Privacy Policy

Effective date: April 25, 2022 This Privacy Policy (this “Policy”) describes how Rockpoint Funding, LLC and affiliates (together referred to as “Rockpoint”, “we”, “us”, or “our”) handles and secures information we collect through our website (the “Rockpoint Website”), as well as through the registered users of the Rockpoint Portal (collectively with the Rockpoint website, our “Service(s)”).  For the purpose of this Policy, “you” or “User” means the individual user of our service(s) or visitors to the Rockpoint Website. In addition, please review the Service’s user agreement, which governs your use thereof. By using our Service(s), you consent to our Privacy Policy and our Terms and Conditions and our collection, use and sharing of your information and data, and other activities, as described below. If you have entered into a Rockpoint User Agreement for our Services (your “User Agreement”), it will supplement and amend the Terms and Conditions. Because the Terms and Conditions and your User Agreement include subjects that may not be covered in this Policy and may narrow or modify the scope of our use of information under this Policy, please review them each carefully. If you do not agree to the terms of this Privacy Policy, please do not provide us with any personal information and do not use the Service(s).  Our pledge regarding your health information  Rockpoint Funding, LLC is committed to protecting medical, mental health and personal information about you ("Health Information"). We are required by law to maintain the privacy of your Health Information, provide you information about our legal duties and privacy practices, and inform you of your rights and the ways in which we may use Health Information and disclose it to other entities and persons.  Information Collected by our Services When you use our Services, you can submit information by way of the following:

• Typing-in data (such as when you register for our Services, or type a message to send to us or another user, or type a search request, or complete a form);
• Uploading a document, image or other data file; or
• Authorizing us to retrieve and import information from you, another user or another third party on your behalf.

Engagement Tools and Engagement Data  Our Service also gathers information whenever you visit, log in or otherwise interact with us. As with other websites and interactive services, whenever you interact with our Services, your computer, mobile phone or tablet (a “Device”) and its software transmits a “request” to us. That request includes information received from your Device (and its software) necessary for us to identify and appropriately route the information your Device is requesting. These “requests” and “replies” are present on all websites and Internet services. Therefore, whenever you:

• Visit and navigate through our Services;
• Click on a link;
• Open a webpage or web form;
• Open a web-enabled email sent by us;
• Send a message via our interactive chat or instant message feature; or
• Otherwise, take an action or interact with elements of our Service or its pages, content or features your Device and its software are sending non-personal information to us.

Our Services also gather information whenever you visit, log in or otherwise interact with them. In addition to managing the appropriate routing of information, we use so-called “cookies,” “web beacons,” “server logs” and other Engagement Tools (“Engagement Tools”) to enhance the quality of the service and content you receive. For example, we use Engagement Tools to:

• save user preferences;
• preserve session settings and activity;
• help authenticate users;
• allow users to auto-fill sign-in pages of websites they frequently visit;
• tailor the delivery of ads and other content; and
• analyze the performance of our Services and their various features and content.

