PRIVACY POLICY

Effective: January 29, 2025

OUR PRIVACY COMMITMENT TO YOU

We Value and Respect Your Privacy.  Thyana Labs acknowledges and appreciates that you’ve decided to share important information with us. We take the stewardship of your information very seriously. To that end, we are committed to being open, clear, and fair about our data practices, protecting your Personal Information, and putting you in control of your Personal Information. Here are some things you should know: 

  • We limit the Personal Information we collect and retain. We only collect Personal Information needed to provide you with our Services and products, or with your permission. We only retain your information for the period of time necessary to fulfill the purposes for which we collected it, including delivering requested products and Services, protecting the interests of our users and other stakeholders, and for the period of time required by law.

  • We disclose your health data in limited circumstances consistent with applicable law. We do not share your health data (including data that can be used to identify physical or mental health conditions or treatment) to third parties without your permission. We do disclose your health data to our service providers for the exclusive purpose of rendering services to us, and in some cases outside of Washington, Connecticut, and Nevada, your browsing activity for purposes of targeted online advertising subject to your right to opt-out of such sharing. 

  • We provide ways for you to take charge of your Personal Information. We want to put you in the driver’s seat when it comes to your information, which is why we offer a variety of ways for you to exercise control over your Personal Information, including providing you with choices about providing us your Personal Information, exercising your account and communications preferences, and updating your profile. You may have other rights with respect to your Personal Information depending on your location and applicable law. 

  • We will continue to be transparent with you about our data practices. We know it is important that you be aware of how and why your information is collected, used, and shared by us. Our Privacy Policy is meant to help you understand our data practices. If we change our data practices, we will update our Privacy Policy and let you know via email and/or a prominent notice prior to the change becoming effective 

We encourage you to review the rest of this Privacy Policy to learn more about Function’s privacy practices and our commitments to you.

PRIVACY POLICY

This Privacy Policy governs how Thyana Labs, Inc. (“Thyana”, “we”, “our”, “us”) collects, stores, and uses your Personal Information (as defined below), as well as other data and information arising out of and/or relating to you and/or your use of our Services – which include without limitation your use of the website www.functionhealth.com (the “Site”) and any other technologies, features, websites, mobile applications, and content we offer (collectively, the “Services”).  We may also provide you with “just-in-time” disclosures, supplemental terms and/or clarifications, further options, and additional information pertaining to our collection, storage, and usage of Personal Information, and other data and information.

While Thyana Labs is not a health care provider, and is not a covered entity under HIPAA, in some cases it may be a “business associate” to covered entities under the Health Insurance Portability and Accountability Act (“HIPAA”), and as such we may have certain federal, state and contractual restrictions on how we can use your health or medical information (collectively, your “Protected Health Information” or “PHI”). With respect to any PHI that we receive from covered entities, Thyana Labs will comply with its obligations under HIPAA as a business associate. This Privacy Policy does not intend to include information about how we handle HIPAA-regulated personal health information (“PHI”) and we encourage you to review the privacy policies and notices of privacy practices of your health care provider or other covered entity with which we may partner. 

Thyana Labs may also collect, store, and use Personal Information that is linked or reasonably linkable to you and that identifies your past, present, or future health status or mental health status, as may be applicable (“Consumer Health Data”).  This Privacy Policy provides information about how we collect Consumer Health Data, how we use it, what sources it is derived from, to whom we disclose it.  Thyana Labs is active in the state of New York only.

This Privacy Policy does not apply to third-party websites, products, or services, even if they may link to our Site or our Site may link to them. We recommend you review the privacy practices of those third parties before connecting accessing third party websites and sharing any Personal Information.

Our Terms of Service, on its own page of this website, incorporate this Privacy Policy by reference in its entirety, as though therein completely stated. To keep things simple, we use the same capitalized terms as those set forth in our Terms of Service unless otherwise indicated herein. In the event of a conflict between our Privacy Policy and our Terms of Service, the latter will control.

Contents. It is important that you read and understand the entire Privacy Policy before using our Services. For ease of review, below is a table of contents that links to each section. Please note that the complete provisions and not the headings shall govern. You can click on the headings to be taken to the full explanation.

1.  Personal Information We May Collect, Use, and Disclose
We collect, use, and disclose information that may be used to uniquely identify you in various ways in accordance with applicable law. 

