Last revised January 1, 2023
Qosina Corp. ("Qosina" or "we") respects your privacy rights and recognizes the importance of protecting your personal information ("PI"). This privacy notice ("Privacy Notice") explains our PI collection, use and disclosure practices.
1. Application of this Privacy Notice
This Privacy Notice applies to PI we collect in connection with:
- The following websites operated by Qosina (the "Sites"):
- Catalogs from:
- Our newsletter
- Our interaction with customers and potential customers and others, whether online, by phone, by mail, by e-mail in person or by other means, in connection with, among other things, inquiries, product orders, product fulfillment, shipping and delivery, customer service, invoicing, payment processing, sales visits, sales calls, and trade shows
2. How we collect PI
2.1 We may collect PI you voluntarily provide to Qosina, such as by:
- Visiting one of our Sites
- Creating an account
- Placing an order for products or services via our Sites, by mail, by e-mail, over the phone or in person
- Using one of our catalogs
- Filling in contact forms on our Sites asking for your queries or suggestions
- Interacting with our customer support team
- Subscribing to our monthly newsletter (whether through a Site or otherwise)
- Participating in contests or surveys
- Applying for a job
- Otherwise participating in activities we offer that might require information about you
2.2 We may also collect PI through automated processes, such as by:
- Cookies, web pixels, web beacons or other technologies we or others place via your Internet browser
3. PI we collect
The types of PI we collect include your name, company name, shipping/mailing address, billing address, telephone number and e-mail address. TABLE 1, below, outlines the categories of PI we collect.
4. How we use PI
We may use the PI we collect as shown in TABLE 1, below. This includes:
- To perform a contract with you: For example, where you have ordered or requested products or services from us, we use your contact details and payment information to process your order and deliver the products or services to you.
- To communicate with you. For example, we may contact you to respond to your inquiry or complaint. We may also contact you directly or through a third-party service provider regarding products or services you purchased from us, such as necessary transactional or service related communications. We may also contact you with offers for additional services we think you may find valuable if you give us consent, or where allowed based upon legitimate interests. These contacts may include via e-mail, text (SMS) messages, telephone calls or automated phone calls or text messages.
- With your consent: For example, where you have provided PI to us to complete a survey or access secured content. You may withdraw your consent at any time by contacting us at [firstname.lastname@example.org or email@example.com].
- Our legitimate business interests: For example, where it is necessary for us to understand our customers, enhance and promote our goods, products and services and operate effectively as an international distributer of various products. Our legitimate business interests may include creating and publicizing new products and services, and offering our customers a better experience. We may perform analytics as necessary to provide you with a tailored experience and so that we can improve, maintain and manage our products and services in a way that meets your expectations as a customer.
- Compliance with law: For example, where we are subject to a legal obligation and need to use your PI in order to comply with that obligation.
5. PI we disclose
We do not disclose your PI to third parties, except:
- To vendors, service providers and other entities with whom we have a business relationship to provide products and services for and on behalf of us, such as processing credit card payments, communicating with you, including by way of e-mail or survey delivery, or for customer relationship management. We restrict these third parties by contract from utilizing, sharing or retaining your PI for any purpose other than for which they have been contracted.
- To our affiliates, in connection with the purposes described in this Privacy Notice.
- To comply with law, rule regulation or legal process, such as in response to a subpoena.
- For the purpose of facilitating and allowing a merger, acquisition or sale of a business or all or substantially all of our assets, in which case the acquiring company should continue to utilize your PI in the manner for which it was provided and intended.
We currently use Nodus Technologies to process credit card orders. Note that when you enter your credit card information to make a purchase, you are redirected from our Sites to a Nodus Technologies controlled website. We do not collect any credit card information, and Nodus Technologies is responsible for that transaction.
