Consumer Health Data Privacy Notice

Effective Date:  January 1, 2025

This Consumer Health Data Privacy Notice (the “Consumer Health Notice”) supplements the K Health Privacy Policy and explains how K Health Inc. (“K,” the “Company,” “we,” “us,” or “our”) collects, uses, discloses, and otherwise processes Consumer Health Data (as defined below) of residents of the state of Washington or Nevada, or individuals whose Consumer Health Data is collected in those states through the www.khealth.com website (the “Site”).  In addition, this Consumer Health Notice covers the Site and mobile applications (each, an “App”) operated by us and any other website or mobile application operated by us and which posts or links to this Consumer Health Notice (all collectively, the “Services”).  Once you create an account to become a patient, use the K Pharmacy services, or use the services of any other member of our Organized Health Care Arrangement (“OHCA”), all personal information you provide to us through your account while using the Services is subject to the OHCA’s joint HIPAA Notice of Privacy Practices.

This Consumer Health Notice does not address privacy practices relating to K Health job applicants, employees, and other personnel.  Further, this Consumer Health Notice applies only to the extent required by applicable state law with respect to Consumer Health Data (as defined below).

Our Collection and Use of Consumer Health Data

The term “Consumer Health Data” as used in this Consumer Health Notice means any personal information that is linked or reasonably linkable to you and that identifies your past, present, or future physical or mental health status as further defined in the Washington My Health My Data Act or the Nevada Consumer Health Data Privacy Law  (collectively, the “Consumer Health Privacy Laws”).  The Consumer Health Data we collect depends on the context of your interactions with us and, in many cases, is information that you decide to share with us. This includes information collected through online questions, your communications with us, or from your other interactions with our Services, before you create an account.  Consumer Health Data does not include information that is considered deidentified under the consumer Health Privacy Laws.  Examples of Consumer Health Data that we may collect include:

  • Information about your medical history, preferences, and goals before you create an account to become a patient.
  • Location data that could reasonably indicate that you are attempting to acquire or receive health services or supplies.
  • Other information that may be used to infer or derive data related to the above or other health-related information.

We may process and/or use your Consumer Health Data (including with your consent where required by the Consumer Health Privacy Laws) for the following purposes:

  • To manage, provide, and improve the Services.
  • To respond to your questions, concerns, and other requests for assistance.
  • To customize your browsing and shopping experience on the Services.
  • For market research and providing insights into consumer health behaviors/conditions.
  • To build and enhance consumer profiles.
  • To provide targeted ads that may be of interest to you and to measure the effective of such ads.
  • To create anonymous, aggregated, or de-identified data

We may also combine your Consumer Health Data with other personal information we collect directly from you or receive from other sources.

1) Sources of Consumer Health Data

The Consumer Health Data we collect depends on the context of your interactions with our Services and, in many cases, is information that you decide to share with us. 

We and our business partners may collect this type of information over time and across third-party websites, mobile applications or other sources.  For more information, please see the “How we collect personal information” section of our Privacy Policy.

2) Our Disclosure of Consumer Health Data

We may share the categories of Consumer Health Data set forth above as follows:

  • Business Partners and Service Providers:  We work with a variety of business partners, such as those that facilitate the operation of our Site and Services and support our advertising and marketing,  analytics, communications, and advocacy programs.
  • Affiliates:  We may share your Consumer Health Data with our subsidiaries, affiliates, and related companies.
  • Business Transactions:  We may take part in or be involved with a business transaction, such as a merger.  We may disclose Consumer Health Data to a third party during the negotiation of or in connection with such a transaction.
  • Legal Obligations and Rights:  We may disclose Consumer Health Data to third parties:  in connection with the establishment, exercise, or defense of legal claims; to comply with laws or to respond to lawful requests and legal processes; to protect our rights and property and the rights and property of others, including to enforce our agreements and policies; to detect, suppress, or prevent fraud; to protect the health and safety of us and others; or as otherwise required by applicable law.
  • With Your Consent:  We may disclose Consumer Health Data about you to other service providers or publicly with your consent or at your direction.  For example, with an individual’s consent or at their direction, we may post their testimonial on our Site or Services-related publications.

3) Your Privacy Rights

The laws provide the following rights with respect to Consumer Health Data we collect about you:

  • Right to Access / Confirm:  You may have the right to confirm whether we are collecting, sharing, or selling Consumer Health Data about you and with whom we may be disclosing such Consumer Health Data, and to access such data.
  • Right to Withdraw Consent:  If you have provided your consent for our processing or sharing of your Consumer Health Data, you may have the right to withdraw your consent.
  • Right to Delete:  You may have the right to request that we delete your Consumer Health Data and that all third parties to whom we have disclosed your Consumer Health Data delete such data.

4) How to Exercise Your Privacy Rights

To exercise any of the privacy rights set forth above or to review or request changes to data, please submit a request to us by either:

Before processing your request, we will need to authenticate your identity.  To authenticate your identity, we will generally require matching a minimum amount of information you provide us with the information we maintain about you in our systems.  This process may require us to request additional information from you, including, but not limited to, your email address and phone number.

In certain circumstances, we may decline a request to exercise the rights described above, particularly where we are unable to authenticate your identity or locate your information in our systems.  If we are unable to comply with all or a portion of your request, we will explain the reasons for our decision.

5) Changes to This Consumer Health Data Privacy Notice

This Consumer Health Notice is current as of the Last Updated date set forth above.  We may change this Consumer Health Notice from time to time, so please be sure to check back periodically.  We will post any changes to this Consumer Health Notice on our Site and App.