• Authorized Agent Rights (California): If you wish to make a request on behalf of a California consumer (current or former customer), please provide an authorized request email from the customer's email address on file with us. You may also make a request on behalf of a California consumer under the California Consumer Privacy Act, but must provide the following documents: (1) a written power of attorney signed by the consumer authorizing you to act on their behalf, and the consumer has directly verified their identity with us; or (2) proof that the consumer has granted you a power of attorney under Sections 4000 to 4465 of the California Probate Code. If the agent fails to submit proof that they have been authorized by the consumer, we may reject the request.

16. How Can I Control My Information?

Summary – How Can I Control My Information?

• Your Newsletters and Email Subscriptions: You may opt out or unsubscribe from newsletters or other email lists at any time by following the instructions at the end of the newsletters or emails you receive. Changes may take five to ten business days to take effect. For certain Services, communications related to membership services are part of the Service you subscribed to, and you may continue to receive emails as part of that specific Service even if you opt out of newsletters or email lists, unless you cancel your account. If you have provided us with multiple email addresses, we may continue to contact you unless you request to unsubscribe from each email address you provided.
• Push Notifications: From time to time, we may send you push notifications to inform you of any ongoing events or promotions. If you no longer wish to receive such notifications, you may turn them off in your device settings. To ensure you receive the correct notifications, we need to collect certain information about your device, such as the operating system and user identification information.
• Location-Based Services: You may choose to stop HKPD from collecting your Precise Location Data at any time by editing the corresponding settings on your mobile device (usually located in the "Settings" area of your device).

• Cookies and Pixel Tags: You can block or restrict Cookies and pixel tags on your computer by adjusting your browser settings, or clear Cookies from your browser. However, if you "turn off", clear or disable Cookies or pixel tags, while you may still use the Services, you may not be able to use all the features or functionalities provided by the Services.

17. Terms of Service

Summary – Terms of Service