Hume Care

This Consumer Health Data Privacy Policy supplements the Hume Care Privacy Policy (the "Privacy Policy") and applies to personal data defined as "consumer health data" ("CHD") by the Washington state My Health My Data Act ("MHMDA") and Nevada's Consumer Health Data Privacy Law ("Nevada CHD Law"). Undefined capitalized terms have the meaning given in the Privacy Policy. This Policy describes our practices with respect to activities covered by the MHMDA and Nevada CHD Law.

Categories of CHD Collected

As described further in our Privacy Policy, and depending on applicable law and how you interact with Hume Care, we may collect the following categories of CHD:

• Individual health conditions, treatment, diseases, or diagnoses: e.g., in connection with you seeking healthcare services or medications through Hume Care.
• Social, psychological, behavioral, and medical interventions: e.g., through collection of your medical history as part of the treatment services you seek through Hume Care.
• Health-related surgeries or procedures: e.g., through collection of health-related surgeries or procedures within your medical history.
• Use or purchase of prescribed medication: e.g., through your purchase of medication through Hume Care or through the medical history you provide.
• Bodily functions, vital signs, symptoms, or measurements of health information: e.g., as part of you seeking healthcare services or medications through Hume Care.
• Diagnoses or diagnostic testing, treatment, or medication: e.g., as part of the medical history collected by Hume Care.
• Gender-affirming care information: e.g., as part of the medical history collected by Hume Care. Collection of this category from Washington residents requires and will be preceded by your affirmative consent, separate from your general agreement to this Privacy Policy.
• Reproductive or sexual health information: e.g., as part of the medical history collected by Hume Care. Collection of this category from Washington residents requires and will be preceded by your affirmative consent.
• Genetic data: e.g., where such information is included in medical history collected by Hume Care.
• Data that identifies a consumer seeking health care services.
• Other information that may be used to infer, derive, or extrapolate data related to the above or other health information.

Sources of CHD

We collect information, which may include CHD, from the following sources: (1) directly from you; (2) automatically through your use of the Services; and (3) third parties such as your Healthcare Provider and, where you have linked your accounts, Hume Health.

Purposes for Collection of CHD

We collect and use CHD: (1) to provide our services; (2) to send you communications you have requested; and (3) to address legal matters, such as to comply with laws or to establish, exercise, or defend our legal rights. We may also use your CHD for other purposes you authorize.

How and Why We Share CHD

We may share each of the categories of CHD described above for the purposes described in the "Disclosure of Information" section of our Privacy Policy, including:

• To deliver products and services to you, including to complete transactions initiated by you.
• To protect Hume Care and others, including to enforce our Terms and Conditions or other contracts with you, and for fraud prevention.
• To comply with our legal obligations.
• In connection with any negotiation or completed acquisition, merger, or purchase involving our business assets.
• To create aggregated or de-identified data.
• For other reasons at your direction or with your consent.

With Whom We Share CHD

We may share CHD with the following categories of third parties and affiliates: Healthcare Providers and clinical networks; affiliates, including Hume Health Corp; vendors and service providers; and other entities to whom disclosure is made for legal, protective, or transactional purposes, or at your direction.

How To Exercise Your MHMDA or Nevada CHD Law Rights

Subject to exceptions, the MHMDA and Nevada CHD Law extend certain rights relating to CHD. Depending on your jurisdiction and situation, this may include rights: (1) to confirm whether Hume Care is collecting, sharing, or selling your CHD; (2) to access your CHD; (3) to delete your CHD; (4) to withdraw your consent to the collection or sharing of your CHD; and (5) to decline to authorize, and to withdraw any authorization for, the sale of your consumer health data.

If you are a Nevada resident and wish to opt out of the sale of your consumer health data, you may do so by contacting us at privacy@HumeCare.com with the subject line "Nevada CHD Opt-Out." We will process your request within the timeframe required by applicable law. You can seek to exercise these rights by emailing us at privacy@HumeCare.com. We will respond within 45 days of receipt, which we may extend once by 45 days where reasonably necessary. When you request deletion, we will delete your CHD from our records and direct our processors, affiliates, and any third parties with which we have shared it to do the same.

If we deny your request in whole or in part and the MHMDA or Nevada CHD Law applies to our handling of your CHD, you may appeal that decision by emailing us at privacy@HumeCare.com. If you are a resident of Washington and your appeal is denied, you can contact the Washington State Attorney General at www.atg.wa.gov/file-complaint. If you are a resident of Nevada and your appeal is denied, you can contact the Nevada Attorney General at https://ag.nv.gov/Complaints/File_Complaint/.

Updates to This CHD Policy

We reserve the right to change this CHD Policy at any time to reflect changes in the law, our data collection and use practices, the features of our services, or advances in technology. We will make the revised CHD Policy accessible from a separate link labeled “Consumer Health Data Privacy Policy” on the homepage of www.HumeCare.com and in the Hume Care application. The date this CHD Policy was last revised is identified at the top of this document. If we make a material change to this CHD Policy, we will obtain your consent if legally required.

Contact Us

If you have any questions about this CHD Policy or Hume Care's privacy practices, please contact us at privacy@HumeCare.com.