2.  Sources of Personal Information
We may collect Personal Information from various sources.

3.  Disclosure of Personal Information
We may share your Personal Information with certain third parties, including service providers and advertising platforms.

4.  Aggregated, Deidentified, or Anonymous Information
We may create aggregated, deidentified, or anonymous information from Personal Information by removing certain components.

5.  Cookies and Tracking Technologies
We collect information about your use of our Services through cookies and other tracking technologies.

6.  Data Security
We use reasonable and appropriate technical and organizational measures to protect your Personal Information.

7.  Data Retention
We will retain your Personal Information only for as long as is necessary for the purposes set out in this Privacy Policy.

8.  International Transfers of Your Personal Information
Your Personal Information may be transferred to the U.S. and other countries.

9.  Children's Privacy
Our Site and Services are not intended for use by children under the age of 18

10.  Your Privacy Rights
We provide additional disclosures and rights to residents of certain U.S. states.

14.  Changes to This Privacy Policy
Changes to this Privacy Policy will become effective on the date they are posted.

15.  Contact Us
You may contact us for comments or questions in various ways.

1. Personal Information We May Collect, Use, and Disclose

Personal Information” means information that identifies, relates to, describes, `is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with an identifiable individual. Personal Information includes “personal data” as that term is defined in applicable privacy laws. Personal Information does not include Publicly Available Information; lawfully obtained, truthful information that is a matter of public concern; information that has been de-identified; or aggregate consumer information. “Publicly Available Information” includes information that is made available from federal, state, or local government records; information that a business has a reasonable basis to believe is lawfully available to the general public, either through widely distributed media, or by the consumer; and information that is made available by a person to whom the consumer has disclosed the information if the consumer has not restricted the information to a specific audience.  “Self-Reported Information” refers to Personal Information that you provide directly through your interactions with us, including without limitation when you use the Site or Services (e.g. creating an account with us, completing electronic forms, uploading medical records, linking a wearable or Internet of Things device to our Services) or otherwise contact us via chat, email, phone, or text.  Personal Information collected via tracking technologies (e.g. cookies, web beacons) is not categorized as Self-Reported Information for the purposes of this Privacy Policy.

We may disclose non-Personal Information, such as aggregated user statistics, to third parties. Our use of aggregated, anonymized, and de-identified data is not subject to this privacy policy.

Category of Personal Information

Processing Purposes

Categories of Third Party Recipients (excluding our service providers and processors)

Identifiers, including

● Name

● Address

● Email address

● Phone number

● Date of birth

● Account username

● Certain social media account information including user ID

● IP address

● Unique device identifiers

● Mobile app identifiers

● Device operating system information

● Contact you and provide information

● Provide customer service

● Perform identity and age verification as required under applicable law

● Provide and maintain our Services

● Facilitate interactive features

● Internal analytics

● Market our products and Services directly to you

● Market the products and services of others directly to you

● Promotions and sweepstakes

● Internal business purposes, including general business administration

● Audit, compliance, legal, policy, procedure, and regulatory obligations

● Customer claims and fraud investigation and prevention

● Systems and data security

● Protecting the safety of our employees and others

● Targeted Advertising

● Profiling

● Any other purpose consistent with your consent and expressed preferences

● Third party advertising platforms**

** We do not provide Lab Results or any other Self-Reported Information to these recipients. The above-listed recipients only receive this category of Personal Information to the extent it is collected by online tracking technologies (e.g. cookies), which you have the option to reject.

Commercial information, including

● Information about your interests and preferences

● Same purposes as noted for “Identifiers”

● Third party advertising platforms**

** We do not provide Self-Reported Information (defined below) to these recipients. The above-listed recipients only receive this category of Personal Information to the extent it is collected by online tracking technologies (e.g. cookies), which you have the option to reject.

Financial information, including

● Bank account number

● Credit card number

● Debit card number

● Any other financial information

● Provide and maintain our Services

● Internal business purposes, including general business administration

● N/A

Internet or other electronic network activity information, including

● Browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages

● Content and information about your communications through the Services

● Information using cookies and tracking technologies

● Mobile operating system information

● Mobile internet browser type

● Diagnostic data

● Same purposes as noted for “Identifiers”

● Third party advertising platforms**

** We do not provide Lab Results or any other Self-Reported Information to these recipients. The above-listed recipients only receive this category of Personal Information to the extent it is collected by online tracking technologies (e.g. cookies), which you have the option to reject.

