Privacy Rights for Virginia Residents

Virginia Consumer Data Protection Act (VCDPA)

The Virginia Consumer Data Protection Act (VCDPA) is a law intended to enhance privacy rights and consumer protection for residents of the state of Virginia.  For further details on the categories of Personal Information we process, our purposes for processing your Personal Information, the categories of Personal Information we share with third parties, and the categories of third parties with whom we share Personal Information, please visit the Vault Workforce Screening Privacy Notice.

The following rights apply to all Virginia residents (but do not apply to legal entities, such as companies):

• Confirm. You have a right to be informed that we are processing information about you.
• Access. You have the right to request a copy of the personal data that we are processing about you. 
• Correction. You have the right to require the correction of any mistake in the personal data, whether incomplete or inaccurate, that we have about you.
• Deletion. You have the right to delete personal data that we have about you.
• Portability. You have the right to obtain the personal data that we have about you in a portable and readily usable format.
• Opt out.  You may withdraw your consent to the use and disclosure of your personal data or opt-out of the processing of personal data for targeted advertising, sale, or profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer subject to any legal restrictions and upon reasonable notice to us.
• Right to nondiscrimination. You have a right not to be discriminated against for exercising your privacy rights.
• Appeal. Right to appeal denial of any of your privacy rights.

These rights will not apply, however, if Vault does not collect any Personal Information about you or if all of the information we collect is exempt from the statute.

Exercising Your Rights – Making a “Verifiable” Consumer Request
To exercise your rights described above, Vault needs to receive a request from you and needs to be able to verify your identity. Please submit a verifiable consumer request to Vault by either:

• Contacting us at  dataprivacy@vaulthealth.com ; or
• Calling Vault’s Privacy Officer, at 800.732.3784 ext. 97603.

You may designate an authorized agent to make a request on your behalf. We will deny requests from agents that do not submit proof of authorization from you. To verify that an authorized agent has authority to act for you, we may require a copy of a power of attorney or require that you provide the authorized agent with written permission and verify your own identity with us.

Only you or your authorized agent may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child. Some jurisdictions may limit you to only making a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must:

• Provide sufficient information that allows Vault to reasonably verify you are the person about whom Vault collected personal information or an authorized representative.

• Describe your request with sufficient detail that Vault to properly understand, evaluate, and respond to it.

Vault cannot respond to your request or provide you with your personal information if Vault cannot verify your identity or authority to make the request and confirm the personal information relates to you. Making a verifiable consumer request does not require you to create an account with us. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.  

Vault will respond to a verifiable consumer request within 45 days of its receipt or notify you that Vault requires more time to respond and the reason for the extended response time. Vault will deliver its written response by mail or electronically, at your option.

To the extent that your verifiable consumer request is excessive, repetitive, or manifestly unfounded, Vault may charge a reasonable fee to respond to such request.

Vault will not discriminate against you for exercising any of your rights. Unless permitted by law, Vault will not:

• Deny you goods or services.
• Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
• Provide you a different level or quality of goods or services.
• Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.