Consumer health data privacy policy

Effective November 1, 2026

About this policy

This policy explains how Open Lab Solutions, Inc. ("OLS," "we," "us") handles "consumer health data": personal information that identifies a person's past, present or future physical or mental health and that is not protected health information under HIPAA. Washington's My Health My Data Act and similar state laws, such as Nevada's, give you rights over this kind of information. This policy supplements our Privacy Notice.

What this policy does not cover. Patient and test information that laboratories send us, reports, and everything in the patient portal are protected health information that we hold for the laboratory under HIPAA. Your laboratory handles your rights over that information; see Section 6 of our Privacy Notice.

The consumer health data we may collect, and why

We do not ask for consumer health data. We collect it only if you, or someone writing for you, choose to include it in a message or form you send us. The categories are: information about a test, a symptom, a health condition, a diagnosis or a treatment, and the fact that you are seeking health care. We use it only to read and answer your message, to direct you to your laboratory or clinician, to keep our services secure, and to comply with the law. We never use it for advertising and never sell it.

Where it comes from

From you, or from someone writing for you, through the forms on our website, by e-mail, or by telephone.

What we share, and with whom

We share the same categories of information listed above, and only with:

• our e-mail delivery provider, [OWNER CONFIRM: name of the e-mail delivery provider], which carries our e-mail under a contract that limits its use to that service;
• the companies that host our e-mail mailbox and our systems, [OWNER CONFIRM: names of the companies that host the mailbox and the systems], under contracts that limit their use to that service;
• your laboratory or clinician, but only if you ask us to pass your message on or give us your separate consent; and
• government authorities, if the law requires it.

Our staff and affiliates

Our own staff who handle your message see it too. We have no affiliates that receive it [OWNER CONFIRM: whether Wellness Health Group, LLC, under common control and with shared branding, is an affiliate that receives it; if so, name it here instead]. We do not allow other companies to collect consumer health data about your activities on our website over time and across other websites, and we do not use geofencing.

How long we keep it

We delete it within 30 days after we reply to you [launch gate: site PC-6(c)]. Copies may remain in our encrypted backups until those backups are replaced, which takes up to [OWNER CONFIRM: longest period a backup or prior backup version is kept]. If you ask us to delete it, backup copies will be gone within six months after we confirm your request [launch gate: backups six months or less].

Your rights, and how to use them

You may ask us to confirm whether we hold consumer health data about you and to give you a copy, together with a list of every third party and affiliate with which we have shared it and an e-mail address or other online way to contact them. You may withdraw any consent you gave us. You may ask us to delete it; we will then delete it from all our systems, including backups [launch gate: backups six months or less], and tell everyone we shared it with to delete it too.

To make a request, e-mail [OWNER CONFIRM: privacy contact e-mail], use our contact form or write to us at the address below. You do not need an account. We may ask for information to confirm your identity. We respond within 45 days, and if we need more time we will tell you why and take no more than 45 more days. Requests are free, unless they are clearly unfounded or excessive as the law allows. If we decline your request, you can appeal by replying with the word "Appeal"; we will answer in writing within 45 days, and if we deny the appeal we will tell you how to contact your state's attorney general.

Changes

We will post any change here with a new effective date. We will not collect, use or share consumer health data in a new way, or for a new purpose, without first telling you and getting your consent.

Contact

Open Lab Solutions, Inc., 7780 E. 106th Street, Tulsa, OK 74133; [OWNER CONFIRM: privacy contact e-mail].

Open Lab Solutions, Inc. · 7780 E. 106th Street · Tulsa, OK 74133