CONSUMER HEALTH DATA PRIVACY POLICY

• Contact information submitted with a treatment inquiry, including name, email address, and telephone number. Collected to respond to your inquiry and to follow up about the treatment you asked about.
• Date of birth. Collected to confirm eligibility before an account is created.
• The treatment or medication you expressed interest in. Collected to respond to your inquiry and to show you information about that treatment.
• Items added to a shopping cart, including the medication and dosage. Collected to operate the cart and complete a purchase.
• Pages you viewed that identify a specific medication or treatment category. Collected to measure site usage and to measure advertising performance.
• Device and usage identifiers associated with the above, including cookie and advertising identifiers and IP address. Collected to operate the site, to measure site usage, and to measure advertising performance.

• Directly from you, through forms on the site.
• Automatically from your device and browser as you use the site.

• The medication or treatment category associated with a page you viewed, and the device and advertising identifiers associated with that activity.
• Contact information you submit, where a service provider transmits communications to you on our behalf.
• Cart and purchase information necessary to process a payment.

We do not sell consumer health data.

Categories of third parties:

• Analytics providers
• Advertising and advertising-measurement providers
• Website hosting and content delivery providers
• Database and file storage providers
• Email delivery providers
• Payment processors
• Health care providers, being Stotland Medical LLC, the provider organization responsible for medical care, and the pharmacy that prepares any medication prescribed to you

Specific affiliates:

ElliotMeds LLC has no affiliates. We do not share consumer health data with any affiliate.

If you are a Washington consumer, you have the right to:

• Confirm whether we are collecting, sharing, or selling your consumer health data, and to access that data, including a list of all third parties and affiliates with whom we have shared it and an active contact for each.
• Withdraw your consent to our collection and sharing of your consumer health data.
• Have your consumer health data deleted.

How to exercise them. Email [email protected] with the subject line Washington health data request, and state which right you are exercising.

We will respond within 45 days of receiving your request. We may extend that period by a further 45 days where reasonably necessary, and will tell you before we do, along with the reason.

If we deny your request, we will tell you why and how to appeal. You may appeal by replying to our response. We will decide the appeal within 45 days and explain our reasoning in writing. If we deny your appeal, you may submit a complaint to the Washington State Attorney General at www.atg.wa.gov/file-complaint.

Deletion. When we delete your consumer health data, we delete it from our records and notify any third party or affiliate with whom we have shared it that you have requested deletion. Where information is also part of a medical record held by Stotland Medical LLC, that record is subject to mandatory retention under state and federal law and cannot be deleted; the Notice of Privacy Practices explains what is retained and why.

If we begin collecting, using, or sharing categories of consumer health data not disclosed here, or begin using it for purposes not disclosed here, we will disclose the change and obtain your affirmative consent before doing so.