skip to content

Color has been recognized by Fast Company as a 2024 Next Big Things in Tech Award winner in the Health category. Learn more.

要以繁體中文閱讀,請單擊此處 >

Para basahin ito sa Filipino click here >

Pou li an kreyòl klike la >

Para ler em português clique aqui >

Чтобы прочитать это на русском, нажмите здесь >

Si aad Soomaaliya ugu akhrido halkan guji >

Para leerlo en español haz clic aquí >

 

Introduction

This consent form (“Consent”) describes how you (referred to as “you” or “your”), as a user of Color’s Services, will review the specific risks, benefits, and limitations of the testing, prescribing, recommendation and/or administration of treatments, counseling, medical consultation in person or via telephone or video telehealth services, and other services (collectively “Healthcare Service(s)”) to which access is provided by Color Health, Inc., our affiliates, and partners (“Color”, “we”, “us” or “our”), and how you consent to selected Healthcare Service(s).

Color’s Role

Color may connect you with clinicians at Color Medical, and/or unaffiliated clinicians, laboratories, pharmacies, and other professionals, all of whom may have their own applicable terms of service and other policies.  We do not control or interfere with the practice of medicine by clinicians, who are solely responsible for the medical care and treatment they provide to you. 

Voluntary Participation

Your use of Color’s Healthcare Services is entirely voluntary. It is your choice whether to utilize our Healthcare Services or not based on your review of risks, benefits, and limitations of individual tests, treatments or other services, and your consultation with a healthcare provider. 

Procedure for Color Healthcare Services

You may have the opportunity to select specific tests, treatments or other services, including, but not limited to, testing for or treatment of infectious diseases, genetic and other testing, and/or consultation with a healthcare provider regarding abnormal laboratory results.

You will have the opportunity to review a summary of the risks, benefits, and limitations of each Healthcare Service. You are encouraged to discuss any questions or concerns with a healthcare provider of your choosing.

By selecting a Healthcare Service, you are representing that you have had an adequate opportunity to review the risks, benefits, and limitations of the Healthcare Service, and had the opportunity to discuss those with your healthcare provider, if desired, and you are providing your consent to Color to provide access to the selected Healthcare Service.  In some cases, you may be asked to provide additional documentation of consent (e.g., by written or electronic means) for certain Healthcare Services.

Use of Telehealth Services

Color may provide access to telehealth services and connect users to third party healthcare providers to enable those providers to evaluate the individual’s medical information remotely for the purpose of providing care. “Telehealth services” may include remote diagnosing and prescribing, appointment scheduling, health information sharing, and non-clinical services, such as patient education. The information you provide may be used for diagnosis, treatment, follow-up and/or patient education. Health information may be shared by you and the telehealth provider via any combination of the following: health records and test results; images and asynchronous communications; live two-way audio and video; interactive audio with store and forward; and output data from medical devices and sound and video files.

The laws that protect the privacy and confidentiality of healthcare information also apply to telehealth. Color uses and discloses Protected Health Information in a number of ways connected to your treatment, payment for your care, and our healthcare operations as more fully described in Color’s HIPAA Notice of Privacy Practices

There are benefits and risks to the use of telehealth. Potential benefits may include making it easier, more convenient, and more efficient to receive medical care and treatment. Telehealth services also allow you to seek care at times that are more convenient for you. Potential risks may include, without limitation:

  • The information available to the telehealth provider may not be sufficient to allow the provider to make an appropriate medical decision, including diagnosis or treatment.
  • The inability for the telehealth provider to conduct an in-person examination may in some cases prevent the provider from providing a diagnosis or treatment or from identifying the need for emergency medical care or treatment.
  • Technology issues, such as disruptions of signals or problems with the Internet’s infrastructure, may cause broadcast and reception problems (e.g., poor picture or sound quality, dropped connections, audio interference) that prevent effective interaction between you and the treating healthcare provider, and may lead to loss of information.

As with any Internet-based communication, there is a risk of security breach. Electronic systems used will incorporate network and software security protocols to protect the confidentiality of patient data and will include measures to safeguard the data and to ensure its integrity. 

Individuals other than the telehealth provider may also be present or have access to my information for the telehealth session to assist with operation, delivery or repair of the telehealth service and technologies.  These persons will adhere to applicable privacy and security policies.

I attest to the following:

  1. I have the legal authority to give consent for Healthcare Services.
  2. I understand and agree that the Healthcare Services to which Color provides access may not be appropriate for certain populations of people with certain conditions or symptoms. Prior to receiving Healthcare Services, I have had the opportunity to consult with my healthcare provider. 
  3. I understand and agree that I will be given and will review information about selected Healthcare Services, including the benefits, risks, possible problems or complications, and alternate choices for my medical care.
  4. I understand that I have the right to consult my own healthcare provider before deciding whether to receive a Healthcare Service or to refuse any Healthcare Service if I determine that I do not accept the potential risks or that it is otherwise not appropriate for me. 
  5. I understand and agree that a healthcare provider I access through Color will not have access to my full medical records and that the health information I provide at the time of my Healthcare Service or telehealth visit may be the only source of health information used by the healthcare provider during the course of my evaluation and treatment.
  6. I understand, agree, and expressly consent to Color obtaining, using, storing, and disseminating to necessary third parties, information about me, including my image, as necessary to provide the telehealth services.  I consent to release of my medical records to my primary care provider or other healthcare provider identified by me.  I further understand that I will have access to all medical information resulting from the Healthcare Service or telehealth consultation as provided by applicable law for patient access. 
  7. I understand and agree that the identity and credentials of my healthcare provider will be provided in advance of or at the time of my Healthcare Service or telehealth visit. In the event of technology failure, my clinician will provide next steps or follow-up information. 
  8. I understand and agree that, by signing up for a Healthcare Service, I consent to performance and delivery of that Healthcare Service by Color.
  9. I understand that I have the right to decline or withdraw consent to any Healthcare Service and to Color’s use of telehealth at any time. I understand that if I withdraw my consent for a Healthcare Service or to the use of telehealth, it will not affect any future services or care benefits to which I am entitled, but withdrawal of consent will affect the ability to continue to receive a specific Healthcare Service until new consent for that Healthcare Service is given.
  10. I understand and agree that Color’s Healthcare Services and telehealth services are not intended for emergency care or emergency health situations.  In the event of a medical emergency or an adverse reaction to treatment, I understand that I should call 911.
  11. I understand the risks, benefits, and limitations to telehealth services described above.
  12. I acknowledge that I have received and had an opportunity to review Color’s Terms of Service, Privacy Policy, and HIPAA Notice of Privacy Practices.
  13. I understand that my electronic signature has the same effect as my handwritten signature.

State-Specific Consents for Telehealth Services:

The following information applies to patients accessing telehealth services from the states listed below.

  • New York:  I understand that I can ask my telehealth provider how to verify his/her professional license.  
  • Texas:
    • NOTICE CONCERNING COMPLAINTS – Complaints about physicians, as well as other licensees and registrants of the Texas Medical Board, including physician assistants, acupuncturists, and surgical assistants may be reported for investigation at the following address: Texas Medical Board, Attention: Investigations, 333 Guadalupe, Tower 3, Suite 610, P.O. Box 2018, MC-263, Austin, Texas 78768-2018. Assistance in filing a complaint is available by calling the following telephone number: 1-800-201-9353, For more information, please visit our website at www.tmb.state.tx.us.
    • AVISO SOBRE LAS QUEJAS – Las quejas sobre médicos, así como sobre otros profesionales acreditados e inscritos del Consejo Médico de Tejas, incluyendo asistentes de médicos, practicantes de acupuntura y asistentes de cirugía, se pueden presentar en la siguiente dirección para ser investigadas: Texas Medical Board, Attention: Investigations, 333 Guadalupe, Tower 3, Suite 610, P.O. Box 2018, MC-263, Austin, Texas 78768-2018. Si necesita ayuda para presentar una queja, llame al: 1-800-201-9353, Para obtener más información, visite nuestro sitio web en www.tmb.state.tx.us.
  • Utah:  For additional information on telehealth website owner-operator, location, and contact information, contact support@color.com.


Acknowledgement

You (a) certify that you are the patient, or that you are authorized to provide consent on behalf of the patient as the patient’s representative or legal guardian, (b) acknowledge and accept the risks identified above and the terms associated with the receipt of Healthcare Services, including via telehealth services, and (c) give your informed consent to receive Healthcare Services under the terms described herein.

Color Health Terms of Service

Last Updated: August 12, 2024

This content is also available in: العربية 繁體中文 Filipino 한국어 Русский Español Tiếng Việt 简体中文

Please read these Terms of Service (the “Terms”) and our Privacy Notice  (“Privacy Notice”) carefully because they govern your use of Color Health, Inc.’s and its affiliates’ (collectively, “Color,” “we,” “us,” or “our”) services, including use and access of our website located at www.color.com (the “Site”), corresponding mobile applications (“App”), our healthcare delivery and technology platform services, available screenings and tests (“Tests”) and products (as further described below) accessible via the Site, and all other websites and online applications operated by Color or its affiliates that link to or incorporate these Terms (“Other Services”).   To make these Terms easier to read, the Site,  services, products, tests, App and Other Services are collectively called the “Services.”

COLOR CAN HELP CONNECT YOU TO SERVICES, BUT COLOR IS NOT YOUR DOCTOR AND DOES NOT PRACTICE MEDICINE OR PROVIDE ANY FORM OF MEDICAL CARE OR MEDICAL ADVICE.  USE OF THE SERVICES IS NOT FOR EMERGENCIES.  IF YOU THINK YOU HAVE A MEDICAL EMERGENCY, CALL 911 OR GO TO THE NEAREST OPEN EMERGENCY DEPARTMENT. 

The Services are not appropriate for all medical conditions or concerns.  We recommend that you speak with your physician or other qualified healthcare provider regarding any questions you may have about the Services before you consent to treatment or testing. It is important that you review carefully any fact sheet or other distributed information and have all your questions answered before proceeding.  You should not make medical decisions or changes to medications or dosages without consulting a healthcare provider. 

