1. Why this policy is separate
CHS SOS publishes this Consumer Health Data Privacy Policy separately because visits to CHS educational pages or product information can reveal an interest in a health topic. This policy describes our practices for health-related information that may fall outside HIPAA, including rights available under Washington’s My Health My Data Act where applicable.
2. Consumer health data we collect
CHS SOS does not collect diagnoses, medical records, treatment history, or Symptom Check answers. It may process the following limited health-related information:
- Symptom Check: answers remain in your browser and are not transmitted, stored, connected to an email address, or included in analytics.
- Optional personalization preferences: after the Symptom Check, you may separately consent to provide an age range, your general relationship to CHS information, selected CHS content interests, and an email-frequency preference. These fields are optional and are used only for CHS SOS communications.
- Article comments: comments are public after moderation and may reveal an interest in CHS. We tell commenters not to include diagnoses, medical records, phone numbers, or other sensitive details in the public text. Email addresses, optional mobile numbers, and communication choices remain private.
- Site analytics: while analytics is on, page and interaction data may show that a browser viewed CHS-related education, an Action Plan, or product information. We treat that activity as potentially sensitive and provide an always-available footer opt-out.
- Contact messages: we ask you not to include symptoms, diagnoses, or medical history. If you voluntarily include health information despite that instruction, we use it only to respond or handle the request.
3. Sources and purposes
Health-related browsing activity comes from your browser while site analytics is on. Optional personalization preferences and contact information come directly from you. We use them to provide the content or response requested, personalize CHS SOS communications when separately authorized, understand aggregate content performance, protect the service, and comply with law. Refusing optional personalization does not prevent email signup or use of the Symptom Check.
4. Sharing
- When site analytics is active, browsing and interaction measurement is shared with Google Analytics and Jetpack Stats for site-performance analysis. Subscriber profile fields, email addresses, and Symptom Check answers are not included in analytics events.
- Hosting providers process first-party records as necessary to deliver and secure the site.
- Separately consented email preferences may be included in an administrator export to Constant Contact solely to deliver and segment CHS SOS communications requested by the subscriber.
- We do not sell consumer health data, use it for advertising, build advertising audiences from it, or provide it to data brokers.
CHS SOS will not collect, use, or share a new category of consumer health data for a new purpose without updating this policy and obtaining consent where required.
5. Your health-data rights
Where applicable, you may request access to, confirmation of, correction of, or deletion of consumer health data; obtain a list of relevant third parties or affiliates; or withdraw consent for future collection or sharing.
Use “Privacy request” in the contact form or email support@chssos.com. Turning analytics off through the footer stops future optional analytics collection in that browser. We will respond within the period required by applicable law and explain any verification steps or appeal option.
6. Retention and deletion
Contact messages are deleted after 12 months. Symptom Check answers are never received by CHS SOS. Subscriber preferences are retained while the subscription remains active or until consent is withdrawn or deletion is requested. Optional analytics retention is controlled through the analytics service settings. A verified deletion request will be applied to first-party systems and communicated to relevant processors where required, subject to lawful exceptions and backup schedules.
7. Contact
Privacy contact: support@chssos.com. We will update this notice when our products, vendors, or data practices materially change.