; or (ii) related to the covered entity by common ownership or corporate control and an ordinary consumer would not understand that the covered entity and the person were related by common ownership or corporate control; (B) is not a service provider used by the covered entity to receive covered data in performing services or functions on behalf of and under the instruction of the covered entity; and (C) with respect to the collection of covered data of an individual, does not have an established business relationship with the individual and does not identify itself to the individual at the time of such collection in a clear and conspicuous manner that is visible to the individual.