Privacy Policy
This Privacy Policy explains how Status Health (“Status Health,” “we,” “us,” or “our”) collects, uses, protects, and shares information when you visit statushealth-v2.pages.dev, create an account, or order and use our at-home Forever Chemical (PFAS) test (together, the “Services”). By using the Services, you agree to the practices described here.
The short version
- Your individual test results belong to you. They are private to your account. We do not sell your personal information or your results.
- We collect only what we need to run the Services: to create your account, ship your kit, process your sample, deliver your report, and support you.
- We share information only with the service providers who help us deliver the test (for example, the laboratory that analyses your sample and our payment processor), and only as described below.
- Any organisation-level or research view we produce is aggregate and de-identified, it never identifies you, and is shared only with your consent.
- You can ask us to access, correct, or delete your information at any time.
Information we collect
Information you give us. When you create an account, place an order, or contact us, we collect details such as your name, email address, shipping address, phone number, account password, and any message you send. If you register a kit, we collect the information needed to link your sample to your account.
Health and sample information. To provide the test, we process the blood sample you collect at home and the PFAS measurements the laboratory produces from it, together with any health-related context you choose to provide. This information is used to generate your personal report and is treated as sensitive.
Payment information. Payments are handled by a third-party payment processor. We do not store full card numbers on our systems; the processor handles card details under its own security standards.
Information collected automatically. Like most websites, we collect basic technical and usage data, such as your device and browser type, pages viewed, and general location inferred from your IP address, through cookies and similar technologies, to keep the site secure and understand how it is used.
How we use information
- To create and manage your account and deliver the test you ordered.
- To ship your kit, process your sample, and produce and deliver your personal report and dashboard.
- To provide customer support and respond to your questions.
- To operate, secure, maintain, and improve the Services.
- To send you service messages (for example, order and result notifications) and, where you have opted in, occasional updates you can unsubscribe from at any time.
- To produce aggregate, de-identified statistics and research that never identify you.
- To comply with law and enforce our Terms of Use.
How we share information
We do not sell your personal information. We share it only in these situations:
- Service providers. With companies that perform services on our behalf, for example, the CLIA-certified laboratory that analyses your sample, shipping carriers, our payment processor, and hosting and email providers, who are permitted to use your information only to perform those services for us.
- With your direction or consent. When you ask us to share your results, for example, with your physician or an organisation program you have joined.
- Aggregate, de-identified data. We may share information that has been aggregated or de-identified so that it cannot reasonably be used to identify you.
- Legal and safety. When required by law, subpoena, or legal process, or to protect the rights, property, or safety of our users, the public, or Status Health.
- Business transfer. In connection with a merger, acquisition, or sale of assets, in which case we will require the recipient to honour this Policy or notify you of any change.
A note on your health data
Status Health is a direct-to-consumer service. We treat your sample data and results as sensitive personal information: we protect them with strong safeguards, keep them private to your account, and handle them in line with the consumer-privacy and consumer-health-data laws that apply to us. Our separate Consumer Health Data Privacy Policy describes in detail the health data we collect, how we use and share it, and your rights over it.
Cookies and tracking
We use cookies and similar technologies to keep you signed in, remember your preferences, keep the site secure, and measure how the site is used. You can control cookies through your browser settings; disabling some cookies may affect how parts of the Services work. Where required, we ask for your consent to non-essential cookies.
Your choices and rights
You can review and update your account information at any time by signing in, or by contacting us. Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise any of these rights, contact us using the details below; we will respond as required by applicable law and may need to verify your identity first. You will not be discriminated against for exercising your rights.
Your privacy rights by state
California residents (CCPA/CPRA). You have the right to know what personal information we collect, use, and disclose (including the categories of sources and the purposes described above); to request a copy of that information; to request correction of inaccurate information; to request deletion; and to limit the use of sensitive personal information to what is necessary to provide the Services. We do not sell your personal information and do not share it for cross-context behavioural advertising, so there is no need to opt out of sale or sharing. We will not discriminate against you for exercising these rights. You may designate an authorised agent to make a request on your behalf; we will ask for proof of authorisation.
Residents of Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Delaware, New Jersey, and other states with comprehensive privacy laws. You have comparable rights to access, correct, delete, and obtain a portable copy of your personal information, and to opt out of targeted advertising, sale, and certain profiling (none of which we do). If we deny a request, you may appeal by contacting us and stating that you are appealing; we will respond in writing within the period your state law requires and, if the appeal is denied, tell you how to contact your state Attorney General.
Washington and Nevada residents. Your consumer health data is also covered by our separate Consumer Health Data Privacy Policy, which describes the categories of health data we collect, how we use and share it, and how to exercise your rights to access, withdraw consent, and delete it.
How to exercise your rights. Submit a request through our contact page or from your account. We verify requests by matching the details you provide with the information in your account (for example, confirming the email address on file) and respond within 45 days, extendable once by a further 45 days where permitted, in which case we will tell you why.
Data retention
We keep your information for as long as your account is active or as needed to provide the Services, and afterwards only as long as necessary to meet legal, accounting, or reporting obligations. When information is no longer needed, we delete it or de-identify it.
How we protect your information
We use administrative, technical, and physical safeguards designed to protect your information, including encryption in transit and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security; you are responsible for keeping your account password confidential.
Children’s privacy
Accounts may only be created by adults 18 and older. A parent or legal guardian may order and manage a test for a minor in their care (ages 7 and up); in that case we collect the minor’s information only from the parent or guardian, who is responsible for it. We do not knowingly collect personal information directly from anyone under 18, and we do not knowingly collect information from children under 13 without verifiable parental consent. If you believe a minor has provided us information directly, contact us and we will delete it.
Changes to this Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last modified” date above and, for material changes, provide a more prominent notice. Your continued use of the Services after an update means you accept the revised Policy.
Contact us
Status Health is based at 4340 Duncan Avenue, St. Louis, MO 63110. If you have questions about this Policy or your information, please reach us through the contact page on our site.