The Convatec me+ Companion™ App provides services (“Services”) that allows users to log their
beverage intake and urine output information. The App permits users to do the following:

 

1. Log beverage intake and urine output information;
2. Log any incontinence episodes (Incontinence episode or leakage is any urine that involuntarily
leaves your body in between times that you are using a catheter);
3. Generate and share result summary of users diary;
4. Acquire Convatec’s Continence Care products information, educational information for
incontinence and urinary retention, as well as links to Convatec’s resources.

This Privacy Notice (“Notice”) is meant to help you understand our privacy practices when you use
our Services, including what data we collect, why we collect it, and what we do with it, as well as your
individual rights.

The Convatec me+ Companion™ App uses personal data collected to provide our Services. By using
this App you agree to the collection and use of personal data in accordance with this Notice. This is
controlled by or under the control of Convatec, Inc. or any of its affiliates or subsidiaries (”Convatec”,
“our”, “we” or “us”).

This Notice does not apply to the third-party online/mobile store from which you install the App,
including any in-game virtual items, which may also collect and use data about you. We are not
responsible for any of the data collected by any such third party.

Please also read our Cookie Notice and Terms of Use, which describe the terms under which you use
our Services.

What Personal Data are collected and for which Purposes

We receive or collect personal data, as described in detail below, when we provide our Services,
including when you access, download, install the App, or use our Services. We may use this personal
data as specified below and in general to perform the Services requested by you as a contractual
necessity, to operate, provide, improve, customize, support, and market our Services based on our
legitimate interest, or to comply with a legal obligation to which we may be subject. If you do not want
us to collect and process your personal data, you may not be able to use the Services.

Learn more about the Personal Data we may collect about you

 

 

Definitions

Sensitive Personal Data

Before we collect sensitive personal data, we will inform you and ask your explicit consent. This data
includes personal health data that will be collected from users and stored securely within Convatec’s
cloud resources. This data includes data processed related to you including your self-reported
medical conditions and you may withdraw your consent at any time, without affecting the lawfulness
of processing based on consent before withdrawing your consent.

Other than provided above, we ask that you not send us and you not disclose any other sensitive
personal data (e.g., social security numbers, information related to racial or ethnic origin, political
opinions, religion or other beliefs, health, biometrics or genetic characteristics, criminal background
or trade union membership) on or through the App or otherwise to us. We also ask you to not send
us any product complaints via the App. If you do have any product complaints, please reach out to
our me+ service team by calling at 1-800-422-8811 between the hours of 8:30 AM – 7:00 PM ET.

Account Data

We collect your personal data when you create an account. You may login to the App using the
Convatec me+ CompanionTM App account. The personal data we collect to create your account
includes your full name (first and last name), email and phone number.

The personal data collected is used to create and manage your account. You can use your account to
securely login to the App. If you create a Convatec account to login to the App, we will send you a
welcome email to verify your username and password, to communicate with you in response to your
inquiries, to send you strictly service-related announcements, or direct marketing communication in
case you have opted-in.

Other Provided Data

This data includes device data, cookies, transactional information, customer support, combined data,
and permissions.

Cookies

We use cookies, tags or similar technologies to operate, provide, improve, understand, and customize
our Services. Cookies allow us to recognize your mobile device and collect your personal data
including your unique user Device number, the IP address of your mobile device, the type of mobile
internet browser or operating system you use, session and usage data, or service-related performance
information, which is information about your use of the App.

For further information about the use of cookies or other similar technologies used in this App, please
read our Cookie Notice.

Customer Support

You may provide us with information related to your use of the App, including your interaction with
Convatec, and how to contact you so we can provide you customer support. We operate and provide
our Services, including providing customer support, and improving, fixing, and customizing our
Services. We also use your information to respond to you when you contact us.

Combined Data

We may combine your personal data, including account data, other data provided by you, Device
data, cookies, location data, data collected during your interactions and usage of Convatec digital
channels such as social media, websites, emails, apps and connected products, IP address, cookies,
device information, communications you click on or tap, location details, and websites you visit.

The combined data is analyzed and used to provide you with the Services, such as insights into your
well-being. We may also de-identify and aggregate data for research purposes and help us improve
the content, functionality and usability of the App, Device and Services as well as to develop new
products and services.