1.             Services. Services offered by or through Color may include, without limitation, the following:

(a) Software platforms for managing populations of individuals and delivering Color and partner services and health insights (“Platform Services”);

(b) Screening and tests for cancer and supporting services including, but not limited to, peer-led mental wellness groups (collectively, “Cancer Screening Services”);

(c) Screening and tests for cardiometabolic disease and supporting services (“Cardio Screening Services”);

(d) Non-clinical care advocacy and management, including, but not limited to, care coordination, benefits and insurance navigation, and discussion of care plans (collectively, “Care Advocacy Services”);

(e) COVID-19 testing (“COVID-19 Test(s)”) and protocol management (collectively, “COVID-19 Testing Services”);

(f) Vaccinations and supporting services (collectively, “Vaccination Platform Services”);

(g) Infectious disease testing (“Infectious Disease Test(s)”) and supporting services (collectively, “Infectious Disease Services”);

(h) Preventative Care testing (“Preventative Care Test(s)”) and supporting services (collectively, “Preventative Care Services”);

(i) Genetic testing (a “Genetic Test(s)”) and supporting services (collectively, “Genetic Testing Services”);

(j) Laboratory services (“Laboratory Services”);

(k) Pharmacy services (“Pharmacy Services”); 

(l) Healthcare provider or clinical services (“Provider Services”) and

(m) Access to products and services through the Site or App and any other features, content, or applications that we may offer from time to time.

Color may connect you with third-party clinicians such as Color Medical, PA and/or other third-party clinician groups, laboratories, pharmacies, and professionals, each of whom may have their own applicable Terms of Service and other policies.  We do not control or interfere with the practice of medicine by clinicians, each of whom is solely responsible for the medical care and treatment he or she provides to you. 

2.              Agreement to Terms. Your access to and use of the Services are subject to these Terms, regardless of whether you create an account. By accessing or using the Services, you acknowledge that you understand and agree to be bound by these Terms. If you do not agree to be bound by these Terms, do not access or use the Services.

3.              Privacy Notice. Please review our Privacy Notice, which describes how Color collects, uses and shares information about you through the Services.

4.              Changes to these Terms or the Services. We may update these Terms from time to time by posting the updated Terms on the Site and to the App. Using the Services after updated Terms are posted means you accept and agree to be bound by the updated Terms. If you do not agree to be bound by the Terms as they exist at the time you use the Services, you may not use the Services. Because our Services are evolving over time, we may change or discontinue all or any part of the Services, at any time and without notice, at our sole discretion.

5.              Additional Terms. We may provide certain services that are subject to additional terms, and by using such services you agree to the applicable additional terms. Individuals participating in Services through Color’s Organizational Customers may also be subject to additional terms.

6.              Accuracy of Information You Provide. You are solely responsible for the truthfulness and accuracy of all information you provide for yourself or other individual(s), and Color disclaims any liability or injury resulting from any untruthful or inaccurate information you provide.

7.               Who May Use the Services?

(a) Legal authority. You represent that you have the legal authority to use the Services. If you are using the Services for another individual, you represent that you have the legal authority to use the Services or respond on their behalf.

Color does not market to or intend for minors below thirteen (13) years of age to use or access the Site without parental/guardian consent. You must be at least thirteen (13) years of age to access the Site and use the Services. Certain Services might be available for individuals under eighteen (18) years of age with parental or guardian consent, or if applicable law in your jurisdiction permits persons under eighteen (18) to consent on their own behalf to receive these Services. By agreeing to these Terms, you represent and warrant to Color that your use of the Service is in compliance with any and all applicable laws and regulations and that you have reviewed and agree to Color’s Privacy Notice and, where applicable, our HIPAA Notice of Privacy Practices, these Terms of Service, and any other applicable Service terms. You further represent and warrant that: (ii) you are at least thirteen (13) years of age; (iii) if you provide a biological specimen and request a Service, you are either (1) at least eighteen (18) years of age, or (2) if under eighteen (18) years of age, (a) are permitted under the laws and regulations in your jurisdiction to consent to the Service, or (b) a parent or legal guardian has provided consent and any applicable authorizations for you to obtain the Service in accordance with Color’s procedures.

(b) Screening for candidacy. Your eligibility to schedule and receive Services may depend on personal and screening information you provide.

(c) Account based services. For certain features of the Services, you will need an account. You are responsible for providing accurate and complete account information and for keeping account information up to date. If you do not, we may suspend or terminate your account. To protect your account, keep the account details and password confidential, and notify us right away of any unauthorized use. You are responsible for all activities that occur under your account.

(d) Jurisdiction. You represent and warrant that (i) you are not located in a country that is subject to a U.S. Government embargo, or that has been designated by the U.S. Government as a terrorist-supporting country; and (ii) you are not listed on any U.S. Government list of prohibited or restricted parties.

8.             Vaccination Services. You understand that no vaccine will give you absolute protection against contracting any disease, and that there are risks inherent to receiving any vaccine. 

9.              Healthcare Providers Acting on Behalf of Their Patients.  If you are a healthcare provider submitting a Test order for your patient, you represent and warrant that: (i) you hold a valid and in force professional license and are authorized in your jurisdiction to order the Test on behalf of your patient; (ii) you have advised your patient of the benefits, risks, capabilities, and limitations of the Test(s) and Service(s); (iii) you have obtained consent from your patient to share patient health information with Color, as required under HIPAA, and any other applicable data privacy requirements; (iv) you have confirmed that your patient has signed or will sign the applicable informed consent; and (v) you will notify Color of any changes in patient information and consent status (e.g., changes in consent regarding sample storage or participation in optional research).

10.            Sample Processing. Failure to collect and timely return your specimen in strict compliance with the collection and shipping instructions and deadlines may result in delays or in the inability to return a test result. Color is not liable for any non-compliance with these instructions, or for delays or specimen loss due to shipping, transportation, weather or other uncontrollable events. For replacement testing, a new specimen may be required and you may incur a replacement test kit fee.

11.            Information Provided to Color by Third Parties. Color may provide or make available to you information it receives from a health system; state, county, or city government; employer; school or university; or other sponsoring entity or other third-party. Color takes no responsibility for the accuracy of any such information.

12.           Feedback. We appreciate feedback, comments, ideas, proposals, and suggestions for improvements to the Services (“Feedback”). If you choose to submit Feedback, you agree that we are free to use it without any restriction or compensation to you.

13.           Payment. Certain Tests, vaccinations, pharmacy services, shipments, clinician visits and other health services available through the Services may require payment. ALL SUCH PAYMENTS ARE NON-REFUNDABLE.

(a) General. When you make a payment for any of our Services (each, a “Transaction”), you expressly authorize us (or our third-party payment processor) to charge you using the Payment Information (as defined below) for such Transaction. We may ask you to supply additional information relevant to your Transaction, including your credit card number, the expiration date of your credit card and your email and postal addresses for billing and notification (such information, “Payment Information”). You represent and warrant that you have the legal right to use all payment method(s) represented by any such Payment Information. When you initiate a Transaction, you authorize us to provide your Payment Information to third parties so we can complete your Transaction and to charge your payment method for the type of Transaction you have selected (plus any applicable taxes and other charges). You may need to provide additional information to verify your identity before completing your Transaction (such information is included within the definition of Payment Information). By initiating a Transaction, you agree to the pricing, payment, and billing policies applicable to such fees and charges, as posted or otherwise communicated to you. All payments for Transactions are non-refundable and non-transferable except as expressly provided in these Terms. All fees and applicable taxes, if any, are payable in United States dollars.

(b) Insurance. In certain situations, your health plan may cover all or a portion of your use of the Services. Subject to the terms of any applicable written agreement with the health plan, you may authorize us to bill for the Services on your behalf and share necessary information with the health plan to process payments. If your health plan covers Color Services and makes payment to Color for a given Transaction, your payment obligation for such Transaction will be reduced by the amount your health plan actually paid to Color. You may be held responsible for any fees that your health plan does not cover, such as copays, deductibles, and coinsurance. We may ask you to provide insurance information, including your insurer, ID number, RxBin number, and RxPCN number. By providing insurance information, you represent that such information is accurate, complete and current.

14.           Your Content.

(a) User Content. Our Services may allow you to submit, store, or share information, data, or content such as text (in communications with healthcare providers or others), files, assessments, self-report measures, lab samples, laboratory results, prescriptions and pharmaceutical documents, medical records, family history, documents, graphics, images, software, audio and video. Anything (other than Feedback) that you make available through the Services is referred to as “User Content.” Color does not claim any ownership rights in any User Content and nothing in these Terms will be deemed to restrict any rights that you may have to your User Content.

(b) Permissions to Your User Content. You hereby grant to Color a license to use any User Content to operate and provide the Services. In addition, to the extent you have made any User Content public, you hereby grant to Color a non-exclusive, transferable, worldwide, royalty-free license, with the right to sublicense, to use, copy, modify, create derivative works based upon, publicly display, and distribute, any public User Content in connection with operating and providing the Services.

(c) Your Responsibility for User Content. You are solely responsible for all your User Content. You represent and warrant that you have (and will have) all rights that are necessary to grant us the license rights in your User Content under these Terms. You represent and warrant that neither your User Content, nor your use and provision of your User Content to be made available through the Services, nor any use of your User Content by Color on or through the Services will infringe, misappropriate, or violate a third party’s intellectual property rights, or rights of publicity or privacy, or result in the violation of any applicable law or regulation.

(d) Removal of User Content. To the maximum extent permitted by law, you can request removal of your User Content by contacting support@color.com. In certain instances, some of your User Content (such as posts or comments you make) may not be completely removed and copies of your User Content may continue to exist on the Services. To the maximum extent permitted by law, we are not responsible or liable for the removal or deletion of (or the failure to remove or delete) any of your User Content. Color may be required to retain certain User Content in connection with our legal requirement to preserve health-related records.

(e) Monitoring User Content. Color is not obligated to monitor access to or use of the Services or to review or edit any content. However, we have the right to do so for the purpose of operating the Services, to ensure compliance with these Terms and to comply with applicable law or other legal requirements. We reserve the right, but are not obligated, to remove or disable access to any content, including User Content, at any time and without notice, including, but not limited to, if we, at our sole discretion, consider it objectionable or in violation of these Terms.

(f) Color’s Intellectual Property. We may make available through the Services content that is subject to intellectual property rights. We retain all rights to that content.

15.           Rights and Terms for Apps. If you comply with these Terms, Color grants to you a limited non-exclusive, non-transferable license, with no right to sublicense, to access and where applicable, download and install the App on your personal devices and to access the Site and run the App solely for your own personal non-commercial purposes (unless you are a commercial customer, in which case Color grants you the right to use the Site or App according to the terms of your applicable commercial agreement with Color). Except as expressly permitted in these Terms, you may not: (i) copy, modify or create derivative works based on the App; (ii) distribute, transfer, sublicense, lease, lend or rent the Site or App (iii) reverse engineer, decompile or disassemble the Site or App ; or (iv) make the functionality of the Site or App available to multiple users through any means.

