U.S. State Privacy Rights

1. A Single Set of Rights, Regardless of Your State

Rather than maintain a different interface for every state privacy law, we offer all visitors the same set of privacy rights through Your Privacy Choices. Depending on your state's law, some or all of the following apply to you:

• Access / right to know: confirmation of the categories and specific personal information we hold about you, with a copy
• Correction: correction of inaccurate personal information
• Deletion: deletion of personal information we hold about you, subject to legal record-retention exceptions
• Portability: a portable copy of information you provided to us
• Opt out of sale/sharing/targeted advertising: we do not sell personal information; because advertising technology can be defined as "sharing" under some statutes, we also provide an opt-out that disables advertising technologies entirely
• Limit use of sensitive personal information: you may request limitation of the use of sensitive personal information to the purposes necessary to provide the services you request
• Withdraw consent where processing is based on consent
• Appeal: if we deny a request, you may appeal by replying to our decision; the appeal is reviewed by someone not involved in the original decision

We do not discriminate against you for exercising privacy rights — we will not deny, degrade, or charge more for the service because you exercise them.

2. California Residents (CCPA/CPRA)

California residents have the rights listed above. For California purposes:

• Notice at collection: this page and our Privacy Policy serve as notice of the categories collected (website, contact, healthcare, and transactional information described there)
• Sensitive personal information: health information is sensitive personal information. It is used only to provide the clinical service, never for advertising, and you may request limitation of its use
• Sale/share: we do not sell personal information for money. Some statutes define "sharing" to include transfers to advertising networks for targeted advertising; our advertising is contextual, and we do not share personal information for cross-context behavioral advertising. If you prefer, the advertising opt-out on Your Privacy Choices disables advertising technologies entirely
• Verification: requests are verified using information proportionate to the sensitivity of the data requested — typically the email on file — and we never ask for more than is necessary

3. Washington Residents (My Health My Data Act)

Washington residents have dedicated consumer-health-data rights. See the Washington section of our Consumer Health Data Privacy Policy, including its conspicuous link from our footer, for categories, purposes, sharing, consent, deletion, and appeal rights. We do not sell consumer health data, and we do not use it for cross-context behavioral advertising.

4. Nevada Residents

Nevada residents: see the Nevada section of our Consumer Health Data Privacy Policy for the consumer health data disclosures Nevada law requires, including categories, purposes, sources, recipients, rights, consent practices, and material changes. We do not sell consumer health data.

5. Universal Opt-Out Signals

We honor the Global Privacy Control (GPC) browser signal where it applies. When your browser sends a GPC signal, advertising stays off and we treat the signal as a valid opt-out of sale/sharing for purposes where the law requires it. We do not override it with repeated prompts.

6. How to Submit a Request

Go to Your Privacy Choices and choose your request type, or email Customerservice@diagnosticordersdirect.com. Please do not include medical details in the request form; we will route clinical-record questions through the secure clinical workflow with appropriate verification.

We respond to verified requests within the timeframes your state's law requires, and we will tell you if we need more information to verify you.