Consumer Health Data Privacy Policy
This Consumer Health Data Privacy Policy supplements our Privacy Policy and applies to “consumer health data” as defined by the Washington My Health My Data Act, Nevada Senate Bill 370, and similar laws: personal information that identifies your past, present, or future physical or mental health status. It is provided by Status Health (“Status Health,” “we,” or “us”) and applies to everyone who uses our website or our at-home Forever Chemical (PFAS) blood test (the “Services”), wherever you live.
Consumer health data we collect
- Test results and sample data. The PFAS measurements a CLIA-certified laboratory produces from the blood sample you collect, the identifiers that link your sample to your account, and the report and dashboard we generate from those measurements.
- Health-related information you provide. Optional profile details such as assigned sex at birth, ethnicity, and date of birth, and any health context you choose to include in a message to us. We use these only to give context to your results and, in aggregate and de-identified form, to understand population trends.
- Order and use information that may reveal that you sought a health service. The fact that you purchased or registered a PFAS test, and related order, shipping, and support records.
We do not collect precise geolocation, and we do not use geofencing around any facility that provides health services. We do not infer health data from unrelated information.
Sources of consumer health data
We collect consumer health data directly from you (when you create a profile, order a test, register a kit, or contact us), from the laboratory that analyses your sample (your results), and from your use of the Services (for example, the results you view in your dashboard).
Why we collect and use it
- To provide the Services you requested: ship your kit, process your sample, and produce and deliver your personal report and dashboard.
- To provide customer support and respond to your questions.
- To secure, maintain, and improve the Services.
- To create aggregate, de-identified statistics and research that cannot reasonably be linked back to you.
- To comply with law and enforce our Terms of Use.
We do not use consumer health data for advertising, and we do not use it to make decisions that produce legal or similarly significant effects about you.
How we share consumer health data
We do not sell consumer health data, and we do not share it with third parties for their own marketing. We share it only with:
- Service providers acting on our behalf, under contracts that restrict their use of your data to the services they perform for us: the CLIA-certified laboratory that analyses your sample; shipping carriers; our payment processor; and our hosting, email, and IT security providers.
- People or organisations you direct us to share with, such as your physician or an organisation program you have chosen to join, and only with your consent.
- Affiliates (companies under common ownership with Status Health), if any, who must follow this Policy.
- Authorities, when required by law, subpoena, or legal process, or to protect the rights, property, or safety of our users, the public, or Status Health.
- A successor in a merger, acquisition, or sale of assets, who must honour this Policy or notify you of any change.
Your rights
Regardless of where you live, you may:
- Access your consumer health data, including a list of the third parties and affiliates with whom we have shared it and how to contact them.
- Withdraw consent to our collection and sharing of your consumer health data.
- Delete your consumer health data. When you ask, we will delete it from our records and instruct our service providers and any affiliates to do the same, subject to legal retention requirements.
How to exercise these rights. Submit a request through our contact page or from your account. We will verify the request by matching the details you provide with your account (for example, confirming the email address on file) and respond within 45 days, extendable once by a further 45 days where permitted, in which case we will tell you why. You may authorise someone else to make a request for you; we will ask for proof of authorisation. We will not discriminate against you for exercising your rights.
Appeals. If we decline your request, you may appeal by contacting us through the contact page and stating that you are appealing. We will respond in writing within 45 days. If the appeal is denied, you may contact the Washington State Attorney General, the Nevada Attorney General, or your own state’s Attorney General.
Consent
We collect and share consumer health data only as necessary to provide the Services you request, or with your clear, affirmative consent. Where a use or sharing would go beyond what is necessary to provide the Services, we will ask for your separate consent first, and you may withdraw it at any time.
Security and retention
We protect consumer health data with administrative, technical, and physical safeguards, including encryption in transit and access controls that limit access to staff and providers who need it to provide the Services. We keep it for as long as your account is active or as needed to provide the Services, and afterwards only as long as necessary to meet legal, accounting, or reporting obligations, after which we delete or de-identify it.
Changes to this Policy
We may update this Policy from time to time. When we do, we will revise the “Last modified” date above and, for material changes, provide a more prominent notice.
Contact us
Status Health, 4340 Duncan Avenue, St. Louis, MO 63110. For questions, requests, or appeals about consumer health data, please reach us through our contact page.