Therefore, even if you do not register with us or submit any personal information on our Services, our Engagement Tools automatically receive information about your Device and the software running on it. We call such data Engagement Data (“Engagement Data”). Engagement data often includes elements such as the date and time a “request” is made, the model of the Device making the “request,” the type and version of the operating system running on a Device, the browser making the request, routing information, IP address, geolocation, search terms a user enters, what URL a Device most recently visited, and, if a mobile application is used, an anonymous unique number. Engagement Data can also include the Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet website, application, or advertisement. Engagement Data can be combined with personal information. If so, we treat such combined information the same way we treat personal information. You have the ability to control how certain Engagement Tools operate by modifying the settings on your Device or its software. Most browsers, for example, allow you to refuse accepting cookies, and many mobile Devices allow you to disable the sending of location information. In some cases, doing these things could diminish the performance of our Services or render them inoperable. To learn more about Engagement Tools and how we use Engagement Data please see the section below entitled “How Information is Used.”  Do Not Track Disclosures. Various third parties are developing or have developed signals or other mechanisms for the expression of consumer choice regarding the collection of information about an individual consumer’s online activities over time and across third-party websites or online services (e.g., browser “do not track” signals). Currently, we do not monitor or take any action with respect to these signals or other mechanisms. Online Tracking by Third Parties. Third-party analytics and other service providers, such as Google Analytics, may set and access their own tracking technologies on your Device and they may otherwise collect or have access to information about you and track you over time and across third-party websites. These service providers use tracking technologies to help us analyze how users use our Service. We are not responsible for those third-party technologies or activities arising out of them. However, some third parties may offer you certain choices regarding their practices. For example, to learn about opting out of Google Analytics, please visit https://tools.google.com/dlpage/gaoptout. We are not responsible for the effectiveness of or compliance with any third parties’ opt-out options. If you choose to opt-out of the use of Google Analytics, Google will no longer collect and analyze information via cookies associated with your browser for these services. When you opt-out, Google will place opt-out cookies on your browser. If you delete your cookies, change browsers or change devices, you will need to repeat this opt-out process. Also, please note that this opt-out process will work only if your browser is set to accept all cookies. We may still use Google Analytics services to create promotions and apps within social networks after you opt-out. These services do not rely on collecting and analyzing information via cookies. To learn more about your choices for these services, review the options your social network provides. You can obtain information about which third parties have currently enabled cookies and how to opt-out of some of those cookies by visiting the Network Advertising Initiative’s website at http://optout.networkadvertising.org; or the Digital Advertising Alliance’s website at http://optout.aboutads.info. For more information on mobile-specific opt-out choices, please visit http://www.networkadvertising.org/mobile-choices. Third-Party Tools.  We work with certain third parties who deploy their own engagement tools on our Services (“Third Party Tools”). In some instances, they do so exclusively on our behalf. In other instances, they may retain and use the data they collect pursuant to publicly available privacy policies. These Third-Party Tools are frequently deployed by companies providing online advertising services or analytics, but they may be deployed in other contexts as well, such as social media plug-ins. We treat personal and non-personal information that we receive from these Third-Party Tools the same way we treat personal and non-personal information that we directly collect from our Services. We, however, do not control how these third parties manage the information they gather. Please see our Third-Party Tools for more information. How we may use and disclose health information about you  The following sections describe different ways that we may use and disclose your Health Information. Some information, such as certain drug and alcohol information, HIV information, genetic information and mental health information is entitled to special restrictions related to its use and disclosure. Not every use or disclosure will be listed. All of the ways we are permitted to use and disclose information, however, will fall within one of the following categories. Other uses and disclosures not described in this Notice will be made only if we have your written authorization.  For Treatment.  We may disclose Health Information about you to your legal representative, doctors, nurses, technicians, or other personnel who are involved in taking care of you. For example, a doctor treating you for a broken leg may need to know if you have diabetes because diabetes may slow the healing process. A doctor treating you for a mental condition may need to know what medications you are currently taking, because the medications may affect what other medications may be prescribed to you. We may also share Health Information about you with other providers. The disclosure of your Health Information to other providers may be done electronically through a health information exchange that allows providers involved in your care to access some of your records to coordinate services for you.  For Payment. We may use and disclose Health Information about you so that the treatment and services you receive from healthcare providers, such as a diagnostic imaging facility, may be billed to and payment may be collected from you or your legal representative.  For example, we may need to give information to your legal representative about surgery or therapy you received so your legal representative will pay us for the surgery or therapy. We may also tell your legal representative about a proposed treatment to determine whether your legal representative believes your legal case will support the treatment.  For Business Operations. We may use and disclose Health Information about you for our business operations. For example, your Health Information may be used to review the quality of our services, or for business planning, management and administrative services. We may also use and disclose your health information to an outside company that performs services for us such as accreditation, legal, computer or auditing services. These outside companies are called "business associates" and are required by law to keep your Health Information confidential. We may also disclose information to doctors, nurses, technicians, and other providers for performance improvement.  Appointment Reminders. We may contact you to remind you that you have an appointment at a network provider’s office.  Individuals Involved in Your Care or Payment for Your Care. We may release medical information to anyone involved in your medical care, e.g., a legal representative, friend, family member, personal representative, or any individual you identify. We may also give information to someone who helps pay for your care. We may also tell your family or friends about your general condition.  As Required By Law. We will disclose Health Information about you when required by federal or state law.  To Prevent a Serious Threat to Health or Safety. We may use and disclose Health Information about you when necessary to prevent or lessen a serious and imminent threat to your health and safety or the health and safety of the public or another person. Any disclosure would be to someone able to help stop or reduce the threat.  Military and Veterans. If you are or were a member of the armed forces, we may release Health Information about you to military command authorities as authorized or required by law.  Workers' Compensation. We may use or disclose Health Information about you for Workers' Compensation or similar programs as authorized or required by law. These programs provide benefits for work-related injuries or illnesses.  Public Health Disclosures. We may disclose Health Information about you for public health activities such as: 