16.           Service Emails, Text Messages, and Calls. If you provide your email address or cellular phone number to Color (either online or via text message) you hereby authorize Color, and its service providers, to communicate with you via email, phone call, and/or SMS/text message at the email or number provided, including through auto-dialed, auto-generated and/or pre-recorded messages in order to facilitate communication regarding your treatment and to provide you with timely health and care management information. You understand that such messages may include, without limitation, authentication codes for purposes of verifying your ownership of your mobile device and/or reminders about upcoming appointments. You understand that messages may include health information such as follow ups about screenings, treatments, appointments, referrals, care preferences, risk and adherence information, insurance information and collecting necessary health information to coordinate care.  You may opt out of receiving phone calls, and/or texts by adjusting notification preferences in your Color account settings, responding STOP or emailing support@color.com. However, such opt-out may impact your access to the Services. You further acknowledge and agree that communications sent via unencrypted email or via text messages over an open network are inherently not secure, and there is no assurance of confidentiality of information communicated in this manner.

17.           General Prohibitions. You agree not to do any of the following:

(a) Resell, distribute, transfer, or use for any purpose other than performance of the Test(s), any Test sample collection kits, without Color’s express written consent;

(b) Post, upload, publish, submit or transmit any User Content that: (i) infringes, misappropriates or violates a third party’s patent, copyright, trademark, trade secret, moral rights or other intellectual property rights, or rights of publicity or privacy; (ii) violates, or encourages any conduct that would violate, any applicable law or regulation or would give rise to civil liability; (iii) is fraudulent, false, misleading or deceptive; (iv) is defamatory, obscene, pornographic, vulgar or offensive; (v) promotes discrimination, bigotry, racism, hatred, harassment or harm against any individual or group; (vi) is violent or threatening or promotes violence or actions that are threatening to any person or entity; or (vii) promotes illegal or harmful activities or substances;

(c) Use, display, mirror or frame the Services or any individual element within the Services, Color’s name, any Color trademark, logo or other proprietary information, or the layout and design of any page or form contained on a page, without Color’s express written consent;

(d) Access, tamper with, or use non-public areas of the Services, Color’s computer systems, or the technical delivery systems of Color’s providers;

(e) Without written authorization from Color, attempt to probe, scan or test the vulnerability of any Color system or network or breach any security or authentication measures;

(f) Avoid, bypass, remove, deactivate, impair, descramble or otherwise circumvent any technological measure implemented by Color or any of Color’s providers or any other third party (including another user) to protect the Services;

(g) Attempt to access or search the Services or download content from the Services using any engine, software, tool, agent, device, or mechanism (including spiders, robots, crawlers, data mining tools or the like) other than the software and/or search agents provided by Color or other generally available third-party web browsers;

(h) Send any unsolicited or unauthorized advertising, promotional materials, email, junk mail, spam, chain letters or other form of solicitation;

(i) Use any meta tags or other hidden text or metadata utilizing a Color trademark, logo URL or product name without Color’s express written consent;

(j) Use the Services, or any portion thereof, for any commercial purpose or for the benefit of any third party or in any manner not permitted by these Terms;

(k) Forge any TCP/IP packet header or any part of the header information in any email or newsgroup posting, or in any way use the Services to send altered, deceptive, or false source-identifying information;

(l) Attempt to decipher, decompile, disassemble, or reverse engineer any of the software used to provide the Services;

(m) Interfere with, or attempt to interfere with, the access of any user, host, or network, including, without limitation, sending a virus, overloading, flooding, spamming, or mail-bombing the Services;

(n) Collect or store any personally identifiable information from the Services from other users of the Services without their express permission;

(o) Impersonate or misrepresent your affiliation with any person or entity;

(p) Violate any applicable law or regulation; or

(q) Encourage or enable any other individual to do any of the foregoing.

We reserve the right to reject and/or deny any requests for Services related to any samples or Tests submitted in breach of these Terms.

We have the right to investigate violations of these Terms or conduct that affects the Services. We may also consult and cooperate with law enforcement authorities to prosecute users who violate the law.

18.           DMCA/Copyright Policy. Color respects copyright law and expects its users to do the same. It is Color’s policy to terminate, in appropriate circumstances, account holders who repeatedly infringe or are believed to be repeatedly infringing the rights of copyright holders.

19.           Links to Third Party Websites or Resources. The Services (including the App) may allow you to access third-party websites or other resources. We provide access only as a convenience and are not responsible for the content, products, or services on or available from those resources or links displayed on such websites. You acknowledge sole responsibility for and assume all risk arising from your use of any third-party websites or other resources.

20.           Termination.

(a) We may suspend or terminate your access to and use of the Services, including but not limited to refusing to process your biological sample and suspending access to or terminating your account, at our sole discretion, at any time and without notice to you. If we discover that you are using the Services for non-personal or commercial purposes, or suspect that you have knowingly provided false information related to a Test or Service, for example, by misrepresenting information you share or providing another person’s sample and not correctly identifying the source of the sample, Color may, in its sole discretion, refuse to process your sample, terminate your account, prohibit your access to the Site and/or the Service, and/or take any other action necessary or appropriate to ensure compliance with these Terms. Any unauthorized use of the Site and/or the Service can lead to your prohibition from the Site and potential civil and/or criminal prosecution.

(b) You may cancel your account at any time by sending us an email at support@color.com. It may take us up to thirty (30) days from the date that we begin processing your request to deactivate your account. If you choose to deactivate your account, your sample(s) and personal information will no longer be shared for research (if you have opted into such research or sample storage); and Color will not provide you with any of the Services going forward (including, without limitation, any results that have not yet been reported, or any updates or changes to your results). Although Color can remove your information from its active databases, some or all of your information from deactivated accounts will remain in Color’s inactive database for compliance with legal and regulatory requirements. Please also note that information that has already been de-identified, anonymized, aggregated, published, and/or shared with third parties as set forth in the Privacy Notice prior to an account deactivation request may not be retrievable or traced back for destruction, deletion, or amendment.

(c) Upon any termination, discontinuation or cancellation of the Services or your account, the following Sections will survive: 12, 19(c), and 20-24.

21.           Warranty Disclaimers.

(a) THE SERVICES ARE PROVIDED “AS IS,” WITHOUT WARRANTY OF ANY KIND. WITHOUT LIMITING THE FOREGOING, WE EXPLICITLY DISCLAIM ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT AND NON-INFRINGEMENT, AND ANY WARRANTIES ARISING OUT OF COURSE OF DEALING OR USAGE OF TRADE. WE MAKE NO WARRANTY THAT THE SERVICES WILL MEET YOUR REQUIREMENTS OR BE AVAILABLE ON AN UNINTERRUPTED, SECURE, OR ERROR-FREE BASIS. WE MAKE NO WARRANTY REGARDING THE QUALITY, ACCURACY, TIMELINESS, TRUTHFULNESS, COMPLETENESS OR RELIABILITY OF ANY INFORMATION OR CONTENT ON THE SERVICES.

(b) COLOR IS NOT PROVIDING MEDICAL TREATMENT, AND YOU ARE AND WILL REMAIN RESPONSIBLE FOR SEEKING APPROPRIATE MEDICAL CARE. YOU ACKNOWLEDGE AND AGREE THAT, AS FURTHER SPECIFIED HEREIN, COLOR DOES NOT PROVIDE ANY MEDICAL SERVICES OR ADVICE AND DOES NOT MAKE ANY REPRESENTATIONS, WARRANTIES, GUARANTEES, OR ENDORSEMENTS REGARDING MEDICAL SERVICES OR ADVICE THAT YOU MAY OBTAIN THROUGH THE SITE AND/OR SERVICES. NO ADVICE OR INFORMATION, WHETHER ORAL OR WRITTEN, OBTAINED BY YOU FROM THE SERVICES OR ANY MATERIALS OR CONTENT AVAILABLE ON OR THROUGH THE SERVICES (INCLUDING, WITHOUT LIMITATION, ANY CONSULTS WITH COLOR’S GENETIC COUNSELORS, CLINICAL PHARMACISTS, COLOR’S SUPPORT STAFF, OR THIRD PARTY VENDORS) OR SITE WILL CREATE ANY WARRANTY REGARDING COLOR OR THE SERVICE THAT IS NOT EXPRESSLY STATED IN THESE TERMS. YOU ASSUME ALL RISK FOR ALL DAMAGES THAT MAY RESULT FROM YOUR USE OF OR ACCESS TO THE SERVICES AND SITE. BY USING THE SERVICES AND SITE, YOU FURTHER ACKNOWLEDGE AND AGREE THAT YOU WILL NOT TAKE ANY MEDICAL ACTION, OR FAIL TO TAKE ANY MEDICAL ACTION, OR CHANGE ANY OF YOUR MEDICATIONS OR DOSAGES, WITHOUT CONSULTING WITH A PHYSICIAN OR QUALIFIED HEALTHCARE PROVIDER.

(c) YOU UNDERSTAND AND AGREE THAT COLOR IS NOT RESPONSIBLE AND SHALL NOT BE HELD LIABLE FOR ANY PRODUCTS AND SERVICES PROVIDED BY OTHER INDIVIDUALS OR ENTITIES AS PART OF A TEST, VACCINE SERVICES, VACCINE ON-SITE SERVICES, TELEHEALTH SERVICES, OR IN CONNECTION WITH ANY OF THE OTHER SERVICES, WHICH MAY INCLUDE TEST KIT COMPONENT MANUFACTURERS AND DISTRIBUTORS, THE VACCINE ITSELF, VACCINE MANUFACTURERS AND DISTRIBUTORS, TESTING AND VACCINATION SITES, HEALTHCARE PROFESSIONALS, TELEHEALTH SERVICES, CLINICAL LABORATORIES, PHARMACIES, RELEVANT PUBLIC HEALTH AUTHORITIES, AND OTHER GOVERNMENTAL FUNCTIONS; YOU SHOULD REFER TO THE APPLICABLE POLICIES AND TERMS AND CONDITIONS FROM SUCH OTHER THIRD PARTIES FOR THEIR TERMS OF SERVICE AND POLICIES.

22.           Indemnity. You will indemnify and hold Color and its officers, directors, employees and agents, harmless from and against any claims, disputes, demands, liabilities, damages, losses, and costs and expenses, including, without limitation, reasonable legal and accounting fees arising out of or in any way connected with (a) your access to or use of the Services, (b) your User Content, or (c) your violation of these Terms.

