Washington Privacy Policy

This notice supplements the PrizeGrab Privacy Policy and applies to personal data of residents of Washington state defined as “consumer health data” subject to the Washington State My Health My Data Act (MHMDA).

Consumer Health Data We Collect

As described in the general privacy policy, the data we collect depends on the context of your interactions with PrizeGrab, the products and features you use, your location, and applicable law. Because consumer health data is defined very broadly, a few of the categories of data we collect could also be considered consumer health data.

Examples of consumer health data may include:

• Information about your health-related conditions, symptoms, status, diagnoses, testing, or treatments (including surgeries, procedures, medications, or other interventions). For example, we may collect such information through surveys or questions that you answer.
• Information that could identify your attempt to seek health care services or information, including services that allow you to assess, measure, improve, or learn about your or another person’s health. For example, we collect your answers to questions about health care services or information.
• Other information that may be used to infer or derive data related to the above or other health information.

Sources of Consumer Health Data

We collect personal data (which may include consumer health data) directly from you and from your interactions with our products and services.

Why We Collect and Use Consumer Health Data

We collect and use consumer health data as reasonably necessary to provide you with the products you have requested or authorized from third parties, such as when you answer a health-related question so a company may contact you about their product or service.

Our Sharing of Consumer Health Data

We may share each of the categories of consumer health data described above for the purposes described. In particular, we may share personal data, including consumer health data, with your consent or as reasonably necessary to complete any transaction or provide any product you have requested or authorized, as described above.

For example, we share your content with third parties when you tell us to do so, such as when you consent to share your information with a company that will contact you about their products and services. Separately, we may disclose data when we believe that doing so is necessary to comply with applicable law or respond to valid legal process.

Third Parties With Which We Share Consumer Health Data

As necessary for the purposes described above, we share consumer health data with the following categories of third parties:

• Service providers. Vendors or agents (“processors”) working on our behalf may access consumer health data for the purposes described above. For example, companies we’ve hired to provide customer service support or assist in protecting and securing our systems and services may need access to data to provide those functions.
• Business partners. We may share consumer health data with other companies, for example, where you consent to receiving information about a product or service.
• Parties to a corporate transaction. We may disclose consumer health data as part of a corporate transaction or proceeding such as a merger, financing, acquisition, bankruptcy, dissolution, or a transfer, divestiture, or sale of all or a portion of our business or assets.
• Affiliates. We enable access to data across our subsidiaries, affiliates, and related companies, for example, where we share common data systems or where access helps us to provide our services and operate our business. A full list of specific affiliates is available here.
• Other third parties. In certain circumstances, it may be necessary to provide data to other third parties, for example, to comply with the law or to protect our rights or those of our customers.
• Other users and individuals. If you use our services to interact with other users of the service or other recipients of communications, we will share data, including consumer health data, as directed by you and your interactions.

How to Exercise Your Rights

MHMDA provides certain rights concerning consumer health data, including rights to access, delete, or withdraw consent relating to such data, subject to certain exceptions. You can request to exercise such rights by using our web form.

If your request to exercise a right under the MHMDA is denied, you may appeal that decision by contacting our privacy support team at contact@prizegrab.com If your appeal is unsuccessful, you can raise a concern or lodge a complaint with the Washington State Attorney General at www.atg.wa.gov/file-complaint.

EFFECTIVE DATE: 3/31/2024