CONSUMER HEALTH DATA PRIVACY POLICY
Effective August 24, 2026
This document addresses "consumer health data" as that term is defined under the Washington My Health My Data Act, Nevada SB 370, and comparable state consumer health privacy laws. It applies to residents of those states and supplements our Privacy Policy.
1. Our Position
RxDune does not collect consumer health data through rxdune.com.
The Site collects business contact information from benefits consultants, brokers, third-party administrators, and employer representatives who are inquiring about our services in a professional capacity. It does not ask for, and is not designed to receive, information about any individual's past, present, or future physical or mental health, health conditions, diagnoses, treatments, medications, prescriptions, healthcare services sought or received, biometric or genetic data, precise location relating to healthcare, or any other category of consumer health data.
Our forms state this expressly and instruct users not to submit health information.
2. If Consumer Health Data Reaches Us Anyway
If someone submits health information through the Site despite those instructions:
- Categories collected. Only whatever the sender chose to include in a free-text field. We do not solicit any category of consumer health data.
- Sources. The individual who submitted it.
- Purpose. None. We do not use it. Our purpose is limited to identifying it and removing it.
- Sharing. We do not sell consumer health data. We have never sold consumer health data and we will not. We do not share it with any third party for that party's own purposes. It may transit our hosting and email providers, which act only as processors under contract.
- Retention. We delete it promptly on identification, or move it to a secure, contractually governed channel where the sender has a legitimate need to provide it and appropriate protections are in place.
3. Health Data We Handle for Health Plans
RxDune handles health information in its business as a pharmacy benefit manager — as a business associate of, or service provider to, employer-sponsored health plans. That information is subject to HIPAA, to our business associate agreements, and to the plan's own notice of privacy practices. Most state consumer health data laws, including the Washington Act, exclude information governed by HIPAA from their definition of consumer health data. That information is not collected through the Site and is not covered by this document.
4. Your Rights Regarding Consumer Health Data
If you are a resident of Washington, Nevada, or another state with a consumer health data law, you have the right to:
- confirm whether we collect, share, or sell consumer health data about you, and access it, including a list of all third parties with whom we have shared or sold it and an active contact for each;
- withdraw consent to our collection or sharing of your consumer health data; and
- have your consumer health data deleted, including from our archived and backup systems, and to have us notify anyone we shared it with of your deletion request.
To exercise any of these rights, email hello@rxdune.com with "Consumer Health Data Request" in the subject line. We will verify the request by responding to the email address you contacted us from or by asking you to confirm information we already hold. We respond within forty-five days and may extend once by an additional forty-five days where reasonably necessary, and will tell you if we do.
If we deny your request, our response will explain why and how to appeal. Send appeals to hello@rxdune.com with "Appeal" in the subject line. If we deny your appeal, we will provide a link to submit a complaint to the Washington State Attorney General or your state's equivalent authority.
5. No Sale of Consumer Health Data
RxDune does not sell consumer health data and has never done so. We do not accept payment or other valuable consideration in exchange for consumer health data. No valid authorization for any such sale exists because we do not engage in the practice.
6. Contact
hello@rxdune.com