Last Updated: June 10, 2026

 

This Consumer Health Data Privacy Notice (“Notice”) supplements Scriptable’s Privacy Policy and provides additional disclosures about how Scriptable LLC (“Scriptable,” “we,” “us,” or “our”) collects, uses, shares, and protects consumer health data, as required under the Washington My Health MY Data Act (MHMDA), the California Consumer Privacy Act (CCPA), the Nevada Consumer Health Data Privacy Law, the Connecticut Data Privacy Act (CTDPA), and other applicable state laws.

This Notice applies to the collection of consumer health data through scriptable.co and related Services. Please review our Privacy Policy for a complete description of our data practices.

 

1. WHAT IS CONSUMER HEALTH DATA?

For purposes of this Notice, “consumer health data” means personal information that identifies or is reasonably linkable to you and that relates to your past, present, or future physical or mental health status, including:

•       Health conditions, diagnoses, symptoms, or treatment history

•       Prescription medications and prescribing history

•       Reproductive health or fertility status

•       Body measurements, weight, or body mass index (BMI)

•       Health-related communications between you and Providers

•       Photographs or images used to assess a health condition

•       Inferred health information derived from your use of our Services

2. CONSUMER HEALTH DATA WE COLLECT

We collect the following categories of consumer health data:

•       Health history and symptoms disclosed in intake questionnaires

•       Skin, hair, or other condition photographs submitted as part of your consultation

•       Current medications and allergies

•       Prescription information issued by Providers through the Services

•       Weight, height, BMI, and related measurements submitted for weight management consultations

•       Sexual health information submitted for sexual health consultations

•       Communications with Providers regarding your health

3. HOW WE USE CONSUMER HEALTH DATA

We use consumer health data solely to:

•       Facilitate telehealth consultations between you and independent licensed Providers

•       Enable Providers to make clinically appropriate prescribing decisions

•       Fulfill prescription orders through our licensed partner pharmacy

•       Provide customer support related to your care

•       Comply with legal obligations

 

We do not use consumer health data for advertising, marketing, or any purpose unrelated to providing care to you, unless we obtain your separate, explicit consent.

4. HOW WE SHARE CONSUMER HEALTH DATA

We share consumer health data only in the following circumstances:

•       With the affiliated Medical Entity and independent licensed Providers, to facilitate clinical consultations and prescribing

•       With our Telehealth Partner, which provides technology infrastructure and processes health information as a business associate under appropriate data protection agreements

•       With our licensed partner pharmacy, to fulfill prescription orders

•       With identity verification providers, to confirm your identity as required for telehealth services

•       As required by law, court order, or government mandate

•       In connection with a merger, acquisition, or sale of assets, subject to the protections described in our Privacy Policy

 

We do not sell consumer health data. We do not share consumer health data with advertisers, data brokers, or analytics providers for purposes unrelated to your care.

5. YOUR RIGHTS REGARDING CONSUMER HEALTH DATA

Depending on your state of residence, you may have the following rights regarding consumer health data:

•       Right to know: The right to know what consumer health data we collect about you and how it is used and shared

•       Right to access: The right to access consumer health data we hold about you

•       Right to deletion: The right to request deletion of consumer health data we hold about you, subject to certain exceptions

•       Right to correct: The right to request correction of inaccurate consumer health data

•       Right to withdraw consent: The right to withdraw previously provided consent to collection or use of consumer health data

•       Right to restrict processing: The right to restrict certain uses of consumer health data

•       Right to non-discrimination: The right not to be discriminated against for exercising your privacy rights

 

Note: Some consumer health data may also be subject to rights under HIPAA as administered by the affiliated Medical Entity. The affiliated Medical Entity’s Notice of Privacy Practices governs your rights with respect to protected health information held by that entity.

6. HOW TO EXERCISE YOUR RIGHTS

To exercise any of the rights described above, you may:

•       Email privacy@scriptable.co to submit a request

•       Email us at support@scriptable.co

 

We will respond to your request within the timeframe required by applicable law. We may need to verify your identity before processing your request. Authorized agents may submit requests on your behalf with appropriate documentation.

We will not deny, charge different prices for, or provide a different quality of services based on your exercise of your privacy rights.

7. SPECIFIC STATE DISCLOSURES

Washington (My Health MY Data Act): If you are a Washington resident, you have the rights described above with respect to consumer health data as defined under the MHMDA. To exercise your rights, use the contact methods in Section 6.

California (CCPA/CPRA): If you are a California resident, health-related personal information may constitute sensitive personal information under the CCPA. You have the right to limit the use of sensitive personal information. The Consumer Health Data Privacy Notice supplements your rights under CCPA as described in our Privacy Policy.

Nevada: If you are a Nevada resident, you have rights under Nevada’s Consumer Health Data Privacy Law. We do not sell consumer health data.

Connecticut (CTDPA): If you are a Connecticut resident, you have rights with respect to sensitive data, including health data, under the CTDPA.

8. DATA SECURITY

We implement administrative, technical, and physical safeguards appropriate to the sensitivity of consumer health data, including encryption of data in transit and at rest, access controls, and vendor security requirements. If you believe your health data has been accessed without authorization, contact us immediately at privacy@scriptable.co.

9. CHANGES TO THIS NOTICE

We may update this Notice from time to time to reflect changes in applicable law or our data practices. We will provide notice of material changes as required by applicable law. The date at the top of this Notice reflects the most recent update.

10. CONTACT US

For questions about this Consumer Health Data Privacy Notice or to exercise your privacy rights:

Scriptable LLC

Attn: Privacy Officer

10298 Walden St

Soddy Daisy, TN 37379

Email: privacy@scriptable.co

Privacy requests: privacy@scriptable.co