VIRGINIA RESIDENT PRIVACY NOTICE

Effective Date: March 1, 2024
Last Revised Date: March 1, 2024

This Virginia Resident Privacy Notice (“Virginia Notice”) provided by Medical Mutual of Ohio and its Family of Companies (“Company” or ”We”) supplements the information contained in Website Privacy Policy  (“Privacy Policy” or “Policy”) and the State Privacy Law Addendum  (“Addendum”) and applies solely to individual residents of the State of Virginia (“consumers” or “you”).

If you are a Virginia resident, the Virginia Consumer Data Protection Act, Va. Code §§ 59.1-575 through 59.1-584, as may be amended from time to time (“VCDPA”), provides you with certain rights with respect to your Personal Data, as that term is defined under and subject to the VCDPA. This Virginia Notice describes your VCDPA rights with respect to your Personal Data and explains how to exercise those rights, subject to VCDPA exceptions. Any terms defined in the VCDPA have the same meaning when used in this Virginia Policy.

The Right to Confirm/Access/Data Portability

You have the right to confirm whether we are using or disclosing your Personal Data and to access and obtain a copy of the Personal Data we have collected about you, upon verification of your identity. You have the right to obtain a copy of Personal Data we process in a portable and, to the extent technically feasible, readily usable format. 

The Right to Correct

 You have the right to request that we correct the inaccurate Personal Data that we collected and maintain about you.

The Right to Request Deletion

You have the right to request that we delete the Personal Data that we collected from you, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your Personal Data from our records, unless an exception applies.

To Submit a Request to Exercise Your Right to Access, Correct and Deletion

Call us at 1-800-382-5729 during regular business hours or email us at CustomerServices@medmutual.com.

We may ask you to provide additional Personal Data so that we can properly identify you in our dataset to track compliance with a request.  We will only use Personal Data provided in a request to review and comply with the request.  If you choose not to provide this information, we may only be able to process your request to the extent we are able to identify you in our data systems. In certain circumstances, we may decline a request to exercise the rights described above.

Response Timing and Format

We will try to respond to a verifiable consumer request within forty-five (45) days of receipt. If we are unable to process your request in such time, we will inform you of the delay in writing.

If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically. 

We charge no fee for your first data rights request but will charge a reasonable fee for each subsequent data rights request within a 12-month period.  We reserve the right to charge a fee to process or respond to your verifiable consumer request if we determine that such request is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Right to Appeal

 If we are unable to comply with all or a portion of your request, we will explain the reasons we cannot comply.  You may appeal our decision by resubmitting a request and we will inform you of any action taken or not taken in response to the request and explain the reasons for our decision within sixty (60) days of receiving the request. To submit a complaint to the Virginia Attorney General, click here.

The Right to Opt-Out of Targeted Advertising, Sale of Personal Data or Certain Profiling

 You have the right to direct us not to (i) process your Personal Data for the purposes of targeted advertising; (ii) sell Personal Data we have collected about you; or (ii) engage profiling in furtherance of solely automated decisions that produce legal or similarly significant effects concerning you. 

To exercise an opt-out right, visit the opt-out page:

You may Opt-Out here.

You may designate an authorized agent to exercise an opt-out right on your behalf.