Olistica Life Sciences Group
Privacy Policy
Effective Date:  January 14th, 2022

‍
Olistica Life Science Group (“Olistica”, “we”, “us” or “our”) is a leader in scientific discovery, R&D, nutraceutical and pharmaceutical IP development, and clinical research with an emphasis on natural therapeutics. This Privacy Policy will help you understand how Olistica collects and/or uses any personal information that users (“you” or “your”) provide when you visit or use our website, www.olisticagroup.com (our “Website”). It also describes the choices available to you regarding our use of your personal information and how you can access and update this information.
This policy applies only to information we collect on our Website or in connection with our Website. This policy DOES NOT apply to information that is collected by:

•  Us offline or through any other means, including on any other website or mobile applications operated by Olistica or any third party (including our affiliates and subsidiaries); or
•  Any third party (including our affiliates and subsidiaries), including through any application or content(including advertising) that may link to or be accessible from or on our Website.

‍

These third parties, may have their own privacy policies, which we encourage you to read before providing information to or through them.
By using our Website, you are consenting to this Privacy Policy. We encourage you to carefully review this Privacy Policy prior to using our Website. Olistica may update this Privacy Policy from time to time. The date at the top of this policy indicates when it was last updated. If we make material changes to this Privacy Policy, we will give you notice by posting a prominent notice on our Website. We encourage you to review this Privacy Policy periodically and to review any revisions to the policy. Upon our posting of such a notice on our Website, you will be bound to the revised version of the Privacy Policy. If you do not agree with our policies and practices, your choice is not to use our Website.

‍

Our Policy on Age
Our Website does not target and we do not knowingly collect personal information from any child under the age of 13. If we learn we have collected or received personal information from a child under 13 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 13, please contact us at info@olisticagroup.com.
It is your obligation to use our Website and the information regarding our products and solutions responsibly. Some jurisdictions may impose restriction on the legal age of persons who may purchase or use certain products such as those that we may display on our Website. Olistica takes no responsibility for use of its Website or its products or solutions by anyone under the legal age permitted in your jurisdiction.

‍
California residents under 16 years of age may have additional rights regarding the collection and sale of their personal information. Please see the section “Your California Privacy Rights” for more information.

‍

What Information Do We Collect?
When you access our Website, we may collect the following types of information:

• Information You Provide Us Voluntarily: When you visit our Website, we may ask that you provide the following:
        o      Information by which you may be personally identified:
                   -      Your first and last name, phone number, employment information, and email address, if you sign up for our newsletter or submit information to us through any of the other forms available on our Website, and
                   -      records and copies of your correspondence (including email address or other contact information), if you contact us.
        o      Information about the company or organization you work for, order inquiry information (type of order, quantity, and time frame for the order), and any personal message you provide if you choose to provide such information through one of the forms available on our Website.
        o      Your search queries on the Website.

‍
To protect your privacy and security, we do not ask for further personal information and recommend that you do not provide any personally identifiable information in any of the fields while registering for the newsletter or filling out the fields of any of the forms on our Website, or while otherwise utilizing the Website.

• Automatic Information Collection: As you navigate through and interact with our Website, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns, including:
        o      Device Information: We collect information about the computer or mobile device you use to access our Website, including the hardware model, operating system and version, your internet connection, including your IP address, and the web browser you use.
        o      Usage Information: We use various technologies, including third-party cookies, to collect additional information about your use of our Website, including the websites you visit before and after visiting our Website, which Website pages you view, which Website features you use and how often, how much time you spend on Website pages or functionalities, and which links on the Website you have clicked on. We may also use these technologies to collect additional information about your interactions with our marketing emails including open rates, which users open the emails, click rates, and which links are clicked. We collect this information to understand how the Website is working and how to improve it for you. Cookies are small data files placed on your web browser which enable us to collect this information. You can disable cookies to prevent the collection of the above usage information by changing a setting in your web browser. Please note, however, that without cookies aspects of the Website may not function properly.

‍

If you do not want us to collect this information do not access or use our Website.

