This Consumer Health Data Privacy Policy describes Blue Pomera’s collection, use, sharing, security and deletion of “consumer health data.” It is intended to provide the specific disclosures required by consumer health data laws, including the Washington My Health My Data Act and Nevada’s consumer health data law where those laws apply. Blue Pomera applies many of these protections more broadly as part of its health-data program.
This policy is separate from our general Privacy Policy. If a law gives you greater rights than this policy describes, we will honor the rights required by that law.
01Categories of consumer health data we collect
- Health and wellness profile information, goals, lifestyle information, symptoms and measurements you choose to provide.
- Biomarker and laboratory information, including orders, results, units, laboratory reference intervals, flags and longitudinal trends.
- Genetic and DNA information, including genetic test results and DNA-derived trait, wellness or predisposition information.
- Connected-health and wearable information you authorize, such as activity, sleep, heart-rate, recovery, weight, exercise, glucose or other supported metrics.
- Information about testing, sample collection, orders, telehealth/clinician authorization and related services you request.
- Health-related inferences, derived information and AI-generated wellness insights based on the information above.
02Sources of consumer health data
- You, through your profile, questionnaires, goals, symptoms, messages and information you enter.
- Health platforms, devices and applications you affirmatively connect or authorize.
- Independent laboratories, genetics providers, collection/fulfillment providers and licensed clinicians or telehealth providers involved in services you request.
- Blue Pomera’s own processing, which may derive trends, summaries, classifications or other health-related inferences from information lawfully collected.
03Why we collect and use consumer health data
- Provide the Blue Pomera membership and the health-intelligence features you request.
- Create and maintain your longitudinal health and wellness record.
- Organize information around wellness goals selected by you.
- Display and trend laboratory, genetic and connected-health information.
- Generate personalized wellness insights, summaries and educational content.
- Facilitate test ordering, authorization, specimen collection, laboratory processing, result delivery and related support through independent providers.
- Authenticate users, secure the platform, prevent fraud and investigate misuse.
- Comply with legal, regulatory, safety, accounting, dispute and recordkeeping obligations.
- Improve service quality where permitted by law and consistent with consent, using appropriately restricted, aggregated, de-identified or otherwise lawful processing.
06Sale of consumer health data
Blue Pomera does not sell consumer health data or genetic data for money or other valuable consideration. We do not require you to authorize a sale of consumer health data as a condition of receiving a product or service.
07Third-party collection over time
Blue Pomera does not authorize third-party advertising companies to collect consumer health data from authenticated health-profile areas of the Blue Pomera app over time and across unrelated websites or online services for the third party’s own advertising purposes. Public marketing pages may use analytics or advertising technologies that are separate from authenticated member health data, subject to applicable consent requirements.
08Consent
Where required by law, Blue Pomera obtains your affirmative, voluntary consent before collecting consumer health data for specified purposes and obtains separate consent before sharing consumer health data when the law requires separate sharing consent. Consent requests describe the categories of health data, the purpose, the categories of recipients, and how to withdraw consent.
Some processing is necessary to provide a product or service you specifically request and may be permitted without an additional consent under applicable law. Genetic testing, certain laboratory services, and certain provider services may require additional separate express or written consent.
09Your consumer health data rights
Where applicable, you may request to:
- confirm whether Blue Pomera is collecting, sharing or selling consumer health data about you;
- access your consumer health data;
- receive information about third parties and affiliates with whom your consumer health data has been shared;
- withdraw consent to future collection or sharing;
- request correction where applicable;
- request deletion of consumer health data; and
- appeal a decision not to honor a request.
You may exercise these rights through the privacy-request function in your account, if available, or by emailing [email protected]. You do not need to create a new account solely to exercise a privacy right. We may use commercially reasonable steps to authenticate your identity and protect your information from unauthorized requests.
10Timing, deletion and appeals
We will respond to authenticated consumer health data requests within the period required by applicable law. For Washington requests, this is generally within 45 days of receipt, with one permitted 45-day extension when reasonably necessary and properly noticed. Deletion from archived or backup systems may be delayed as permitted by Washington law, but not more than six months after authentication of the request.
For Nevada requests, Blue Pomera will respond within the applicable statutory period; Nevada generally permits up to 45 days after authentication for a response, with a permitted extension in appropriate circumstances. Nevada imposes additional timing rules for deletion and may allow delayed deletion from archived or backup systems as permitted by law.
If Blue Pomera denies or declines to act on a request, you may appeal by emailing [email protected] with the subject line “Privacy Appeal.” We will respond to the appeal within the period required by law, generally within 45 days in Washington and Nevada, and will provide required regulator contact information if an appeal is denied.
11Security of consumer health data
We restrict access to consumer health data to employees, contractors and processors for whom access is reasonably necessary to provide the Services you request, carry out a consented purpose, protect security, or meet legal obligations. We maintain administrative, technical and physical security practices designed for the sensitivity, volume and nature of consumer health data, including encryption, role-based access, audit logging and vendor controls.
12Changes to this policy
If Blue Pomera materially changes the categories of consumer health data collected, the purposes for collection/use, or the categories of recipients, we will update this policy and obtain additional consent where required before the new processing occurs.
13Contact
Blue Pomera LLC14621 State Rd. 70E #276
Lakewood Ranch, Florida 34202
Email: [email protected]
Privacy: [email protected]