Washington State Privacy

This Washington State Health Data Privacy Policy (“Health Data Policy”) describes the health data (defined below) that Veradermics, Inc. collects about you; how we use that information; and the choices you may make with respect to it.

 

This Health Data Policy only applies to residents of the State of Washington.

 

For additional information relating to our general privacy practices in connection with our website please visit our Privacy Policy[NG1] . In the event of a conflict between our Privacy Policy and this Health Data Policy, this Health Data Policy will control.

 

Our website may contain links to third-party websites/content/services that are not owned or controlled by Veradermics. We are not responsible for how these properties operate or treat your health data. You should read the privacy policies and terms associated with these third-party properties carefully.

 

HEALTH DATA WE COLLECT AND USE

Depending on the specific service or product offering that you use or receive and your interaction with us, we may collect certain personal information about you that identifies your past, present, or future physical or mental health status (“health data”). Examples of health data we might collect include:

 

  • Information about your health conditions, symptoms, status, diseases, diagnoses, testing, or treatments (including surgeries, procedures, use or purchase of medications, or other social, psychological, behavioral, and medical interventions);
  • Measurements of bodily functions, vital signs, symptoms, or other health characteristics;
  • Information regarding gender-affirming care or reproductive or sexual health;
  • Data that could identify you as an individual seeking health care services; and
  • Any inferences of the above categories of health data that we may infer or derive from non-health related information.
  • We may collect these categories of health data directly from you, automatically when you use the website, and from other sources, such as public databases and other third parties.

 

HOW WE USE HEALTH DATA

As described further in the How We Use Your Information we may use this health data to serve you; to connect you with third parties; to validate your ability to access and/or use certain products, services and information; to provide and improve products and services; to protect patients and consumers; to operate, manage, and maintain our business; to respond to your inquiries and fulfill your requests; to send administrative information to you; to send you certain marketing communications; to personalize certain experiences; and to facilitate social sharing or messages services when available. We may also use your health data for our business purposes and objectives, including data analysis; audits; developing new products; improving existing products; identifying usage trends; determining the effectiveness of promotional campaigns; preventing fraud; and expanding our business activities. We may also use this health data to comply with applicable law, legal process, respond to requests from public and government authorities, and to protect our rights, operations, and enforce our terms of service.

 

We primarily use your health data for these purposes in connection with providing a product or service you have requested. In some circumstances (e.g., where the purpose is not to provide a product or service you requested), we may collect and use health data with your consent.

 

We may deidentify or anonymize health data so that it cannot reasonably be reidentified by us or by another person, and we may use this deidentified data for any reason permitted by applicable law. If we deidentify information that was originally based on health data, we maintain and use that information in deidentified form and will not attempt to reidentify the data, except as otherwise permitted under applicable law.

 

HOW WE DISCLOSE YOUR HEALTH DATA

We may share these categories of health data with third parties, such as other companies and individuals we retain to perform services on our behalf and other companies and individuals with whom we collaborate with respect to particular products or services (collectively “Providers”), as described in our Privacy Policy[NG2] . We may also disclose health data in connection with a business transfer (such as selling or buying a business unit), to comply with the law, or to protect the safety, rights, or property of our customers, the public, Veradermics or others.

 

INDIVIDUAL RIGHTS

Subject to certain exceptions, you may have the right to make the following requests, at no charge:

 

  • Copy: You may request, up to twice every 12 months, a copy of the specific pieces of personal data that we have collected, used or disclosed about you in the prior 12 months and to have this delivered, free of charge, either (a) by mail or (b) electronically in a portable and, to the extent technically feasible, readily useable format that allows you to transmit this information to another entity without hindrance.
  • Correct: You may request correction of your personal data that we have collected about you if it is inaccurate or incomplete.
  • Delete: You may request deletion of your personal data that we have collected about you.
  • Know: You may request that we provide you certain information about how we have handled your personal data, including the:
    • categories of personal data collected;
    • categories of sources of personal data;
    • business and/or commercial purposes for collecting your personal data;
    • information about third parties/with whom we have disclosed or shared your personal data; and
    • categories of personal data that we have disclosed or shared with a third party for a business purpose.

 

You have the right to be free from unlawful discrimination for exercising your rights under applicable state law.

 

Submitting Requests. You may submit requests to delete, correct, access a copy and/or know personal data we have collected about you by accessing our webform contacting us at Privacy.VDI@veradermics.com| Opens Email. You will be asked to provide certain personal information when submitting your request including your relationship with Veradermics, first and last name, email address, telephone number and postal address to determine if your information is in our systems.

 

We will verify and respond to your request in compliance with applicable law, taking into account the type and sensitivity of the personal information subject to the request. We may need to request additional personal information from you to protect against fraudulent or spoofed requests.

 

Questions/Contact Us

Questions about the VeraDermics, Inc. Privacy Policy may be directed to: 470 James St, New Haven CT 06513 and Privacy.VDI@VeraDermics.com