• Third Party Collection Information: When you visit our Website, certain third parties may use automatic information collection technologies to collect information about you or your device. These third parties may include:
        o      Advertisers, ad networks, and ad servers;
        o      Analytics companies;
        o      Your internet provider;
        o      Your mobile device manufacturer;
        o      Your mobile device provider.

‍

These third parties may use tracking technologies to collect information about you when you use our Website. The information they collect may be associated with your personal information or they may collect information, including personal information, about your online activities over time and across different websites, apps, and other online services. They may use this information to provide you with interest-based (behavioral) advertising or other targeted content.

‍
We do not control these third parties' tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly.

‍
The categories of personal information collected by Olistica from its Website users within the last twelve (12) months are set out in Exhibit A attached to this Privacy Policy.

‍

How Do We Use the Information We Collect?‍

As set out in particular in Exhibit A, attached to this Privacy Policy, we may use or disclose the information we collect in following ways:

• To fulfill or meet the reason you provided the information. For example, if you share your name and contact information to ask a question about our products or services, we will use that personal information to respond to your inquiry;
• To analyze and track data and usage in order to better understand the activity of our users and effectiveness of our Website and communications;
• To contact you (whether directly or through an affiliate, subsidiary, or third-party service provider) with information or updates about Olistica and/or its subsidiaries or with marketing materials (if you provide an email address or other contact information through one of the forms on our Website);
• To provide, maintain, and improve the Website, our products and solutions;
• To respond to your inquiries, requests for information or customer support;
• To protect our community by investigating possible violations of, and to enforce, our contracts, including our Terms of Use and any terms and conditions associated with our Website;
• To comply with our legal and/or regulatory obligations; and/or
• If applicable, as described to you when collecting your personal information or as otherwise set forth in the California Consumer Privacy Act of 2018 (CCPA) (see section “Your California Privacy Rights”).

‍

Olistica will not collect additional categories of personal information or use the personal information we have collected for materially different, unrelated, or incompatible purposes without providing you notice.

‍

Do We Share the Information We Collect?

Olistica does not sell any of your information to any third party for any purpose, including for advertising or marketing, nor has Olistica sold personal information to a third-party in the preceding twelve (12) months. We do not accept advertising on our Website. Olistica also does not share your information with third parties except for performing a business purpose, including those described in the preceding section, in the following limited circumstances:

• With our current or future parent companies, affiliates, subsidiaries and with other companies under common control or ownership with us;
• To comply with our other legal obligations;
• With service providers who perform certain functions or services on our behalf such as hosting our Website or providing us analytics using the data we provide. These third-party service providers may include Mailchimp, Google Analytics, Odoo, and Webflow;
• In connection with corporate transactions now or in the future (e.g., a sale, assignment, merger, bankruptcy, consolidation, reorganization, liquidation, or other transfer of Olistica or its assets); and/or
• For any other purpose disclosed by us when you provide the information;

‍
In the preceding twelve (12) months, Olistica has disclosed for a business purpose only such categories of personal information as set out in Exhibit A attached to this Privacy Policy.

‍

How Can I Manage and Remove My Personal Information?
If you shared your name, email address, or other personal information on our Website, you may contact us at info@olisticagroup.com to have your records deleted from our distribution lists. We will try our best to respond to your request within 45 days. Upon processing your request, we will no longer send you any marketing materials. We will retain and use your information after deletion only as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. Olistica cannot guarantee that any information that remains in backup or archived media retained by our third-party service providers will be deleted in its entirety.

‍

Can I Opt-Out of Providing My Information?
You are not obligated to provide your name, email address, or any other personal information to access our Website but only if you wish to provide such information through one of the forms available on our Website. You can disable further information collection by cookies on our Website by changing a setting in your web browser.

‍

Third-Party Websites and Applications
Olistica may provide links to other websites, applications, or other platforms operated by third parties, including Olistica’s subsidiaries and affiliaties, for your convenience and information. All of these websites, applications, and platforms operate independently from us, and we do not control their privacy practices. We encourage you to review the privacy policies of any third-party websites, applications, or platforms that you use to better understand their privacy practices.

