Effective Date: January 1, 2026
How we collect, use, and protect your consumer health data in compliance with state health data privacy laws.
This policy applies to consumer health data not covered by HIPAA. For information about how we handle HIPAA-protected health information, please request our Notice of Privacy Practices. We do not sell your consumer health data and only share it as necessary to provide our services or as required by law.
This Consumer Health Data Privacy Policy supplements our general Privacy Policy and describes how LabNow collects, uses, shares, and protects consumer health data in compliance with state consumer health data privacy laws, including the Washington My Health My Data Act, Nevada Senate Bill 370, and similar laws in other states. This policy applies to consumer health data that is not otherwise protected by the Health Insurance Portability and Accountability Act (HIPAA). For information covered by HIPAA, please refer to our Notice of Privacy Practices.
Consumer health data means personal information that is linked or reasonably linkable to a consumer and that identifies the consumer's past, present, or future physical or mental health status. This includes: • Individual health conditions, diseases, or diagnoses • Social, psychological, behavioral, and medical interventions • Health-related surgeries or procedures • Use or purchase of prescribed medication • Bodily functions, vital signs, symptoms, or measurements of health information • Diagnoses or diagnostic testing, treatment, or medication • Gender-affirming care information • Reproductive or sexual health information • Biometric data used for health-related purposes • Genetic data • Precise location information that could reasonably indicate a consumer's attempt to acquire or receive health services or supplies • Data that identifies a consumer seeking health care services • Any information that a regulated entity processes to associate or identify a consumer with consumer health data
LabNow collects the following categories of consumer health data: • Laboratory Test Orders: Information about which tests you have ordered • Specimen Collection Data: Information collected during the specimen collection process • Laboratory Results: Test results provided by third-party laboratories • Health History: Limited health information necessary for test ordering and interpretation • Appointment Information: Dates, times, and locations of your visits • Communication Data: Health-related communications between you and our staff • Payment Information: Information related to payment for health services We collect this information directly from you, from healthcare providers who order tests on your behalf, from third-party laboratories that process your specimens, and from your use of our website and services.
We use consumer health data for the following purposes: • Service Delivery: To provide specimen collection services, coordinate with laboratories, and deliver test results • Clinical Review: To facilitate optional clinical review services by licensed healthcare providers • Communication: To send appointment reminders, test result notifications, and service-related communications • Quality Improvement: To improve our services and ensure quality standards • Legal Compliance: To comply with legal obligations and respond to legal requests • Business Operations: To operate and manage our business, including billing and customer service We do not use your consumer health data for marketing or advertising purposes without your explicit consent.
We share consumer health data only in the following circumstances: • Third-Party Laboratories: We share specimens and necessary health information with CLIA-certified laboratories that perform diagnostic testing • Healthcare Providers: We share information with licensed healthcare providers who order tests or provide clinical review services • Service Providers: We share limited information with service providers who assist in our operations (e.g., scheduling platforms, payment processors) under strict confidentiality agreements • Legal Requirements: We disclose information when required by law, court order, or government regulation • With Your Consent: We may share information with other parties when you provide explicit consent We do NOT sell consumer health data. We do NOT share consumer health data for advertising or marketing purposes.
Under state consumer health data privacy laws, you have the following rights: 1. Right to Access: You have the right to confirm whether we are collecting or sharing your consumer health data and to access that data. 2. Right to Delete: You have the right to request deletion of your consumer health data, subject to certain exceptions (e.g., legal retention requirements, ongoing services). 3. Right to Withdraw Consent: If we collected or shared your consumer health data based on your consent, you have the right to withdraw that consent at any time. 4. Right to Opt Out: You have the right to opt out of the collection and sharing of your consumer health data, subject to certain exceptions necessary for service delivery. 5. Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights. To exercise these rights, please contact us using the information provided at the end of this policy.
Before collecting or sharing your consumer health data, we will obtain your informed consent, except where collection or sharing is necessary to provide services you have requested or where otherwise permitted by law. Your consent will be: • Clear and conspicuous • Specific to the purpose of collection or sharing • Separate from other terms and conditions • Revocable at any time By using our services, you consent to the collection and sharing of consumer health data as described in this policy. You may withdraw your consent at any time by contacting us, though this may limit our ability to provide certain services.
LabNow does not use geofencing or similar technology to establish a virtual boundary around sensitive locations (such as healthcare facilities) for the purpose of identifying, tracking, collecting data from, or sending notifications to consumers. We do not collect precise location data except as necessary to provide mobile testing services you have requested.
We implement appropriate technical, administrative, and physical security measures to protect consumer health data from unauthorized access, disclosure, alteration, or destruction. These measures include: • Encryption of data in transit and at rest • Access controls and authentication requirements • Regular security assessments and audits • Employee training on data privacy and security • Secure disposal of data when no longer needed We retain consumer health data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Laboratory records are retained in accordance with applicable federal and state regulations.
Our services are not directed to children under the age of 18. We do not knowingly collect consumer health data from children without parental or guardian consent. If we become aware that we have collected consumer health data from a child without proper consent, we will take steps to delete that information promptly.
Our website may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any consumer health data to them.
Washington Residents (My Health My Data Act): Washington residents have specific rights under the My Health My Data Act, including the right to have consumer health data collected, shared, and used only with valid authorization. We will not collect or share geolocation data related to your visits to healthcare facilities without your consent. Nevada Residents (SB 370): Nevada residents have the right to opt out of the sale of covered information. We do not sell consumer health data as defined under Nevada law. Other States: If you reside in a state with specific consumer health data privacy laws, you may have additional rights. Please contact us for more information about your state-specific rights.
To exercise your rights regarding consumer health data, please submit a request by: • Email: info@labnow.us • Phone: (201) 310-0771 • Mail: LabNow, 725 River Rd Suite 211, Edgewater, NJ 07020 When submitting a request, please provide: • Your full name • Contact information (email and phone number) • A description of your request • Sufficient information to verify your identity We will respond to your request within 45 days. If we need additional time, we will notify you and explain the reason for the extension. You may designate an authorized agent to submit a request on your behalf. The authorized agent must provide proof of authorization.
We may update this Consumer Health Data Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. We will post the updated policy on our website with a new effective date. Material changes will be communicated to you through email or prominent notice on our website. Your continued use of our services after changes are posted constitutes your acceptance of the updated policy. If you do not agree with the changes, you may discontinue use of our services and request deletion of your consumer health data.
If you have questions about this Consumer Health Data Privacy Policy or wish to exercise your rights, please contact us at: LabNow Privacy Officer Email: info@labnow.us Phone: (201) 310-0771 Address: 725 River Rd Suite 211, Edgewater, NJ 07020 For Washington residents, you may also contact the Washington State Attorney General's office if you have concerns about our consumer health data practices.