Privacy Policy
Date Modified:
07/11/2025
Malla Ventures, Inc. and its affiliates and subsidiaries (the “Company,” “us,” or “we”) developed this Privacy Policy to explain how we use your personal information and comply with applicable law. When we use the term “personalinformation” in this Privacy Policy, we mean information about you that personally identifies you.
This Privacy Policy explains how we collect, use, and disclose your personal information. By using the website and our products or services and any affiliated website, software or application owned or operated by the Company (collectively, the “Services”), you agree that we can collect and use your personal information as described in this Privacy Policy. If youdo not agree, please do not use the Services.
Protected Information
When you set up an account with Malla, you create a direct customer relationship with us that enables you access to our Services. Upon registration, we require certain information from you such as your name, email address, shipping address, phone number and transactional information, which we do not consider “protected health information” or “medical information” as defined by healthcare laws.
Any health records created as a result of your use of the Services will be securely maintained by Malla.
What We Collect:
The personal information we collect or maintain may include:
• Services Activity Information. We track certain actions you take on the Services, such as the content of searchesperformed and information that you enter into the Services (e.g., your name and email address when signing up for anemail newsletter, requesting more information about us and our Services, etc.).
• Access Device and Browser Information. When you access the Services from a computer or other device, we maycollect detailed information from that device, including but not limited to your internet protocol (IP) address, browser type and version, browser language, connection speed, device type (e.g., desktop, laptop, tablet, smartphone), device model and manufacturer, unique device identifiers (such as MAC address or device ID), operating system name and version, screen resolution, time zone, and access times. We may also collect information about your mobile network, hardware settings, and referring or exit pages.
• Cookies and Tracking Technologies. We use both session cookies (which expire once you close your web browser)and persistent cookies (which remain on your device for a set period or until you delete them), as well as similar tracking technologies, to enhance your experience on the Services, analyze Service usage, personalize content and advertising, and help protect both you and us.
• "Cookies" are small data files that are placed on your computer or mobile device when you visit a website. Cookies are widely used by website owners to make their websites work, or to work more efficiently, as well as to provide reporting information. Cookies set by the website owner (in this case, us) are called "first party cookies." Cookies set by parties other than the website owner are called "third party cookies." Third party cookies enable third party features or functionality to be provided on or through the website (e.g., advertising, interactive content, and analytics). The parties that set these third party cookies can recognize your computer both when it visits the website in question and also when it visits certain other websites.
• In addition to cookies, we and our partners may use other similar technologies such as web beacons (also known as "pixel tags" or "clear GIFs"), which are tiny graphics files that contain a unique identifier that enable us or our partners to recognize when someone has visited our Services or opened an email that we have sent them. Other tracking technologies may include local storage objects (such as HTML5 and Flash), which can store information on your device about your preferences and usage.
• These technologies may be used by Malla and our partners to remember your preferences, facilitate navigation, gather aggregate information about website traffic and interactions, enable certain features and functionality, and to deliver and measure advertising and analytics. We may share information collected through cookies and similar technologies with our partners, including analytics providers and advertisers, to help us understand how our Services are used, to personalize your experience, and to provide targeted advertising. Where required by law, we will obtain your consent before placing cookies or using tracking technologies on your device. You can manage your cookie preferences at any time by adjusting your browser settings or by using the cookie management tools provided on our website. To opt out of performance, functionality, or targeting cookies, please use the cookie settings link available on our website or contact us at support@malla.co for assistance. For more information about our use of cookies and tracking technologies, including the types of cookies we use, how we share information with third parties, and how you can control them, please reach out to us directly.
• Analytics Tools. We use third-party analytics tools to help analyze how individuals use the Services, including Google Analytics. Such third parties may use Cookies, APIs, and SDKs in our Services to enable them to collect and analyzeuser and device related data and information on our behalf. These third parties may use Cookies to collect information such as how often users visit the website, what pages they visit, and what other websites they used prior to coming toour website. We use the information we get to improve our Services. These third parties have their own terms and privacy policies that are separate and apart from our own. We are not responsible for the privacy practices or thecontent, advertising, products, services or other materials made available on or through any such third-party Services.To learn more about the types of information that these third parties collect and how you can opt-out, you should visit their websites.
• Strictly necessary and functionality Cookies are used on our website to support Services functionality and security. These Cookies collect crash analytics and Services activity data, as well as provide security measures. We may also collect information from your mobile device or computer, including the type of device used to access the Services,operating system version, and mobile device carrier. This information is used to identify and fix bugs and otherwise improve the performance of the Services. Certain features of the Services may, at a later date, use GPS technology to collect real-time information about the location of your device so that the Services can connect you to a healthcare professional who is licensed or authorized to provide Services in the state where you are located.
In many circumstances, the information listed above is considered non-personal information. For example, the informationcollected through Cookies may not contain any identifiable personal information. However, we will treat such information as personal information if required to do so by applicable law, or if we combine it with personal data that can identify you. This ensures that your privacy is protected in accordance with this Privacy Policy and relevant legal requirements.
