SindyXR Privacy Policy

SindyXR Privacy Policy 2024

Privacy policy

Effective March 12, 2024

SindyXR (https://www.SindyXR.com) (“SindyXR”) is an online support group platform that enables its members to communicate and share their data and experiences. SindyXR is operated by SindyXR, Inc. (“SindyXR”). This Privacy Policy describes how the information collected from users of the SindyXR, including individuals who have registered to join (“Members”), may be used. The platform supports various support group modalities including communication via SindyXR Applications and Services run on personal computers, mobile devices, augmented and virtual reality platforms. 

 

This policy covers usage on any SindyXR platform including:

  • SindyXR Telehealth – Support Group Applications and Services accessed primarily via personal computers, laptops and mobile devices
  • SindyXR Virtual Reality – Support Group Applications & Services accessed via Virtual Reality platforms
  • SindyXR In Person – Support Group Services accessed in person.
We reserve the right to modify this policy at any time, and without prior notice, by posting an amended Privacy Policy on the SindyXR. We also encourage Members to review this policy periodically for any updates.

What is SindyXR.com?

SindyXR provides this SindyXR for patients who want to:

  • Attend and participate in Wellness Sessions including Wellness Circles and Wellness Webinars so they can be an active participant in their own wellness.
  • Create collective knowledge about disease, health, and treatments by sharing their health information with other members of the SindyXR online Community
  • Help others feel less alone and able to share their own experiences with conditions that affect health and wellness

Who Might View or Have Access to The Data We Collect?

If you become a Member of the SindyXR, there are four broad groups of people who might have access to your data through your interaction within SindyXR:

  • SindyXR Support Community – This refers to your fellow Members of SindyXR. You can share your situation  through the various wellness components whether you are interacting via SindyXR Telehealth, Virtual Reality or In Person.  By sharing your experiences, others can learn from it.
  • SindyXR Staff– We use the data you provide internally, both to improve our services.
  • SindyXR Health Professionals – SindyXR Support Groups are facilitated, moderated and conducted by Health Professionals.
  • SindyXR Wellness Sponsors – We also contract with various service providers in exchange for their sponsorship of SindyXR Support Group sessions.

What Kind of Information We Collect

Identifying Data

Data that is identifying or potentially identifying is treated as “Identifying Data.” This data includes:

  • SindyXR User ID
  • SindyXR password
  • Name
  • Date of Birth
  • Email address
  • Mailing address
  • IP Addresses
  • Geolocation data
  • Private Message content for Private Messages between Member

SindyXR Use Data

SindyXR uses analytics code and may use web tracking technologies such as cookies and pixel tags to understand how Members use our SindyXR and to improve products and services. Such collected data (“SindyXR Use Data”) can include the URL of the websites you visited before and after you visited our SindyXR, the type of browser you are using, your Internet Service Provider, what pages in our SindyXR you visit, what links you click on, date and time of your visit and duration, and whether you open email communications we send to you. The analytics code also collects information about you such as geolocation, age, gender, affinity categories, and interests, which can be used by SindyXR. You may be able to modify your browser settings to alter which web tracking technologies are permitted when you use the SindyXR, but this may limit your use of the SindyXR.

SindyXR Use Data is typically only used by SindyXR.


How Data is Used and Shared

There are only 3 ways Identifying Data is shared with the community. 

  • The username you created on SindyXR is used throughout the platform including Telehealth and Virtual Reality to represent you and your profile.
  • Your avatar image, whether or not it is identifying, is also used to represent you and your profile on the platform including Telehealth and Virtual Reality.
  • Any identifying information you choose to share in the various social features of the platform will be shared with everybody.

SindyXR uses Identifying Data internally, as needed, for research, for maintenance and operation of the SindyXR platform, and to create better tools and more personalized experiences for you. We take steps to protect this Identifying Data and limit access to only those who need it for their job.

 

If we have a Member's permission, their e-mail address will be used by SindyXR to send them a variety of notifications, including private message notifications, newsletters, and promotional content from SindyXR and some of our Professional Members & Sponsorship Members. They may change this setting at signup, on the profile page, or by clicking the unsubscribe link at the bottom of any email they receive from SindyXR. However, all Members receive administrative emails (e.g., password reset), which they cannot opt out of while they remain registered with the SindyXR.


How Non-Identifying Data is Used

SindyXR may periodically ask Members to complete surveys about their experiences (including questions about products and services). Survey responses (possibly in combination with data from SindyXR) are analyzed by SindyXR personnel.