23.           Limitation of Liability.

(a) TO THE MAXIMUM EXTENT PERMITTED BY LAW, NEITHER COLOR NOR ITS SERVICE PROVIDERS INVOLVED IN CREATING, PRODUCING, OR DELIVERING THE SERVICES WILL BE LIABLE FOR ANY INCIDENTAL, SPECIAL, EXEMPLARY OR CONSEQUENTIAL DAMAGES, OR DAMAGES FOR LOST PROFITS, LOST REVENUES, LOST SAVINGS, LOST BUSINESS OPPORTUNITY, LOSS OF DATA OR GOODWILL, SERVICE INTERRUPTION, COMPUTER DAMAGE OR SYSTEM FAILURE OR THE COST OF SUBSTITUTE SERVICES OF ANY KIND ARISING OUT OF OR IN CONNECTION WITH THESE TERMS OR FROM THE USE OF OR INABILITY TO USE THE SERVICES, WHETHER BASED ON WARRANTY, CONTRACT, TORT (INCLUDING NEGLIGENCE), PRODUCT LIABILITY OR ANY OTHER LEGAL THEORY, AND WHETHER OR NOT COLOR OR ITS SERVICE PROVIDERS HAVE BEEN INFORMED OF THE POSSIBILITY OF SUCH DAMAGE, EVEN IF A LIMITED REMEDY SET FORTH HEREIN IS FOUND TO HAVE FAILED OF ITS ESSENTIAL PURPOSE.

(b) COVID-19 TEST RESULTS AND COVID TEST SERVICES ARE INTENDED TO BE USED BY A HEALTHCARE PROVIDER FOR THE QUALITATIVE DETECTION OF SARS-COV-2 OR SPECIFIC VIRAL ANTIGEN (SUBJECT TO THE METHODS AND LIMITATIONS OF THE TEST). YOU AGREE THAT YOU WILL NOT SOLELY RELY ON COLOR’S SERVICES, TEST RESULTS, OR INFORMATION OBTAINED FROM COLOR FOR ANY PURPOSE, INCLUDING BUT NOT LIMITED TO, A DETERMINATION THAT YOU ARE SAFE OR ABLE TO TRAVEL, ATTEND EVENTS, OR CONGREGATE WITH OTHER INDIVIDUALS.

(c) COLOR EXPRESSLY DISCLAIMS ANY RESPONSIBILITY FOR YOUR RECEIPT (OR INABILITY TO RECEIVE) A VACCINATION THROUGH THE VACCINE PLATFORM SERVICES, OR THE ADMINISTRATION OF A VACCINE BY A THIRD PARTY. COLOR DOES NOT MANUFACTURE AND THEREFORE, TAKES NO RESPONSIBILITY FOR, THE VACCINES THEMSELVES.

(d) TO THE MAXIMUM EXTENT PERMITTED BY THE LAW OF THE APPLICABLE JURISDICTION, IN NO EVENT WILL COLOR’S TOTAL LIABILITY ARISING OUT OF OR IN CONNECTION WITH THESE TERMS OR FROM THE USE OF OR INABILITY TO USE THE SERVICES EXCEED THE AMOUNTS YOU HAVE PAID OR ARE PAYABLE BY YOU TO COLOR FOR USE OF THE SERVICES, OR ONE HUNDRED DOLLARS ($100) IF YOU HAVE NOT HAD ANY PAYMENT OBLIGATIONS TO COLOR, AS APPLICABLE.

(e) IF YOU PROVIDE A NASOPHARYNGEAL (NP) OR OROPHARYNGEAL (OP) SPECIMEN FOR COVID-19 TESTING, YOU UNDERSTAND THAT YOUR SPECIMEN COLLECTION INVOLVES RISKS INCLUDING MILD PAIN OR DISCOMFORT, A LITTLE GAGGING AND/OR A MINOR NOSEBLEED, AND IN VERY RARE SITUATIONS, INFECTION, SERIOUS INJURY, OR DEATH. BY SUBMITTING A SPECIMEN, YOU EXPRESSLY WAIVE AND RELEASE ANY AND ALL CLAIMS AGAINST COLOR ON ACCOUNT OF PAIN, INJURY, OR DEATH ARISING FROM YOUR SPECIMEN COLLECTION.

(f) YOUR TEST RESULTS ARE BASED ON CURRENTLY AVAILABLE INFORMATION IN THE MEDICAL LITERATURE AND SCIENTIFIC DATABASES, AS WELL AS LABORATORY INFORMATICS AND ALGORITHMS THAT MAY BE SUBJECT TO CHANGE. YOU UNDERSTAND AND AGREE THAT COLOR MAY, AT ITS SOLE DISCRETION, AMEND OR MODIFY YOUR TEST REPORT BASED ON ANY SUCH CHANGES. FOR EXAMPLE, THIS MAY RESULT IN A CHANGE IN YOUR COVID-19 RESULTS; GENETICS RISK ASSESSMENT; THE RECLASSIFICATION OF A VARIANT; A CHANGE OR UPDATE TO A PREVIOUSLY REPORTED PHARMACOGENOMIC GENOTYPE OR ALLELE; OR A RECLASSIFICATION OF A REPORTED DIPLOTYPE. YOU HEREBY IRREVOCABLY WAIVE ANY AND ALL CLAIMS AGAINST COLOR FOR ANY AMENDMENT OR MODIFICATION OF THE TEST REPORT IN ACCORDANCE WITH COLOR’S STANDARD OPERATING PROCEDURES.

(g) BY USING THE SERVICES OR ACCESSING THE SITE, YOU ALSO ACKNOWLEDGE AND AGREE THAT CERTAIN OF THE SERVICES AND RELATED PRODUCTS AND TESTS PROVIDED HEREIN MAY BE SUBJECT TO THE PUBLIC READINESS AND EMERGENCY PREPAREDNESS ACT (“PREP ACT”), WHICH MAY LIMIT COLOR’S LIABILITY FOR THE PROVISION OF ANY COUNTERMEASURES TO COVID-19.

(h) THE EXCLUSIONS AND LIMITATIONS OF DAMAGES SET FORTH ABOVE ARE FUNDAMENTAL ELEMENTS OF THE BASIS OF THE BARGAIN BETWEEN COLOR AND YOU.

24.           Governing Law and Forum Choice. These Terms and any action related thereto will be governed by the laws of the State of California, without regard to its conflict of laws provisions. The exclusive jurisdiction for all disputes will be the state and federal courts located in Santa Clara County. You and Color each waive any objection to jurisdiction and venue in such courts.

25.           General Terms.

(a) Reservation of Rights. Color and its licensors exclusively own all right, title and interest in and to the Services, including all associated intellectual property rights. You acknowledge that the Services are protected by patent, copyright, trademark, and other laws of the United States and foreign countries. You agree not to remove, alter, or obscure any copyright, trademark, service mark or other proprietary rights notices incorporated in or accompanying the Services.

(b) Entire Agreement. These Terms constitute the entire and exclusive understanding and agreement between Color and you regarding the Services, and these Terms supersede and replace all prior oral or written understandings or agreements between Color and you regarding the Services. If any provision of these Terms is held invalid or unenforceable by a court of competent jurisdiction, that provision will be enforced to the maximum extent permissible, and the other provisions of these Terms will remain in full force and effect. You may not assign or transfer these Terms, by operation of law or otherwise, without Color’s prior written consent. Any attempt by you to assign or transfer these Terms, without such consent, will be null. Color may freely assign or transfer these Terms without restriction. Subject to the foregoing, these Terms will bind and inure to the benefit of the parties, their successors and permitted assigns.

(c) Notices. Any notices or other communications provided by Color under these Terms will be given: (i) via email or (ii) by posting to the Services. For notices made by email, the date of receipt will be deemed the date on which such notice is transmitted.

(d) Waiver of Rights. Color’s failure to enforce any right or provision of these Terms will not be considered a waiver of such right or provision. The waiver of any such right or provision will be effective only if in writing and signed by a duly authorized representative of Color. Except as expressly set forth in these Terms, the exercise by either party of any of its remedies under these Terms will be without prejudice to its other remedies under these Terms or otherwise.

26.           Contact Information. If you have any questions about these Terms or the Services, please contact Color at support@color.com.

Color Health Privacy Notice

Last Updated: October 1, 2023

Click here for a PDF version of this policy >

This Privacy Notice is designed to help you understand how Color Health, Inc. and its affiliates (collectively, “Color,” “we,” “us,” or “our”) collect, use, and share your personal information (“Personal Information”), and to help you understand and exercise your privacy rights. 

  1. SCOPE AND UPDATES TO THIS PRIVACY NOTICE
  2. PERSONAL INFORMATION WE COLLECT
  3. HOW WE USE YOUR PERSONAL INFORMATION
  4. HOW WE DISCLOSE YOUR PERSONAL INFORMATION
  5. YOUR PRIVACY CHOICES AND RIGHTS
  6. SECURITY OF YOUR INFORMATION
  7. INTERNATIONAL DATA TRANSFERS
  8. RETENTION OF PERSONAL INFORMATION
  9. SUPPLEMENTAL NOTICE FOR CALIFORNIA RESIDENTS
  10. SUPPLEMENTAL NOTICE FOR NEVADA RESIDENTS
  11. SUPPLEMENTAL NOTICE FOR CERTAIN INTERNATIONAL COUNTRIES
  12. CHILDREN’S INFORMATION
  13. OTHER PROVISIONS
  14. CONTACT US

 

1. SCOPE AND UPDATES TO THIS PRIVACY NOTICE

HIPAA Notice of Privacy Practices. This Privacy Notice does not apply to our processing of “Protected Health Information” as a “Covered Entity” or “Business Associate” under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”). Where we act as a “Covered Entity” or “Business Associate”, our processing of “Protected Health Information” is governed by our HIPAA Notice of Privacy Practices

Notice Regarding Organizational Customer Data. In some cases, our organizational customer or partner (e.g., an employer, public health organization, educational institution, laboratory, or clinician) may enter into a written agreement with us where we process Personal Information on their behalf through their use of our Services (“Organizational Customer Data”). In that event, the organizational customers’ respective privacy policies govern their collection and use of Organizational Customer Data. 

Changes to our Privacy Notice. We may revise this Privacy Notice from time to time in our sole discretion. If there are any material changes to this Privacy Notice, we will notify you as required by applicable law. You understand and agree that you will be deemed to have accepted the updated Privacy Notice if you continue to use our Services after the new Privacy Notice takes effect.