Geolocation Data, including

● Global Positioning System (“GPS”) data

● Locational information based upon your IP address

● Cell network data

● Locational data collected from various devices including your mobile device(s) or vehicles(s)

● Same purposes as noted for “Identifiers”

● Third party advertising platforms**

** We do not provide Lab Results or any other Self-Reported Information to these recipients. The above-listed recipients only receive this category of Personal Information to the extent it is collected by online tracking technologies (e.g. cookies), which you have the option to reject.

Professional or employment-related information

● Employer name

● Employment history

● Professional licenses or registrations

● Employment identification number

● Facilitate interactive features

● Internal analytics

● Market our products and Services directly to you

● Market the products and services of others directly to you

● For internal business purposes, including general business administration

● The applicable employer and/or professional services provider to the extent that you receive access to our Services as an employment benefit.

● Third party advertising platforms**

● ** We do not provide Lab Results or any other Self-Reported Information to these recipients. The above-listed recipients only receive this category of Personal Information to the extent it is collected by online tracking technologies (e.g. cookies), which you have the option to reject.

Audio, electronic, visual, or similar information, including

● Any original textual content, audio recordings, photos, videos, music, and other media you may share on our Services.

● Your name, voice, and/or likeness when you participate in sweepstakes, contests, promotions, and other Company programs

● Same purposes as noted for “Identifiers”

● Third party advertising platforms**

** We do not provide Lab Results or any other Self-Reported Information to these recipients. The above-listed recipients only receive this category of Personal Information to the extent it is collected by online tracking technologies (e.g. cookies), which you have the option to reject.

Characteristics of protected classifications, including:

● Age

● Date of birth or age range

● Gender or gender identity

● Marital status

● Military or veteran status

● National origin

● Criminal history or records

● Income level

● Racial or ethnic origin

● Sexual orientation

● Disability Status or necessary accommodations

● Same purposes as noted for “Identifiers”

● Third party advertising platforms**

** We do not provide Lab Results or any other Self-Reported Information to these recipients. The above-listed recipients only receive this category of Personal Information to the extent it is collected by online tracking technologies (e.g. cookies), which you have the option to reject.

Sensitive Personal Information or sensitive data, including:

● Account log-in information

● Mental or physical health condition or diagnosis

● Personal Information collected and analyzed concerning health

● Consumer Health Data

(Residents of Connecticut, Nevada, and Washington should see our Consumer Health Data Privacy Policy for further terms and conditions applicable to Consumer Health Data.)

● Same purposes as noted for “Identifiers”

● Third party advertising platforms**

** We do not provide Lab Results or any other Self-Reported Information to these recipients. The above-listed recipients only receive this category of Personal Information to the extent it is collected by online tracking technologies (e.g. cookies), which you have the option to reject.

Inferences about you using any of the above

● Any of the above purposes

● Third party advertising platforms**

● ** We do not provide Lab Results or any other Self-Reported Information to these recipients. The above-listed recipients only receive this category of Personal Information to the extent it is collected by online tracking technologies (e.g. cookies), which you have the option to reject.

Please note that because of the overlapping nature of certain of the categories of Personal Information identified above, which are required by state law, some of the Personal Information we collect may be reasonably classified under multiple categories.

2. Sources of Personal Information

We may collect Personal Information about you from the following categories of sources:  

  • Directly from you through Self-Reported Information, i.e. directly from you through your interactions with us, including without limitation when you use the Site or Services (e.g. creating an account with us, completing electronic forms, uploading medical records, linking a wearable device to our Services) or otherwise contact us via chat, email, phone, or text (i.e. “Self-Reported Information”).

  • Through cookies and other tracking technologies, as discussed in more detail in Cookies and Other Tracking Technologies (Section 5 of this Policy). 

  • From third party healthcare service providers, laboratory service providers, and other providers of medical and medical-adjacent services (our “Lab and Provider Partners”), with your permission and in accordance with applicable law and the context in which you provided the data.  

  • From other third parties, including our third party service providers, business and marketing partners, affiliates, analytics providers, ad network providers, ad agencies, and advertisers. 

  • From government agencies or public records.

  • From social media and other content platforms, such as Google and Meta, if you access our Services through a third-party connection or log-in or interact with us on these platforms use the Site or Services. 

