Our Commitment to Your Privacy and Data Security

Personal Information:

When you create an account, we collect basic identifying information such as your name, email address, date of birth (to confirm age 35+ eligibility), and geographic location. This data is essential for setting up your profile, communicating with you, and tailoring our services to your specific demographic needs.

Wellness Data:

As you engage with Coral Compass, we may collect data related to your platform usage, including articles read, lifestyle upgrade preferences, product interests, and community participation. If you opt to use our tracking features, we may collect aggregated, anonymized wellness metrics (e.g., activity levels, sleep patterns, dietary preferences). This data is used exclusively to provide personalized recommendations, enhance service quality, and deliver relevant content, always adhering to your specified privacy settings.

Technical Information:

To ensure optimal platform functionality and security, we collect non-identifiable technical data such as IP address, browser type, device information, and usage statistics. This helps us diagnose technical issues, analyze trends, and improve the user experience across all devices.

How We Use This Data:

The information we collect serves several purposes, all aimed at enriching your wellness journey:

• Personalization: To deliver highly relevant health blog content, lifestyle upgrade suggestions, and product recommendations tailored to your interests.
• Service Improvement: To analyze user engagement, identify popular features, and continuously refine our platform's functionality and offerings.
• Communication: To send important updates, newsletters (if opted-in), and respond to your inquiries.
• Security and Compliance: To protect our platform from fraud, ensure data integrity, and comply with all applicable legal and regulatory requirements.

Our legal basis for processing your data is primarily your consent (obtained during account creation and feature activation) and legitimate interests in providing and improving our services, as well as fulfilling legal obligations. You can manage your data collection preferences and opt-out of certain data processing activities directly within your user dashboard.

Technical Security Measures:

• End-to-End Encryption: All data transmitted to and from Coral Compass, as well as data stored on our servers, is protected using industry-standard encryption protocols (SSL/TLS for transit, AES-256 for at-rest data).
• Secure Data Storage: Our servers are hosted in secure data centers with physical access controls, environmental safeguards, and redundant power supplies.
• Firewalls & Intrusion Detection: Advanced firewalls and intrusion detection systems continuously monitor for and prevent unauthorized access attempts.

Access Controls and Training:

• Strict Access Policies: Internal access to user data is limited to authorized personnel only, on a need-to-know basis, and is strictly controlled through multi-factor authentication and role-based access.
• Employee Training: All Coral Compass employees undergo regular, mandatory training on data privacy best practices, security protocols, and HIPAA compliance requirements.

Audits and Incident Response:

• Regular Security Audits: We conduct frequent internal and third-party security audits, vulnerability assessments, and penetration testing to identify and remediate potential weaknesses.
• HIPAA Compliance: Our data handling processes are designed to meet or exceed HIPAA compliance standards, ensuring the utmost protection for your protected health information (PHI) where applicable.
• Incident Response Plan: In the unlikely event of a data breach or security incident, we have a comprehensive incident response plan in place to swiftly identify, contain, mitigate, and notify affected users in accordance with legal requirements.

As a user of Coral Compass, you have fundamental rights regarding your personal information. We are committed to facilitating the exercise of these rights transparently and efficiently.

Access Your Data:

You have the right to request a copy of the personal information we hold about you. You can typically find a summary and export options within your user dashboard, or you may submit a formal data access request to [email protected]. We will provide you with your data in a commonly used, machine-readable format.

Correct or Update Your Data:

Maintaining accurate information is vital. You can readily update most of your personal and profile data directly through your Coral Compass account settings. If you encounter any issues or wish to correct data not editable via the dashboard, please contact our support team.

Delete Your Data (Right to Erasure):

You have the right to request the deletion of your personal information and account. Upon receiving a valid deletion request, we will take all reasonable steps to erase your data from our systems, subject to certain legal obligations or legitimate operational requirements to retain minimal transactional data for a limited period.

Data Portability:

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another service provider where technically feasible. This ensures you maintain control over your wellness information.

Withdraw Consent:

Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal. Please note that withdrawing consent for certain data processing activities may impact your ability to fully utilize some features of Coral Compass.

To exercise any of these rights, please visit your account management section or contact our Data Protection Officer at [email protected]. We are committed to responding to all legitimate requests within 30 days.