Data Protection

Scope and Data Controller

This Data Protection Notice explains how GO-OTE (go-ote.com) collects, uses, discloses, and safeguards personal information in compliance with applicable United States laws (including, where applicable, state privacy laws such as the California Consumer Privacy Act as amended by the CPRA) and, where relevant, the EU/UK General Data Protection Regulation (GDPR) for users located in the EEA or UK.

Controller: Rene Greene, 3902 13th Ave S, Fargo, ND 58103, United States. Contact: [email protected].

Definitions

“Personal information” or “personal data” means information that identifies, relates to, describes, can be reasonably associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household. “Processing” means any operation performed on personal data. “Sale” and “Share” have the meanings assigned by applicable U.S. state privacy laws.

Categories of Personal Information We Collect

Identifiers: name, email address, account username, IP address, device identifiers.
Account and Commercial Information: saved lists, favorites, comparisons, reviews, browsing of disease overviews and drug pages, interaction history, purchase intent signals, and (if applicable) transaction records with payment providers.
Internet/Network Activity: pages viewed, links clicked, referral URLs, timestamps, session duration, cookie and SDK data, approximate location inferred from IP.
Inferences: preferences and segments derived from site activity (e.g., interest in certain drug classes).
Geolocation: approximate city/region derived from IP; we do not collect precise geolocation.
Sensitive Data: we do not request or intend to collect protected health information (PHI). We do not knowingly collect precise health diagnoses; however, viewing disease or medication pages may suggest health-related interests.

Sources of Personal Information

Directly from you when you create an account, submit reviews, contact support, or configure preferences.
Automatically from your device via cookies, pixels, local storage, SDKs, and server logs.
From service providers and partners, such as analytics providers, cloud hosting, fraud prevention, ad/affiliate networks, and payment processors (if used).

Purposes of Processing and Legal Bases

We process personal information for the following purposes:

Service Delivery: to operate the site, enable comparisons, save preferences, and provide requested features. GDPR legal bases: Contract (Art. 6(1)(b)) and Legitimate Interests (Art. 6(1)(f)).
Communications: to respond to inquiries, send administrative messages, and provide updates. Legal bases: Contract, Legitimate Interests, and Consent where required (Art. 6(1)(a)).
Analytics and Improvement: to measure performance, debug, secure, and improve the site. Legal basis: Legitimate Interests.
Personalization and Marketing: to tailor content and, where allowed, to provide advertising or affiliate offers. Legal bases: Consent (where required) or Legitimate Interests.
Compliance and Protection: to comply with legal obligations, enforce terms, prevent fraud and misuse. Legal bases: Legal Obligation (Art. 6(1)(c)) and Legitimate Interests.

Our Role Regarding Health Information

GO-OTE provides educational content and comparisons and does not provide medical advice. We are not a covered entity or business associate under HIPAA, and we do not seek to collect PHI. Do not submit medical records or details that identify your health conditions. If you choose to share such information, you do so voluntarily and understand it will be processed as personal information under this Notice.

Processing of Sensitive Personal Information

We do not use or disclose sensitive personal information for purposes other than those permitted by applicable law (e.g., providing services, security, debugging, short-term transient use). We do not intentionally collect precise health diagnoses or precise geolocation.

Targeted Advertising, Sale, and Sharing

We may engage in online advertising and affiliate marketing. We do not sell personal information for monetary consideration. Some U.S. state laws may consider certain advertising, analytics, or affiliate disclosures to be a “sale” or “share.” You may opt out of sale/share and targeted advertising as described in “How to Exercise Your Rights.” We do not sell or share the personal information of consumers we know are under 16.

Cookies and Similar Technologies

We use necessary cookies to deliver core functionality and may use analytics and advertising cookies or SDKs for measurement and personalization. Where required, we will obtain consent for non-essential cookies. You may manage preferences through your browser or device settings. Disabling certain cookies may affect site functionality.

Disclosures to Third Parties

Service Providers/Processors: cloud hosting, security, analytics, customer support, and email delivery providers processing data under instructions and subject to confidentiality.
Advertising and Affiliate Partners: to measure performance and attribute referrals; such disclosures may be considered a sale/share under some state laws.
Payment and Fraud Prevention Partners: if purchases or subscriptions are offered.
Legal and Compliance: to comply with law, enforce terms, or protect rights, safety, and property.
Business Transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to continuity of protections.

