Insito Health Consumer Health Data Privacy Policy
Last Updated: 08/30/2024
This Consumer Health Data Privacy Policy supplements the Insito Health Privacy Policy (the “Privacy Policy”) and applies to personal data defined as “consumer health data” (“CHD”) by the Washington state My Health My Data Act (“MHMDA”) and Nevada’s Consumer Health Data Privacy Law (“Nevada CHD Law”). Undefined capitalized terms have the meaning in the Privacy Policy.
Categories of CHD Collected
Our Services currently focus on finding a pharmacy that has your prescription in stock. As described further in our Privacy Policy, and depending on applicable law and how you interact with Insito Health, we may collect personal information that is considered CHD. Specifically, we need information about the prescription you are trying to find, such as the patient’s name, medication name, dose, quantity, and whether you have a brand preference for the medication. We may also collect the prescriber’s name. We do not request, require, or use information about health or medical conditions, such as the reason you need the prescription.
Sources of CHD
As described further in our Privacy Policy, we collect CHD from the following sources:
directly from our customer (who may use our service to search for a medication for themselves or for a third party such as a family member);
prescribers;
drug manufacturers;
affiliates;
service providers and partners.
Purposes for Collection of CHD
We describe the purposes for collection and use of CHD in the “Use of Information” section of our Privacy Policy. As further described there and subject to applicable law (including, where required, your consent), we may collect and use CHD (1) to provide our Services (including analyzing, managing, protecting, and improving the Services); (2) for advertising and marketing; and (3) to address legal matters, such as to comply with laws or to establish, exercise, or defend our legal rights. We may also use your as CHD for other purposes you authorize.
How and Why We Share CHD
We may share each of the categories of CHD described above with the categories of entities described in the “Disclosure of Information” section of our Privacy Policy (including, where required, your consent). For example, we may share all of the CHD with a pharmacy when asking about its ability to fill your prescription.
As further described in our Privacy Policy and subject to applicable law (and, where legally required, your consent), we may share the categories of CHD:
to provide products and services to you (including by sharing all of the CHD with a pharmacy when asking about prescription availability);
to ensure a consistent level of service across our products and services;
to enhance our products, services, and your customer experience;
to protect Insito Health and others, including to enforce our Terms of Service, Privacy Policy, or other contracts with you, and for fraud prevention;
to comply with our legal obligations;
in connection with any negotiation or completed acquisition, merger, or purchase involving our business assets
to create Aggregate/De-Identified Data; and
for other reasons at your direction or with your consent.
As further described in our Privacy Policy, and subject to applicable law (e.g. subject to your consent in certain situations), we may share CHD with the following categories of third parties and affiliates:
Healthcare providers and related third party services, such as pharmacies or your medical practitioner;
Affiliates (e.g., parent companies, subsidiaries, sister companies, or others in our corporate family);
Vendors and service providers;
Other entities to whom disclosure is made:
For the protection of Insito Health and others (e.g. to governmental or regulatory agencies);
For legal purposes (e.g. to governmental entities in response to legal process);
In connection with corporate transactions (e.g., to an acquirer of our business); or
At your direction or with your consent (such as sharing with other users/public if you post in public forums or interact with other users).
In certain cases (and, where legally required, your consent), a third party may collect CHD over time and across different Internet websites or online services, including when you use our website.
How To Exercise your MHMDA or Nevada CHD Law Rights
Subject to exceptions, the MHMDA and Nevada CHD Law extend certain rights relating to CHD. Depending on your jurisdiction and situation, this may include rights (1) to confirm whether Insito Health is collecting, sharing or selling your CHD; (2) to access your CHD; (3) to delete your CHD; and (4) to withdraw your consent to the collection or sharing of your CHD. You can seek to exercise these rights by emailing us at privacy@insitohealth.com. Depending on the nature of your request, we may contact you for further information if appropriate to authenticate your identity. Note, however, that Insito Health will never ask you for sensitive personal or financial information when authenticating your identity, and no Insito Health employee will ask you to tell them your password.
If we deny your request in whole or in part and the MHMDA or Nevada CHD Law applies to our handling of your CHD, you may appeal that decision by emailing us at privacy@insitohealth.com and explaining why you disagree with our decision. If you are a resident of Washington and your appeal is denied, you can contact the Washington State Attorney General at www.atg.wa.gov/file-complaint. If you are a resident of Nevada and your appeal is denied, you can contact the Nevada Attorney General at https://ag.nv.gov/Complaints/File_Complaint/.
Updates to this CHD Policy
We reserve the right to change this CHD Policy at any time to reflect changes in the law, our data collection and use practices, the features of our services, or advances in technology. We will make the revised CHD Policy accessible from a link in the footer of www.insitohealth.com, so you should review it periodically. The date this CHD Policy was last revised is identified at the top of the document. Your continued use of our website after such amendments (and additional notice, where applicable) will be deemed your acknowledgment of these changes to this CHD Policy. If we make a material change to the CHD Policy, we will obtain your consent if legally required.
Contact Us
If you have any questions about this CHD Policy or Insito Health's privacy practices, please contact us at privacy@insitohealth.com.