• preventing or controlling disease (such as cancer and tuberculosis), injury or disability;
• reporting vital events such as births and deaths;
• reporting child abuse or neglect;
• reporting adverse events or surveillance related to food, medications or defects or problems with products;
• notifying persons of recalls, repairs, or replacements of products they may be using;
• notifying a person who may have been exposed to a disease or may be at risk of contracting or spreading a disease or condition;

Abuse and Neglect Reporting. We may disclose your Health Information to a government authority permitted by law to receive reports of abuse, neglect, or domestic violence.  Health Oversight Activities. We may disclose Health Information to governmental, licensing, auditing, and accrediting agencies as authorized or required by law.  Lawsuits and Other Legal Proceedings. We may disclose Health Information to courts, attorneys, and court employees in conservatorship, writs, and certain other judicial or administrative proceedings. We may also disclose Health Information about you in response to a court or administrative order or reply to a subpoena, discovery request, warrant, or another lawful process.  Law Enforcement. If asked to do so by law enforcement, and as authorized or required by law, we may release Health Information: 

• To identify or locate a suspect, fugitive, material witness, certain escapees, or missing person;
• About a suspected victim of a crime if, under certain limited circumstances, we are unable to obtain the person's agreement;
• About a death suspected to be the result of criminal conduct;
• In case of a medical emergency, to report a crime; the location of the crime or victims; or the identity, description, or location of the person who committed the crime.

Coroners, Medical Examiners, and Funeral Directors. We may disclose medical information to a coroner or medical examiner. This may be necessary, for example, to identify a deceased person or determine the cause of death. We may also disclose medical information about patients to funeral directors as necessary to carry out their duties.  National Security and Intelligence Activities. As the law requires, we may disclose Health Information about you to authorized federal officials for intelligence, counterintelligence, and other national security activities.  Protective Services for the President and Others. As required by law, we may disclose Health Information about you to authorized federal officials so they may conduct special investigations or provide protection to the President, other authorized persons, or foreign heads of state.  Inmates. If you are an inmate of a correctional institution or under the custody of law enforcement officials, we may release Health Information about you to the correctional institution as authorized or required by law.  Psychotherapy Notes. Psychotherapy notes mean notes recorded (in any medium) by a health care provider who is a mental health professional documenting or analyzing the contents of conversation during a private counseling session or a group, joint, or family counseling session and that are separated from the rest of the individual's medical record.  Psychotherapy notes have additional protections under federal law, and most uses or disclosures require your written authorization.  Marketing or Sale of Health Information. Most uses and disclosures of your Health Information for marketing purposes or any sale of your Health Information would require your written authorization.  Personal and Non-Personal Information Information you submit to us that identifies you or can be used to contact you (e.g., email or mailing address) is your “personal information.” We collect the following categories of personal information about you:

• Personal identifiers, including name, telephone number, address, email, Social Security number, driver’s license number, and date of birth.
• Case information, including account numbers.
• Characteristics, including gender and sex.
• Medical information, including medical procedures, diagnosis, and treatment information as well as appointment history.
• Other information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with you.

When we combine non-personal information with personal information or non-personal information with other non-personal information in a way that renders the combined information personal information, we treat that combined information the same way we treat personal information. When we combine personal information with information from third party sources, we also treat that combined information the same way we treat personal information. How Information is Used. We use personal and non-personal information (including Engagement Data) for the following purposes:

• Operating, maintaining, managing, and administering our Services, including processing registrations and payments, and providing customer support;
• Responding to questions and communications, which we retain in the ordinary course of business;
• Sharing information with you about services that we believe will be of interest to you, including marketing communications;
• Administrative announcements about features, functionality, and terms of other aspects of our Services; and, if applicable, informing you about offers for services or products we believe may be of interest (see also “Service Emails and other Communications” sections below);
• Safeguarding and protecting our Services, the information they safeguard, the rights of third parties and in response to legal process, in each case, as more fully described below in the “The Importance of Protecting our Services and the Information they Safeguard;
• Auditing related to a current interaction with the consumer and concurrent transactions, including, but not limited to, counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards;
• Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity;
• Debugging to identify and repair errors that impair existing, intended functionality;
• Short-term, transient use, provided the personal information that is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction, including but not limited to, the contextual customization of ads shown as part of the same interaction;
• Performing services on behalf of the business or service provider, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of the business or service provider;
• Undertaking internal research for technological development and demonstration;
• Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business;
• Advancing a person’s commercial or economic interests, such as by including another person to buy, rent, lease, join, subscribe to, provide, or exchange products, goods, property, information, or services, or enabling or affecting, directly or indirectly, a commercial transaction; and
• Other legitimate business purposes permitted by law, including any other purpose described in this Policy or User Agreement.

