Consumer Health Privacy Notice
Last Updated: May 15, 2026
This Consumer Health Privacy Notice supplements Record Rx, LLC’s Privacy Policy and describes Record Rx, LLC’s (“Record Rx,” “RecordRx,” “we,” “our,” or “us”) practices related to the collection and use of consumer health data, including as defined under the Washington My Health My Data Act (“MHMDA”) and similar state laws.
As described in our Privacy Policy, Record Rx provides medical records coordination, aggregation, and retrieval services. Protected health information processed by Record Rx in its capacity as a Business Associate is governed primarily by the Health Insurance Portability and Accountability Act (“HIPAA”) and the applicable Business Associate Agreement, and is generally exempt from the MHMDA. This Consumer Health Privacy Notice addresses Consumer Health Data that is not exempt and that we process in connection with our website and other Services.
Categories of Consumer Health Data Collected
The information we collect depends on how you interact with and use Record Rx’s Services, including the Record Rx website.
We may collect the following categories of Consumer Health Data:
- Individual health conditions, treatment, diseases, or diagnosis;
- Social, psychological, behavioral, and medical interventions;
- Health-related surgeries or procedures;
- Use or purchase of prescribed medication;
- Bodily functions, vital signs, symptoms, or measurements of other types of consumer health data;
- Diagnoses or diagnostic testing, treatment, or medication;
- Gender-affirming care information;
- Reproductive or sexual health information;
- Biometric data;
- Genetic data;
- Precise location information that could reasonably indicate a consumer’s attempt to acquire or receive health services or supplies;
- Data that identifies a consumer seeking health care services; and
- Other information that may be processed to derive or infer data related to the above or other consumer health data.
Sources of Consumer Health Data
We may collect Consumer Health Data from you as a result of your interaction with or use of our Services, including your interaction with our website; from third parties such as your referral source (for example, your attorney or life settlement broker), healthcare providers, our contracted clinical network, and our affiliated records-retrieval technology platform; or from publicly available sources.
Why We Collect and Use Consumer Health Data
We may collect and use Consumer Health Data for the following purposes:
- To provide and operate our Services, communicate with you about your use of the Services, provide you with information about our Services, provide troubleshooting and technical support, respond to your inquiries, and fulfill your orders and requests;
- To better understand how you access and use the Services, and for other internal research and analytical purposes, such as to evaluate and improve our Services and business operations and for internal quality control and training purposes;
- To authenticate or confirm your identity;
- To protect the Services and our business operations; to prevent and detect fraud, unauthorized activities and access, and other misuse; to conduct risk and security control and monitoring; and to investigate, prevent, or take action regarding illegal activities, suspected fraud, or situations involving potential threats to the safety or legal rights of any person or third party;
- To comply with the law and our legal obligations, to respond to legal process, and in connection with legal proceedings;
- To consider and implement mergers, acquisitions, reorganizations, bankruptcies, and other business transactions such as financings, and in connection with the administration of our general business, accounting, auditing, compliance, recordkeeping, and legal functions; and
- To aggregate or de-identify data by removing identifying information so it no longer identifies an individual.
Sharing of Consumer Health Data
Record Rx may share each of the categories of Consumer Health Data described above for the purposes of providing you with the information, services, or products you request or authorize as described in this Consumer Health Privacy Notice or the Privacy Policy.
Third Parties With Which We Share Consumer Health Data
As necessary for the purposes described above, we share Consumer Health Data with the following categories of third parties:
- Partners with whom we have contractual data sharing agreements, including our contracted telehealth network and our affiliated records-retrieval technology platform;
- Vendors, service providers, or processors who help us provide the Services;
- Healthcare providers from whom we request records on your behalf;
- Third parties you authorize us to disclose your Consumer Health Data to in connection with the Services, including recipients designated under your HIPAA Authorization;
- Regulators and government agencies, where required or permitted by law or court order; and
- Law enforcement, where required or permitted by law or court order.
How to Exercise Your Rights
Subject to certain exceptions, the MHMDA provides Washington consumers with certain rights, including the right to access, delete, or withdraw consent related to Consumer Health Data. You can request to exercise such rights by contacting us at Info@RecordRx.com or by calling 1-844-70R-ECRX or 1-844-707-3279
If your request to exercise a right under the MHMDA is denied, you may appeal that decision by contacting our Privacy Officer at Info@RecordRx.com. If your appeal is unsuccessful, you may raise a concern or lodge a complaint with the Washington State Attorney General at www.atg.wa.gov/file-complaint.
Contact Us
If you have any questions or comments about this Consumer Health Privacy Notice, please contact us at:
Record Rx, LLC
42 Deer Park Avenue
Babylon, NY 11702