If you opt-in to receive promotional communications about Convatec products, services, events and
promotions that may be relevant to you based on your preferences and online behavior, we may send
you marketing and promotional communications via email, phone and other digital channels, such
as mobile apps and social media. To be able to tailor the communications to your preferences and
behavior and provide you with a more relevant and personalized experience, we may analyze and
combine your personal data. You may opt-out and unsubscribe from such communications at any
time.

Permissions

The App may request your permission to access your phone or sensors (e.g. camera, Wi-Fi, geolocation,
or Bluetooth) or other data (e.g. photos, agenda, or contacts) on your mobile device.

• We use such data only when it is needed to provide you the Services and only after you
  provided your explicit consent.
• Sometimes the permission is a technical precondition of the operating systems of your
  mobile device. In such case, the App may ask your permission to access such sensors or data,
  however we will not collect such data, unless when it is required to provide you the App
  Service and only after you provided consent.
• You will also be asked whether you wish to receive messaging via push messages from the
  App, via email or telephone. You can enable and disable any of these functions at any time.

 

With whom are Personal Data Shared?

Convatec may disclose your personal data to third party service providers, business partners, or other
third parties in accordance with this Notice and/or applicable law.

Service Providers

We work with third-party service providers to help us operate, provide, improve, understand,
customize, support, and market our Services.

We may share your personal data with the following service providers:

• IT and Cloud Providers
  These service providers deliver the necessary hardware, software, networking, storage,
  transactional services and/or related technology required to run the App or provide the
  Services.

Convatec requires its service providers to provide an adequate level of protection to your personal
data similar to the level that we provide. We require our service providers to process your personal
data only in accordance with our instructions and only for the specific purposes mentioned above, to
have access to the minimum amount of data they need to deliver a specific service, and to protect
the security of your personal data.

Other third parties

Convatec may also work with third parties who process your personal data for their own purposes.
Please read their privacy policies carefully as they inform about their privacy practices, including,
what type of personal data they collect, how they use, process and protect them.

If Convatec shares personal data with a third party that uses your personal data for their own
purposes, Convatec will ensure to inform you and/or obtain your consent in accordance with
applicable laws before we share your personal data.

Convatec sometimes sells a business or a part of a business to another company. Such a transfer of
ownership could include the transfer of your personal data directly related to that business, to the
purchasing company. All of our rights and obligations under our Notice are freely assignable by
Convatec to any of our affiliates, in connection with a merger, acquisition, restructuring, or sale of
assets, or by operation of law or otherwise, and we may transfer your personal data to any of our
affiliates, successor entities, or new owner.

How long do we keep your data?

We will retain your personal data for as long as needed or permitted in light of the purpose(s) for
which the data is collected. The criteria we use to determine our retention periods include: (i) the
length of time you use the App and Services; (ii) whether there is a legal obligation to which we are
subject; or (iii) whether retention is advisable in light of our legal position (such as in regard to
applicable statutes of limitations, litigation or regulatory investigations).

Your choices and rights

If you would like to submit a request to access, rectify, erase, restrict or object to the processing of
personal data that you have previously provided to us, or if you would like to submit a request to
receive an electronic copy of your personal data for purposes of transmitting it to another company
(to the extent this right to data portability is provided to you by applicable law), you may contact us
at dataprivacy@convatec.com. We will respond to your request consistent with applicable law.

In your request, please make clear what personal data you would like to access, rectify, erase, restrict
or object to its processing. For your protection, we may only implement requests with respect to the
personal data associated with your account, your email address or other account information, that
you use to send us your request, and we may need to verify your identity before implementing your
request.

We will try to comply with your request as soon as reasonably practicable.

Please note that if you make use of (some of) your choices and rights, you may not be able to use, in
whole or in part, of our Services anymore.

We protect your personal data

We take seriously our duty to protect the data you entrust to Convatec against accidental or
unauthorized alteration, loss, misuse, disclosure or access. Convatec uses a variety of security
technologies, technical and organizational measures to help protect your data. For this purpose we
implement, among others, access controls, use firewalls and secure protocols.