We use non-personal information for the following purposes:

• Auditing, research, measurement and analysis in order to maintain, administer, enhance and protect our Services, including analyzing usage trends and patterns and measuring the effectiveness of content, advertising, features or services;
• Creating new features and services;
• Contextual and cookie-based automated content delivery, such as tailored ads or search results;
• Health and medical research; public health and service activities; healthcare- and medical-related services; and
• Other purposes are described in this Policy or your User Agreement.
• We may also use non-personal information to prepare aggregate reports for current or future advertisers, sponsors or other partners to show trends about the general use of our Services. Such reports may include age, gender, geographic, demographic or other general user information, but do not include personal information.

Other uses and disclosures of health information  Other uses and disclosures of Health Information not covered by this Notice will be made only with your written authorization. If you authorize us to use or disclose your Health Information, you may revoke that authorization, in writing, at any time. However, the revocation will not be effective for information we have already used and disclosed, relying on the approval.  How our services allow users to share information directories and location tools If you are a health care provider or healthcare-related service provider who has entered into a User Agreement with us, your contact and directory information may be listed in one or more of our public and professional directories. These directories include profile information (e.g., contact, specialty and other information) and other features that allow users to locate and contact them. If you seek to contact or schedule an appointment with a provider listed in one of our directories, the provider will need your name, contact information, as well as other information.  Our Services can be used to facilitate one-on-one communications between users. Examples include:

• Requesting an appointment with a health care provider;
• Sending an appointment or other reminder to another user;
• Sending information relating to patient accounts and cases.
• Sending a prescription to a pharmacy; or
• Sending a test requisition to a clinical laboratory.
• In any one-on-one communication, users are sending information to one another. Depending on the message, this could include contact and other personal information. See also “Service Emails and other Communication” sections below.

