Legal

Consumer Health Data Policy

Last updated: [add effective date]

This Consumer Health Data Policy supplements our Privacy Policy and describes how Vizlitics, Inc. ("Vizlitics," "we," "us") handles "consumer health data" as that term is defined under applicable New York State and other U.S. consumer health data privacy laws.

Vizlitics is primarily a business-to-business company. Health information we process as a business associate on behalf of our health-system clients is governed by HIPAA and the agreements we hold with those clients. This policy addresses consumer health data that Vizlitics collects directly from individuals through its Services, where applicable New York State or other state law treats that information as regulated consumer health data.

Definitions

The following terms have the meanings below. Any term not defined here has the meaning given in our Privacy Policy.

Consumer health data means personal information that is linked, or can reasonably be linked, to an identified or identifiable individual and that identifies that individual's past, present, or future physical or mental health status — to the extent such information is regulated as consumer health data under applicable New York State or other state law.

Personal information means information that identifies, or can reasonably be associated or linked with, a particular individual. It does not include information that has been de-identified or is reported only in aggregate, provided that information cannot reasonably be re-associated with an individual.

Consumer health data we collect

Where an individual uses our Services directly, we may collect consumer health data that the individual chooses to provide or authorizes us to obtain. Depending on the Service, this may include categories such as:

Health conditions, diagnoses, and diagnostic or testing results;
Treatments, procedures, and medications;
Symptoms, vital signs, and other health-related measurements;
Information about an individual's efforts to seek or obtain health care services; and
Information we derive from other data in order to associate an individual with any of the categories above.

We collect consumer health data from the following sources:

Directly from you, when you provide it as part of using our Services;
From your healthcare provider or other sources, with your permission or authorization;
Automatically, when you interact with our website or applications; and
From service providers that support our Services.

How we use it

We use consumer health data only for purposes permitted by law and consistent with the reason it was provided, including to:

Provide, operate, and secure our Services;
Respond to your questions and fulfill your requests;
Perform our agreements with you or your organization;
Improve our products, using de-identified data or data you have authorized us to use;
Send operational communications related to the Services; and
Meet legal, regulatory, and contractual obligations.

Your rights

Subject to applicable law, you may have the right to:

Confirm whether we collect, share, or sell your consumer health data;
Access your consumer health data, including a list of the third parties and affiliates with which we have shared it;
Withdraw your consent to our collection, sharing, or sale of your consumer health data;
Request deletion of your consumer health data; and
Correct or amend consumer health data we hold about you.

To exercise any of these rights, email us at privacy@vizlitics.com with your name, the email address associated with your interactions with Vizlitics, and details of your request. You may designate an authorized agent to submit a request on your behalf by providing written, signed authorization from both you and the agent, or a valid power of attorney; we will still ask you to provide enough information to verify your identity.

We will respond within the timeframe required by applicable law and will allow you to appeal a decision as permitted by law; appeals may be sent to privacy@vizlitics.com. If we deny your request and your information is protected under applicable New York State law, you may also be able to file a complaint with the Office of the New York State Attorney General.

For additional rights that may apply to your personal information generally, please review our Privacy Policy.

Changes to this policy

We may review and update this policy from time to time to maintain an appropriate level of protection for your consumer health data. We will post any updates on this page and revise the "Last updated" date above.

Contact us

If you have questions about this policy or how we handle consumer health data, contact us at privacy@vizlitics.com.