Washington State Health Data Privacy Notice
Effective Date: May 29, 2024
This notice applies to Consumer Health Data, as that term has been defined by the Washington My Health My Data Act (“WMHMD Act”) and provides details regarding the categories of Consumer Health Data that we collect, use, and share about Washington consumers only. This Washington State Health Data Privacy Notice supplements our General Privacy Notice but will prevail over any conflicting provisions in our General Privacy Notice with respect to residents of the state of Washington. For purposes of this notice, “Consumer Health Data” means personal information that is linked or reasonably linkable to a consumer (meaning a resident of Washington State) and that identifies the consumer’s past, present, or future physical or mental health status.
This Notice does not apply to information we collect about you that is exempt from the WMHMD Act which includes, without limitation, the following:
- personal information that is “protected health information” or “PHI” under HIPAA, which includes health information
- personal information collected in relation to clinical trials and related research efforts
- personal information we create and maintain in our role as a manufacturer
- personal information related to patient support program
- publicly available personal information
- personal information collected when acting in a capacity as employee, independent contractor, or job applicant
TABLE OF CONTENTS
You can jump to a particular section by clicking on the headings below:
We may process the following Consumer Health Data when you visit our websites, submit inquiries online or offline, sign up for newsletters or other informational materials, make an inquiry about participation or eligibility for a clinical trial, and/or register to use our online services:
- information that could identify your attempt to seek health care services
- website user activity regarding usage information about your interaction with online services that you may access or use
- IP address and domain name used
- date and time of visits
- information about your location, which may be determined through your IP address. You can adjust your consent to providing location information in the browser settings
- information about the device you use to access the web pages, such as hardware model, operating system, browser, and device preferences
- if you send an email during your visit to the website, the server may retain the email address
We collect Consumer Health information directly from you, as well as from the following sources:
- your devices when you visit or interact with our websites, applications, and online platforms
- cookies, web beacons, and similar technologies when you visit our websites
- third parties and processors who provide website and online security services
- third parties and processors who provide digital marketing and analytics services
We use your Consumer Health information to:
- respond to your requests
- send you updates
- improve our level of service
- provide our websites, products, and services
- provide you with information about our products, services, and programs
We share your Consumer Health information with:
- our subsidiaries and affiliates
- third parties to assist with fraud prevention, detection and mitigation
- third parties who assist with information technology and security programs
- third parties that help us improve our marketing and administration
- law enforcement agencies, and judicial and regulatory authorities, to private attorneys who issue subpoenas as required or permitted by law, or to comply with a subpoena or similar legal process or government request
Subject to certain legal limitations and exceptions, you have the following rights with respect to any Consumer Health Data we may collect about you:
- Right to know: you can confirm whether we collect, share or sell your Consumer Health Data
- Right to access: you can request a copy of the Consumer Health Data we have about you
- Right to know Third Parties: you can obtain a list of all third parties and/or affiliates with whom we have shared or sold your Consumer Health Data
- Right to delete: you can request that we delete your Consumer Health Data
Additionally, to the extent consent has been obtained to collect or share Consumer Health Data, you may have the right to withdraw your consent.
If you would like to exercise your rights pursuant to the WMHMD Act, please email privacy@iovance.com or call us at 844-845-4682 (toll-free).
You may make a request on your own behalf, and if you are the parent or guardian of a minor child, on behalf of your child. If you wish to designate an authorized agent to make a request on your behalf, please provide us with a signed declaration stating that your intent is to permit that individual to act on your behalf and include such individual’s full name, address, email address, and phone number.
We may require additional information to authenticate you. If we are unable to authenticate the request using commercially reasonable efforts and asking for additional information, we will not be able to comply with the request.
We endeavor to respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to 45 additional days), we will inform you of the reason and extension period in writing.
If your request to exercise a right under the WMHMD Act is denied, you may appeal that decision by contacting us at privacy@iovance.com. If your appeal is unsuccessful, you may raise a concern or lodge a complaint with the Washington State Attorney General at www.atg.wa.gov/file-complaint.
If you have any questions about this notice or want to exercise your rights, please contact us at privacy@iovance.com or by phone at 844-845-4682 (toll-free).