Washington Consumer Health Data Privacy Policy

We may collect Consumer Health Data about you from the following sources:

• Directly from you. You may choose to provide health information to us, such as when you contact us online. We may also infer health information from our interactions.    
• Data collected automatically and through tracking technologies. We may use cookies, pixels, web beacons, session replay tools, scripts, and other similar tracking technologies to infer health information about how you interact with us online, such as based on which sites you visit.

We may combine information that we receive from the various sources and use or disclose the combined information for the purposes identified below.

We may collect the following types of Consumer Health Data:

• Health status or treatment information, such as information you choose to provide to us regarding your physical or mental health conditions, treatments, diseases, or diagnoses.
• Inferences about health derived from online interactions, such as inferences based on the pages you visit or products you view or purchase.

We may use Consumer Health Data for the following purposes:

• To provide products and services you request (and related business functions), such as making our websites and services available to you; providing customer service and communicating with you (including soliciting feedback or responding to requests, complaints, and inquiries); maintaining and otherwise facilitating your relationship with us; and evaluating and improving the products and services you request.
• For legal, compliance, and safety purposes, such as complying with our policies; legal, reporting, and similar requirements; investigating and responding to claims against us, our personnel, and our customers; for the establishment, exercise, or defense of legal claims; protecting our, your, our customers’, and other third parties’ safety, property, or rights; detecting, preventing, and responding to security incidents and health and safety issues; and protecting against malicious, deceptive, fraudulent, or illegal activity.
• In connection with a corporate transaction. This includes circumstances where we acquire assets of another business or sell or transfer all or a portion of our business or assets including through a sale in connection with bankruptcy and other forms of corporate change.
• For marketing purposes, such as tracking and improving the effectiveness of our online marketing efforts on other sites.

We may use anonymized, de-identified, or aggregated information for any purpose permitted by law.

We may disclose Consumer Health Data to the following categories of third parties:

• Affiliates and subsidiaries: We may disclose Consumer Health Data to our affiliates and subsidiaries, including our parent company, Alphabet.
• Service Providers: We may disclose your Consumer Health Data or make it accessible to companies that provide services to us (“Service Providers”) related to the products and services you request or to support our relationship with you, such as cloud services, security services, data storage, website hosting, professional consulting, and other support functions. Verily also uses Service Providers to assist with tracking and improving the effectiveness of our online marketing efforts on other sites. It is our policy to have in place agreements with our Service Providers that limit how Service Providers can use and disclose your Consumer Health Data and require them to keep it secure.
• Legal Obligations, to Authorities, and for Safety: We may disclose Consumer Health Data to satisfy applicable laws or regulations; in response to legal processes or enforceable government or law enforcement requests; to monitor compliance with our policies and applicable terms of service; to detect, prevent, or otherwise address fraud, security or technical issues; or to protect the rights, property or safety of Verily, our customers, our users, or the public, as required or permitted by law.
• Disclosure to Subsequent Owner or Operator: We may transfer your Consumer Health Data to a successor entity upon a merger, consolidation, bankruptcy, reorganization, or in connection with other forms of corporate change; to a purchaser of all or a portion of our assets; or pursuant to a financing arrangement.
• Other Disclosures with Your Consent: We may share Consumer Health Data with companies, organizations, or individuals outside of Verily for purposes not specified elsewhere in this Consumer Health Data Privacy Policy with your consent.

Washington consumers may have certain rights regarding your Consumer Health Data:

• Right to Access. You may have the right to confirm whether we process your Consumer Health Data. You also may request access to the Consumer Health Data we hold about you.
• Right to Delete. You may have the right to request that we delete your Consumer Health Data.
• Right to Withdraw Consent. Where our processing of Consumer Health Data is based on your consent, you may have the right to withdraw such consent at any time; however, you may not be able to use the digital properties or other products or services for which you are withdrawing your consent. Withdrawing your consent will not affect the lawfulness of the processing we conducted prior to your withdrawal.

To exercise your rights, you may submit such requests directly by calling our toll-free number at 833-821-6366, submitting a request through our Online Form, or emailing us at datarightsrequest@verily.com. You may also change your consent preferences regarding our use of tracking technologies in the “Cookie Settings” menu linked in the footer of our websites. We do not discriminate against individuals who exercise any of their rights described in this Privacy Policy.

If you have any questions or concerns regarding the Consumer Health Data we handle, please
contact us at prisec@verily.com or via mail at:

Attn: Verily Privacy Office
c/o Verily Life Sciences LLC
269 East Grand Avenue
South San Francisco, CA, 94080