This PRIVACY NOTICE FOR WASHINGTON AND NEVADA STATE RESIDENTS supplements the information contained in the Privacy Policy of What To Know, LLC (“we,” “us,” or “our”) and applies solely to visitors, users, and others who reside in the States of Washington or Nevada or a natural person whose Consumer Health Data is collected in Washington or Nevada (“you”). It does not apply to our employees, contractors or business contacts. We adopt this notice to comply with the Washington My Health My Data Act and the Nevada Consumer Health Data Privacy Law (collectively “the regulations.”) Any terms defined in the regulations have the same meaning when used in this notice.
In the event of a conflict between any other policy, statement(s), or notice(s) and this Consumer Health Data Privacy Policy, this policy will prevail as to Consumer Health Data collected.
1. Consumer Health Data We Collect
What To Know may collect Consumer Health Data that is linked or reasonably linkable to You (the consumer) and that identifies your past, present, or future physical or mental health status. Consumer Health Data does not include publicly available Data or deidentified data or data explicitly excluded from coverage by the regulations.
The Consumer Health Data we collect depends on your interaction with What To Know and the choices you make, including your privacy settings, products and features you use, your location, and applicable law. Because Consumer Health Data is defined broadly, many of the categories of data we collect could also be considered Consumer Health Data. We will only collect data about you that is necessary for one or more of our legitimate business purposes as stated below, or is required by law. Examples of Consumer Health Data we may collect include:
- Individual health condition, treatment, disease, or diagnosis information;
- Health-related information such as individual health condition, treatment or disease, medical procedure, use or purchase of prescribed medication, bodily function, vital signs, symptoms, or measurements of physical or mental health status, diagnosis or diagnostic testing, treatment, or medication information;
- Biometric Data, such as genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data;
- Precise location information that could reasonably indicate a resident’s attempt to acquire or receive health services or supplies;
- Data that may identify an individual seeking health care services such as: social, psychological, behavioral, and medical intervention information;
- Inferences drawn from other personal data, such as: person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.
2. Why We Collect and Use Consumer Health Data (Purpose)
Primarily, we collect and use Consumer Health Data as reasonably necessary to facilitate providing services and products to you, such as certain patient support service offerings. This may include delivering and administering our products, and other essential business operations that support the provision and administration of the products (such as analyzing our performance, meeting our legal obligations, developing our workforce, reporting on adverse events, monitor our regulatory compliance, and other analysis of our programs and services).
We may use Consumer Health Data for other purposes for which we give you choices and/or obtain your specific additional consent as required by law – for example, for advertising or marketing purposes. We will not sell your data without obtaining your specific (revokable) consent to do so.
3. The Sources from Which What To Know Collects Consumer Health Data
We collect personal data (which may include Consumer Health Data) directly from you, from your interactions with What To Know (online and offline), our products and services, from third parties, and from publicly available sources. We obtain the categories of personal information listed above from the following categories of sources:
- Directly from you or your caregivers or agents;
- Indirectly from you, your caregivers, or agents. For example, information we collect in the course of providing services;
- Directly and indirectly from activity on our websites. For example, website registration information; and
- From third parties in connection with the services that we perform.
4. Categories of Consumer Health Data We Share
What To Know may share all the categories of Consumer Health Data listed above in Section 1.
5. Categories of Third Parties and Affiliates with Whom We Share
The categories of Third Parties with which What To Know may share Consumer Health Data include:
- Contractors with whom we have contractual data sharing agreements;
- Vendors and service providers who help us provide these services;
- Third parties to whom you or your agents authorize us to disclose your Consumer Health Data in connection with products or services we provide to you;
- Regulators, such as the FDA;
- Law enforcement and government agencies, where required or permitted by law or court order;
- What To Know’s external advisors (accountants, auditors, and legal advisors).
6. Your Privacy Rights and Choices
The regulations provide you with certain rights with respect to Consumer Health Data, including a right to confirm, access, delete or withdraw consent relating to such data, subject to certain exceptions. You can exercise your privacy rights by submitting a request as outlined below.
To exercise your rights with respect to your Consumer Health Data (including your right to revoke consent), depending on your state of residence, you may contact us at any time at [email protected].
If you have any concerns about the way your Consumer Health Data has been collected or handled by What To Know, queries regarding this privacy statement, or you would like to exercise your rights with regard to your Consumer Health Data, you can contact us at [email protected].
What To Know reserves the right to amend this policy at any time. If What To Know materially changes its privacy practices, our Consumer Health Data Privacy Policy will be updated to reflect these changes and the effective date of our revised policy will be referenced below.
Effective Date: July 1, 2024