Special information for parents

While our App and the Services are not directed to children, as defined under applicable law, we
intend not to process personal data of minors. It is Convatec’s Notice to comply with the law when it
requires parent or guardian permission before collecting, using or disclosing personal data of
children. We are committed to protecting the privacy needs of children and we strongly encourage
parents and guardians to take an active role in their children’s online activities and interests.

If a parent or guardian becomes aware that his or her child has provided us with his or her personal
data without their consent, please contact us at dataprivacy@convatec.com. If we become aware
that a child has provided us with personal data, we will delete his/her data from our files.

Marketing

We may use your personal data to contact you with newsletters, marketing or promotional materials
and other information that may be of interest to you. We will only contact you with your consent
and you may opt-out of receiving any or all of these communications from us by following the
unsubscribe/withdraw consent link or instructions provided when you open an account using the
App.

Changes to this Privacy Notice

The Notice was updated on 30 April 2024.

Our Services may change from time to time without prior notice to you. For this reason, we reserve
the right to amend or update this Notice from time to time. When we update this Notice, we will also
update the date at the top of this section.

We encourage you to review regularly the latest version of this Notice.

The new Notice will become effective immediately upon publication. If you do not agree to the revised
Notice, you should alter your preferences, or consider stop using our Services. By continuing to access
or make use of our Services after those changes become effective, you acknowledge that you have
been informed and agree to the Notice as amended.

Contact Us

If you have any questions about this Notice or about the way in which Convatec uses your personal
data, please contact our Data Protection Officer at dataprivacy@convatec.com.

Alternatively, you have the right to lodge a complaint with a supervisory authority competent for
your country or region.

Additional Information for California Residents

California Civil Code Section 1798.83 permits our customers who are California residents to request
and obtain from us once a year, free of charge, information about the personal information (if any)
we disclosed to third parties for direct marketing purposes in the preceding calendar year. If
applicable, this information would include a list of the categories of personal information that was
shared and the names and addresses of all third parties with which we shared information in the
immediately preceding calendar year. If you are a California resident and like to make such a request,
please contact dataprivacy@convatec.com.

Pursuant to the California Consumer Privacy Act of 2018 (“CCPA”), we are providing the following
details regarding the categories of Personal Information that we collect, use and disclose about
California residents. Under the CCPA, “Personal Information” is information that identifies, relates to,
or could reasonably be linked with a particular California resident or household. This section does
not apply to our job applicants, employees, contractors, owners, directors, or officers where the
Personal Information we collect about those individuals relates to their current, former, or potential
role at Convatec.

Sources of Personal Information
We collect Personal Information from our interactions with you through the Device and/or the App.

Categories of Personal Information Collected
We collect, and have collected within the preceding 12 months, the following categories of Personal
Information as listed in the CCPA:

• Identifiers, such as name, contact information, IP address and other online identifiers;
• Personal information, as defined in the California customer records law, such as name,
  contact information;
• Characteristics of protected classifications under California or federal law, such as age, sex,
  and primary language;
• Internet or network activity information, such as browsing history and interactions with our
  online services;
• Inferences drawn from any of the Personal Information listed above to create a profile about,
  for example, an individual’s preferences, behavior and characteristics.

Use of Personal Information
We use these categories of Personal Information for the purposes of operating, managing, and
maintaining our business, providing our products and services, and accomplishing our business
purposes and objectives, as described above under “What Personal Data are collected and for which
purposes?”


Individual Rights and Requests
If you are a California resident, you may request that we:

• Disclose to you the following information covering the 12 months preceding your request:
  • The categories of Personal Information we collected about you and the categories of
    sources from which we collected such Personal Information;
  • The specific pieces of Personal Information we collected about you;
  • The business or commercial purpose for collecting (if applicable) Personal
    Information about you; and
  • The categories of Personal Information about you that we otherwise shared or
    disclosed, and the categories of third parties with whom we shared or to whom we
    disclosed such Personal Information (if applicable).
• Delete Personal Information we collected from you.

To make a request for the disclosures or deletion described above, please contact us at
dataprivacy@convatec.com telling us your email id that is registered with the App. We will respond
to your request consistent with applicable law.

You have the right to be free from unlawful discrimination for exercising your rights under the CCPA.