This Privacy Notice should be read in conjunction with our Terms of Service, HIPAA Notice of Privacy Practices, and any other document or agreement that governs your relationship with us.  By using our Services, you consent to our Terms of Service and the privacy practices disclosed in this Privacy Notice.  Please do not use our Services if you do not consent.

2. PERSONAL INFORMATION WE COLLECT

The categories of Personal Information we collect depend on how you interact with us, our Services, and the requirements of applicable law. We collect information that you provide to us, information we obtain automatically when you use our Services, and information from other sources as described below.

A. Personal Information You Provide to Us Directly

We may collect Personal Information that you provide to us in the following circumstances:

  • Account Creation. When you create an account we may collect Personal Information, such as name, email address, address, phone number, race, ethnicity, professional details, birth date, sex, and any other information you provide.
  • Provision of Services. For some Services that do not require an account, we may collect Personal Information when you participate in the Service, such as name, email address, address, phone number, race, ethnicity, professional details, birth date, sex, and any other information you provide.
  • Testing Information and Biological Samples. We may collect Personal Information and biological samples in connection with any testing Services we provide to you. 
  • Health Information. In providing Services to you, we may collect Personal Information that relates to your health or medical treatment that you have received, including information about your healthcare providers. 
  • Telehealth. If we connect you with clinicians via telehealth, you will need to provide access to your camera and microphone. We and others with whom you video chat (e.g., Medical Providers) may collect the content and information you make available.
  • Purchases. We may collect Personal Information and details associated with your purchases, including payment information. Any payments made via our Services are processed by third-party payment processors. We do not directly collect or store any payment card information entered through our Services, but we may receive information associated with your payment card information (e.g., your billing details).
  • Your Communications with Us. We may collect Personal Information, such as email address, phone number, or mailing address when you request information about our Services, register for our newsletter or loyalty program, request customer or technical support, or otherwise communicate with us.
  • Surveys. We may contact you to participate in surveys. If you decide to participate, we may collect Personal Information from you in connection with the survey.
  • Interactive Features. We and others who use our Services may collect Personal Information that you submit or make available through our interactive features (e.g., messaging and chat features, commenting functionalities, sharing features, forums, blogs, and social media pages). Any information you provide using the public sharing features of the Services will be considered “public,” unless otherwise required by applicable law, and is not subject to the privacy protections referenced herein. Please exercise caution before revealing any information that may identify you in the real world to other users.
  • Conferences, Trade Shows, and Other Events. We may collect Personal Information from individuals when we attend or host conferences, trade shows, and other events. 
  • Business Development and Strategic Partnerships. We may collect Personal Information from individuals and third parties to assess and pursue potential business opportunities.
  • Job Applications. We may post job openings and opportunities on our Services. If you respond to one of these postings, we may collect your Personal Information, such as your application, curriculum vitae, cover letter, and/or any other information you provide to us.

B. Cookie Policy and Other Personal Information Collected Automatically

We may collect Personal Information automatically when you use our Services.

  • Automatic Collection of Personal Information. We may collect certain information automatically when you use our Services, such as your internet protocol (IP) address, user settings, MAC address, cookie identifiers, mobile carrier, mobile advertising and other unique identifiers, browser or device information, location information (including approximate location derived from IP address), and internet service provider. We may also automatically collect information regarding your use of our Services, such as pages that you visit before, during and after using our Services, information about the links you click, the types of content you interact with, the frequency and duration of your activities, and other information about how you use our Services. 
  • Cookies and Other Technologies. We, as well as vendors that provide content, advertising, or other functionality on our Services, may use cookies, pixel tags, and other technologies (“Technologies”) to automatically collect information through your use of our Services. 
    • Cookies. Cookies are small text files placed in device browsers that store preferences and facilitate and enhance your experience.
    • Pixel Tags/Web Beacons. A pixel tag (also known as a web beacon) is a piece of code embedded in our Services that collects information about engagement on our Services. The use of a pixel tag allows us to record, for example, that a user has visited a particular web page or clicked on a particular advertisement. We may also include web beacons in e-mails to understand whether messages have been opened, acted on, or forwarded.

Our uses of these Technologies fall into the following general categories: 

    • Operationally Necessary. This includes Technologies that allow you access to our Services, applications, and tools that are required to identify irregular website behavior, prevent fraudulent activity, improve security, or allow you to make use of our functionality;
    • Performance-Related. We may use Technologies to assess the performance of our Services, including as part of our analytic practices to help us understand how individuals use our Services (see Analytics below);
    • Functionality-Related. We may use Technologies that allow us to offer you enhanced functionality when accessing or using our Services. This may include identifying you when you sign into our Services or keeping track of your specified preferences, interests, or past items viewed;
    • Advertising- or Targeting-Related. We may use first-party or third-party Technologies to deliver content, including ads relevant to your interests, on our Services or on third-party digital properties. 

See Your Privacy Choices and Rights below to understand your choices regarding these Technologies.

  • Analytics. We may use Technologies and other third-party tools to process analytics information on our Services. Some of our analytics partners include:
    • Google Analytics. For more information about how Google uses your Personal Information (including for its own purposes, e.g., for profiling or linking it to other data), please visit Google Analytics’ Privacy Policy. To learn more about how to opt-out of Google Analytics’ use of your information, please click here.
    • LinkedIn Analytics. For more information about how LinkedIn uses your Personal Information, please visit LinkedIn Analytics’ Privacy Policy. To learn more about how to opt-out of LinkedIn’s use of your information, please click here.

C. Personal Information Collected from Other Sources

Vendors and Sources. We may obtain Personal Information about you from vendors and other sources. For example, if you access our Services through a vendor application, such as an app store, a vendor login service, or a social networking site, we may collect Personal Information about you from that third-party application that you have made available via your privacy settings.

Customers or Other Organizations. We may receive your Personal Information from Color’s customers or other organizations, such as your employer or healthcare provider, in connection with one or more business purposes, including to make our Services available to you.

Other Individuals. Our Services may allow individuals to share Personal Information about other people. For example, an individual may be able to share Personal Information about their family member in connection with testing or other Services. In order to share any health information about other individuals with Color in connection with receipt of the Services, individuals sharing health information must have the full and express consent of the other individual.  Color reserves the right to require proof of such consent.

Referrals and Sharing Features. Our Services may offer various tools and functionalities that allow you to provide Personal Information about your friends through our referral service. Our referral services may also allow you to forward or share certain content with a friend or colleague, such as an email inviting your friend to use our Services. Please only share with us contact information of people with whom you have a relationship (e.g., relative, friend, neighbor, or co-worker).

3. HOW WE USE YOUR PERSONAL INFORMATION

​​Please note that our use of your Protected Health Information is governed by our HIPAA Notice of Privacy Practices, not this section.

We use your Personal Information for a variety of business purposes, including to provide our Services, for administrative purposes, for research as detailed below, to de-identify and aggregate information, and to market our products and Services, as described below.  

A. Provide Our Services

We use your information to provide you with Services, such as:

  • Providing you with testing and counseling services; 
  • Providing you with a platform that may connect you with clinicians; 
  • Providing you with a platform that may connect you with pharmacy services;
  • Reporting certain test results and/or vaccination status to your program sponsor or other parties, with your authorization;
  • Managing your information and accounts;
  • Providing access to certain areas, functionalities, and features of our Services;
  • Answering requests for customer or technical support; 
  • Communicating with you about your account, activities on our Services, and policy changes;
  • Processing your financial information and other payment methods for products or Services purchased;
  • Processing applications if you apply for a job we post on our Services; and
  • Allowing you to register for products, Services and events.

B. Administrative Purposes

We use your information for various administrative purposes, such as:

  • Direct marketing, research and development (including marketing research), network and information security, and fraud prevention;
  • Contacting you in connection with potential future events, promotions, research and studies; 
  • Detecting security incidents, protecting against malicious, deceptive, fraudulent or illegal activity, and prosecuting those responsible for that activity;
  • Measuring interest and engagement in our Services; 
  • Improving, upgrading, or enhancing our Services; 
  • Developing new products and services;
  • Ensuring internal quality control and safety;
  • Authenticating and verifying individual identities, including requests to exercise your rights under this Privacy Notice;
  • Debugging to identify and repair errors with our Services;
  • Auditing relating to interactions, transactions, and other compliance activities;
  • Sharing Personal Information with third parties as needed to provide the Services;
  • Enforcing our agreements and policies; and
  • Carrying out activities that are required to comply with our legal obligations.

C. Research

We do not use your Personal Information to conduct research without your consent.  We may use your Personal Information to determine your eligibility for research, including medical, clinical, and public health research, and/or to contact you to seek your consent to use or share your Personal Information for research.  You will not be paid for this use.

D. To Create De-Identified and/or Aggregated Information

We may use your Personal Information to create de-identified and/or aggregated information, such as demographic information, information about health or wellness, or other analyses we create. De-identified and/or aggregated information is not Personal Information, and we may use and disclose such information in a number of ways, including research, internal analysis, analytics, publications, making de-identified and/or aggregated information available to third parties, and any other legally permissible purposes.  We make available a research database that contains anonymized, aggregated genomic, phenotypic, diagnostic, clinical and/or other information.  It is intended for research use only, and any use for commercial or other non-research purposes is prohibited. To protect participating individuals’ identities, information is de-identified.

E. Marketing and Advertising our Products and Services

We may use Personal Information to tailor and provide you with content, promotions, and advertisements. We may provide you with these materials as permitted by applicable law. Some of the ways we market to you include email campaigns, text messages, custom audiences advertising, and “interest-based” or “personalized advertising” including through cross-device tracking. If you have any questions about our marketing practices, you may contact us at any time as set forth in “Contact Us” below.

F. With Your Consent

We may use Personal Information for other purposes that will be clearly disclosed to you at the time you provide Personal Information or with your consent.

G. Other Purposes

We may use your Personal Information for other purposes as requested by you or as permitted by applicable law.

4. HOW WE DISCLOSE YOUR PERSONAL INFORMATION

Please note that disclosure of Protected Health Information is governed by our HIPAA Notice of Privacy Practices, not this section.

We may disclose Personal Information to other parties for a variety of business purposes, including to provide our Services, to protect us or others, or in the event of a major business transaction such as a merger, sale, or asset transfer, as described below.  

A. Disclosures to Provide our Services

The categories of recipients with whom we may share your Personal Information are described below. 

