Consumer Health Data Privacy Notice

This notice supplements the Glace Privacy Policy and applies to "consumer health data" as defined by the Washington My Health My Data Act, Nevada Senate Bill 370, and other state laws that expressly govern consumer health data. It exists so that, in the limited situations where Glace handles health-related information outside of HIPAA, you know what we collect and what your rights are.

Scope, and What This Notice Does Not Cover

Glace sells software and services to healthcare practices. Our website is for practices and their staff, not for patients, and we do not intend to collect health information from website visitors.

This notice does not cover protected health information ("PHI") that we create, receive, maintain, or transmit on behalf of a healthcare practice as its business associate. That information is governed by HIPAA and the applicable Business Associate Agreement, and it is exempt from state consumer health data laws. If you are a patient of a practice that uses Glace, direct requests about your health information to your practice.

Consumer Health Data We May Collect

We do not seek to collect consumer health data through our website, and we do not use cookies, pixels, or other tracking technologies to collect or infer health information about visitors. The only consumer health data we may receive is information you voluntarily choose to share with us, for example if you describe a personal health situation in an email, a demo call, or a message to our team. The categories are limited to whatever health details you include in your message, such as a health condition or a healthcare service you have sought.

Sources of Consumer Health Data

Directly from you, when you voluntarily provide it in communications with us. We do not collect consumer health data automatically, we do not derive or infer health data about you from other data, and we do not purchase consumer health data from third parties.

Why We Would Collect or Use It

Solely to respond to your communication and provide what you asked for, to maintain a record of our correspondence, and to comply with legal obligations. We do not use consumer health data for advertising, marketing, or profiling, and we do not use it to train artificial intelligence models.

Sharing of Consumer Health Data

We do not sell consumer health data, and we will not sell it without the valid authorization required by applicable law. We do not share consumer health data with affiliates or third parties for their own purposes. It may be accessible to the service providers that host our email and business systems, which are bound by contracts restricting their use of the data, and it may be disclosed if required by law. A list of the categories of service providers with access is available on request at contact@glace.sh.

No Geofencing

We do not implement geofencing around any healthcare facility, and we do not use location data to identify or track individuals seeking healthcare services.

Your Rights

If you are a resident of Washington, Nevada, or another state whose consumer health data law applies to you, you have the right to:

• Confirm whether we collect, share, or sell consumer health data about you, and access that data, including a list of the third parties and affiliates with whom we have shared it.
• Withdraw any consent you previously gave for the collection or sharing of your consumer health data.
• Have your consumer health data deleted. We will instruct service providers that hold the data to delete it, and data residing in routine backups will be deleted on our scheduled backup deletion cycle, as permitted by law.

To exercise these rights, email contact@glace.sh with the subject line "Consumer Health Data Request." We will verify your identity and respond within the time required by the applicable law. We will not discriminate against you for exercising your rights.

Appeals

If we decline to act on your request, you may appeal by replying to our decision or emailing contact@glace.sh with the subject line "Consumer Health Data Appeal." If your appeal is unsuccessful, you may contact your state Attorney General. Washington residents may file a complaint with the Washington Attorney General at atg.wa.gov.

Changes to This Notice

We will post any changes to this notice on this page along with the updated date, and material changes will be highlighted in the main Privacy Policy.

Contact

Questions about this notice can be sent to contact@glace.sh.