How We Use Your Personal Information
We may use your personal information for the following purposes:
• To provide you with the Services.
• For business analytics purposes.
• For our own marketing purposes.
• To provide customer support to you.
• For account and network security purposes.
• To maintain legal and regulatory compliance.
• To enforce compliance with our agreements and policies.
• To service your account.
• To notify you when Services updates are available.
• To create de-identified or aggregated information, such as aggregate statistics relating to the use of the Services. Any de-identified or aggregated data we create will not be used to re-identify individuals, and we will take reasonable steps to ensure that such data cannot be used to identify you, in accordance with applicable privacy laws and best practices.
• To fulfill any other purpose for which you provide us personal information.
• In any other way we may describe when you provide the information.
• For any other purpose with your consent.
We may also disclose personal information that we collect or you provide:
To our subsidiaries, affiliates, and associated organizations.
To contractors, service providers, and other third parties we use to support our business and who are bound bycontractual obligations to keep personal information confidential.
As required by law or legal process, which can include providing information as required by a court order or to respond to any government or regulatory request or investigation.
When we believe in good faith that disclosure is necessary to protect your safety or the safety of others, to protect ourrights, to investigate fraud, or to respond to a government request.
To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution or other sale or transfer of some or all of Malla’s assets or equity, whether as a going concern or as part of bankruptcy, liquidation orsimilar proceeding, in which personal information maintained by the Services is among the assets transferred.
For any other purpose disclosed by us when you provide the information. For any other purpose,with your consent.
Disclosure to third parties.
At times we may provide third parties with certain personal information to provide or improve our products and services,including to help us market to consumers. When we do, we require those third parties to handle it in accordance withapplicable laws. Some of the data disclosures to these third parties may be considered a “sale” or “sharing” of personal information as defined under the laws of California and other U.S. states. Please see the Right to Opt-Out of Sale or Sharing of Personal Information section below for more details. If you are a resident of California, Virginia, Colorado, Connecticut, Utah, Texas, or any other state with similar privacy laws, you have certain rights regarding your personal information. These rights may include the right to access your personal information, request correction or deletion of your personal information, and the right to opt out of the sale or sharing of your personal information or targeted advertising. To exercise any of these rights, please contact us at support@malla.co with your request. If you are a resident of California or another state with similar privacy laws, you have the right to opt out of the sale or sharing of your personal information. To exercise this right, please contact us at support@malla.co with your request to opt out of the sale or sharing of your personal information.
This Privacy Policy applies only to information we collect through the Services. This Privacy Policy DOES NOT apply to information collected by any third party. When you click on links on the Services you may leave our Services. We are not responsible for the privacy practices of other Services, and we encourage you to read their privacy statements.
Modification of information.
Registered users will be able to update some of their information through the Services. Requests to modify any informationmay also be submitted to support@malla.co.
Limitations on deletion of information.
You may request that we delete your personal information and we will honor such requests unless we are required to retain the information for legal, security, or legitimate internal business purposes, or in accordance with applicable laws such as the California Consumer Privacy Act (CCPA) and the General Data Protection Regulation (GDPR). If retention is required, we will comply with your deletion request only after fulfilling these obligations. When we delete personal information, it will be removed from our active database, but may remain in our archives as required by law, and we may also retain anonymous or de-identified information about your use of our Services. Once we have disclosed your personal information to third parties, we may not be able to access or delete that information, and cannot compel those parties to delete or modify it.
Information Security.
We employ a combination of physical, technical, and organizational safeguards to help protect against unauthorized access to personal information. These safeguards include, but are not limited to, data encryption (both in transit and at rest), secure access controls, firewalls, and staff training on data protection. We also maintain policies and procedures designed to ensure the ongoing confidentiality, integrity, availability, and resilience of our systems and services, in accordance with industry standards and applicable laws, including GDPR Article 32. However, please be aware that no data transmission over the Internet or data storage facility can be guaranteed to be perfectly secure. Text messages and emails are not always secure because they travel over unencrypted networks that we do not control.
By using the Services and providing us your cell phone number and email address, you permit us to communicate with you by SMS text message and email. You may also ask us to stop by contacting support@malla.co. You understand that you may have to pay data costs to receive SMS text messages that we send to your mobile phone.
Right to non-discrimination.
We will not discriminate against you for exercising any of your privacy rights under law, or as set forth in this Privacy Policy. Specifically, we will not deny you goods or services, charge you different prices or rates for goods or services, or provide you a different level or quality of goods or services because you have exercised your privacy rights, in accordance with the California Consumer Privacy Act (CCPA).
California.
In addition to the rights above, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides California consumers with certain rights, such as the right to obtain from us information about the personal information about you that we collect, use, and disclose as set forth below.
