Consumer Health Data Privacy Policy

1. Who This Policy Covers

This Consumer Health Data Privacy Policy applies to consumer health data collected through Diagnostic Orders Direct, a division of Glow Oversight PC. It supplements — and does not replace — our general Privacy Policy. It is provided to all visitors, and Washington and Nevada residents in particular.

2. Categories of Consumer Health Data We Collect

• Health conditions and symptoms you provide during the clinical intake and provider-review process
• Medical history relevant to the requested diagnostic test
• Requested diagnostic services (e.g., MRI of a body part, lab panel, EKG)
• Documents you upload in the clinical workflow
• Communications with clinical staff about your medical review
• Provider and order information generated in the course of the service

Consumer health data is collected only through the secure clinical workflow, only from patients who choose to use the service, and only when necessary to provide the provider review. Our public contact form is not a medical channel.

3. Sources of Consumer Health Data

• Directly from you, through the clinical intake (IntakeQ scheduling/intake platform), patient communications, and uploaded documents
• From providers and clinical staff involved in your review

4. Purposes of Processing

• To conduct the virtual provider review of your diagnostic-order request
• To communicate with you about your request and any order issued
• To maintain clinical records as required by healthcare and licensing obligations
• To fulfill legal obligations applicable to the medical practice

Consumer health data is not used for advertising, marketing audiences, or cross-context behavioral advertising.

5. Categories of Consumer Health Data Shared and Recipients

• Clinical service providers: the licensed providers and clinical staff performing the review
• Intake/scheduling platform (IntakeQ): processes intake data on our behalf for the clinical workflow
• The facility you designate to receive an order issued to you, when you direct delivery
• As required by law or to protect safety, as described in our Privacy Policy

Advertising and analytics vendors do not receive consumer health data. We do not sell consumer health data, we do not use health information for advertising, and we do not permit third-party advertising systems to receive consumer health data. Advertising, where shown, is limited to public educational content using contextual (non-personalized) placement and never appears on clinical, intake, or patient-specific pages.

6. Consent and Withdrawal

Where the law requires consent to collect or share consumer health data, we obtain that consent as part of the clinical intake process. You may withdraw consent where applicable by contacting us at Customerservice@diagnosticordersdirect.com. Withdrawal may affect our ability to continue providing the clinical service, which depends on the information needed for a safe medical review.

7. Your Rights

• Access: request confirmation of whether we hold consumer health data about you and, subject to verification, a copy of the categories and specific data
• Deletion: request deletion of your consumer health data, subject to record-retention obligations that require us to keep certain clinical records for a period set by law
• Withdrawal of consent where consent is the basis of processing
• Appeal: if we deny a request, you may appeal by replying to our decision email, and we will review the appeal with a person not involved in the original decision

Washington Residents — My Health My Data Act

Washington residents may exercise the rights above at any time. We do not collect or share consumer health data without legally sufficient consent where consent is required; we do not sell consumer health data; and we do not create geofences around healthcare facilities for the purpose of collecting consumer health data. Requests can be submitted — without creating an account — through Your Privacy Choices or by emailing Customerservice@diagnosticordersdirect.com. We will not discriminate against you for exercising these rights.

Nevada Residents

Nevada consumer health data residents: we identify the categories, purposes, sources, and recipients above; we do not sell consumer health data; and we will obtain consent where Nevada law requires it before collecting or sharing consumer health data. You may direct questions and exercise rights through the same channels above.

8. Material Changes

If we make a material change to this policy that weakens the protections described here, we will provide notice and, where required, obtain updated consent before applying it to previously collected consumer health data.

9. Retention

Consumer health data collected in the clinical workflow is retained according to applicable healthcare record-retention rules and the clinical practice's policies, and is deleted or de-identified when retention requirements end. It is not retained indefinitely for marketing or analytics purposes.

10. Contact

Consumer health data questions or requests: Customerservice@diagnosticordersdirect.com · (702) 588-3455.