1. Why this policy is separate
CHS SOS publishes this Consumer Health Data Privacy Policy separately because visits to CHS educational pages or product information can reveal an interest in a health topic. This policy describes our practices for health-related information that may fall outside HIPAA, including rights available under Washington’s My Health My Data Act where applicable.
2. Consumer health data we collect
CHS SOS does not ask you to create a health profile and does not intentionally collect diagnoses, medical records, treatment history, or Symptom Check answers.
- Symptom Check: answers remain in your browser and are not transmitted or stored.
- Optional analytics: after explicit consent, page and interaction data may show that a browser viewed CHS-related education, an Action Plan, or product information. We treat that activity as potentially sensitive.
- Contact messages: we ask you not to include symptoms, diagnoses, or medical history. If you voluntarily include health information despite that instruction, we use it only to respond or handle the request.
3. Sources and purposes
Health-related browsing activity comes from your browser only after analytics consent. Voluntary contact information comes directly from you. We use it to provide the content or response requested, understand aggregate content performance, protect the service, and comply with law.
4. Sharing
- Optional browsing analytics is shared with Google Analytics only after the separate analytics choice identifies Google and explains the purpose.
- Hosting and email providers process data as necessary to deliver the site or your requested support response.
- We do not sell consumer health data, use it for advertising, build health-interest audiences, or provide it to data brokers.
CHS SOS will not collect, use, or share a new category of consumer health data for a new purpose without updating this policy and obtaining consent where required.
5. Your health-data rights
Where applicable, you may request access to, confirmation of, correction of, or deletion of consumer health data; obtain a list of relevant third parties or affiliates; or withdraw consent for future collection or sharing.
Use “Privacy request” in the contact form or email support@chssos.com. Turning analytics off through “Privacy Choices” withdraws consent for future optional analytics collection. We will respond within the period required by applicable law and explain any verification steps or appeal option.
6. Retention and deletion
Contact messages are deleted after 12 months. Symptom Check answers are never received by CHS SOS. Optional analytics retention is controlled through the analytics service settings. A verified deletion request will be applied to first-party systems and communicated to relevant processors where required, subject to lawful exceptions and backup schedules.
7. Contact
Privacy contact: support@chssos.com. We will update this notice when our products, vendors, or data practices materially change.