CONSUMER HEALTH DATA PRIVACY POLICY

Your Consumer Health Data Rights

You may have certain rights to your Consumer Health Data under applicable state law. These rights may vary depending on your state of residence. Any of the rights discussed below may be subject to certain limitations (for example, a monetary charge).

If you wish to exercise these rights, please visit xxxx.com.

Withdraw consent. To the extent we rely upon your consent for either our collection or sharing of your Consumer Health Data, you have the right to withdraw such consent from any future collection or sharing.
Access and confirm. You have the right to ask us to confirm whether we have collected, shared or sold your Consumer Health Data. Further, you have the right to access (in other words, request a copy of) the Consumer Health Data that we have collected, shared or sold. You also have a right to access a list of all "third parties" (as applicable state law defines that term) and affiliates with whom we have shared or sold your Consumer Health Data and receive certain corresponding information.
Correction. You have the right to ask us to correct inaccuracies in your Consumer Health Data.
Deletion. You have the right to ask us to delete your Consumer Health Data.
Appeal. You have the right to appeal our denying a right you have attempted to exercise. We will provide details on how to appeal our denial in connection with such action.

Information sourced from hims.com/consumer-health-data-privacy-policy
Additional information sourced from ro.co/consumer-health-data-privacy-policy

Categories of CHD Collected

As described further in our Privacy Policy, and depending on how you interact with CoreLab and applicable law, we may collect the following categories of CHD, as broadly defined in the MHMDA, Nevada CHD Law, and CTDPA:

Individual health conditions, treatment, diseases, or diagnoses: E.g. in connection with you seeking healthcare services or medications from CoreLab.
Social, psychological, behavioral, and medical interventions: E.g. through collection of your medical history as part of the treatment services you seek on or through Ro.
Health-related surgeries or procedures: E.g. through collection of health-related surgeries or procedures within your medical history as part of the treatment services you seek on or through Ro.
Use or purchase of prescribed medication: E.g. through your purchase of medication through Ro or through the medical history you provide to us.
Bodily functions, vital signs, symptoms, or measurements of health information: E.g. as part of you seeking healthcare services or medications from CoreLab.
Diagnoses or diagnostic testing, treatment, or medication: E.g. as part of the medical history collected by CoreLab, or when you otherwise seek healthcare services or medications from CoreLab.
Gender-affirming care information: E.g. as part of the medical history collected by CoreLab, or when you otherwise seek healthcare services or medications from CoreLab.
Reproductive or sexual health information: E.g. as part of the medical history collected by CoreLab, or when you otherwise seek healthcare services or medications from CoreLab.
Genetic data: E.g. where such information is included in medical history collected by CoreLab.
Data that identifies a consumer seeking health care services: E.g. as part of the medical history collected by CoreLab, or when you otherwise seek healthcare services or medications from CoreLab.
Other information that may be used to infer, derive, or extrapolate data related to the above or other health information.

Sources of CHD

As described further in our Privacy Policy, we collect information, which may include CHD from the following sources:

Directly from you
Automatically through your use of the Services
Social media and other content platforms
Other third-party sources

Purposes for Collection of CHD

We describe the purposes for collection and use of CHD in the "Purposes for How We Use Your Information" section of our Privacy Policy. As further described there and subject to applicable law, we may collect and use CHD:

As directed by you or with your consent
To provide and manage the Services
To analyze and improve the Services
For advertising and marketing
For legal purposes, such as to comply with laws or to establish, exercise, or defend our legal rights

How and Why We Share CHD

We may share each of the categories of CHD described above for business purposes to the categories of entities described in the "How We Disclose Your Information" section of our Privacy Policy. As further described in our Privacy Policy and subject to applicable law, we may share the categories of CHD:

To deliver products and services to you, including to complete any transactions initiated by you
To ensure a consistent level of service across our products and services
To enhance our products, services, and your customer experience
With your consent, such as disclosures for certain advertising or promotional efforts, including allowing third parties to collect CHD across our Websites
To protect CoreLab and others, including to enforce our Terms of Use, Privacy Policy, or other contracts with you, and for fraud prevention
To comply with our legal obligations
In connection with any negotiation or completed acquisition, merger, or purchase involving our business assets

As described in our Privacy Policy, we reserve the right to create Aggregate/De-Identified Data from the information we collect through the Services and our disclosure of such Aggregate/De-Identified Data is in our discretion.

As further described in our Privacy Policy, and subject to applicable law (e.g. subject to your consent in certain situations), we may share CHD with the following categories of third parties and affiliates:

Health Care Providers and Services
Service Providers
Advertising Networks
Joint Product/Marketing Partners
For the Protection of Ro and Others (e.g. to governmental or regulatory agencies)
For Legal Purposes (e.g. to governmental entities in response to legal process)
As Necessary for Business Transfers
At Your Direction or With Your Consent (such as sharing with other users/public if you post in public forums or interact with other users)
With the following affiliates: listed here