Washington Health Privacy Notice
Last Updated: 23 Sep 2024
Information for Individuals Whose Health Data is Collected in Washington
We collect Consumer Health Data from individuals in Washington. Our collection of Consumer Health Data is covered by the Washington My Health My Data Act (“WA MHMD”). In addition to our Privacy Notice at https://prenuvo.com/privacy/ and other Prenuvo Privacy Notices or Addendums, this Washington Health Privacy Notice only applies to individual patients or consumers who are residents of the state of Washington, or individuals whose Consumer Health Data is collected in the state of Washington (“Health Data Subjects,” or “you”).
"Consumer Health Data” means personal information that is linked or reasonably linkable to a particular individual and that identifies that individual’s past, present, or future physical or mental health status. However, the following categories of information are not Consumer Health Data and not covered by this Washington Health Privacy Notice:
- Deidentified data;
- Protected Health Information (“PHI”), as defined by the Health Insurance Portability and Accountability Act (“HIPAA”);
- Health care information collected, used, or disclosed in accordance with WA Revised Code § 70.02 (“Medical Records – Health Care Information Access and Disclosure”);
- Publicly available information; or
- Information otherwise excluded from the scope of WA MHMD.
This Washington Health Privacy Notice provides the following information to individuals in Washington:
- Categories of Consumer Health Data we collect;
- Purposes for which we collect Consumer Health Data;
- How we use and process Consumer Health Data;
- Categories of sources from which we collect Consumer Health Data;
- Categories of Consumer Health Data we share;
- Categories of third parties or specific affiliates with whom we share Consumer Health Data;
- Information otherwise excluded from the scope of WA MHMD.
- How Health Data Subjects can exercise their rights under WA MHMD:
- The right to confirm if we are collecting, sharing, or selling the Health Data Subject’s Consumer Health Data
- The right to access Consumer Health Data
- The right to delete Consumer Health Data
- The right to withdraw consent for the collection and/or sharing of Consumer Health Data
- The right to appeal our decisions on requests to exercise any of these rights.
This Washington Health Privacy Notice does not apply to the information of individuals acting in an employment context, such as job applicants, employees, or contractors to by Prenuvo, Inc. and its affiliates, including Prenuvo of Golden State, P.C., Prenuvo of Minnesota LLC, Prenuvo Radiology PC, Hercules Study PC, Independent Radiology of New York P.C., Vigilance Health Imaging Network, and LISA Preventative Health PLLC , collectively referred to as “Prenuvo”, “us,” “we,” or “our”.
Sources of Consumer Health Data
We collect Consumer Health Data from the following sources:
- Directly from you;
- Inferences from your activity using our services;
- From our affiliates (businesses that share common branding and ownership with Prenuvo);
- From our business partners (companies that we have a pre-existing commercial relationship with);
- From our advertising partners.
Categories of Consumer Health Data We Collect
We may collect the following categories of Consumer Health Data with your consent, or to the extent necessary to provide a product or service that you requested. We only collect the categories of Consumer Health Data described in this Washington Health Privacy Notice.
- Information relating to any health condition or status, disease or diagnosis;
- Information relating to social, psychological, behavioral or medical interventions;
- Information relating to surgeries or other health-related procedures;
- Information relating to bodily functions, vital signs, or symptoms;
- Information relating to diagnoses, treatment, or medication;
- Information relating to reproductive or sexual health;
- Information relating to gender-affirming care;
- Data that identifies a consumer seeking health care services;
- Any other information used to associate or identify an individual with any category of health data that is derived or extrapolated from non-health information (including, without limitation, proxy, derivative, inferred or emergent data derived through an algorithm, machine learning or any other means).
Use of Consumer Health Data
We only use Consumer Health Data as described in this Washington Health Privacy Notice. We may use Consumer Health Data to fulfill the purposes listed below.
Purpose for Collecting and Using Consumer Health Data
We only collect and use Consumer Health Data for the purposes described in this Washington Health Privacy Notice. We may collect and use Consumer Health Data for the following purposes:
- To provide health and medical imaging, reporting and related services to our Patients via our licensed medical providers (including those who provide healthcare services, drugs, or medical devices);
- To verify your identity as the holder of an account with us;
- To administer your account, process payments, troubleshoot issues, and provide you with customer support;
- To communicate with you about the services, and to deliver any administrative notices or alerts and communications relevant to your use of the services;
- To allow you to participate in sweepstakes, contests, or other promotions;
- To market our services that we believe may be of interest;
- To tailor the features, performance and support of the services to you and your preferences;
- To provide, operate, analyze usage of, and improve the services, including performing research and development;
- To investigate, detect, deter, prevent, report, defend against, or take other action regarding security incidents, abusive behavior, suspected fraud, malicious or illegal activities, or violations of our Terms of Service or other policies;
- To make sure our terms, policies, and agreements with you and any third parties are enforced;
- To comply with applicable laws and regulations.
- To conduct internal research and 3rd party research to advance the science of preventative healthcare.
Sharing of Consumer Health Data
- Advertisers and advertising networks;
- Business partners;
- Affiliates of Prenuvo;
- Social media companies; and
- Internet cookie information recipients, such as analytics and behavioral advertising services
We may share each of the categories of Consumer Health Data described above with your consent, or to the extent necessary to provide a product or service that you requested.