  • Service Providers. We may disclose your Personal Information with our  service providers and vendors that assist us with the provision of our Services. This includes but is not limited to service providers and vendors that provide us with healthcare services, testing services, telehealth services, pharmacy services, IT support, hosting, billing, payment processing, customer service, and related services.
  • Medical Providers. If you seek care, treatment, testing, counseling or other services from a provider available through our Services or partners (each a “Medical Provider”), your Medical Provider may have access to your personal information in order to provide you with their services. Your personal information may also be subject to the Medical Provider’s privacy policy. We are not responsible for the Medical Provider’s processing of your personal information.
  • Public Health Authorities. We may share your Personal Information and results with federal, state, and local public health authorities as required by applicable laws and regulations for public health purposes (e.g., to prevent the spread of COVID-19).  We may also share certain information about your vaccine and vaccination status with state immunization registries and other public health authorities in compliance with applicable laws and regulations.  
  • Other  Parties with Whom You Interact. As described above in “Personal Information We Collect,” our Services may allow you to disclose Personal Information or interact with other parties. If you disclose or interact with another party, your Personal Information may also be subject to the other party’s privacy policy. We are not responsible for that party’s processing of your Personal Information.
  • Business Partners. We may disclose your Personal Information with business partners to provide you with a product or service you have requested. We may also share your Personal Information with business partners with whom we jointly offer products or services.
  • Affiliates and Subsidiaries. We may disclose your Personal Information with our company affiliates and subsidiaries. 
  • Advertising Partners. We may disclose your Personal Information with  advertising partners. These  advertising partners may set Technologies and other tracking tools on our Services to collect information regarding your activities and your device (e.g., your IP address, cookie identifiers, page(s) visited, location, time of day). These advertising partners may use this information (and similar information collected from other services) for purposes of delivering personalized advertisements to you when you visit digital properties within their networks. This practice is commonly referred to as “interest-based advertising” or “personalized advertising.”
  • APIs/SDKs. We may use  application program interfaces (“APIs”) and software development kits (“SDKs”) as part of the functionality of our Services. For more information about our use of APIs and SDKs, please contact us as set forth in “Contact Us” below.

B. Disclosures to Protect Us or Others

We may access, preserve, and disclose to external parties, any information we store associated with you if we, in good faith, believe doing so is required or appropriate to: comply with law enforcement or national security requests and legal process, such as a court order or subpoena; protect your, our, or others’ rights, property, or safety; enforce our policies or contracts; collect amounts owed to us; or assist with an investigation or prosecution of suspected or actual illegal activity.

C. Disclosure in the Event of Merger, Sale, or Other Asset Transfers

If we are involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, purchase or sale of assets, or transition of service to another provider, your information may be sold or transferred as part of such a transaction, as permitted by law and/or contract.

5. YOUR PRIVACY CHOICES AND RIGHTS

Your Privacy Choices. The privacy choices you may have about your Personal Information are determined by applicable law and are described below. 

  • Email Communications. If you no longer wish to receive emails from us, you can use the unsubscribe link found at the bottom of the email to opt out of receiving future emails. Note that you will continue to receive transaction-related emails regarding products or Services you have requested. We may also send you other communications regarding the Services for which you will not be able to opt out while you are using the Services (e.g., communications regarding our Services or updates to our Terms or this Privacy Notice). 
  • Text Messages. If you no longer wish to receive text messages from us, you may opt out of receiving future text messages from us by following the instructions in the text message you have received from us or by otherwise contacting us as set forth in “Contact Us” below. 
  • Mobile Devices. We may send you push notifications through our mobile application. You may opt out from receiving these push notifications by changing the settings on your mobile device. With your consent, we may also collect precise location-based information via our mobile application. You may opt out of this collection by changing the settings on your mobile device.
  • Phone Calls. If you no longer wish to receive phone calls from us, you may opt out of receiving future phone calls from us by following the instructions which may be available on the call or by otherwise contacting us as set forth in “Contact Us” below.
  • “Do Not Track. Do Not Track (“DNT”) is a privacy preference that users can set in certain web browsers. Please note that we do not respond to or honor DNT signals or similar mechanisms transmitted by web browsers.
  • Cookies and Personalized Advertising. You may stop or restrict the placement of Technologies on your device or remove them by adjusting your preferences as your browser or device permits. However, if you adjust your preferences, our Services may not work properly. Please note that cookie-based opt-outs may not be effective on mobile applications. However, you may opt-out of personalized advertisements on some mobile applications by following the instructions for Android, iOS, and others.

The online advertising industry also provides websites from which you may opt out of receiving targeted ads from data partners and other advertising partners that participate in self-regulatory programs. You can access these and learn more about targeted advertising and consumer choice and privacy by visiting the Network Advertising Initiative, the Digital Advertising Alliance, the European Digital Advertising Alliance, and the Digital Advertising Alliance of Canada.

Please note you must separately opt out in each browser and on each device.

Your Privacy Rights. In accordance with applicable law, you may have the right to:

  • Access to and Portability of Your Personal Information, including: (i) confirming whether we are processing your Personal Information; (ii) obtaining access to or a copy of your Personal Information; and (iii) receiving an electronic copy of Personal Information that you have provided to us, or asking us to send that information to another company in a structured, commonly used, and machine readable format (also known as the “right of data portability”);
  • Request Correction of your Personal Information where it is inaccurate or incomplete. In some cases, we may provide self-service tools that enable you to update your Personal Information;
  • Request Deletion of your Personal Information, subject to applicable data & record retention laws and requirements; 
  • Request Restriction of or Object to our processing of your Personal Information; 
  • Withdraw your Consent to our processing of your Personal Information. Please note that your withdrawal will only take effect for future processing, and will not affect the lawfulness of processing before the withdrawal; and
  • Request Deactivation of your account, which will unsubscribe you from all marketing emails, and your sample and personal health information will no longer be shared for research.  Please note that deactivating your account means that we will not provide you with any Services going forward including but not limited to any results that have not yet been reported or any updates or changes to your results.

If you would like to exercise any of these rights, please contact us as set forth in “Contact Us” below or as otherwise instructed in the additional privacy notices provided at the time we collect your Personal Information. We will process such requests in accordance with applicable laws.

6. SECURITY OF YOUR INFORMATION

We take steps to ensure that your information is treated securely and in accordance with this Privacy Notice. Unfortunately, no system is 100% secure, and we cannot ensure or warrant the security of any information you provide to us. To the fullest extent permitted by applicable law, we do not accept liability for unauthorized access, use, disclosure, or loss of Personal Information.

By using our Services or providing Personal Information to us, you agree that we may communicate with you electronically regarding security, privacy, and administrative issues relating to your use of our Services. If we learn of a security system’s breach, we may attempt to notify you electronically by posting a notice on our Services, by mail, or by sending an email to you.

7. INTERNATIONAL DATA TRANSFERS

All information you provide will be stored or hosted on servers in the United States, but you acknowledge that all information processed by us may be accessed outside of the United States. You acknowledge that other countries outside of the United States may have data protection laws that are different from U.S. laws. We endeavor to safeguard your information consistent with the requirements of applicable laws and regulations. 

You agree that by providing your biological sample or any information you share with us, you are not violating any export ban or other legal restriction in the country of your residence. 

If we transfer Personal Information which originates in the European Economic Area, Switzerland, and/or the United Kingdom to a country that has not been found to provide an adequate level of protection under applicable data protection laws, we may use various  safeguards to support such transfer including, but not limited to,  EU Standard Contractual Clauses

For more information about the safeguards we use for international transfers of your Personal Information, please contact us as set forth below. 

8. RETENTION OF PERSONAL INFORMATION

We store the Personal Information we collect as described in this Privacy Notice for as long as you use our Services, or as necessary to fulfill the purpose(s) for which it was collected, provide our Services, resolve disputes, establish legal defenses, conduct audits, pursue business purposes, enforce our agreements, and comply with applicable laws. 

9. SUPPLEMENTAL NOTICE FOR CALIFORNIA RESIDENTS

This Supplemental California Privacy Notice (“California Notice”) is provided pursuant to the California Consumer Privacy Act, as amended (the “CCPA”), and supplements our Privacy Policy. This California Notice applies only to information governed by the CCPA.

This California Notice also does not cover Personal Information that may be collected about you as a California job applicant or employee. 

Unless otherwise noted, the disclosures herein cover our activities in the twelve (12) months preceding the Last Updated date, as well as our current practices.

A. How and Why We Collect, Use, and Disclose Your Personal Information 

We may collect, use, and disclose Personal Information for valid purposes consistent with applicable laws as identified below. Where we transfer applicable Personal Information to recipients, such as our service providers, we do so for the same business purposes described below. These examples may vary depending on the nature of your interactions with us.

Category of Personal Information

Purposes for Collection, Use, and/or Disclosure

Categories of Recipients to Whom Personal Information is Disclosed for a Business Purpose

Identifiers, including real name, alias, account name, username, signature, postal address, unique personal identifier, online identifier, IP address, email address, or other similar identifiers

  • To provide our Services
  • For administrative purposes
  • Research
  • To create de-identified and/or aggregated information
  • Marketing and advertising
  • With your consent
  • Service providers
  • Affiliates
  • Data analytics providers

Personal information described in Cal. Civ. Code § 1798.80(e), including name, address, telephone number, and financial payment information

  • To provide our Services
  • For administrative purposes
  • Research
  • To create de-identified and/or aggregated information
  • Marketing and advertising
  • With your consent
  • Service providers
  • Affiliates
  • Data analytics providers

Characteristics of protected classifications under California or federal law, including age and date of birth, gender, languages spoken, marital status, and racial or ethnic origin

  • To provide our Services
  • For administrative purposes
  • Research
  • To create de-identified and/or aggregated information
  • Marketing and advertising
  • With your consent
  • Service providers
  • Affiliates
  • Data analytics providers

Internet or other electronic network activity information, including Internet or other similar activity, MAC address, cookie identifiers, mobile carrier, browsing history, search history, information on a consumer’s interaction with a website, application logs, device data and registration, social media account information or advertisement 

  • To provide our Services
  • For administrative purposes
  • Research
  • To create de-identified and/or aggregated information
  • Marketing and advertising
  • Service providers
  • Affiliates
  • Data analytics providers

Geolocation data 

  • To provide our Services
  • For administrative purposes
  • Research
  • Marketing and advertising of our Services
  • Service providers
  • Affiliates
  • Data analytics providers

Other Information, such as information that does not directly fit within one of the categories defined by the CCPA, including the contents of communications you send to us by phone, email, text, online chat, etc.