Records. Our Services allow users to store personal and health information (“Records”), including Records that identify other individuals, including other users. Our Services permit users to share all or portions of these Records at their discretion. You should be aware that this Policy covers only the information you submit through our Services. If you contact or exchange information with another user in person or through a means other than our Services, such activity is not covered by this Policy. What Other Users Do with Information You Share with Them.  Because our Services enable users to share information you share with them, you should take care in selecting with whom you share your Records and other information. Although our Services process such transmissions, we cannot take responsibility for the actions of other users or persons with whom you share your Records and other information. Service emails and other communications Our Services allow users to communicate with others through our in-product instant messaging services, Service-branded emails, SMS and other electronic communication channels. Communications that are sent by or on behalf of a user are indicated as being “From” that user. Communications that are sent by us are indicated as being from us or one of our account or support specialists assigned to assist you. Either type of communications may be “real-time” communications or communications triggered automatically upon the occurrence of certain events or dates – such as a repeated sign-in failure, an appointment reminder and the like. Email communications. Electronic messages received from users and our administrative announcements are often transactional or relationship messages, such as appointment requests, reminders and cancellations and other treatment or Service notifications. You may not be able to opt-out of receiving certain messages, although our Services may provide a means to modify the frequency of receiving them. In cases in which we believe user emails are not primarily transactional or relationship messages, it will include the capability to opt-out of receiving further e-mails. If you sign-up to receive marketing announcements from us, such emails will include the capability to opt-out of receiving such e-mails in the future. On occasion, Rockpoint will communicate marketing information, operational updates and other information to Users via electronic mail. Users agree that such transmissions are important means of communication between Rockpoint and Users and shall not be considered junk faxes or unsolicited advertisements as defined by the Telephone Consumer Protection Act of 1991 or other applicable state or federal laws or regulations. Surveys and Ratings. From time to time we ask users to submit surveys or ratings to assist healthcare providers and others in improving their operations or to assist other users in making informed choices. The content of such surveys or ratings, therefore, should be presumed public. When we make such survey and ratings requests, we let users know how their responses will be used. As with communities and public forums, we strongly advise users to exercise care in selecting what information they share in a survey or similar communication, and strongly recommend against sharing any personal health or other sensitive information that could directly or indirectly be traced to any individual, including yourself. Engagement Tools. Our Services may deploy Engagement Tools (such as “cookies,” “web beacons” and “server logs”) on outbound emails to users and others to collect Engagement Data, and we may use vendors to assist us in sending outbound emails to users who may deploy Third-Party Tools.  Emails and Other Communications. Emails and other communications from individuals who are not users of our Services, or that are being sent in connection with business, agreements or subject matter other than your User Agreement or your use of our Services, are not covered by this Policy. If, for example, you contact us regarding a job opening, that communication to us is not covered by this Policy even though that job opening may have been posted on our Services. Likewise, if you submit to us any ideas, suggestions or proposals (collectively, “Suggestions”) relating to our Services or other products or services by any means – such as through “Contact Us,” by email or other communication channels, one of our communities or user forums, or to our customer support or other personnel – such Suggestions are not governed by this Policy. Your rights regarding your health information  You have the following rights regarding the Health Information we maintain about you:  Right to Inspect and Copy. With certain exceptions, you have the right to inspect and receive a copy of your Health Information. If we have the information in electronic format, then you have the right to get your Health Information in electronic form if we can do so. If not, we will work with you to agree on getting the information electronically or as a paper copy.  To inspect and receive a copy of your Health Information, you must submit your request in writing to 8665 WILSHIRE BLVD. #309, BEVERLY HILLS, CA 90211. If you request a copy of the information, there is a fee for these services.  We may deny your request to inspect and receive a copy in certain limited circumstances. If you are denied access to Health Information, you may have the denial reviewed in most cases. The person conducting the review will not be the person who denied your request. We will comply with the outcome of the review.  Right to Request an Amendment or Addendum. If you feel that Health Information we have about you is incorrect or incomplete, you may ask us to amend the information or add an addendum (addition to the record). You have the right to request an amendment or addendum for as long as the information is kept by or for Rockpoint Funding, LLC.  Amendment. To request an amendment, your request must be made in writing and submitted to the 8665 WILSHIRE BLVD. #309, BEVERLY HILLS, CA 90211. You must be specific about the information you believe to be incorrect or incomplete, and you must provide a reason that supports the request.  We may deny your request for an amendment if it is not in writing, we cannot determine from the request the information you are asking to be changed or corrected, or your request does not include a reason to support the change or addition. In addition, we may deny your request if you ask us to amend information that: 

• Was not created by Rockpoint Funding
• Is not part of the Health Information kept by or for Rockpoint Funding, LLC
• Is not part of the information which you would be permitted to inspect and copy; or
• Rockpoint Funding, LLC believes to be accurate and complete.