How SindyXR Use Data is Used

 

We use SindyXR User Data for several purposes:

  • Authentication: We use SindyXR Use Data stored in cookies on your computer to indicate that you have logged into your SindyXR account and to enable you to use certain portions of SindyXR.

 

  • Understand Our Users: We use SindyXR User Data to analyze trends, track users' movements around the various SindyXR platform modalities including laptop, mobile and virtual reality, and gather demographic information about our user base as a whole. This provides us with the ability to determine aggregate information about our user base and usage patterns. Understanding how people use SindyXR allows us to make SindyXR better for everybody. It may also be used by our Professional Members and Sponsorship Members to improve their products and services. We may use this information, possibly in coordination with such Members, to do relevant research on user behavior or medical outcomes. We do not sell this usage data to third parties for advertising or marketing purposes.

 

  • Administer SindyXR: We use SindyXR User Data to help administer SindyXR and Members’ use of SindyXR. We may, in some circumstances, need to review this SindyXR User Data to troubleshoot and resolve issues for individual users.

 

  • Advertising: We may use cookies or SindyXR Use Data to tailor advertisements about joining SindyXR, to promote certain participation opportunities to you, or to exclude you from notifications that are not relevant to you, including when you are visiting other sites or SindyXRs.


Closing Your Account

You are free to stop using this service at any time. You can "delete" your account and data, in which case your data is permanently removed from SindyXR and cannot be recovered.

Other Special Cases

There are instances, not covered above, where your SindyXR User Data may be used and disclosed, including, but not limited to, the following:

  • SindyXR may use your data in the case of an emergency or other circumstance that we determine requires a member of the management team to directly contact the Member (for example, a data breach that put the Member’s data at risk).
  • SindyXR may share or disclose your data where required to comply with lawful requests from public authorities, including for national security or law enforcement requests, to comply with legal process, to resolve disputes, to enforce our agreements (including this Privacy Policy and the Terms of Use Agreement), or if in our reasonable discretion, use is necessary to protect our legal rights or to protect third parties.
  • SindyXR may transfer your data to any successor to its business as a result of any merger, acquisition, asset sale, bankruptcy proceeding, or similar transaction or event. Members will be made aware of any changes in the current Privacy Policy that results from such a transfer.

Other Security Issues

SindyXR cannot guarantee the identity of any Members with whom you may interact in the course of using the SindyXR or who may have access to your displayed data. Additionally, we cannot guarantee the authenticity of any data that Members may provide about themselves.

SindyXR takes commercially reasonable technical precautions to help keep Member data secure, consistent with applicable EU, UK, and US laws. We take these precautions in an effort to protect your information against security breaches. However, this is not a guarantee that such information may not be accessed, disclosed, altered, or destroyed by breach of firewalls and secure server software. By using our SindyXR, you acknowledge that you understand and agree to assume these risks.


Risks and Benefits

While our goal is to help patients improve health outcomes, there are no certain benefits to using this website. However, communicating and interacting with respect to well-being, treatments, and symptoms has been shown to be helpful in improving overall health.


There is a possibility that you may feel uncomfortable sharing information online. It is possible that you could be identified using information you elect to display on SindyXR (and/or in conjunction with other data sources). You could be discriminated against or experience repercussions as a result of the information you share. For example, it is possible that employers, insurance companies, or others may discriminate based on health information


Links to Other Websites or Apps

The SindyXR Privacy Policy does not apply to other platforms, websites or services, and we are not responsible for the privacy practices or content of any websites or services not controlled by us, nor are we responsible for such third party’s use or misuse of your personal information. If you have any concerns, we urge you to review the terms of those other websites or services for more information about their applicable policies.


California Online Privacy Protection Act Notice

On September 27, 2013, California enacted A.B. 370, amending the California Online Privacy Protection Act to require website operators like us to disclose how we respond to "Do Not Track Signals" and whether third parties collect personally identifiable information about users when they visit us.

We do not track user activity that does not occur on our site and therefore do not use "do not track" signals.

We do not authorize the collection of personally identifiable information from our users for non-SindyXR advertising purposes through advertising technologies without separate member consent.


California Civil Code Section 1798.83 also permits our members who are California residents to request certain information regarding our disclosure of Personal Data to third parties for their direct marketing purposes. To make such a request, please send an email to MemberSupport@SindyXR.com. Please note that we are only required to respond to one request per Member each year.


