Consumer Health Data Privacy Policy

This Consumer Health Data Privacy Policy describes how Mosaic Biodata Inc. ("Mosaic," "we," "us," or "our") collects, uses, and shares "consumer health data" under Washington's My Health My Data Act and Nevada's consumer health data law (SB 370). It applies to the consumer health data of Washington and Nevada consumers. For the separate, opt-in consent through which we collect your genetic data, and for genetic-data deletion and biological-sample destruction, see our Genetic Data Consent Notice. For our general data practices, see our Privacy Policy.

Consumer health data we collect

Genetic data derived from your sample: your whole-genome sequencing data (VCF file) and the lifestyle interpretations generated from it.

Account and order information that identifies you as seeking or using our genetic-testing and wellness services.

Optional self-reported information you choose to provide (for example, wellness goals or traits).

Where we collect it from

Directly from you, when you create an account, activate a kit, upload a file, or provide self-reported information.

From our third-party laboratory partner, which generates your sequencing data from the sample you provide.

How we use it

To provide the whole-genome sequencing and lifestyle reports you purchased.

To securely store your genetic data so you can access and download it and purchase additional reports.

To provide customer support and to comply with our legal obligations.

We do not use your consumer health data for advertising.

How we share it

We share consumer health data only with service providers that help us deliver the service, under contracts that limit their use of it: a laboratory partner (sequencing) and cloud-infrastructure and security providers (secure storage and protection). A current list of these providers is available on request.

We do not share consumer health data for advertising, and we do not share it with data brokers, insurers, or employers.

We do not sell your data, and we do not use geofencing

We do not sell your consumer health data. Because we do not sell it, we do not seek the "valid authorization" that a sale would require. We do not use a geofence around any location that provides health-care services to identify or track you, collect data from you, or send you messages.

Your rights and how to exercise them

You have the right to:

Confirm whether we collect, share, or sell your consumer health data, and access that data.

Delete your consumer health data, including by directing our service providers to delete it.

Withdraw your consent to our collection and sharing of your consumer health data.

Appeal a denial of a request.

To exercise these rights, use your account dashboard or email support@mosaicbio.io with the subject "Consumer Health Data Request." We respond within the timeframes required by law and will not discriminate against you for exercising these rights. For genetic-data-specific rights, including deletion and biological-sample destruction, see our Genetic Data Consent Notice; for our general practices, see our Privacy Policy.

Contact

Mosaic Biodata Inc., 919 Congress Ave, Suite 525, Austin, TX 78701, United States. Email: support@mosaicbio.io (subject "Consumer Health Data Request").