3.  Disclosure of Personal Information

We may disclose Personal Information that we collect, or you provide to the following:

  • Our affiliates. We may share Personal Information among our affiliates to provide our Services, and for internal administrative purposes. 

  • Our service providers. We share Personal Information with our service providers to provide services on our behalf, such as payment processing, analytics, advertising, hosting, marketing, customer and technical support, and other services. These third parties have access to your Personal Information only to perform these tasks on our behalf and are obligated not to disclose or use the information for any other purpose.

  • Our Lab and Provider Partners. We have engaged with various third-party Lab and Provider Partners in connection with various facets of our Services. Such partnership may involve receiving and sharing Personal Information, including without limitation Consumer Health Data, with your permission in accordance with applicable law and the context in which you provided the data. 

  • Third party platform advertisers. While we will not disclose your Self-Reported Information without your express, affirmative consent, we may share information gathered through tracking technologies like cookies and web beacons with third-party platform providers who assist us in serving advertising to others who may be interested. We also partner with third parties who use cookies to serve interest-based advertising and content on their respective third-party platforms that may be based on your preferences, location, and/or interests.  As noted elsewhere, our websites implement measures to help ensure that we do not share tracking information in this manner for individuals accessing our Services from Connecticut, Nevada, or Washington

  • Third parties related to compliance and harm prevention. Under certain circumstances, we may be required to disclose your Personal Information if required to do so by law or in response to valid requests by public authorities, and/or in response to a threat of harm involving an individual’s health and/or safety.

  • Third parties related to a change of ownership. If we or our subsidiaries are involved in a merger, acquisition, asset sale, or other corporate combination, your Personal Information – including without limitation your Lab Results and any and all other Self-Reported Information – may be transferred to the acquiring or surviving entity; provided, your text messaging originator opt-in and consent data and information will not be shared with any third parties under any circumstances.

  • At your request, other persons or entities that are relevant to your care.  At your request, we may also share Personal Information, such as your Lab Results (as defined in our Terms of Service), with your general practitioner, your specialist, or your provider’s health system. 

We do not disclose your Lab Results or any other Self-Reported Information without your express, affirmative consent

4. Aggregated, Deidentified, or Anonymous Information

We may create aggregated, de-identified, or anonymous information from Personal Information by removing certain data components (such as your name, email address, or linkable tracking ID) that makes the data identifiable, or through aggregation, obfuscation or other means.  For example, we may de-identify any information and data provided and/or generated in connection with your use of our Services (including without limitation your Lab Results and other Personal Information), in compliance with applicable law. Subject to applicable law, our use of such aggregated, de-identified, or anonymized information is not Personal Information or subject to this Privacy Policy.

5. Cookies and Other Tracking Technologies

We use cookies and similar tracking technologies and analytics services to track activity on and gauge the effectiveness of the Site and Services.

1.  Cookies

Cookies are files with a small amount of data which may include unique identifier. Cookies are sent to your browser from a website and stored on your device. Other tracking technologies we may use include web beacons to track information and analyze the Services.  Beacons (also known as pixel tags, clear GIFs) are small objects that are embedded in an image on a website; they can transmit information directly to Function, or to another person or entity of our designation.  For the purposes of this Privacy Policy, cookies, beacons, and other such tracking technologies shall, collectively, be embraced by the term “Cookies.”

You can instruct your browser to refuse all Cookies or to indicate when a Cookie is being sent. However, if you do not accept Cookies, you may not be able to use some portions of our Service.

Examples of Cookies we use: 

  • Strictly Necessary. We may use Cookies that we consider are strictly necessary to allow you to use and access our website, including Cookies required to prevent fraudulent activity, improve security or allow you to make use of shopping cart functionality.

  • Performance. We may use Cookies that are useful in order to assess the performance of our website, including as part of our analytic practices or otherwise to improve the content, products or Services offered through our website.

  • Functionality. We may use Cookies that are required to offer you enhanced functionality when accessing our website, including identifying you when you sign in to our website or keeping track of your specified preferences, including in terms of the presentation of content on our website.

  • Advertising. We may use Cookies to deliver content, including ads, relevant to your interests on our website and third party sites based on how you interact with advertisements or content.