‍
Information Security
Olistica takes care to protect the integrity and security of the information we collect. We work hard to maintain a range of security safeguards designed to protect against unauthorized access to your information. We are unable, however, to guarantee the security of your information.

‍

Information Collected from Users
Outside the United States
If you utilize the Website from outside the United States and provide us with personal information, please note that your personal information collected by us will be transferred, stored and processed in the United States. The laws of the United States applicable to the storage and use of personal information may be less protective than the law of your jurisdiction. By accessing our Website or providing your information through one of the forms on our Website, you are voluntarily transferring your personal information to our facilities located in the United States and other facility locations.

‍

Your California Privacy Rights
This section applies solely to natural persons using our Website who are California residents, as defined in Section 17014 of Title 18 of the California Code of Regulations, as that section read on September 1, 2017 (“consumers” or “you”). Any terms defined in the California Consumer Privacy Act of 2018 (CCPA) have the same meaning when used in this section of the Privacy Policy.
The CCPA provides you with specific rights regarding your personal information. This section describes your CCPA rights and explains how to exercise those rights.

‍
Access to Specific Information and Data Portability Rights. You have the right to request us to disclose certain information to you about our collection and use of your personal information over the past 12 months. Once we receive and confirm your or your authorized agent’s verifiable consumer request, we will disclose to you or your authorized agent:

• The categories of personal information we collected about you;
• The categories of sources for the personal information we collected about you;
• Our business or commercial purpose for collecting or selling that personal information;
• The categories of third parties with whom we share that personal information;
• The specific pieces of personal information we collected about you (also called a data portability request);
•  If we sold or disclosed your personal information for a business purpose, two separate lists disclosing:
• sales, identifying the personal information categories that each category of recipient purchased and for each category identified, the categories of third parties to whom we sold that particular category; and
• disclosures for a business purpose, identifying the personal information categories that each category of recipient obtained and for each category identified, the categories of third parties to whom we disclosed that particular category.
  

‍
Deletion Request Rights. You have the right to request Olistica to delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and verify a request from you or your authorized agent, we will delete (and direct our service providers to delete) your personal information from our, and their records, unless an exception applies.
We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:

• Complete the transaction for which we collected the personal information, fulfill the terms of a written warranty, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you;
• Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities;
• Debug products to identify and repair errors that impair existing intended functionality;
• Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law;
• Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.);
• Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if you previously provided informed consent;
• Enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us;
• Comply with a legal obligation;
• Make other internal lawful uses of that information compatible with the context in which you provided it;

‍

Exercising Access, Data Portability, and Deletion Rights. To exercise the access, data portability, and deletion rights described above, you or your authorized agent must submit a verifiable consumer request to us using one of the methods noted under the “How to Contact Us” section.
Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child.

‍
You may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative; and
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

‍

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you.
Making a verifiable consumer request does not require you to sign up for our newsletter, fill out any form on our Website, or otherwise register with us.
We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.
Response Timing and Format. We endeavor to respond to a verifiable consumer request within 45 days of its receipt. If we require more time (up to 45 days), we will inform you of the reason and extension period in writing.

‍

Any disclosures we provide will only cover the 12-month period preceding the date of your verifiable request. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will provide your personal information in the manner you choose at the time of submitting the request.
We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

‍
Non-Discrimination.  We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:

• Deny you goods or services;
• Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties;
• Provide you a different level or quality of goods or services;
• Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services;

‍

How to Contact Us
If you have any questions or comments about this Privacy Policy, or if you would like us to update information we have about you, please contact us by:

Email:
info@olisticagroup.com

‍
Mailing Address:
730 17th St., Suite 450
Denver, CO 80202

‍
 
EXHIBIT A

DETAILS OF COLLECTION, SOURCES, USE AND DISCLOSURE
OF PERSONAL INFORMATION

‍

‍

The following are not considered personal information under the CCPA:‍

• Information that is publicly available from government records.
• De-identified or aggregated consumer information.
• Information excluded from the CCPA’s scope, like personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FRCA) or the California Financial Information Privacy Act (FIPA).