  • To provide our Services
  • For administrative purposes
  • Research
  • Marketing and advertising
  • With your consent 
  • Service providers
  • Affiliates
  • Data analytics providers

B. Sensitive Personal Information

We may collect, use, and disclose sensitive Personal Information for business purposes consistent with applicable laws, as identified below.  Where we transfer applicable sensitive Personal Information to recipients, such as our service providers, we do so for the same business purposes described below.  These examples may vary depending on the nature of your interactions with us.

Category of Sensitive Personal Information

 

Purposes for Collection, Use, or Disclosure 

Categories of Recipients to Whom Sensitive Personal Information Is Disclosed for a Business Purpose 

Social security, driver’s license, state identification card, or passport number(s)

  • To provide our Services
  • For administrative purposes
  • To create de-identified and/or aggregated information
  • With your consent
  • Service providers
  • Affiliates

Account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account 

  • To provide our Services
  • For administrative purposes
  • To create de-identified and/or aggregated information
  • With your consent
  • Service providers
  • Affiliates

Precise geolocation (location within a radius of 1,850 feet)  

  • To provide our Services
  • For administrative purposes
  • To create de-identified and/or aggregated information
  • With your consent
  • Service providers
  • Affiliates

Personal Information that reveals a consumer’s racial or ethnic origin, religious or philosophical beliefs, or union membership

  • To provide our Services
  • For administrative purposes
  • To create de-identified and/or aggregated information
  • With your consent
  • Service providers
  • Affiliates

Contents of mail, email, and text messages except those for which we are the intended recipient

  • To provide our Services
  • For administrative purposes
  • To create de-identified and/or aggregated information
  • With your consent
  • Service providers
  • Affiliates

Personal Information that reveals a consumer’s genetic data

  • To provide our Services
  • For administrative purposes
  • To create de-identified and/or aggregated information
  • With your consent
  • Service providers
  • Affiliates

The processing of biometric information for the purpose of uniquely identifying a consumer’s health

  • To provide our Services
  • For administrative purposes
  • To create de-identified and/or aggregated information
  • With your consent
  • Service providers
  • Affiliates

Personal Information collected and analyzed concerning a consumer’s health

  • To provide our Services
  • For administrative purposes
  • To create de-identified and/or aggregated information
  • With your consent
  • Service providers
  • Affiliates

Personal Information collected and analyzed concerning a consumer’s sex life or sexual orientation

  • To provide our Services
  • For administrative purposes
  • To create de-identified and/or aggregated information
  • With your consent
  • Service providers
  • Affiliates

C. Disclosing Your Personal Information 

Please see “How We Disclose Your Personal Information” above.

D. Sources of Personal Information 

Please see “Personal Information We Collect” above.

E. How Long We Keep Your Personal Information 

Please see “How We Disclose Your Personal Information” above.

F. Sharing of Personal Information 

We may share the following categories of Personal Information with third parties for the purposes of cross-context behavioral advertising :

  •       Identifiers
  •       Internet or other electronic network activity
  •       Geolocation data

We share this Personal Information with third parties for advertising purposes.  The third parties to whom this Personal Information was shared are advertisers and analytics vendors.  

We offer you the ability to opt out of sales and sharing of your Personal Information as set forth in the “Right to Opt Out of Sales and Sharing of Personal Information” section below.  

We do not have actual knowledge that we sell or share the Personal Information of consumers under sixteen (16) years of age.

G. California Privacy Rights

If you are a California resident, you are entitled to the following rights. To exercise any of these rights, please submit a request by email to suport@color.com. Please note that if you submit a request to know, request to delete, or request to correct, you will be asked to provide two-to-three (2-3) pieces of Personal Information that we will match against our records to verify your identity. You may designate an authorized agent to make a request on your behalf; however, you will still need to verify your identity directly with us before your request can be processed.  

Right to Know. You have the right to know what Personal Information we have collected about you, which includes: 

  1. The categories of Personal Information we have collected about you, including:
    1. The categories of sources from which the Personal Information was collected;
    2. Our business purposes or commercial for collecting, selling, or sharing Personal Information;
    3. The categories of recipients to which we disclose Personal Information;
    4. The categories of Personal Information that we sold, and for each category identified, the categories of third parties to which we sold that particular category of Personal Information;
    5. The categories of Personal Information that we disclosed for a business purpose, and for each category identified, the categories of recipients to which we disclosed that particular category of Personal Information.
  2. The specific pieces of Personal Information we have collected about you.

Right to Delete Your Personal Information. You have the right to request that we delete Personal Information we collected from you, subject to certain exceptions. 

Right to Correct Inaccurate Information. If you believe that Personal Information we maintain about you is inaccurate, you have the right to request that we correct that information.

Right to Opt Out of Sales and Sharing of Personal Information. You have the right to opt out of the sale of your Personal Information, and to request that we do not share your Personal Information for cross-context behavioral advertising. To opt-out of cookie-based sales and sharing, please contact support@color.com.

If you choose to use the Global Privacy Control (“GPC”) browser signal, you will only be opted out of online sales or sharing of Personal Information, and will need to turn it on for each browser you use. To submit a request to opt out of offline sales and sharing which would not otherwise be controlled by GPC, please contact us as provided below.

Right to Limit Use and Disclosure of Sensitive Personal Information. We do not use or disclose sensitive Personal Information for purposes to which the right to limit use and disclosure applies under the CCPA. 

Rights Related to Automated Decision-Making. We do not use automated decision-making for purposes to which the rights related to automated decision-making apply under the CCPA.

Right to Non-Discrimination for the Exercise of Your Privacy Rights. If you choose to exercise any of privacy rights under the CCPA, you also have the right not to receive discriminatory treatment by us.

H. Notice of Incentive Programs

We may offer referral programs or other incentivized data collection programs in compliance with applicable laws. For example, we may offer incentives to you such as gift cards in connection with these programs, wherein you provide your Personal Information in exchange for a reward, or provide Personal Information regarding your friends or colleagues (such as their email address) and receive rewards when they sign up to use our Services. (The referred party may also receive rewards for signing up via your referral.) These programs are entirely voluntary.

I. California “Shine the Light” 

We do not share Personal Information with third parties or affiliates for those third parties’ or affiliates’ own direct marketing purposes. California residents may request information about our compliance with this law by contacting us at suport@color.com.

10. SUPPLEMENTAL NOTICE FOR NEVADA RESIDENTS

We do not sell your personal information as sales are defined in Nevada Revised Statutes Chapter 603A. If you have any questions, please contact us as set forth in Contact Us below.

11. SUPPLEMENTAL NOTICE FOR CERTAIN INTERNATIONAL COUNTRIES

A. Supplemental Notice for Canada

This Supplemental Notice for Canada only applies to our processing of personal information that is subject to the applicable data protection laws of Canada.

  • Security of Your Information. The files and records containing your personal information will be kept in our offices and/or on our servers or those of our service providers, and only those employees that require it for the purposes of their duties will have access to these files.

  • International Transfers and Access. Personal information may be accessible to the courts and the law enforcement and national security authorities of the United States. To obtain more information about Color’s policies and practices with respect to service providers outside of Canada, please contact us as set forth in Contact Us below.

12. CHILDREN’S PRIVACY

The Site and collection of Personal Information are not directed to children under 13 (or other age as required by local law), and we do not knowingly collect Personal Information from children without parent/guardian consent.

If you are a parent or guardian and believe your child has uploaded Personal Information to our site without your consent, you may contact us as described in “Contact Us” below. If we become aware that a child under 13 (or other age as required by law) has provided us with Personal Information in violation of applicable law, we will take measures which may include deletion of any Personal Information, unless we have a legal obligation to keep all or a portion of it, and terminate the child’s account, if applicable.

13. OTHER PROVISIONS

Vendor Websites/Applications. The Services may contain links to other websites/applications and other websites/applications may reference or link to our Services. These services are not controlled by us. We encourage our users to read the privacy policies of each website and application with which they interact. We do not endorse, screen, or approve, and are not responsible for, the privacy practices or content of such other websites or applications. Providing Personal Information to other websites or applications is at your own risk. 

Supervisory Authority. If your Personal Information is subject to the applicable data protection laws of the European Economic Area, Switzerland, the United Kingdom, you have the right to lodge a complaint with the competent supervisory authority if you believe our processing of your Personal Information violates applicable law.

14. CONTACT US

Color is the controller of the personal information we process under this Privacy Notice.

If you have any questions about our privacy practices or this Privacy Notice, or to exercise your rights as detailed in this Privacy Notice, please contact us at:

Color Health, Inc.
Attention: Legal Department
831 Mitten Rd.
Burlingame, CA U.S.A., 94010
Email: support@color.com

Color Health HIPAA Notice of Privacy Practices

Last Updated: October 1, 2023

This content is also available in: العربية Filipino Русский Español 简体中文

  1. SCOPE AND UPDATES TO THIS NOTICE
  2. USE AND DISCLOSURE OF YOUR PHI THAT DO NOT REQUIRE YOUR AUTHORIZATION
  3. USE AND DISCLOSURE OF YOUR PHI THAT REQUIRE YOUR AUTHORIZATION
  4. YOUR RIGHTS
  5. YOUR CHOICES
  6. OUR RESPONSIBILITIES
  7. CONTACT US

1. SCOPE AND UPDATES TO THIS NOTICE

This HIPAA Notice of Privacy Practices (“Notice”) describes how Color Health, Inc. and its affiliates (collectively, “Color,” “we,” “us,” or “our”) may use and disclose your protected health information (“PHI”) when it acts as a covered entity or a business associate under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) and how you can get access to this PHI. Please review this Notice carefully.

Supplemental Notices. Color may provide additional privacy notices to individuals at the time we collect their PHI. These additional privacy notices may supplement this Notice or may apply in lieu of this Notice.

Notice Regarding Organizational Customer PHI. In some cases, our Organizational Customer or partner (e.g., an enterprise, union, trust, employer, public sector organization, educational institution, laboratory or other) may enter into a written agreement with us where we act as a business associate and process protected health information on their behalf through their use of our services (“ Organizational Customer PHI”). In the event of any inconsistency or conflict between this Notice and an Organizational Customer’s privacy notice, the Organizational Customer’s privacy notice shall govern their use and disclosure of Customer PHI and our processing of Customer PHI will be governed by the business associate agreements that we have in place with that customer.Any questions or requests relating to Customer PHI should be directed to our customer or partner.