2.  Analytics

We may use Google Analytics or other service providers for analytics services. These analytics services may use Cookies and other tracking technologies to help us analyze how users use the Services. Information generated by these services (e.g., your IP address and other usage information) may be transmitted to and stored by Google Analytics and other service providers on servers in the U.S. (or elsewhere) and these service providers may use this information for purposes such as evaluating your use of the Service, compiling statistic reports on the Service’s activity, and providing other services relating to Service activity and other Internet usage. You may exercise choices regarding the use of Cookies from Google Analytics by going to https://tools.google.com/dlpage/gaoptout or downloading the Google Analytics Opt-out Browser Add-on. 

**Although Thyana Labs generally uses Cookies as described above, our websites implement measures to help ensure that we do not use Cookies for individuals accessing our Services from Connecticut, Nevada, or Washington.

3.  Third-Party Ad Networks. 

Certain companies may participate in the Digital Advertising Alliance ("DAA") AdChoices Program and may display an Advertising Option Icon for Interest-based Ads that links to an opt-out tool which allows you to exercise certain choices regarding targeting. You can learn more about the DAA AdChoices Program at http://www.youradchoices.com/ and its opt-out program for mobile apps at http://www.aboutads.info/appchoices

In addition, certain advertising networks and exchanges may participate in the Network Advertising Initiative (“NAI”). NAI has developed a tool that allows consumers to opt out of certain Interest-based Ads delivered by NAI members' ad networks. To learn more about opting out of such targeted advertising or to use the NAI tool, see http://www.networkadvertising.org/choices/. Please be aware that, even if you are able to opt out of certain kinds of Interest-based Ads, you will continue to receive non-targeted ads. Opting out of one or more NAI or DAA members only means that those selected members should no longer under the DAA / NAI rules deliver certain targeted ads to you. This will affect this and other services, but does not mean you will no longer receive any targeted content and/or ads (e.g., from other ad networks). If your browsers are configured to reject Cookies when you visit this opt-out page, or you subsequently erase your Cookies, use a different device or web browser(s), or use a non-browser-based method of access (e.g., mobile app), your NAI / DAA browser-based opt-out may not, or may no longer, be effective. Mobile device opt-outs will not affect browser-based Interest-based Ads even on the same device, and you must opt-out separately for each device. We are not responsible for the effectiveness of, or compliance with, any third-parties’ opt-out options or programs or the accuracy of their statements regarding their programs.

6. Data Security

The security of your data is important to us, but remember that no method of transmission over the Internet or method of electronic storage is completely secure. Thyana Labs uses certain safeguards to reasonably protect the security and integrity of your Personal Information.  In order to enhance the protection of your Personal Information, Thyana Labs will collect Personal Information via a secure processing server (SSL-protected, with a valid SSL-certificate or other commercially reasonable encryption technology) and/or a third-party payment provider with appropriate security and confidentiality procedures.  If you transact with us via direct payment gateway, your financial information (as defined in Personal Information We May Collect, Use, and Disclose) will be encrypted through Payment Card Industry Data Security Standard (PCI-DSS). While we strive to use commercially reasonable security procedures and practices appropriate to the nature of the Personal Information, we cannot guarantee its absolute security.

7. Data Retention

We will retain your Personal Information only for as long as is necessary to provide you with Services, to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies. We will also retain certain Personal Information for internal analysis purposes. This information is generally retained for a shorter period, except when this data is used to strengthen the security or to improve the functionality of our Services, or we are legally obligated to retain this data for longer time periods. Our determination of precise retention periods will be based on (i) the length of time we have an ongoing relationship with you; (ii) whether there is a legal obligation to which we are subject; and (iii) whether retention is advisable in light of our legal position, including regard to applicable statutes of limitations, litigation or regulatory investigations.

8. International Transfers of Your Personal Information

Your information, including Personal Information, may be transferred to – and maintained on – computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction. If you are located outside of the United States and choose to provide information to us, please note that we transfer the data, including Personal Information, to the United States and process it there. For such transfers, we take the necessary measures to ensure that your Personal Information receives an adequate level of protection.

We will take all the steps reasonably necessary to ensure that your Personal Information is treated securely and in accordance with this Privacy Policy and no transfer of your Personal Information will take place to an organization or a country unless there are adequate controls in place including the security of your data and other Personal Information.

9. Children’s Privacy 

Function’s Services are not intended for children under the age of eighteen (18) years and we do not knowingly collect information from such persons. We do not knowingly collect Personal Information from children under 18. If you become aware that a child has provided us with Personal Information, please contact us at cristina@thyanalabs.com, with the subject line “Minor Access”. If we become aware that we have collected Personal Information from children without verification of parental consent, we take steps to remove that information from our servers.

