Offcanvas

Last updated: November 1, 2025

This privacy notice for Chronic Care Management, Inc. (doing business as Cosan Group)
(“we,” “us,” or “our”), describes how and why we might collect, store, use, and/or share (“process”) your information when
you use our services (“Services”), such as when you:

  • Visit our website at https://www.cosangroup.com, or any website of ours that links to this privacy notice.
  • Engage with us in other related ways, including any sales, marketing, or events.

Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices.
If you do not agree with our policies and practices, please do not use our Services.
If you still have any questions or concerns, please contact us at
privacy@cosangroup.com.

Summary of Key Points

  • What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us. Learn more
  • Sensitive personal information: We do not process sensitive personal information.
  • Do we receive any information from third parties? No, we do not.
  • How do we process your information? To provide, improve, and administer our Services, communicate with you, ensure security, and comply with law. Learn more
  • When and with whom do we share information? We may share information in specific cases with categories of third parties. Learn more
  • How do we keep your information safe? We use organizational and technical safeguards, though no system can be 100% secure. Learn more
  • What are your rights? Depending on your location, you may have certain rights regarding your personal information. Learn more
  • How do you exercise your rights? The easiest way is by submitting a data subject access request, or by contacting us directly.

Table of Contents

  1. What information do we collect?
  2. How do we process your information?
  3. When and with whom do we share your personal information?
  4. How long do we keep your information?
  5. How do we keep your information safe?
  6. Do we collect information from minors?
  7. What are your privacy rights?
  8. Controls for Do-Not-Track features
  9. Do United States residents have specific privacy rights?
  10. Do we make updates to this notice?
  11. How can you contact us about this notice?
  12. How can you review, update, or delete your data?

1. What Information Do We Collect?

Personal Information You Disclose

In short: We collect personal information that you provide to us, including:

  • Names
  • Phone numbers
  • Email addresses

We do not process sensitive information.

Information Automatically Collected

In short: Some information (such as IP address, browser/device characteristics) is collected automatically.

  • Log and usage data: Service-related diagnostic and activity information.
  • Device data: Device details such as IP, hardware model, and OS.
  • Location data: Precise or imprecise geolocation (if enabled).

2. How Do We Process Your Information?

In short: We process your information to provide, improve, and administer our Services, communicate with you, ensure security, and comply with law.

  • To respond to user inquiries/offer support.
  • To identify usage trends and improve Services.
  • To comply with legal obligations.

3. When and With Whom Do We Share Your Personal Information?

In short: We may share information in specific situations and with categories of third parties.

  • Vendors/Consultants/Service Providers: Cloud services, analytics, and marketing tools.
  • Business Transfers: During mergers, sales, or acquisitions.
  • Affiliates: Parent companies, subsidiaries, and joint ventures.
  • Business Partners: To offer certain products, services, or promotions.

4. How Long Do We Keep Your Information?

In short: We keep your information as long as necessary for the purposes outlined in this privacy notice, unless required otherwise by law.

5. How Do We Keep Your Information Safe?

In short: We use organizational and technical measures to protect your data, but no system is 100% secure.

6. Do We Collect Information From Minors?

In short: We do not knowingly collect or market data from children under 18 years of age.

7. What Are Your Privacy Rights?

In short: You may review, change, or terminate your account at any time.

You may also withdraw consent, request corrections, or request deletion of your data.

8. Controls for Do-Not-Track Features

We do not currently respond to DNT browser signals as no uniform standard exists.

9. Do United States Residents Have Specific Privacy Rights?

In short: Yes. Residents of California, Colorado, Connecticut, Utah, and Virginia have specific rights under state privacy laws.

California Residents (CCPA)

You may request deletion, access, or information about categories of data we collect, share, or sell. We do not discriminate against consumers exercising their rights.

Colorado Residents (CPA)

You may request access, correction, deletion, or opt-out of certain processing. Appeals are handled within 45 days.

Connecticut Residents (CTDPA)

Similar rights to Colorado, with appeals handled within 60 days.

Utah Residents (UCPA)

You may access, delete, and opt out of processing for targeted advertising or sale of data.

Virginia Residents (VCDPA)

You may request access, correction, deletion, and opt out of targeted advertising, sales, or profiling. Appeals handled within 60 days.

10. Do We Make Updates to This Notice?

In short: Yes. We will update this notice as necessary to remain compliant with laws.

11. How Can You Contact Us About This Notice?

Email us at privacy@cosangroup.com or write to:

Chronic Care Management, Inc.
6505 Rockside Rd., Suite 200
Independence, OH 44141
United States

12. How Can You Review, Update, or Delete Your Data?

You may request access, updates, or deletion of your personal information at any time. Please fill out and submit a data subject access request.