This Consumer Health Data Privacy Policy (this “Policy”) describes how Burst Group, Inc. (“Burst,” “we,” “us” or “our”) processes consumer health data that we collect through our digital or online properties or services that link to this Policy (including as applicable, our websites and social media pages) as well as associated marketing activities and any other activities described in this Policy (collectively, the “Services”).

This Policy applies only to “consumer health data” as that term is defined under applicable U.S. state laws that require us to maintain this Policy, such as Washington’s My Health My Data Act and Nevada’s Consumer Health Data Privacy Law (“Consumer Health Data”). This Policy does not govern health-related data that we or our partners collect or use in connection with clinical trials or other research, or any other health information that is not governed by applicable consumer health data privacy laws.

This Policy supplements our general Privacy Policy and only applies to individuals from Washington, Nevada, or other states which may in the future require us to provide disclosures specific to Consumer Health Data. In the event of a conflict between our Privacy Policy and this Policy, this Policy applies to the extent that it is consistent with applicable U.S. state law.

Consumer Health Data We Collect

Depending on how you interact with us, we may collect different types of Consumer Health Data about you. Consumer Health Data you may provide to us through the Services or otherwise includes contact information; demographic data; profile data; transactional data; payment data; account data; health-related data; communications data; and marketing data, each to the extent related to health status, diagnosis, disease, treatment, or your attempt to seek health care services, products or information.

Consumer Health Data We Collect Automatically

When you use our Services, we collect some information through certain technical tracking technologies that may be considered Consumer Health Data, including when such information could reasonably indicate your attempt to seek or receive health care services, products or information.

This includes device data, such as device and browser details, IP address, identifiers, network information and general location; approximate location data only (we do not collect precise geolocation data); online activity data, such as pages or screens viewed, time spent, navigation paths, access times and email interactions; and communication interaction data, including interactions with our email or other communications through pixel tags or clear GIFs.

Consumer Health Data We May Create, Infer or Generate

We may create, infer or generate Consumer Health Data from other data we collect, including using automated means to generate information about your likely preferences or other characteristics.

Sources of Consumer Health Data

We may obtain the types of Consumer Health Data described above from you; partners such as our retail and merchant partners and benefits plan and account administrators; health care providers such as doctors and provider groups; and service providers that collect or provide data in connection with the work they do on our behalf.

How We Use Your Consumer Health Data

We use Consumer Health Data for purposes described in this Policy or as otherwise disclosed to you. These purposes include service operations; service personalization; marketing as permitted by applicable law; communications; compliance and protection; service improvement and analytics; creating aggregated, de-identified and/or anonymized data; and corporate events such as investments, financings, public stock offerings, or a sale, transfer or merger of all or part of our business, assets or shares.

We may create aggregated, de-identified and/or anonymized data from your personal information and other individuals whose personal information we collect. We make personal information into de-identified and/or anonymized data by removing information that makes the data identifiable to you and will not reidentify such data except as otherwise permitted by applicable law. We may use this data and share it with third parties for our lawful business purposes, including to analyze and improve the Services and promote our business.

How We Share Your Consumer Health Data

We may “share” (as applicable U.S. state laws define that term) Consumer Health Data with your consent or as we determine necessary to provide the Services to you, or as otherwise permitted or required by law. We do not sell your Consumer Health Data.

We may share Consumer Health Data with service providers that help us operate the Services or our business; licensed clinicians and provider groups that review submitted information to evaluate and, where appropriate, issue a Letter of Medical Necessity; benefits plan administrators or third-party administrators where needed to file or substantiate a reimbursement claim; and authorities or others when necessary to comply with applicable law, respond to valid legal process, or protect our customers and/or the rights or property of ourselves or others.

Your Consumer Health Data Choices

You may have certain rights to your Consumer Health Data under applicable laws. Any of the rights discussed below may be subject to certain limitations, such as a monetary charge.

Withdraw consent. To the extent we rely upon your consent for either our collection or sharing of your Consumer Health Data, you have the right to withdraw such consent from any future collection or sharing.

Access and confirm. You have the right to ask us to confirm whether we have collected, shared or sold your Consumer Health Data. You may request a copy of the Consumer Health Data that we have collected, shared or sold, and may request a list of all third parties and affiliates with whom we have shared or sold it and receive certain corresponding information.

Correction. You have the right to ask us to correct inaccuracies in your Consumer Health Data.

Deletion. You have the right to ask us to delete your Consumer Health Data.

Appeal. You have the right to appeal our denying a right you have attempted to exercise. We will provide details on how to appeal our denial in connection with such action.

To exercise your rights above and make a Consumer Health Data rights request, please email us at legal@getburst.com. We may need to verify your identity in order to process your request. To confirm your identity, we may ask you to verify personal information we already have on file for you. If we cannot verify your identity based on the information we have on file, we may request additional information from you, such as government identification, which we will only use to verify your identity, and for security or fraud-prevention purposes.

Declining to provide information. We need to collect Consumer Health Data to provide certain services. If you do not provide the information we identify as required or mandatory, or if you request that any required Consumer Health Data be deleted or withdraw your consent for future collection or sharing of any required Consumer Health Data, we may not be able to provide those services.

Changes to this Policy

We reserve the right to modify this Policy at any time. If we make material changes to this Policy, we will notify you by updating the date of this Policy and posting it on the Services or other appropriate means. Any modifications to this Policy will be effective upon our posting the modified version, or as otherwise indicated at the time of posting. In all cases, your use of the Services after the effective date of any modified Policy indicates your acknowledgment that the modified Policy applies to your interactions with the Services and our business.

How to contact us

Email: legal@getburst.com