6. Safeguarding your PI
We follow generally accepted standards to safeguard the PI we collect, both during transmission and once received and stored, including encryption where appropriate. PI you submit through the Sites is encrypted with secure server software (SSL) that encodes the information before your browser software sends it to us. The SSL software decodes the data only after it reaches our server, meaning that your data will be encrypted were hackers to intercept it while in transit. Once it reaches our server, your PI will be protected by the same security software we use to safeguard our essential business data of similar nature.
7. PI Retention
We retain PI only for as long as necessary to provide the products or services you requested, and for additional periods where there are legitimate legal or business purposes, such as:
- When mandated by law, rule, regulation, contract or similar obligations applicable to our business operations
- For preserving, resolving, defending or enforcing our legal and contractual rights
- When needed to maintain adequate and accurate business and financial records
We do not knowingly collect PI from children under 18, nor do we target our Sites to such children. Please contact us if you have reason to believe we may have PI of children.
9. Third-Party Websites
The Sites may contain links to third-party websites. We are not responsible for the privacy practices of those websites. You should refer to the privacy notices of any other websites you visit for their PI practices.
10. Rights Granted by Specific U.S. Data Protection Laws
Certain data protection laws require that we disclose specific information regarding the categories of PI we collect, and may grant you rights with regard to that PI. They include:
- California Privacy Rights Act (CPRA), Cal. Civ. Code § 1798.100, et seq.; the California Online Privacy Protection Act (CalOPPA), Cal. Civ. Code §§ 22575 – 22579; and the California Shine the Light Law, Cal. Civ. Code § 1798.83, for consumers in California;
- Nevada's Act Regarding Security and Privacy of Personal Information (NSPPIA), NRS 603A.010 et seq., for consumers in Nevada;
- Virginia Consumer Data Protection Act (VCDPA), VA Code Ann. § 59.1-571, et seq., for consumers in Virginia;
- Colorado Privacy Act (CPA), Col. Rev. Stat. § 6-1-1301, et seq., for consumers in Colorado;
- Utah Consumer Privacy Act (UCPA), Utah Code Ann. § 13-61-101 to 13-61-404, for consumers in Utah; and
- Connecticut's An Act Concerning Personal Data Privacy and Online Monitoring (CPDPA), CT Senate Bill No. 6, Public Act No. 22-15, for consumers in Connecticut.
10.1 Details of PI collected
TABLE 1, below, identifies by category PI we collect, and specific information about that PI as required by these laws. We've categorized the PI based on the categories identified in the CPRA. Examples of specific types of PI within each category are shown in Table 2, below, although we may not collect all examples shown for each category.
|TABLE 1||For the laws of CA||For the laws of CA, VA, CO, UT, CT||For the laws of NV, VA, CO, UT, CT|
|Category of PI||Do we collect PI from this category?||Do we sell this PI?||Do we share this PI?||Our retention period for this PI||Purposes for which the PI is:
||Do we share this PI with third parties?||If yes, we share this PI with the following categories of third parties|
|1||Identifiers||Yes||No||No||See § 7||To respond to your request, and as set forth in § 4||Yes||See § 5|
|2||PI categories listed in the CA Customer Records statute (Cal. Civ. Code § 1798.80(e))||Yes||No||No||See § 7||To respond to your request, and as set forth in § 4||Yes||See § 5|
|3||Characteristics of protected classifications||No||N/A||N/A||N/A||N/A||N/A||N/A|
|4||Commercial information||Yes||No||No||See § 7||To respond to your request, and as set forth in § 4||Yes||See § 5|
|6||Internet or other electronic network activity information||Yes||No||No||See § 7||See § 4||Yes||See § 5|
|8||Sensory data||No||N/A||N/A||See § 7||N/A||N/A||N/A|
|9||Professional or employment-related Information||Yes||No||No||See § 7||For employment purposes||Yes||See § 5|
|10||Education information||Yes||No||No||See § 7||For employment purposes||Yes||See § 5|
|11||Inferences drawn from other Information||No||N/A||N/A||See § 7|
TABLE 2, below, provides examples of specific types of PI within each category identified in Table 1, above.
