GENOMIC LIFE CONSUMER HEALTH DATA POLICY

GENOMIC LIFE CONSUMER HEALTH DATA POLICY

Last Updated: June 2026

This Consumer Health Data Privacy Policy ("Policy") describes how Genomic Life ("we," "us," or "our") collects, uses, shares, and otherwise processes personal information that constitutes "consumer health data" under the Washington My Health My Data Act ("MHMDA") and the Nevada Consumer Health Data Privacy Law ("CHDPL"), and explains your rights regarding that data.

This Policy supplements our general privacy policy, available at Privacy Policy (the "Privacy Policy") and applies only to "consumer health data" as defined by applicable law. To the extent there is any conflict between this Policy and our Privacy Policy with respect to consumer health data, this Policy controls.

This Policy does not apply where we process personal information on behalf of a customer as a service provider, processor, business associate, or subcontractor business associate. In those circumstances, we process the information under our agreement with the customer, including any applicable data processing agreement or business associate agreement. For example, where you access our Services through an Employer-Offered Benefit Membership (a membership made available to you by your employer), your employer may provide us with certain information (such as your name and eligibility status) to enable your access. Your employer's privacy notice governs information passed to Genomic Life, not this Policy. This includes protected health information we process on behalf of a HIPAA covered entity, which is governed by HIPAA, the applicable business associate agreement, and the covered entity's notice of privacy practices.

We collect, use, and share consumer health data only as described in this Policy and subject to your consent or authorization as required by applicable law. We do not sell consumer health data.

If you provide us with personal information about another individual, such as if you invite or recommend someone for a Direct Membership (a membership that is available for purchase directly from Genomic Life), you must obtain their consent (or have the legal authority without consent) to share their Consumer Health Data with us.

We may update this Policy from time to time to reflect changes in our privacy practices. When we make changes, we will post the updated Policy on our website and update the "Last Updated" date at the top of this page. If we make material changes, we will also notify you directly and obtain your consent where required by law. We encourage you to review this Policy periodically.

Sources of Consumer Health Data

We collect consumer health data from the following categories of sources:

Directly from you, such as through account registration, forms, purchases, customer service interactions, surveys, and other direct interactions with our services.
From your use of our products, services, websites, or applications. For more information, please see our Privacy Policy.
From third-party sources, such as healthcare providers and care teams involved in your care or services; employers, plan sponsors, benefit administrators, or other organizations that make our services available to you; other members or individuals who refer you to our services; business partners and affiliates; and service providers or contractors acting on our behalf.
Through inferences derived from information you provide or that we observe.

Categories of Consumer Health Data We Collect

We may collect the following categories of consumer health data:

Health status and treatment information, including information about health conditions, status, diseases, or diagnoses; social, psychological, behavioral, medical interventions; health-related surgeries or procedures; the use or purchase of prescribed medications; and bodily functions, vital signs, symptoms, or measurements.
Reproductive, sexual, and gender-affirming health information.
Biometric and genetic data.
Information that could indicate you are seeking health care services or information, including precise location information and other data that identifies you as seeking health care.
Inferred or derived health information, including information derived from non-health data that we use to associate or identify you with health data categories above.

How We Use Consumer Health Data

We may collect and use consumer health data for the following purposes:

To provide, maintain, and improve the products and services you have requested from us, including to troubleshoot issues, perform data analysis, testing, and system maintenance.
To communicate with you about your use of our products and services, including sending technical notices, updates, security alerts, and support and administrative messages.
To personalize your experience and deliver content and recommendations tailored to your interests.
To understand engagement with our services and improve our outreach.
To process transactions you initiate, including purchase confirmations, invoices, and billing notices.
To respond to your inquiries, comments, and requests, and to provide customer support.
To detect, investigate, and prevent security incidents, fraudulent transactions, and other illegal activities, and to protect the rights and property of Genomic Life and others.
To facilitate corporate transactions, such as mergers, acquisitions, financing, or the sale of all or a portion of our business or assets.
To comply with legal obligations.

We process consumer health data through automated systems, manual review, and algorithmic analysis for the purposes described above.

We may de-identify or aggregate personal information so that it can no longer reasonably be used to identify you. We may use, create, and disclose de-identified or aggregated information for any purpose permitted by applicable law, including research, analytics, and improving our products and services. Where required by applicable law, we will maintain and use de-identified data only in de-identified form and will not attempt to re-identify it except as permitted by applicable law.

How We Disclose Consumer Health Data

We may disclose the categories of consumer health data described above with the following categories of third parties:

Service providers and contractors who assist us in operating our business (e.g., cloud service providers, payment processors, customer relationship management providers, fulfillment partners, data analytics vendors, security vendors, and identity verification services).
Healthcare providers, genetic or genomic testing providers, and other care-related third parties as reasonably necessary to provide, coordinate, support, or facilitate the services you request or receive.
Plan sponsors, employers, benefit administrators, or other sponsoring organizations where you access our services through a plan or program they offer, as necessary to confirm eligibility, administer the program, process billing or payment, support program operations, or fulfill our contractual obligations.
Business partners for joint offerings, referral programs, and to facilitate services they provide in connection with our business.
Government agencies when required by law, in response to valid legal process, or to protect public safety.
Potential acquirers, merger partners, or other parties in connection with a corporate transaction such as a merger, acquisition, financing, dissolution, or sale of assets.

Subject to applicable consent and authorization requirements, third parties may also collect consumer health data over time and across different websites or online services when you use our services. For more information, please see our Privacy Policy.

Your Privacy Rights

Depending on where you reside, you may have the following rights with respect to your consumer health data:

Right to confirm and access. You may have the right to confirm whether we are collecting, sharing, or selling your consumer health data and to access that data, including a list of all third parties with whom we have shared or sold your data.
Right to delete. You may have the right to request that we delete your consumer health data.
Right to withdraw consent. You may have the right to withdraw your consent to our collection and sharing of your consumer health data and to request that we cease such collection, sharing, or selling.
Right to review and request changes. You may have the right to review and request changes to your consumer health data that we have collected.

How to Exercise Your Rights

We will not discriminate against you for exercising any of your rights under this Policy or under applicable law.

You may exercise the rights described in this Policy by submitting your request to Navigation@genomiclife.com.

We may need to verify your identity before fulfilling your request. You are not required to create a new account to submit a request, but we may require you to use an existing account for verification purposes.

If we decline to act on your request, you may appeal that decision by contacting us using the methods listed above.