Consumer Health Data Privacy Policy

1. What consumer health data do we collect?

• Identity and contact information connected to a health service or health record.
• Health conditions, symptoms, goals, history, allergies, medications, and treatments.
• Lab orders, samples, appointments, lab results, measurements, and biomarkers.
• Provider, lab, pharmacy, and health-service communications and records.
• Purchases or use of health-related products, tests, prescriptions, or services.
• Health information you import from a device or service at your direction.
• Approximate or precise location you choose to provide when looking for nearby lab or collection sites.
• Scores, trends, summaries, recommendations, and other health inferences created from the information above.

2. Why do we collect and use it?

• Provide a product or service you request.
• Confirm eligibility and coordinate lab, collection, clinical, pharmacy, or fulfillment services.
• Receive, organize, display, and analyze your health information.
• Communicate about orders, appointments, results, account support, and safety.
• Find nearby lab or collection sites when you ask us to.
• Maintain records, prevent fraud, secure the services, and comply with law.
• Improve Vitals Vault using aggregated or de-identified information where permitted by law.

3. Where does it come from?

• You, including information you enter, upload, or communicate.
• Licensed professionals, medical groups, labs, collection providers, pharmacies, and other health-service partners involved in a service you request.
• Devices, apps, or records you choose to connect or import.
• Your browser or device when you choose to share your location.
• Transactions and your activity within Vitals Vault.
• Inferences created by Vitals Vault from the sources above.

4. What consumer health data do we share?

We may share the categories listed in Section 1 only as reasonably necessary for a service you request, with your consent, or as permitted by law. Depending on the service, that may include identity and contact information, intake responses, health history, medications, orders, results, records, provider communications, and related transaction information.

5. Who receives it?

• Independent licensed professionals and medical groups.
• Laboratories and specimen-collection providers.
• Pharmacies and health-product fulfillment providers.
• Cloud hosting, data storage, security, communications, customer support, and other processors acting under contract for Vitals Vault.
• Mapping, geocoding, and location-search providers when you ask to find nearby services.
• Government, regulatory, or legal recipients where disclosure is required or permitted by law.
• A buyer or successor in a merger, acquisition, reorganization, bankruptcy, or sale of assets, subject to applicable law.

Specific affiliates: None.

Vitals Vault does not sell consumer health data.

6. When do we ask for consent?

We ask for consent before collecting or sharing consumer health data when the law requires it. The request will describe the data, purpose, and recipients it covers. The law may also allow us to collect, use, or share consumer health data when needed to provide a product or service you requested. You may withdraw consent for future collection or sharing as described below.

7. How do we use location?

We use precise location only when you choose to share it to find nearby lab or collection sites. Vitals Vault does not use geofencing around health care facilities to identify or track people seeking health services, collect consumer health data, or send health-related messages or advertising.

8. What rights do you have?

You may ask us to:

• Confirm whether we collect, share, or sell your consumer health data.
• Give you access to the consumer health data we hold about you.
• Provide a list of third parties and affiliates with whom we shared or sold your consumer health data, including contact information where required.
• Withdraw consent for future collection or sharing.
• Delete consumer health data, subject to legal exceptions.

Email support@vitalsvault.com with the subject “Consumer Health Data Request.” We may verify your identity before completing a request. If we deny your request, you may appeal by replying with the subject “Consumer Health Data Appeal.” We will explain our decision and, where required, how to contact the appropriate regulator.

9. How can you contact us?

• Email: support@vitalsvault.com
• Mail: Vitals Vault Inc., 1700 7th Ave, Suite 2100, Seattle, WA 98101