|1||Identifiers||Real name, alias, postal address, unique personal Identifier, online identifier, Internet Protocol address, email address, account name, social security number, driver's license number, passport number, or other similar identifiers.|
|2||PI categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))||A name, social media handle, signature, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information (note that some PI included in this category may overlap with other categories).|
|3||Characteristics of protected classifications under California or federal law||Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).|
|4||Commercial information||Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.|
|5||Biometric information||Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.|
|6||Internet or other electronic network activity information||Browsing history, search history, and information regarding a consumer's interaction with an Internet website, application, or advertisement.|
|7||Geolocation data||Approximate physical location.|
|8||Sensory data||Audio, electronic, visual, thermal, olfactory, or similar information.|
|9||Professional or employment-related Information||Current or past job history or performance evaluations.|
|10||Education information (not publicly available personally Identifiable information as defined In the Family Educational Rights and Privacy Act (20 U.S.C. § 1232g, 34 C.F.R. Part 99))||Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.|
|11||Inferences drawn from any of the information identified herein||A profile about a consumer reflecting the consumer's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.|
|12||Sensitive PI||(1) PI that reveals (A) a consumer's social security, driver's license, state Identification card, or passport number; (B) a consumer's account log-in, financial account, debit card, or credit card number In combination with any required security or access code, password, or credentials allowing access to an account; (C) a consumer's precise geolocation; (D) a consumer's racial or ethnic origin, religious or philosophical beliefs, or union membership; (E) the contents of a consumer's mall, email and text messages, unless the business Is the Intended recipient of the communication; (F) a consumer's genetic data; and (2)(A) the processing of biometric Information for the purpose of uniquely identifying a consumer; (B) PI collected and analyzed concerning a consumer's health; or (C) PI collected and analyzed concerning a consumer's sex life or sexual orientation. Sensitive PI that Is "publicly available" is not considered sensitive PI or PI.|
10.2.1 California Privacy Rights Act
This section pertains to California consumers, and addresses the CPRA.
10.2.1.1 Your CA Rights
As a California consumer, under the CPRA you have the right to:
- Notice of our PI collection, use and disclosure practices
- Request the—
- Categories of PI collected [in the last 12 months]
- Categories of sources from which PI is collected
- Business or commercial purpose for collecting, selling or sharing PI [in the last 12 months]
- Categories of third parties to whom PI is disclosed
- Categories of PI sold or shared, if any [in the last 12 months]
- Categories of third parties to whom PI was sold or shared [in the last 12 months]
- Categories of PI disclosed for a business purpose [in the last 12 months]
- Categories of persons to whom PI was disclosed for a business purpose [in the last 12 months]
- Specific pieces of PI collected [in the last 12 months]
- Correction of inaccurate PI
- Deletion of PI
- Opt-out (or opt-in for children under 16) to the sale or sharing of PI
- Equal service (no retaliation or discriminatory practices for exercising your CPRA rights)
- Correct inaccurate PI
- Limit use of sensitive PI to that necessary to perform the services or provide the goods reasonably expected by an average consumer
You may exercise your CPRA rights via your online account, or by e-mailing us at [firstname.lastname@example.org or email@example.com] or calling us at [631-242-3000 (Qosina) or 631-242-3270 (Qosmedix)].
10.2.1.2 Do Not Sell My Personal Information
Under the CPRA, sell means selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, In writing, or by electronic or other means, a consumer's PI by the business to a third party for monetary or other valuable consideration.
We do not sell your PI.
10.2.1.3 Do Not Share My Personal Information
Under the CPRA, share means the shoring, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, In writing, or by electronic or other means, o consumer's personal Information by the business to a third party for cross-context behavioral advertising, whether or not for monetary or other valuable consideration, including transactions between a business and o third party for cross-context behavioral advertising for the benefit of a business In which no money is exchanged.
We do not share your PI.