Governing Law and SindyXR Visitors from outside the United States

We and our servers are located in the United States and are subject to the applicable US local and national laws. These laws may not have equivalent privacy protection as those in your country of residence. When we share information about you with our various Partners, the data-sharing agreement includes data protection clauses. We also comply with the EU-US and Swiss Privacy Shield Frameworks.


Be aware that the European Court of Justice (ECJ) has determined that no data transferred to the United States can be adequately protected from the United States government and that the United States does not provide adequate judicial remedies against the United States government for invasions of Europeans’ privacy.

Those who choose to access SindyXR do so on their own initiative and understanding that their use of the SindyXR is subject to EU, UK, and US laws and regulations including the GDPR. If users choose to access or use the SindyXR, they consent to the use and disclosure of information (including GDPR "special category" data such as race, ethnicity, and data concerning health) in accordance with this Privacy Policy and subject to such laws. Transfer of data from residents of the EU/EEA/UK is done under this consent and also for the purpose of providing this service to those users, as allowed by Article 49 of the GDPR.


SindyXR, Inc. complies with the EU-US and the Swiss-US Privacy Shield Frameworks as set forth by the US Department of Commerce regarding the collection, use, and retention of personal information transferred from European Union member countries (including Iceland, Liechtenstein, and Norway), the United Kingdom, and Switzerland transferred to the United States pursuant to Privacy Shield.

Sindy XR, Inc. is subject to the regulatory and enforcement authority of the US Federal Trade Commission.

We acknowledge the right of EU, UK, and Swiss individuals to access their personal data under the Privacy Shield. Individuals wishing to exercise this right may do so by contacting MemberSupport@SindyXR.com.


We will also provide EU, UK, and Swiss individuals opt-out or opt-in choices before we share their data with third parties other than our agents, or before we use it for a purpose other than which it was originally collected or subsequently authorized. To request to limit the use and disclosure of your personal information, you may do so by contacting MemberSupport@SindyXR.com.


Pursuant to the Privacy Shield, SindyXR LLC is liable for the onward transfer of personal data to third parties unless we can prove we were not a party to the actions resulting in the damages.


In compliance with the Privacy Shield Principles, SindyXR LLC commits to resolve complaints about your privacy and our collection or use of your personal information transferred to the United States pursuant to Privacy Shield.


SindyXR has further committed to refer unresolved privacy complaints under the Privacy Shield Principles to an independent dispute resolution mechanism, the BBB EU Privacy Shield. This service is provided free of charge to you.

If your Privacy Shield complaint cannot be resolved through the above channels, under certain conditions, you may invoke binding arbitration for some residual claims not resolved by other redress mechanisms.


General Data Protection Regulation (GDPR)

All individuals have rights regarding their data. The European Union’s (EU) General Data Protection Regulations (GDPR) describes these rights in law. They include:

  • You have the right to edit or correct your data. You can edit most of your information on SindyXR.  
  • You have the right to request that your data be deleted.
  • You have the right to be notified of any breach involving your data. We will notify the appropriate data protection authority within 72 hours of detecting a breach involving your data. We will notify you as soon as possible after that.
  • You have the right to object to the processing of your data. You may decline any consent request to share your identifying data and this will have no impact on your use of the service.

In some cases, these rights might be restricted. Some examples would include where the information requested compromises the privacy of another individual or is the subject of legal proceedings or investigation. Additionally, processing that has already occurred cannot be undone. If you have questions or complaints about our handling of these rights, see the information at the end of this policy.


What are the Legal Bases for Our Collection and Use of Your Data?

GDPR sets out a number of possible bases, three of which apply to SindyXR:

  • We need to use some identifying information just to operate the service. This includes your email address, username, password, and IP address, among other items.
  • We use your data for product enhancement with your consent, as described in this Privacy Policy. We will always ask for your additional, explicit consent before sharing identifying information. This is described further, below.
  • In rare cases we may need to share your data to comply with a legal obligation. See "Other Special Cases" above.

GDPR Recourse For Individuals in the EEA

If you are a resident of the European Union or the UK and have a complaint about our use or processing of your data, you have a right to lodge a complaint with a national Data Protection Authority. The UK and each European Union member nation has established its own Data Protection Authority; you can find out about the Data Protection Authority in your country.

History of Updates/Changes to Terms and Conditions of Use:

                                                                                                                                                                                                                                                                

·                                                                                                                                                                                                                                                                On or about March 12, 2024 Privacy Policy created & posted online.