Washington, Connecticut & Nevada Health Data Privacy Policy

Washington, Connecticut & Nevada Health Data Privacy Policy

Effective June 06, 2025

This Health Data Privacy Policy (“Health Data Policy”) describes the health data (defined below) that SiPhox, Inc. (“SiPhox,” “We,” and “us”) collect about you; how we use that information; and the choices you may make with respect to it.

This Health Data Policy only applies to residents of Washington, Connecticut and Nevada. For additional information relating to our general privacy practices in connection with our websites (“Site”) and additional rights that you may have, please visit our Privacy Policy . In the event of a conflict between our Privacy Policy and this Health Data Policy, this Health Data Policy will control.

Our Site may contain links to third-party websites/content/services that are not owned or controlled by SiPhox. SiPhox is not responsible for how these properties operate or treat your health data, so we recommend that you read the privacy policies and terms associated with these third-party properties carefully.

HEALTH DATA WE COLLECT AND USE

Depending on the specific service or product offering that you use or receive and your interaction with us, we may collect certain personal information about you that identifies your past, present, or future physical or mental health status (“health data”). Examples of health data we might collect include:

Information about your health conditions, symptoms, status, diseases, diagnoses, testing, or treatments (including surgeries, procedures, use or purchase of medications, or other social, and medical interventions);
Measurements of bodily functions, vital signs, symptoms, physical health conditions or diagnoses, or other health characteristics;
Information regarding reproductive or sexual health;
Data that could identify you as an individual seeking health care services; and
Any inferences of the above categories of health data that we may infer or derive from non-health related information.

We may collect these categories of health data directly from you, automatically when you use the Site, and from other sources, such as public databases and other third parties.

HOW AND WHY WE USE HEALTH DATA

We use your health data as described in the How and Why We Use Personal Information section of our Privacy Policy, and we also may use this health data to serve you; to connect you with third parties; to validate your ability to access and/or use certain products, services and information; to provide and improve products and services; to protect consumers; to operate, manage, and maintain our business; to respond to your inquiries and fulfill your requests; to send administrative information to you; and to personalize certain experiences.

We may also use your health data for our business purposes and objectives, including, data analysis; audits; developing new products; improving existing products; identifying usage trends; determining the effectiveness of promotional campaigns; preventing fraud; and expanding our business activities. Additionally, we may use this health data to comply with applicable law, legal process, respond to requests from public and government authorities, and to protect our rights, operations, and enforce our terms of service.

We primarily use your health data for these purposes in connection with providing a product or service you have requested. In some circumstances (e.g., where the purpose is not to provide a product or service you requested), we may collect and use health data with your consent.

Additionally, we may deidentify or anonymize health data so that it cannot reasonably be reidentified by us or by another person, and we may use this deidentified data for any reason permitted by applicable law. If we deidentify information that was originally based on health data, we maintain and use that information in deidentified form and will not attempt to reidentify the data, except as otherwise permitted under applicable law.

THE HEALTH DATA WE COLLECT ABOUT YOU AND HOW WE COLLECT IT

We collect the below categories of health information, and we process such categories of health information for the purposes and in the manners described above:

Some individual health conditions, treatment, diseases, or diagnosis;
Bodily functions, vital signs, symptoms, or measurements of health information;
Diagnoses or diagnostic testing, treatment, or medication;
Reproductive or sexual health information;
Data that identifies a resident seeking health care services;
Precise location information that could reasonably indicate a resident’s attempt to acquire or receive health services or supplies;
Use or purchase of prescribed medication;
Health-related surgeries or procedures; and
Any inferences of the above categories of health information derived or extrapolated from nonhealthy information.

We may collect these categories of health information from our Website, including through tracking technologies such as cookies. We may disclose these categories of health information to the same categories of entities as provided in the section above, Disclosure of Your Information. Note that we have the legal basis to collect and process your health information for the purposes of providing you with the services. Where legally required, we obtain consent from you for these processing activities and enter into contracts to restrict non-affiliated parties’ use of your health information.

In addition to the above, we also share and collect the categories of health data, as described in the Information We Collect About You and How We Collect It section of our Privacy Policy.

HOW WE DISCLOSE YOUR HEALTH DATA

We may share these categories of health data with third parties, such as other companies and individuals we retain to perform services on our behalf and other companies and individuals with whom we collaborate with respect to particular products or services (collectively “Providers”) and our affiliates, as described in Disclosure of Your Information section of our Privacy Policy. We may also disclose health data in connection with a business transfer (such as selling or buying a business unit), to comply with the law, or to protect the safety, rights, or property of our customers, the public, SiPhox or others.

YOUR CONSUMER RIGHTS

Individual Rights. In addition to the rights listed in the Your Rights For Your Personal Information of our Privacy Policy, as a Washington, Connecticut or Nevada resident, you have the following additional rights with respect to your health data we process about you:

To request information about:
whether we collect, share, or sell your health data,
the categories or specific pieces of your health data we have collected about you,
the categories of sources from which we collected your health data ,
the purposes for collecting or sharing your health data, and
the third parties with whom we have shared or sold your health data (and who would receive a copy of any written authorization for any sale of your health data).
To request that we correct any incomplete or inaccurate health data that we maintain about you.
To request that we delete your health data that we have collected from you.
To withdraw your consent for us to collect, share, or sell your health data.

Submitting Requests. You may submit requests to exercise these rights by accessing our webform at support@SiPhoxhealth.com. You will be asked to provide certain personal information when submitting your request including your first and last name, email address, and telephone number for us to determine if your information is in our systems.

Appeals. You may have a right to appeal against a decision we make relating to requests to exercise your rights under applicable local law. To appeal a decision, please access our webform at support@SiPhoxhealth.com.

If you have any questions about this Health Data Policy, please contact us by emailing the support@SiPhoxhealth.com, or write to the following address:

SiPhox, Inc.

Privacy Security Officer

111 Terrace Hall Ave

Burlington MA, 01803