California Privacy Statement

Effective Date: May 1, 2024

Daffodil Health (“Daffodil”, “we”, and “us”) is providing this California Privacy Statement to comply with the California Consumer Privacy Act of 2018 (“CCPA”), as amended and supplemented by the California Privacy Rights Act of 2020 (“CPRA”) and other applicable California statutes and any terms used below that are defined in a statute shall have the statutory meaning. This California Privacy Statement supplements the information contained in our Privacy Policy published on our website at and applies only if personal information you submit to us is within the scope of the CCPA, CPRA or other applicable California statute, which may be the case where we receive personal information from you, a Payer and/or Providers, in the State of California, USA. In the event of any conflict between this California Privacy Statement (if applicable) and our Privacy Policy, this California Privacy Statement shall prevail with regard to the subject matter hereof.

Categories of personal information collected

The section of our Privacy Policy entitled “INFORMATION WE COLLECT AND HOW WE USE IT” gives details about the personal information we collect/receive. The personal information that we have collected/received from you, a Payer and/or Providers, in the twelve (12) months prior to the effective date of this California Privacy Statement fall into the following categories established by the CCPA and CPRA:

Personal Information under CCPA and CPRA does not include:

If certain types of information are exempt from CCPA and CPRA, and therefore this statement, other Daffodil Privacy Policies may apply.

We generally do not collect additional categories of personal information or use the personal information we collected for significantly different or meaningfully unrelated purposes without providing you notice.

Sources of personal information

We obtain the types of personal information listed above from the following categories of sources:

Purposes for collecting personal information

We may use or disclose the personal information we collect for the purposes identified in the section of our Privacy Policy entitled “INFORMATION WE COLLECT AND HOW WE USE IT” which include one or more of the following:

Categories of personal information shared or sold

We may share or disclose the personal information that we collect for the purposes identified in the section of our Privacy Policy entitled “INFORMATION WE COLLECT AND HOW WE USE IT.” We do not sell any personal information of our customers. The personal information that we have disclosed about you, a Payer or Providers for business purposes in the twelve (12) months prior to the effective date of this California Privacy Statement fall into the following categories established by the CCPA and CPRA:

The above categories of information have been disclosed to the following categories of third parties:

Rights under the CCPA and CPRA

The CCPA and CPRA grants California residents the following rights:

Right to Know and Data Portability

You can request information about how we have collected, used, shared, sold, disclosed and otherwise processed your personal information during the past twelve (12) months, including the right to request the specific pieces of personal information that we possess.

Right of Deletion

You can request that we delete any of the personal information that we have collected from you. We may deny your deletion request pursuant to certain exceptions in the CCPA and CPRA, and the response we provide will explain any reason for denying your request.

Right of Non-Discrimination

You have the right to not receive discriminatory treatment by us for exercising any of your CCPA and CPRA rights.

Right to Opt-Out of Sale

We do not sell your personal information as provided in the CCPA and CPRA. When we render services, we will share your personal information with Payers and/or Providers which you have chosen to provide medical services to you and/or family member, or third parties and they may contact you regarding use your personal information. By receiving our services or otherwise authorizing disclosure of your information, you are opting in to such use. You can contact us using the contact points below to change your privacy preferences or to control future use and disclosure of your personal information. We do not knowingly sell the personal information of minors under sixteen (16) years of age without obtaining proper opt-in consent.

Right to Correct Inaccurate Personal Information

You can request that we correct any inaccurate personal information that we have collected from you. We may require adequate documentation to verify such inaccuracy.

Right to Limit Use and Disclosure of Sensitive Personal Information

You can request that we do not use or disclose certain sensitive personal information about you, outside of the necessary use of such information to perform the expected services.

Exercising Your Privacy Rights

To exercise your rights, please submit a verifiable consumer request to us by either: • Sending us an email at support@daffodilhealth.com, referencing “CCPA/CPRA” in the subject line, or • Writing us at Daffodil Health, ATTN: Chief Privacy Officer, 354 Rennie Ave, San Jose, CA 95127

We reserve the right to confirm your California residency to process your requests. In accordance with the CCPA and CPRA, we will need to confirm your identity to process your requests and we may require you to login to your account with us, provide information associated with your account or transactions with us, or require you to provide government identification, signed declarations and other proof of identity. You may designate an authorized agent to make a request on your behalf as provided under California law and we reserve the right to request proof of such authorization. You may also make a verifiable consumer request on behalf of your minor child. We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm that the personal information relates to you, or if you do not provide us with sufficient detail to allow us to understand and respond to your request. Our response will explain any reasons we cannot comply with a request, if applicable.

Changes to our privacy statement

We reserve the right to amend this California Privacy Statement from time to time as provided in our Privacy Policy.

Daffodil Health Logo

Curious about how to automate your Out of Network and Reference Based Pricing Processes?