10.2.1.4 Limit the Use of My Sensitive Personal Information
. If we used or disclosed sensitive PI (other than as permitted by the CPRA), this sensitive PI may be used, or disclosed to a service provider or contractor, for additional, specified purposes. As a California consumer, you have the right to limit the use or disclosure of your sensitive PI.
We do not use sensitive PI.
10.2.2 California Online Privacy Protection Act (CalOPPA)
This section pertains to California consumers, and addresses the CalOPPA.
"Do Not Track" Policy. Our website does not respond to Do Not Track (DNT) signals. Some websites keep track of your browsing activities. If you are visiting such websites, you can set your preferences in your web browser to inform websites that you do not want to be tracked. You may be able to enable or disable DNT by visiting the preferences or settings page of your web browser.
10.2.3 California Privacy Rights (California's Shine the Light Law)
This section pertains to California residents, and addresses California's Shine the Light law.
Requests Regarding Direct Marketing. Under California's Shine the Light law, California residents with an established business relationship with us may request information once annually about sharing their PI with third parties for the third parties' direct marketing purposes. If you are a California resident and would like to request more information under California's Shine the Light law, you may contact us at [firstname.lastname@example.org or email@example.com].
10.3 Virginia, Colorado, Utah and Connecticut
This section pertains to consumers of Virginia, Colorado, Utah and Connecticut, as indicated below, and addresses the VCDPA, the CPA, the UCPA and the CPDPA. While those laws use the term "personal data," we use PI here synonymously.
10.3.1 Your Rights
As a Virginia consumer under the VCDPA, a Colorado consumer under the CPA, a Utah consumer under the UCPA, or a Connecticut consumer under the CPDPA, you have the right to:
- Confirm whether or not we are processing your PI, and access to your PI (in Connecticut, unless this would reveal a trade secret)
- Correct inaccurate PI
- Delete PI (in Utah, the PI you provided to us)
- Obtain a copy of PI (in Utah, the PI that you previously provided to us) in a portable format for you to transmit to another controller (in Colorado, no more than twice per calendar year, to the extent technically feasible in a readily usable format), (in Virginia, Utah and Connecticut, where the processing is carried out by automated means) (in Connecticut, provided we are not required to reveal a trade secret)
- Opt-out of (i) targeted advertising, (ii) the sale of PI (in Connecticut, except as provided in CPDPA § 6(b), which allows the controller to offer goods or services in connection with a consumer's voluntary participation in a bona fide loyalty, rewards, premium features, discounts or club card program), or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer (except in Utah)
10.3.2 Exercising Your Rights
You may exercise your VCDPA, CPA, UCPA and CPCPA rights via your online account, or by e-mailing us at [firstname.lastname@example.org or email@example.com]. If we reject your request, you may appeal that rejection by e-mailing us at [firstname.lastname@example.org or email@example.com]. In Colorado, you may contact the Colorado Attorney General if you have concerns about the result of an appeal, and in Virginia, you may contact the Virginia Attorney General to submit a complaint.
10.3.3 Sale of PI
We do not sell your PI.
10.3.4 Targeted Advertising
We do not process your PI for targeted advertising.
We do not process your PI for profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer.
This section pertains to consumers of Nevada, and addresses the NSPPIA. While the NSPPIA uses the term "covered information," we use PI here synonymously.
10.4.1 Your Rights
As a Nevada consumer under the NSPPIA, you have the right to:
- Know the categories of PI we collect through the Sites, and the categories of third parties with whom we share that PI
- Know the process, if any, to review and request changes to your PI collected through the Sites
- Know the process by which we notify consumers of material changes to this notice
- Know whether a third party may collect CI about your online activities over time and across different Internet websites or online services when you use the Sites
- Opt-out of the sale of PI
10.4.2 Exercising Your Rights
You may exercise your NSPPIA rights via your online account, or by e-mailing us at [firstname.lastname@example.org or email@example.com].
10.4.3 Sale of PI
We do not sell your PI.
11 Non-US Residents and the European Union
Residents of other countries outside the United States, such as in the European Union, may have other rights. This section pertains to those individuals.