Disclosure of Personal Information We Collect About You
You have the right to know:
- The categories of personal information we have collected about you;
- The categories of sources from which the personal information is collected;
- Our business or commercial purpose for collecting, selling, or sharing personal information;
- The categories of third parties with whom we share personal information, if any; and
- The specific pieces of personal information we have collected about you.
Please note that we are not required to:
- Retain any personal information about you that was collected for a single one-time transaction if, in the ordinary course of business, that information about you is not retained;
- Reidentify or otherwise link any data that, in the ordinary course of business, is not maintained in a manner that would be considered personal information; or
- Provide the personal information to you more than twice in a 12-month period.
Personal Information Sold, Shared, or Used for a Business Purpose
In connection with any personal information we may sell, share, or disclose to a third party for a business purpose, you have the right to know:
- The categories of personal information about you that we sold or shared and the categories of third parties to whom the personal information was sold or shared; and
- The categories of personal information that we disclosed about you for a business purpose.
Right to Opt-Out of Sale or Sharing of Personal Information
You have the right under the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act (CPRA), and certain other privacy and data protection laws, as applicable, to opt-out of the sale or sharing of your personal information. For purposes of the CCPA/CPRA, the terms "sale" and "sharing" are defined broadly and may include the disclosure of your personal information to third parties for monetary or other valuable consideration, or for cross-context behavioral advertising. If you exercise your right to opt-out of the sale or sharing of your personal information, we will refrain from selling or sharing your personal information, unless you subsequently provide express authorization for such sale or sharing. To exercise your right to opt-out of the sale or sharing of your personal information, you may:
- Click on the “Do Not Sell or Share My Personal Information” link on our website; or
- Contact us using the contact information provided below.
Right to Limit Use and Disclosure of Sensitive Personal Information
Under the CPRA, you have the right to limit the use and disclosure of your sensitive personal information to only those purposes necessary to perform the services or provide the goods reasonably expected by an average consumer who requests such goods or services, or as otherwise permitted by law. To exercise your right to limit the use and disclosure of your sensitive personal information, you may:
- Click on the “Limit the Use of My Sensitive Personal Information” link on our website; or
- Contact us using the contact information provided below.
Right to Request Correction of Inaccurate Personal Information
You have the right, under the CCPA as amended by the CPRA, to request that we correct any inaccurate personal information that we maintain about you. Upon receiving a verifiable request from you, we will use commercially reasonable efforts to correct the inaccurate personal information in our records, and direct our service providers or contractors to do the same, as required by law.
Right to Deletion
You have the right to request the deletion of your personal information, as described in the section above. Upon receiving a verifiable request from you, we will delete your personal information from our records and direct any serviceproviders to do the same, unless an exception applies.
Please note that we may not delete your personal information if it is necessary to:
• Complete a transaction or fulfill a contract with you;
• Detect and protect against security incidents, fraud, or illegal activity;
• Debug and repair errors that affect functionality;
• Exercise or ensure the rights of free speech or comply with other legal rights;
• Comply with applicable laws, regulations, or legal obligations;
• Conduct scientific, historical, or statistical research in the public interest, as permitted by law;
• Enable internal uses aligned with your relationship with us; or
• Otherwise use your information in a lawful manner consistent with the context in which you provided it.
Protection Against Discrimination
You have the right to not be discriminated against by us because you exercised any of your rights under the CCPA. Thismeans we cannot, among other things:
• Deny goods or services to you;
• Charge different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties;
• Provide a different level or quality of goods or services to you; or
• Suggest that you will receive a different price or rate for goods or services or a different level or quality of goods or services.
Please note that we may charge a different price or rate or provide a different level or quality of goods and/or services to you, if that difference is reasonably related to the value provided to our business by your personal information.
If you would like to exercise any of these rights, please:
• Email us at support@malla.co.
• Please note that you may only make a CCPA-related data access or data portability disclosure requesttwice within a 12-month period.
• If you choose to contact us directly by email, you will need to provide us with:
• Enough information to identify you (e.g., your full name, address and customer or matter reference number);
• Proof of your identity and address (e.g., a copy of your driving license or passport and a recent utility or credit card bill); and
• A description of what right you want to exercise and the information to which your request relates.
Some actions such as remarketing or statistical analysis may be considered “sales” under some interpretations of theCCPA. You have the right to opt out of the sale of your personal information. To exercise this right, please follow the opt-out process described in the “Your Rights and Choices” section of this policy, or email us at the Contact Information provided below.
Children under age 18.
The Services are NOT intended available for use by children (under 18 years of age) and children are not authorized createaccounts or become members of the Services.
Changes to the Privacy Policy.
We may change the Privacy Policy from time to time in the future. We will post any revised version of the Privacy Policy on this page. Continued use of our Services following notice of such changes will indicate your acknowledgement of suchchanges and agreement to be bound by the terms and conditions of such changes. By using the Services, you are agreeing to our collection, use and disposal of personal information and other data as described in this Privacy Policy,both as it exists now and as it is changed from time to time.