Changes to our Notice. We reserve the right to change the terms of this Notice, and the changes will apply to all PHI we have about you. The new Notice will be available upon request, in our office, and on our website.

This Notice should be read in conjunction with our Terms of Service, Privacy Notice, and any other document or agreement that governs your relationship with us. By using our Services, you consent to our Terms of Service and the privacy practices disclosed in this Notice. Please do not use our Services if you do not consent.

2. USE AND DISCLOSURE OF PHI

Color uses and discloses PHI in a number of ways connected to your treatment, payment for your care, and our healthcare operations. Some examples of how we may use or disclose your PHI that do not require your authorization are listed below.

A. Treatment

We can use your PHI to assess, screen, test, and otherwise treat you or connect you with treatment, and share it with other clinical and non-clinical professionals who are part of the efforts to treat you. For example, a doctor treating you for an illness asks another doctor about your overall health condition or a care advocate scheduling an appointment for you reaches out to a doctor’s office to make the appointment on your behalf.

B. Payment

We can use and share your PHI to bill and collect payment from health plans, payers, or other entities. For example, if we bill your health insurance, we give PHI about you to your health insurance plan so it will pay for your services.

C. Healthcare Operations

We can use and share your PHI to administer and support our business activities or those of other healthcare organizations (as allowed by law), including providers and plans. For example (and without limitation), we may use your PHI to conduct cost & quality analysis, population management, data aggregation, review and improve our services and the care you receive, and to provide training.

D. Other Uses and Disclosures

We may also use or disclose your PHI for legal and/or governmental purposes in the following circumstances:

  • As Required by Law: We will share information about you if state or federal laws require it, including with the Department of Health and Human Services to demonstrate compliance with federal privacy law, and under workers’ compensation laws.
  • Public Health and Safety: To an authorized public health authority or individual to:
    • Protect public health and safety.
    • Prevent or control disease, injury, or disability.
    • Report vital statistics such as births or deaths.
    • Help with product recalls.
    • Investigate or track problems with prescription drugs and medical devices.
  • Abuse or Neglect: To government entities authorized to receive reports regarding abuse, neglect, or domestic violence.
  • Minors: In general, parents and legal guardians are legal representatives of minor patients. However, in certain circumstances, as dictated by state law, minors can act on their own behalf and consent to their own treatment. In general, we will share the PHI of a patient who is a minor with the minor’s parents or guardians, unless the minor could have consented to the care themselves (except where parental disclosure may be required per applicable law).
  • Oversight Agencies: To health oversight agencies for certain activities such as audits, examinations, investigations, inspections, and licensures.
  • Legal Proceedings: In the course of any legal proceeding or in response to an order of a court or administrative agency and in response to a subpoena, discovery request, or other lawful process.
  • Law Enforcement: To law enforcement officials in certain circumstances for law enforcement purposes. By way of example and without limitation, disclosures may be made to identify or locate a suspect, witness, or missing person; to report a crime; or to provide information concerning victims of crimes.
  • Health Information Exchanges: We may participate in health information exchanges (“HIEs”) and may electronically share your PHI for treatment, payment and healthcare operations purposes with other participants in the HIEs. HIEs allow us, and your other healthcare providers and organizations, to efficiently share and better use information necessary for your treatment and other lawful purposes. In some states, the inclusion of your PHI in an HIE is voluntary and subject to your right to opt-in or opt-out; if you choose to opt-in or not to opt-out, we may provide your PHI in accordance with applicable law to the HIEs in which we participate.
  • Financial Information: We may ask you about income or other financial information to determine if you may qualify for a low income waiver for services where applicable. We may use this information for operations, marketing (when permitted by law), administrative purposes, and to improve our service offerings.
  • Research: We will not use your PHI to conduct research without your consent. We may use your PHI to determine your eligibility for research, including medical, clinical, and public health research, and/or to contact you to seek your consent to use or share your PHI for research. You will not be paid for this use.
  • Veterans Affairs and National Security: To the extent required by law, to the Department of Veterans Affairs or in connection with national security.
  • Correctional Institutions: If you are or become an inmate of a correctional institution or are in the custody of a law enforcement official, we may disclose to the institution or law enforcement official information necessary for the provision of health services to you, your health and safety, the health and safety of other individuals and law enforcement on the premises of the institution and the administration and maintenance of the safety, security and good order of the institution.

We may also use or disclose your PHI in the following circumstances:

  • Contacting You Directly: We may use your PHI, including your email address or phone number, to contact you in connection with Services. For example, we may also use this information to send you appointment reminders and other communications relating to your testing and treatment, or let you know about treatment alternatives, participant feedback, research opportunities, or other health related services or benefits that may be of interest to you, via email, phone call, or text message.
  • Your Color Account: We may make PHI, such as information about testing or treatment, appointment histories and medication records, accessible to you through digital tools, such as email or your Color online account, or vendor platforms. When we engage vendors to process your PHI, Color complies with all applicable HIPAA regulations.
  • Family and Friends: To a member of your family, a relative, a close friend—or any other person you identify who is directly involved in your healthcare—when you are either not present or unable to make a healthcare decision for yourself and we determine that disclosure is in your best interest. We will also assume that we may disclose PHI to any person you permit to be physically present with you as we discuss your PHI with you during that discussion, unless you tell us otherwise.
  • Services Description and Alternatives: To communicate with you about our services, options, features, educational materials, requests for feedback, webinars, events or alternatives, as well as health-related benefits or services that may be of interest to you, or to describe our services to you.
  • De-identified and/or Aggregated Information: We may use your PHI to create de-identified and/or aggregated information, such as demographic information, information about health or wellness, or other analyses we create. De-identified and/or aggregated information is not PHI, and we may use and disclose such information in a number of ways, including research, internal analysis, analytics, publications, making de-identified and/or aggregated information available to third parties, and any other legally permissible purposes.
  • Coroners, Funeral Directors, and Organ Donation: To coroners, funeral directors, and organ donation organizations as authorized by law.
  • Disaster Relief: To an authorized public or private entity for disaster relief purposes. For example, we might disclose your PHI to help notify family members of your location or general condition.
  • Threat to Health or Safety: To avoid a serious threat to the health or safety of yourself and others.

3. USE AND DISCLOSURE OF YOUR PHI THAT WOULD REQUIRE YOUR AUTHORIZATION

Color is committed to patient privacy and data security, and your PHI will not be shared without your authorization outside of the purposes and audiences listed above in this Notice. This means Color commits to the following:

  • Color will not share your PHI with parties or audiences other than those described above, unless you grant authorization for such a disclosure.
  • Color will not sell your PHI for third-party advertising purposes, except, as described above, we may contact you about our own services, events, and to improve our offerings.
  • Color will not use your PHI to conduct research without your consent.

In some situations, for example most sharing of psychotherapy notes, federal and state laws provide special protections for specific kinds of PHI and require authorization from you before we can disclose that specially protected PHI. In these situations, we will comply with the more stringent state laws pertaining to such use or disclosure. If you have questions about these laws, please contact Color as set forth below.

4. YOUR RIGHTS

Under HIPAA, you have the right to:

  • Get an electronic or paper copy of your medical record
    • You can ask to see or get an electronic or paper copy of your medical record and other PHI we have about you. Ask us how to do this.
    • We will provide a copy or a summary of PHI, usually within 30 days of your request. We may charge a reasonable, cost-based fee.
  • Ask us to correct your medical record
    • You can ask us to correct PHI about you that you think is incorrect or incomplete. Ask us how to do this.
    • We may say “no” to your request, but we’ll tell you why in writing within 60 days of your request.
  • Request confidential communications
    • You can ask us to contact you in a specific way (for example, home or office phone) or to send mail to a different address.
  • Ask us to limit what we use or share
    • You can ask us not to use or share certain PHI for treatment, payment, or our operations. We are not required to agree to your request, and we may say “no” if it would affect your care.
    • If you pay for a service or health care item out-of-pocket in full, you can ask us not to share that PHI for the purpose of payment or our operations with your health insurer. We will say “yes” unless a law requires us to share that information.
  • Get a list of those with whom we’ve shared PHI
    • You can ask for a list (accounting) of the times we’ve shared your PHI for six years prior to the date you ask, who we shared it with, and why.
    • We will include all the disclosures except for those about treatment, payment, and health care operations, and certain other disclosures (such as any you asked us to make). We’ll provide one accounting a year for free but will charge a reasonable, cost-based fee if you ask for another one within 12 months.
  • Get a copy of this Notice
    • You can ask for a paper copy of this Notice at any time, even if you have agreed to receive the Notice electronically.
  • Choose someone to act for you
    • If you have given someone medical power of attorney or if someone is your legal guardian, that person can exercise your rights and make choices about your PHI.
    • We will make sure the person has this authority and can act for you before we take any action.
  • File a complaint if you feel your rights are violated
    • You can complain if you feel we have violated your rights by contacting us using the information set forth below.
    • You can file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights by sending a letter to 200 Independence Avenue, S.W., Washington, D.C. 20201, calling 1-877-696-6775, or visiting www.hhs.gov/ocr/privacy/hipaa/complaints/.
    • We will not retaliate against you for filing a complaint.

5. YOUR CHOICES

For certain PHI, you can tell us your choices about what we share. If you have a clear preference for how we share your PHI tell us what you want us to do, and we will aim to follow your instructions.

In these cases, you have both the right and choice to tell us to:

  • Share information with your family, close friends, or others involved in your care;
  • Share information in a disaster relief situation; and/or
  • Include your information in a directory.

If you are not able to tell us your preference, for example if you are unconscious, we may go ahead and share your PHI if we believe it is in your best interest. We may also share your PHI when needed to lessen a serious and imminent threat to health or safety.

6. OUR RESPONSIBILITIES

  • We are required by law to maintain the privacy and security of your PHI.
  • We are required by law to notify you in the case of a breach of unsecured PHI.
  • We must follow the duties and privacy practices described in this Notice and give you a copy of it.
  • We will not use or share your PHI other than as described here unless you tell us we can in writing. If you tell us we can, you may change your mind at any time. Let us know in writing if you change your mind.

For more information see: www.hhs.gov/ocr/privacy/hipaa/understanding/consumers/noticepp.html.

7. CONTACT US

If you have any questions about our privacy practices or this Notice, or to exercise your rights as detailed in this Notice, please contact us at:

Color Health, Inc.
Attention: Legal Department
831 Mitten Rd.
Burlingame, CA U.S.A., 94010
Email: support@color.com