“Share” under the WA MHMD means to release, disclose, disseminate, divulge, make available, provide access to, license, or otherwise communicate Consumer Health Data to a third party or affiliate. However, “share” does not include:
(i) disclosure of Consumer Health Data to provide goods or services in a manner consistent with the purpose for which we collected the Consumer Health Data;
(ii) disclosure to a third party with whom you have a direct relationship when the disclosure is for the purpose of providing a product or service you if we maintain control and ownership of the data, and the third party uses the data only at our direction and consistent with your consent and for the purpose for which it was collected; or
(iii) disclosure or transfer of Consumer Health Data to a third party as an asset that is part of a merger, acquisition, bankruptcy, or other transaction in compliance with WA MHMD.
The term “third party,” as used in this Washington Health Privacy Notice, means a person who is not a consumer, an entity regulated under WA MHMD, a processor, or an affiliate of an entity regulated under WA MHMD.
We may share Consumer Health Data to the following categories of third parties and specific affiliates:
Exercising Your Health Data Rights
Health Data Subjects have the following rights under WA MHMD:
- The right to confirm if we are collecting, sharing, or selling your Consumer Health Data;
- The right to access your Consumer Health Data;
- The right to delete your Consumer Health Data;
- The right to withdraw consent for the collection and/or sharing of your Consumer Health Data;
- The right to appeal our decisions on requests to exercise any of these rights.
If you are a Health Data Subject, you can submit a request to exercise your rights under WA MHMD by sending an email to [email protected] with the subject line “Health Privacy Rights Request” or by phoning our team at 1-833-773-6886. You may submit a rights request, free of charge, up to two times per year.
To protect your privacy, we may need to authenticate your identity before we respond to your rights request. All Consumer Requests must provide sufficient information that allows us to reasonably verify you are the individual about whom we collected the Consumer Health Data or that you are a person authorized to make a request on behalf of the individual about whom we collected the Consumer Health Data. This may include:
- filling out an interactive webform; or
- verifying one or more of the following:
- ~full first & last name;
- ~date of birth;
- ~mailing address on file;
- ~phone number;
- ~email address
- ~and/or any other appropriate individualized data point.
You must also describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.
If you do not complete the verification process, we may be unable to process your request. Any information you provide to authenticate your identity will only be used to process your rights request and not for any other purpose. If you have a password-protected online account with us, we may require you to submit your rights request securely through that account. Please be aware that we do not accept or process rights requests submitted through other means not outlined in this Washington Health Privacy Notice.
We will respond to your rights request within 45 days, though in certain cases we may inform you that we will need up to another 45 days to act on your request. If we suspect fraudulent or malicious activity, we will delay taking action on your request until we can appropriately verify your identity and the request as authentic. If you believe our response to your rights request is insufficient, you can appeal our decision by submitting an appeal request via the same method used to submit your initial request, and we will inform you of our final decision within 45 days.
We reserve the right to charge a reasonable fee or take other appropriate action in response to requests from a Health Data Subject that are manifestly unfounded, excessive, or repetitive.
If you believe any of your Consumer Health Data is inaccurate or incomplete, you may review and correct some Consumer Health Data about yourself by logging into your online account with us and visiting your “Profile” page or you may submit a request to correct it by emailing us at [email protected] or phoning our team at 1-833-773-6886.
Sales of Consumer Health Data
WA MHMD defines a “sale” as the exchange of Consumer Health Data for monetary or other valuable consideration, excluding exchange:
(i) to a third party as an asset that is part of a merger, acquisition, bankruptcy, or other transaction in which the third party assumes control of all or part of our assets that complies with the requirements and obligations in WA MHMD; or
(ii) by us to a processor when such exchange is consistent with the purpose for which the Consumer Health Data was collected and disclosed to the consumer.
As required by law, we only sell Consumer Health Data after we have obtained a valid authorization from the Health Data Subject(s) whose Consumer Health Data is involved in the sale. If you have previously authorized us to sell your Consumer Health Data, you can revoke that authorization at any time by following the instructions listed on your original authorization. If you do not have your original authorization, you can contact us at [email protected] for information on how to revoke your authorization.
Third-Party Collection
A third party may collect Consumer Health Data over time and across different Internet websites or online services when you use any Internet website or online service of Prenuvo. However, we do not knowingly permit third parties to collect Consumer Health Data from you while you are on web pages that are made available after you log in to the password-protected part of our website.
We do not control the collection and use of your information collected by third parties. These third parties may aggregate the information they collect with information from their other customers for their own purposes. You can opt out of third parties collecting your information for targeted advertising purposes in the United States by visiting the National Advertising Initiative's (NAI) opt-out page and the Digital Advertising Alliance's (DAA) opt-out page.
You may also see certain ads on other websites because we participate in advertising networks. Ad networks allow us to target our messaging to users through demographic, interest-based, and contextual means. These networks track your online activities over time by collecting information through automated means, including through the use of cookies, web server logs, and web beacons. The networks use this information to show you advertisements that may be tailored to your individual interests.
Changes to this Washington Health Privacy Notice
We reserve the right to amend this Washington Health Privacy Notice at our discretion and at any time. When we make material changes to this Washington Health Privacy Notice, we will post the updated version on our website and update the Last Updated date. Your continued use of our website and services following the posting of changes constitutes your acceptance of such changes.
Contact us
If you have any questions or concerns regarding this Washington Health Privacy Notice, contact us at [email protected].