10. Your Privacy Rights  

You may have certain rights and choices regarding our collection, use, and disclosure of your Personal Information, based on your location or place of residency. 

a. Opting out of promotional electronic communications from us. We may use your Personal Information to send you updates regarding existing products and Services, information about new products and Services, upcoming events, surveys, and other announcements and inquiries. Please note that Thyana Labs may send you marketing and advertising messages on behalf a third party (including subject to a paid arrangement); provided, under such a circumstance, Thyana Labs will not disclose your Personal Information to said third party. If you no longer wish to receive promotional email communications from us, you may opt out via the unsubscribe link included in such emails or communicate your opt-out request using the information below. We will comply with your request as soon as reasonably practicable. Please note that if you opt out of receiving promotional emails from us, we may still send you important administrative messages that are required in order to provide you with the Service or for other reasons disclosed in this Policy.

b. Additional rights available in certain states and jurisdictions. Certain U.S. jurisdictions provide residents with certain rights with respect to their Personal Information or “personal data” as defined under applicable law. These rights are subject to the specific laws of that jurisdiction and that certain other rights might apply. Please review our California Privacy NoticeNevada Privacy NoticeColorado, Connecticut, Utah, and Virginia Privacy Notice; and Consumer Health Data Privacy Policy for more information on rights and terms specific to your location or place of residence.

c. Exercising your privacy rights.  Please use the following information to exercise your rights. Please note that any request you submit to us is subject to an identification and residency verification process as permitted under applicable law, as well as certain other procedural requirements that may be noted in the sections below. Additionally, all requests are subject to certain exceptions under applicable law, which may vary. If you are a visually-impaired customer, a customer who has another disability or a customer who seeks support in other language, you may access your privacy rights by emailing us at cristina@thyanalabs.com.

We do not charge a fee to process or respond to your verifiable consumer request unless its excessive, repetitive, manifestly unfounded, or in accordance with applicable law.  If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request. 

Depending on applicable law, you may be limited in how many verifiable or authenticated consumer request you make within a twelve (12) month period. If we have inadvertently collected information on your minor child, you may exercise the above rights on behalf of your minor child. Additionally, in some jurisdictions, you may designate an authorized agent to submit a request on your behalf, and if so, we may require proof of the agent’s authorization by you and/or verification of the agent’s own identity. Generally, a rights request must include:

  • Sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information or an authorized representative, which must include, at a minimum, your first and last name and email address.

  • Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to the request.

We cannot respond to your request or provide you with Personal Information if we cannot verify or authenticate your identity or authority to make the request and confirm that the Personal Information relates to you. We will only use Personal Information provided in a verifiable or authenticated consumer request to verify your (or your authorized agent’s as applicable) identity or authority to make the request.

You are not required to create an account with us to submit a verifiable or authenticated consumer request. However, we do consider requests made through your password protected account sufficiently verified when the request relates to Personal Information associated with that specific account. If you have an account with us, we will deliver our written response to that account.  If you do not have an account with us, we will deliver our written response by mail or electronically, at your option.

We will confirm receipt of your request within ten (10) business days. If you do not receive confirmation within the 10-day timeframe, please contact cristina@thyanalabs.com. Except where otherwise noted, we will respond to your request within forty-five (45) days after receipt and we reserve the right to extend the response time by an additional forty-five (45) days when reasonably necessary and provided consumer notification of the extension is made within the first forty-five (45) days. As described below, in some jurisdictions, an authorized agent may submit a request to exercise your rights on your behalf.

How to submit a request. To exercise any of the rights described in this Privacy Policy, please send your request(s) using one of the following methods:

  • Emailing us at cristina@thyanalabs.com

  • Visiting the contact page at our Site at https://www.thyanalabs.com

  • Calling us at 929 920 1922

  • Personal Information collected and analyzed concerning your health

14. Changes to This Privacy Policy 

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. We will let you know via email and/or a prominent notice on our Site, prior to the change becoming effective and update the “Effective Date” at the top of this Privacy Policy. We recommend reviewing this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

15. Contact Us 

Please contact cristina@thyanalabs.com if you have any questions about this Privacy Policy, or if anything in here does not make sense or seem right to you. We are always open to feedback around our privacy policies and practices. Because email communications are not always secure, please do not include any sensitive information in your email to us.