Consumer Health Data Privacy Policy
Effective as of June 28, 2024
This Consumer Health Data Privacy Policy (this “Health Data Privacy Policy”) supplements the WinShape Privacy Policy regarding how WinShape Foundation, Inc. and its affiliates (collectively, “we”, “us”, or “our”) process health-related data as required under applicable law in the states of Washington and Nevada.
We may collect certain health-related data (“Health Data”) from you when you voluntarily provide your Health Data, as well as from those who refer you to us or from other third parties (e.g., your family member, church, school, or employer). Such Health Data may include:
- health conditions, treatment, diseases, or diagnosis
- health-related surgeries or procedures
- use or purchase of medication
- measurement of bodily functions, vital signs, or characteristics
- other health-related information about you if you or others, on your behalf, provide it to us
We collect and use your Health Data for the following purposes:
- to provide products and services you requested (e.g., providing our programs and ministries, processing your applications and registrations, responding to your inquiries, requests, complaints, or questions that include your Health Data)
- to establish, exercise, or defend a legal claim
- for other purposes upon your request or in accordance with your consent
We may disclose each category of your Health Data:
- to WinShape Homes LLC and WinShape Foster Care LLC, which are WinShape Foundation Inc.’s affiliates
- to our service providers and business partners that process your Health Data on our behalf
- to other third parties as necessary to provide products and services you requested (e.g., providing our programs and ministries, processing your applications and registrations, responding to your inquiries, requests, complaints, or questions that include your Health Data)
- upon your request or in accordance with your consent
We do not allow any third parties to collect or use your Health Data over time and across different Internet websites or online services.
Subject to applicable law, you may have the following rights related to your Health Data:
- Right to Access. You have the right to confirm whether we are collecting, sharing, or selling your Health Data and access your Health Data we collect, share, or sell.
- Right to Delete. You have the right to request that we delete Health Data that we maintain about you.
- Right to Withdraw. If we collect, use, or share your Health Data based on your consent, you have the right to withdraw such consent.
You may request to exercise these rights by emailing privacy@winshape.org.
If your rights request is denied, you may lodge an appeal with us. The response to your rights request will inform you of any appeal rights you may have and how you may exercise them.
As required under applicable law, we will take steps to verify your identity before granting you access to information or acting on your request to exercise your rights. We may require you to provide your first name, last name, the email you used to register, and the date and name of the most recent event you attended to verify your identity in response to exercising requests of the above type.
We may revise this Health Data Privacy Policy from time to time, and the updated Health Data Privacy Policy will become effective upon posting of the revised Health Data Privacy Policy unless a different effective date is provided on the revised Health Data Privacy Policy. If we change the Health Data Privacy Policy in a material way, we will provide appropriate notice to you such as posting a prominent notice on our website or emailing you if you provided your email to us.