Data Retention

We retain personal information for as long as necessary to fulfill the purposes described, including providing the service, complying with legal obligations, resolving disputes, and enforcing agreements, after which we delete or de-identify data. Typical retention periods range from the life of the account to up to 3 years for analytics logs and up to 7 years for records needed for legal, tax, or compliance purposes.

Data Security

We implement administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, least-privilege principles, and monitoring. No system is fully secure; users should maintain strong, unique passwords and safeguard their devices.

Your Rights (United States)

Depending on your state of residence (e.g., CA, CO, CT, UT, VA, OR, TX), you may have the right to:

Know/Access: request the categories and specific pieces of personal information we collected and disclosed.
Delete: request deletion of personal information, subject to exceptions.
Correct: request correction of inaccurate personal information.
Opt Out: opt out of sale/share of personal information and targeted advertising.
Limit Use of Sensitive Personal Information: where applicable, restrict certain uses.
Portability: receive certain personal information in a portable format.
Appeal: appeal a denial of your request (where required by law).
Non-Discrimination: exercise rights without receiving discriminatory treatment.

Your Rights (EU/EEA/UK under GDPR)

Access, Rectification, and Erasure.
Restriction and Objection (including to processing based on legitimate interests and to direct marketing).
Data Portability.
Withdraw Consent at any time where processing is based on consent.
Complaint to a supervisory authority in your habitual residence, place of work, or place of the alleged infringement.

Global Privacy Control and Do Not Track

If your browser sends a recognized opt-out preference signal (e.g., Global Privacy Control), we will treat it as a request to opt out of sale/share for that browser or device, to the extent required by law. We do not currently respond to Do Not Track signals.

Children’s Privacy

The service is not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us to request deletion.

International Data Transfers

If you are located outside the United States, your personal data may be transferred to and processed in the United States and other countries with different data protection laws. Where required, we implement appropriate safeguards, such as standard contractual clauses, for such transfers.

Automated Decision-Making and Profiling

We do not use automated decision-making that produces legal or similarly significant effects about you. We may use limited profiling to personalize content and measure advertising performance.

How to Exercise Your Rights

You may submit requests or inquiries by emailing [email protected] or by mail to: Rene Greene, 3902 13th Ave S, Fargo, ND 58103, United States. Please provide sufficient information to verify your identity and describe your request. If you have an account, you may also review or update certain information in your account settings.

Verification: We may request information sufficient to verify your identity (e.g., email verification, account authentication, or limited additional data). Authorized Agents: You may designate an authorized agent to act on your behalf, subject to verification of the agent’s authority and your identity. Timing: We will respond within the timeframes required by applicable law.

Opt-Outs: To opt out of sale/share or targeted advertising, contact us at [email protected] with the subject line “Opt-Out Request,” and we will honor your request. If you use multiple browsers or devices, submit your request for each or ensure your settings are synchronized.

Notice at Collection for California Residents

Categories Collected

Identifiers (e.g., name, email, IP, device IDs)
Commercial and Account Information (e.g., saved items, interactions)
Internet/Network Activity (e.g., browsing and usage data)
Geolocation (approximate)
Inferences (preferences)
Sensitive (not sought; handled only as permitted if incidentally present)

Purposes

Provide and maintain the service; secure and debug
Customer support and communications
Analytics, personalization, and service improvement
Advertising/affiliate attribution (may be considered a sale/share)
Compliance with legal obligations

Retention

We retain personal information for the duration of your relationship with us and as needed for legitimate business or legal purposes, after which we delete or de-identify it as described above.

Disclosure

We disclose the categories listed above to service providers and, where applicable, to advertising/affiliate partners. We do not sell personal information for money; certain disclosures may be deemed a sale/share under California law. You have the right to opt out.

Changes to This Notice

We may update this Notice from time to time to reflect changes in our practices or legal requirements. Material changes will apply prospectively from the effective date of the update. Your continued use of the service signifies acceptance of the revised Notice.

Contact Information

Controller: Rene Greene

Address: 3902 13th Ave S, Fargo, ND 58103, United States

Email: [email protected]

Effective Date: 25 September 2025