Consumer health data privacy policy

Standalone document required by Washington's My Health My Data Act and comparable state laws.

This Consumer Health Data Privacy Policy ("Policy") describes how Insyght Health LLC ("Insyght," "we," or "us") collects, uses, and shares "consumer health data" as defined under Washington's My Health My Data Act and comparable state laws ("Consumer Health Data"). This Policy is separate from, and supplements, our general Privacy Policy.

1. What is consumer health data

Consumer Health Data means personal information that a business collects, and that a regulated law links to a consumer's past, present, or future physical or mental health status. For Insyght, this includes:

• Biomarker and laboratory test results
• Health scores and interpretive reports generated by the Platform
• Body-composition and other biometric measurements
• Self-reported health history, symptoms, and goals
• Information about your enrollment in, or use of, the Membership and any associated telehealth or testing services
• Precise location information that could reveal an attempt to seek health care services (if collected)

2. Categories of consumer health data we collect

We collect the categories of Consumer Health Data listed in Section 1, directly from you (through enrollment, intake, and use of the Platform), from our laboratory partners, and, where you separately elect a physician-ordered service, from the Telehealth Provider to the extent necessary to generate your health scores and reports.

3. Purpose of collection and use

We collect and use Consumer Health Data to:

• Provide the Membership, including generating your health scores and reports
• Coordinate physician-ordered laboratory testing you elect to receive
• Communicate with you about your Membership
• Maintain and improve the security and functionality of the Platform
• Comply with legal obligations

We do not use Consumer Health Data for any purpose beyond what is necessary to provide the products and services you have requested, unless you separately, affirmatively consent.

4. Categories of third parties we share consumer health data with

• Laboratory partners (e.g., Quest, Junction) to process biomarker panels
• The Telehealth Provider, to the extent necessary to coordinate physician-ordered testing you elect to receive
• Service providers who process data on our behalf under contractual confidentiality and security obligations (e.g., hosting, analytics)

We do not sell Consumer Health Data. We do not share Consumer Health Data with third parties for advertising purposes.

5. Your rights

Depending on your state of residence, you have the right to:

• Confirm whether we are collecting, sharing, or selling your Consumer Health Data, and access that data
• Withdraw your consent to our collection or sharing of your Consumer Health Data
• Have your Consumer Health Data deleted, subject to limited exceptions (e.g., data we are required to retain by law)
• Appeal a denial of a rights request

To exercise any of these rights, contact us using the information in Section 8. We will not discriminate against you for exercising these rights, though declining to provide certain Consumer Health Data may limit our ability to provide the Membership.

6. Consent

Where required by law, we obtain your affirmative, opt-in consent before collecting Consumer Health Data beyond what is strictly necessary to provide the Membership you requested, and before sharing Consumer Health Data with any third party for a purpose you have not authorized.

7. Data retention and deletion

We retain Consumer Health Data for as long as necessary to provide the Membership and to comply with applicable legal and recordkeeping requirements.

We retain Consumer Health Data for as long as needed to provide the Membership, and afterwards for the period set for each type of data in our data retention schedule, including any longer period required by applicable law or medical-records retention obligations.

8. Contact us

To exercise your rights or ask questions about this Policy, contact us at: Insyght Health LLC, 3801 PGA Blvd, Palm Beach Gardens, FL 33410. Email: customerservice@insyghthealth.com. Phone: (561) 337-5208.

9. Changes to this policy

We may update this Policy from time to time. We will post the updated Policy at this same standalone location and update the "Last Updated" date above.