Except where we expressly acknowledge otherwise or we are required by law, we make no assurances or representations of any kind that the Sites or the products or services we offer are suitable for use in the country in which you reside. By accessing the Sites, establishing an account or making a purchase, you consent to the processing of your PI as provided in this Privacy Notice. You may withdraw that consent by contacting us at [firstname.lastname@example.org or email@example.com].
We may process PI in the United States (which has not received an adequacy decision from the European Commission) and in other jurisdictions. You are required to provide certain PI in order to open and maintain an account, or to order products or services. Your failure to provide such PI may preclude you from establishing an account or may subject your account to termination, and prohibit you from ordering any products or services. An account may be required to make certain types of online purchases, as a guest style checkout option is not always available across all of our Sites.
If at any point you believe the PI we process about you is incorrect, you may access your account and modify it there, or otherwise request to see the PI and to have it corrected or deleted by contacting us at [firstname.lastname@example.org or email@example.com]. If you wish to object to or raise a complaint on how we have handled your PI, you may contact our Data Protection Officer who will investigate the matter. You may also be able to receive a copy of your PI or have your PI transferred by contacting us at [firstname.lastname@example.org or email@example.com].
If you are not satisfied with our response or believe we are processing your PI not in accordance with law, you may complain to the data protection authority in your jurisdiction.
The data controller for PI collected pursuant to this Privacy Notice is Qosina Corp.
Our Data Protection Officer is Director of Information Technology, who may be contacted at [firstname.lastname@example.org or email@example.com].
We and third parties may place cookies on our Sites. Cookies are small files downloaded to your computer. Cookies help us to ensure the safety and smooth functionality of our Sites (security cookies and session cookies) and to collect information about web pages you are interested in, as well as the navigation you choose through our Sites, in order to make our Sites more attractive for you (tracking cookies and advertising cookies, discussed below).
You can disable cookies or set your browser to alert you when cookies are being sent (If you'd like to learn more about cookies in general and how to manage them, visit http://www.aboutcookies.org// (please note that we are not responsible for the content of external websites). If you disable cookies, you may not be able to use all functions of our Sites. Additionally you may have the option to deactivate only tracking cookies and advertising cookies. See below for more information.
12.1 Tracking cookies
IP anonymization has been activated on our Sites. The IP addresses of Google users will be shortened. Only in exceptional cases will a complete IP address be transferred to a Google server in the United States and shortened there. On behalf of the website operator, Google will use this information for the purpose of evaluating the website for its users, in order to compile reports on website activity, and to provide other services relating to website activity and internet usage for website operators.
Users may prevent the collection of data about their use of the Sites (including their IP address) generated by the cookie, and the processing of data by Google, by downloading and installing the browser plug-in through the following link: http://tools.google.com/dlpage/gaoptout?hl=en.
12.2 Advertising cookies
Advertising cookies are used to deliver advertisements more relevant to you and your interests. We also use them to limit the number of times you see an advertisement as well as help measure the effectiveness of our digital advertising campaigns. They are placed by third party advertising networks on our behalf and with our permission. They remember that you have visited our Sites and this is shared with other organizations such as media owners. You may choose to opt out from receiving those ads by clicking the “AdChoices” icon on the ad you see. Most browsers automatically accept cookies but allow you to modify security settings so you can approve or reject cookies on a case-by-case basis.
13. Changes to Privacy Notice
We may update this Privacy Notice from time-to-time. We will indicate the last revision date at the top of this Privacy Notice. Your use of the Sites or your online account, or ordering products or services constitutes your acknowledgment of this Privacy Notice in effect at that time.
14. Contact us
You may reach us—
By mail at:
2002-Q Orville Drive North
Ronkonkoma, NY 11779
Attention: Privacy Department
By telephone at: [631-242-3000 or 631-242-3270]
By e-mail at: [firstname.lastname@example.org or email@example.com]
END OF PRIVACY NOTICE