Consumer Health Data Privacy Policy

1. Introduction

This Consumer Health Data Privacy Policy ("Policy") describes how [Company Name] ("we," "us," or "our") collects, uses, discloses, and protects consumer health data in compliance with applicable United States laws, including the Washington My Health My Data Act (WMHMDA).

This Policy applies to all consumer health data collected from individuals residing in the United States, with specific provisions applicable to residents of Washington State.

2. Scope and Definitions

2.1 Consumer Health Data

"Consumer Health Data" means personal information that is linked or reasonably linkable to a consumer and that identifies the consumer’s past, present, or future physical or mental health status. This includes, but is not limited to:

Medical conditions, diagnoses, or treatments
Health-related behaviors
Biometric identifiers
Reproductive or sexual health information
Location data that could indicate health-related services

2.2 Consumer

"Consumer" means a natural person who resides in the United States.

3. Categories of Data We Collect

We may collect the following categories of consumer health data:

Information provided directly by you (e.g., health questionnaires, test results)
Device and usage data (e.g., app interactions, device identifiers)
Location data (where permitted)
Inferred data derived from other information

4. Sources of Consumer Health Data

We collect consumer health data from:

You directly
Your devices or applications
Third-party service providers (where applicable)

5. Purposes of Collection and Use

We collect and use consumer health data for the following purposes:

Providing and improving our services
Personalizing user experience
Communicating with you
Compliance with legal obligations
Research and analytics (where permitted)

6. Sharing of Consumer Health Data

We may share consumer health data with:

Service providers and processors
Affiliates and subsidiaries
Legal or regulatory authorities when required

We do not sell consumer health data without obtaining explicit consent where required by law.

7. Consumer Rights (United States)

Depending on your state of residence, you may have the following rights:

Access your data
Request deletion of your data
Withdraw consent
Obtain a copy of your data

8. Washington State Residents (WMHMDA-Specific Rights)

If you are a Washington resident, you have the following additional rights under the Washington My Health My Data Act:

8.1 Right to Access

You have the right to confirm whether we are collecting, sharing, or selling your consumer health data.

8.2 Right to Delete

You may request deletion of your consumer health data.

8.3 Right to Withdraw Consent

You may withdraw consent for the collection or sharing of your consumer health data at any time.

8.4 Right to Know

You have the right to know the categories of consumer health data collected and the purposes for which it is used.

9. Consent Requirements (Washington)

We obtain affirmative consent before:

Collecting consumer health data (except where permitted by law)
Sharing consumer health data with third parties
Selling consumer health data

Consent requests are clear, conspicuous, and separate from other terms.

10. Data Security

We implement appropriate administrative, technical, and physical safeguards to protect consumer health data against unauthorized access, use, or disclosure.

11. Data Retention

We retain consumer health data only for as long as necessary to fulfill the purposes outlined in this Policy unless a longer retention period is required by law.

12. Third-Party Collection

Third parties may collect consumer health data over time and across different websites or online services. Where required, we provide notice and obtain consent.

13. Contact Information

If you have questions or wish to exercise your rights, contact us at:

hello@gettested.us

14. Changes to This Policy

We may update this Policy from time to time. We will notify you of material changes as required by law.

15. Effective Date

Effective Date: 2026/21/4