This Consumer Health Data Privacy Policy (“Health Privacy Policy”) applies to Sensoriy’s collection of “Consumer Health Data” of consumers that reside in certain states such as Connecticut, Washington, or Nevada, in accordance with applicable Consumer Health Data Privacy Laws. This Health Privacy Policy supplements Sensoriy’s Privacy Policy and any capitalized but undefined terms have the meanings given in the Privacy Policy or the relevant law.
Definition of Consumer Health Data
“Consumer Health Data” generally includes personal information that is linked or reasonably linkable to you and that identifies, or that we may use to identify, your past, present, or future physical or mental health status. Consumer Health Data does not include information that is publicly available, de-identified, or aggregated.
Categories We Collect
Information about a health or wellness condition that you provide to us, for example in a questionnaire or survey.
Purposes for Collection & Use
- We may collect, use, disclose, or otherwise process your Consumer Health Data as reasonably necessary to provide you with products or services relevant to your Consumer Health Data. See our Privacy Policy for “Our Commercial and Business Purposes for Collecting Personal Data” and “Other Permitted Purposes for Processing Personal Data”.
- We do not engage in geofencing around stores that provide in-person health care services in Washington to identify or track you when seeking health care services, collect your Consumer Health Data, or send notifications, messages, or advertisements related to such data.
- We may create aggregated, de-identified, or anonymized data from Consumer Health Data, including by removing information that makes the data personally identifiable to you. We may use such data and disclose it to third parties for lawful business purposes, provided we do not disclose it in a manner that could identify you.
- We do not “sell” your Consumer Health Data as defined under Health Data Privacy Laws.
How We Disclose Consumer Health Data
- Vendors. We may disclose your Consumer Health Data to service providers, contractors, analytics partners, business partners, and vendors to provide and improve our Services to you.
- Other Parties. We may disclose your Consumer Health Data to other parties to whom you explicitly gave us consent to disclose.
We may also disclose your Consumer Health Data to government (including law enforcement) or other parties to meet legal requirements and enforce legal terms; and all of your Personal Data may be transferred to a third party if we undergo a merger, acquisition, bankruptcy, or similar transaction.
Consumer Health Data Rights
- Access and Portability. Request confirmation of or access to the Consumer Health Data that we process about you. WA/NV residents may request a list of all third parties and affiliates with whom we have disclosed or sold your Consumer Health Data and their contact information (if applicable). CT residents may request a copy of your Consumer Health Data in a machine-readable format, to the extent technically feasible.
- Correction. (CT) Request correction of inaccuracies in your Consumer Health Data, as appropriate to the nature of such data and our purposes of processing.
- Deletion. Request deletion of the Consumer Health Data that we have collected about you.
- Withdraw Consent. Withdraw consent for us to collect and disclose your Consumer Health Data. Due to the nature of our Services, this may require deletion of your Personal Data or your account.
- Opt-Out of Sale, Targeted Advertising, and Profiling. (CT) Opt-out where applicable; however, we do not conduct such activities.
- Nondiscrimination. We will not discriminate against you for exercising your rights.
- Appeal. If we refuse to act on your request within a reasonable period, you may appeal our decision. If we deny your appeal, you may contact the Attorney General of your state of residence (NV, WA, CT).
How to Exercise Your Rights
Submit a request that (1) provides sufficient information to allow us to verify that you are the person about whom we collected Personal Data and your relationship with us (such as your Contact Data or Sensoriy Account Data), and (2) describes your request in sufficient detail to allow us to understand, evaluate, and respond to it. Each request that meets both of these criteria will be considered a “Valid Request.” We may not respond to requests that do not meet these criteria.
- Email: privacy@sensoriy.com
- Call us: (number to be provided in the Privacy Policy)
Helpful Links
Contact
If you have any questions about this section or whether any rights apply to you, please contact us at privacy@sensoriy.com.