top of page
7_edited_edited_edited.png

Rarity PBC
Consumer Health Data Privacy Notice

Rarity PBC Consumer Health Data Privacy Notice

Last updated: April 18, 2026
 

This Consumer Health Data Privacy Notice ("Notice") describes how Rarity PBC ("Rarity," "we," "us," or "our") handles "consumer health data" as that term is defined under applicable state law, including Washington's My Health My Data Act (RCW 19.373) ("MHMDA") and Nevada Senate Bill 370 ("SB 370"). This Notice supplements our general Privacy Notice and applies specifically to consumers whose consumer health data is collected in Washington or Nevada, or who are residents of those states.

1. What Is Consumer Health Data?

Under applicable state law, "consumer health data" generally means personal information that is linked or reasonably linkable to a consumer and that identifies, or is used to identify, the consumer's past, present, or future physical or mental health status.

As described in our general Privacy Notice, Rarity does not request consumer health data through our public website or general communications, and we do not offer direct-to-consumer health services or products. We do not knowingly or intentionally collect consumer health data. To the extent we inadvertently receive such information. For example, in an unsolicited email or contact form submission, this Notice governs how we handle it.

 

2. Categories of Consumer Health Data We Collect

Because we do not intentionally seek consumer health data, we do not collect consumer health data in any planned or systematic way. Any consumer health data in our possession has been received inadvertently, such as when an individual voluntarily includes health-related information in a general inquiry.

To the extent we inadvertently receive or retain consumer health data, it may fall within one or more of the following categories:

  • Individual health conditions, treatment, diseases, or diagnoses

  • Social, psychological, behavioral, or medical interventions

  • Health-related surgeries or procedures

  • Use or purchase of prescribed medication

  • Bodily functions, vital signs, symptoms, or measurements

  • Reproductive or sexual health information

  • Gender-affirming care information

  • Biometric or genetic data

 

We do not collect any of these categories intentionally or for business purposes.

 

3. Sources of Consumer Health Data

 

Any consumer health data we hold was provided directly to us, voluntarily and unsolicited, by the individual, such as through a general email inquiry or website contact form. We do not receive consumer health data from third-party data brokers, advertising networks, or other external sources.

 

4. Purposes and Use of Consumer Health Data

We do not use consumer health data for business purposes, analytics, research, marketing, or any other operational objective. To the extent we inadvertently receive and retain consumer health data, the sole purpose is to facilitate a response to the individual's inquiry.

 

5. How We Disclose Consumer Health Data

We do not sell or share consumer health data with third parties for targeted advertising or similar purposes.

We may disclose consumer health data only in the following limited circumstances:

  • Service providers and processors. Cloud-based productivity, collaboration, document management, and storage tools, including Microsoft 365 and DocuSign, that we use to support our internal operations may incidentally store or process information we receive. These providers act as processors and are contractually required to use information only in accordance with our instructions and applicable law.

  • Legal compliance. We may disclose information to public authorities, regulators, or other parties when required to comply with applicable law, legal process, or to protect our rights or the rights and safety of others.

  • Corporate transactions. In connection with a merger, acquisition, financing, or similar transaction, consumer health data may be disclosed to relevant counterparties subject to appropriate confidentiality obligations.

 

6. Your Rights
 

If you are a consumer in Washington or Nevada whose consumer health data we hold, you have the following rights under applicable state law:

  • Right to confirm and access. You may confirm whether we hold consumer health data about you and, if so, request access to that data, including a list of any third parties or affiliates with whom it has been disclosed.

  • Right to withdraw consent. You may withdraw any consent you have given to our collection or sharing of your consumer health data at any time.

  • Right to deletion. You may request that we delete consumer health data we hold about you. Upon receiving a verified deletion request, we will delete the data from our records, including archived or backup systems within the timeframe permitted by law, and will notify any processors, contractors, or affiliates to whom the data was disclosed.

  • Right to appeal. If we decline to act on your request, you may appeal that decision as further detailed in our communication back to you.
     

We will not discriminate against you for exercising any of these rights.

 

7. How to Submit a Request
 

To exercise any of the rights described above, please contact us at:

  • Email: info@raritypbc.com

  • Please include "Consumer Health Data Request" in the subject line and provide sufficient detail to allow us to understand and respond to your request.
     

We may request additional information to verify your identity before processing your request. We will not require you to create a new account to submit a request.

 

8. Data Security
 

We maintain reasonable administrative, technical, and physical security measures designed to protect consumer health data from unauthorized access, use, or disclosure, appropriate to the volume and nature of the information we hold. These measures are consistent with the reasonable standard of care within our industry.

 

9. Consent
 

Because we do not intentionally collect consumer health data, we do not present a consent request at the point of collection. If you believe you have submitted consumer health data to us and wish to withdraw any implicit consent to our retention of it, please contact us using the information above and we will promptly delete it.

 

10. Changes to This Notice
 

We may update this Notice from time to time to reflect changes in our practices or applicable law. When we make material changes, we will revise the "last updated" date above. Continued use of our website or services after any changes become effective constitutes your acknowledgment of the revised Notice.

 

11. How to Contact Us
 

If you have questions about this Notice or our handling of consumer health data, please contact us at:

For privacy-specific questions or requests, please include "Consumer Health Data" in the subject line of your email.

bottom of page