Consumer Health Data Privacy Policy

• Information about your health-related conditions, symptoms, status, diagnoses, testing, or treatments (including surgeries, procedures, medications, or other interventions). For example, we may collect such information through surveys or other communication with you for research studies and improving product accessibility.
• Measurements of bodily functions, vital signs, or characteristics, including photographs.
• Information that could identify your attempt to seek health care services or information, including services that allow you to assess, measure, improve, or learn about your or another person’s health.
• Other information that may be used to infer or derive data related to the above or other health information.

• Service providers. Vendors or agents (“processors”) working on our behalf may access consumer health data for the purposes described above. For example, companies we’ve hired to provide customer service support or assist in protecting and securing our systems and services may need access to data to provide those functions. We may also share consumer health data with third-party service providers that assist with the Services, including for generating documentation and supporting certain workflows.
• Business partners. We may share consumer health data with other companies, for example, where you use a Service that is cobranded and jointly operated with another company, or where you use our services to interact with another company.
• Financial institutions & payment processors. When you make a purchase or enter into a financial transaction, we will disclose payment and transactional data to banks and other entities as necessary for payment processing, fraud prevention, credit risk reduction, analytics, or other related financial services.
• Parties to a corporate transaction. We may disclose consumer health data as part of a corporate transaction or proceeding such as a merger, financing, acquisition, bankruptcy, dissolution, or a transfer, divestiture, or sale of all or a portion of our business or assets.
• Affiliates. We enable access to data across our subsidiaries, affiliates, and related companies, for example, where we share common data systems or where access helps us to provide our Services and operate our business.
• Government agencies. We may disclose data to law enforcement or other government agencies when we believe doing so is necessary to comply with applicable law or respond to valid legal process.
• Other third parties. In certain circumstances, it may be necessary to provide data to other third parties, for example, to comply with the law or to protect our rights or those of our customers.
• Other users and individuals. If you use our Services to interact with other users of the Service or other recipients of communications, we will share data, including consumer health data, as directed by you and your interactions.
• The public. You may select options available through our Services to publicly display and disclose certain information, such as your profile, demographic data, content and files, or geolocation data, which may include consumer health data.

• The right of access. Upon verifying your identity, you have the right to confirm whether we are processing personal data and to access or obtain a copy of your personal data. This right does not require us to disclose any trade secrets.
• The right to data portability. When exercising the right of access, you have the right to obtain your personal data in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another entity without hindrance.
• The right of correction. You have the right to request that we correct inaccuracies in the personal data we collected and maintain about you, taking into account the nature of the data and the purposes for which it is processed. We may require documentation to verify the accuracy of requested corrections and may deny requests for certain reasons under state law. If denied, we will provide the reasons in our response.
• The right to request deletion. You have the right to request that we delete the personal data we have concerning you. Upon verifying your identity, we will delete (and direct our service providers to delete) your personal data, unless an exception applies. We may also have a reason under state laws to deny your deletion request, either in whole or in part. If so, we will explain the reason in our response.
• The right to opt-out. To the extent applicable, you have the right to opt-out of our processing of your personal data for the purposes of: (i) targeted advertising; (ii) the sale of your personal data; or (iii) profiling in furtherance of decisions that produce legal effects or similarly significant effects concerning consumers.
• The right not to receive discriminatory treatment. We will not discriminate against you, in violation of applicable state law, for exercising any of your consumer rights.