Addendum. To submit an addendum, the addendum must be made in writing and submitted to the 8665 WILSHIRE BLVD. #309, BEVERLY HILLS, CA 90211. An addendum must not be longer than 250 words per alleged incomplete or incorrect item in your record.  Right to an Accounting of Disclosures. You have the right to receive a list of certain disclosures we have made of your Health Information.  To request this accounting of disclosures, you must submit your request in writing to 8665 WILSHIRE BLVD. #309, BEVERLY HILLS, CA 90211. Your request must state a period that may not be longer than the six previous years. You are entitled to one accounting within any 12 months at no cost. If you request a second accounting within those 12 months, there will be a charge for the cost of compiling the accounting. We will notify you of the cost involved, and you may choose to withdraw or modify your request at that time before any charges are incurred.  Right to Request Restrictions. You have the right to request a restriction or limitation on the Health Information we use or disclose about you for treatment, payment, or health care operations. You also have the right to request a limit on the Health Information we disclose about you to someone involved in your care or the payment for your care, such as a legal representative, family member or friend.  To request a restriction, you must make your request in writing to the 8665 WILSHIRE BLVD. #309, BEVERLY HILLS, CA 90211.  In your request, you must tell us (1) what information you want to limit; (2) whether you want to limit our use, disclosure, or both; and (3) to whom you want the limits to apply, for example, only to you and your spouse. We are not required to agree to your request except in the limited circumstance described below. If we agree, our agreement must be in writing, and we will comply with your request unless the information is needed to provide you with emergency care.  Right to Request Confidential Communications. You have the right to request that we communicate with you about your Health Information in a certain way or at a certain location. For example, you may ask that we contact you only at home or by mail.  To request confidential medical communications, you must request in writing to the 8665 WILSHIRE BLVD. #309, BEVERLY HILLS, CA 90211.  We will accommodate all reasonable requests. Your request must specify how or where you wish to be contacted.  Right to a Paper Copy of This Notice. You have the right to a paper copy of this Notice. You may ask us to give you a copy of this Notice. Even if you have agreed to receive this Notice electronically, you are still entitled to a paper copy of this Notice.  Right to be Notified of a Breach. You have the right to be notified if one of our Business Associates or we discover a breach of unsecured health information about you.  Viewing, Updating and Deleting Data Our Services aim to provide you with access to the personal information you submit and the means to update it. This can be accomplished by logging into our Services or contacting us using the contact information below. Under certain circumstances, we may ask you to verify your identity before your request is processed. This will be done free of charge except where it would require a disproportionate effort. We may reject requests that are unreasonably repetitive, require disproportionate technical effort (for example, developing a new system or fundamentally changing an existing practice), risk the privacy of others, or would be extremely impractical (for instance, requests concerning information residing on backup tapes).  If you desire to deactivate your account please contact us using the contact information below. Upon your request, your account will be deactivated and your personal information and Records will be securely archived. We retain archived information for a period of five years (or longer as permitted by law) as necessary to comply with legal obligations, resolve disputes and enforce our agreements and other authorized uses under this Policy.  Please note that, unless you are an administrator who has administrative rights over another user’s account pursuant to a Healthcare Provider User Agreement, you are not entitled to review the content of another user’s account. Accordingly, if you have used our Services to share personal information with another user or other party, you will not be able to access, update or delete that shared information pursuant to this Policy or your User Agreement. Please also note that other users may submit personal information that identifies you. You will also not be able to access, update or delete that information pursuant to this Policy or your User Agreement. In either case, certain users – such as healthcare providers – may be required under HIPAA and other applicable laws or regulations to retain such information for extended periods of time. This means that until our User Agreement with such user(s) terminate(s), we will continue to retain such information on their behalf. HIPAA grants patients certain rights to access and correct certain health information their healthcare providers retain about them. Patients should submit requests to access or correct their health information directly to their healthcare providers.  You should also be aware that we store indefinitely non-personal information, including Engagement Data and de-identified health information, as well as all information that you have shared on any of our public forums, blogs, communities, surveys and the like.  California Privacy Rights. Under the California Consumer Privacy Act, California residents have the right to: 

• Request that a business deletes any personal information about the consumer that the business has collected from the consumer.
• Request that a business that collects personal information about the consumer disclose to the consumer, free of charge, the following:
• The categories of personal information that it has collected about that consumer.
• The categories of sources from which the personal information is collected.
• The business or commercial purpose for collecting or selling personal information.
• The categories of third parties with whom the business shares personal information.
• The specific pieces of personal information it has collected about that consumer.
• Request that a business that sells the consumer’s personal information, or that discloses it for a business purpose disclose, free of charge, to the consumer:
• The categories of personal information that the business collected about the consumer.
• The categories of personal information that the business sold about the consumer and the categories of third parties to whom the personal was sold, by category or categories of personal information for each third party to whom the personal information was sold.
• The categories of personal information that the business disclosed about the consumer for a business purpose.
• Direct a business that sells personal information about the consumer to third parties not to sell the consumer’s personal information.

We will not discriminate against you because you exercise any of your California privacy rights. Changes to Rockpoint Funding, LLC privacy practices, and this notice  We reserve the right to change Rockpoint Funding, LLC privacy practices, and this Notice. We reserve the right to make the revised or changed Notice effective for Health Information we already have about you and any information we receive in the future. We will post a copy of the current Notice on Rockpoint Funding, LLC’s user portal. In addition, at any time, you may request a copy of the current Notice in effect.  Questions or complaints  If you have any questions about this Notice, please contact Rockpoint Funding, LLC at 8665 WILSHIRE BLVD. #309, BEVERLY HILLS, CA 90211. If you believe your privacy rights have been violated, you may file a complaint with Rockpoint Funding, LLC or with the Secretary of the Department of Health and Human Services, Office for Civil Rights. To file a written complaint with Rockpoint Funding, LLC, contact: 8665 WILSHIRE BLVD. #309, BEVERLY HILLS, CA 90211. You will not be penalized for filing a complaint.