This Washington Consumer Health Data Privacy Policy ("Policy") describes consumer health data ("Consumer Health Data") that Lind AI, Inc. ("Lind AI," "we," "us," or "our") controls and that is subject to Washington's My Health My Data Act ("MHMDA"). It does not cover information exempt under MHMDA or processing we carry out solely on a healthcare customer's behalf.
Consumer Health Data We May Receive
Our public Site requests business contact details, not health information. Our contact channels may nevertheless receive unsolicited health information that a sender chooses to include. The categories of Consumer Health Data we may receive in this way are information about health conditions or diagnoses; treatments or medications; healthcare services sought or received; and interest in clinical trial services. The source is the person who sends the communication. Please do not include health information in a demo request or ordinary email.
If we receive unsolicited Consumer Health Data, we limit its use to securing and reviewing the submission, responding to the sender's request, and arranging removal or handling through an authorized channel. Access is limited to personnel and processors needed for those purposes, including addressing copies in the communication systems involved. We do not use this information for marketing, profiling, advertising, analytics, product development, or model training.
We do not use Site analytics to infer a person's health status or combine Site analytics with Consumer Health Data.
We will not collect, use, or share an additional category of Consumer Health Data not disclosed in this Policy, or process Consumer Health Data for an additional purpose not disclosed in this Policy, unless we first disclose that category or purpose and obtain the consumer's affirmative consent before the collection, use, or sharing. Consent to share Consumer Health Data will be separate and distinct from consent to collect it.
Sharing and Sale of Consumer Health Data
Categories of Consumer Health Data shared: None.
Categories of third parties with whom Consumer Health Data is shared: None.
Specific affiliates with whom Consumer Health Data is shared: None.
Unsolicited communications may pass through our email, hosting, ticketing, or collaboration providers while we respond and arrange removal. We limit processor access to the disclosed purposes under binding instructions and contractual restrictions. MHMDA excludes disclosures to a processor from "sharing" only when the disclosure is consistent with the disclosed collection purpose and the Act's requirements. We do not authorize these providers to use Consumer Health Data for their own purposes.
We do not sell Consumer Health Data in exchange for monetary or other valuable consideration. If we change our practices, MHMDA requires consent to sharing that is separate and distinct from consent to collection. A sale would also require a valid authorization signed by the consumer that is separate and distinct from consent to collect or share Consumer Health Data.
Your MHMDA Rights
Under MHMDA, a Washington consumer has the right to:
- Confirm whether Lind AI is collecting, sharing, or selling Consumer Health Data concerning the consumer;
- Access that Consumer Health Data, including a list of all third parties and affiliates with whom it has been shared or sold and an active email address or other online mechanism the consumer may use to contact each recipient;
- Withdraw consent to our collection or sharing of that Consumer Health Data; and
- Have that Consumer Health Data deleted, including from our archives and backup systems as required by MHMDA.
To exercise a right, email privacy@lind.care at any time. Include your name, the email address associated with your interactions with Lind AI, and enough detail for us to identify the relevant interaction. You do not need to create an account to submit a request. We will promptly take reasonable steps to authenticate the request without requiring you to create an account. An authorized agent may exercise these rights on a consumer's behalf, and we may request evidence of the agent's authority.
We provide information in response to a request free of charge up to twice annually. We will respond without undue delay and no later than 45 days after receiving a request. We may extend the response period once by an additional 45 days when reasonably necessary, taking into account the complexity and number of requests. If we extend the period, we will tell you within the initial 45-day period and explain the reason.
If we deny a request, you may appeal by emailing privacy@lind.care with the subject line "Appeal of Consumer Health Data Request." Within 45 days after receiving an appeal, we will provide a written response explaining the action taken or not taken and the reasons for the decision. If we deny the appeal, you may submit a complaint to the Washington State Attorney General.
If your request concerns patient or clinical information processed for a healthcare organization, contact that organization directly. Lind AI will assist the organization as required by our agreement and MHMDA.
We will not unlawfully discriminate against you for exercising a MHMDA right.
Changes to this Policy
The version date identifies the reviewed text. This version takes effect when first published on this page, subject to MHMDA's notice and consent requirements. Before collecting, using, or sharing an additional category of Consumer Health Data or processing Consumer Health Data for an additional purpose, we will disclose the additional category or purpose and obtain affirmative consent as required by MHMDA. Any consent to share will be separate and distinct from consent to collect.
How to Contact Us
For questions, concerns, MHMDA requests, or appeals, contact Lind AI at privacy@lind.care.