We know that privacy is important to you. Your privacy is important to us too. This Policy explains how Quest Consumer Inc. (“Quest Consumer”, “we”, “our”) collects consumer health data from or about you (“you” or “your”) when you visit the websites or any applications, social media networks, interactive features, and other services that link to this Policy (the “Platforms”), and how we use, maintain, protect and disclose that data.

Please visit our Privacy Notice, which describes how we use and disclose your personal information, our legal duties with respect to your personal information, and your rights with respect to your personal information and how you may exercise them.

Information We Collect

We may collect information about you including “Consumer Health Data,” which is personally identifiable data that is linked or reasonably linkable to a consumer and that identifies the consumer’s past, present or future physical or mental health status.

Consumer Health Data we may collect includes data such as the following:

Categories of Information	Categories of Sources	Business or commercial purposes for collection
Individual health conditions or status, treatment, diseases, or diagnosis.	Direct contact with users through Platforms, affiliates and third parties.	Determine eligibility for certain test purchases, internal reporting and analytics purposes, to facilitate more personalized messaging, to facilitate customer purchases and viewing lab test results, and for additional uses described in the “How We Use Consumer Health Data That We Collect for Business or Commercial Purposes” section below.
Health-related surgeries or procedures.	Direct contact with users through Platforms, affiliates and third parties.	Internal reporting and analytics purposes, to facilitate more personalized messaging, to facilitate customer purchases and viewing lab test results, and for additional uses described in the “How We Use Consumer Health Data That We Collect for Business or Commercial Purposes” section below.
Use or purchase of prescribed medication.	Direct contact with users through Platforms, affiliates and third parties.	Determine eligibility for certain test purchases, Internal reporting and analytics purposes, to facilitate more personalized messaging, to facilitate customer purchases and viewing lab test results, and for additional uses described in the “How We Use Consumer Health Data That We Collect for Business or Commercial Purposes” section below.
Bodily functions, vital signs, symptoms, or measurements of the information described herein.	Direct contact with users through Platforms, affiliates and third parties.	Determine eligibility for certain test purchases, to facilitate customer purchases.
Diagnoses or diagnostic testing, treatment, or medication.	Direct contact with users through Platforms, affiliates and third parties.	Determine eligibility for certain test purchases, internal reporting and analytics purposes, to facilitate more personalized messaging, to facilitate customer purchases and viewing lab test results, and for additional uses described in the “How We Use Consumer Health Data That We Collect for Business or Commercial Purposes” section below.
Gender-affirming care information.	Direct contact with users through Platforms, affiliates and third parties.	Internal reporting and analytics purposes, to facilitate more personalized messaging, to facilitate customer purchases and viewing lab test results, and for additional uses described in the “How We Use Consumer Health Data That We Collect for Business or Commercial Purposes” section below.
Reproductive or sexual health information.	Direct contact with users through Platforms, affiliates and third parties.	Determine eligibility for certain test purchases, internal reporting and analytics purposes, to facilitate more personalized messaging, to facilitate customer purchases and viewing lab test results, and for additional uses described in the “How We Use Consumer Health Data That We Collect for Business or Commercial Purposes” section below.
Precise location information that could reasonably indicate a consumer's attempt to acquire or receive health services or supplies.	Direct contact with users through Platforms, affiliates and third parties.	To provide nearby locations where test specimens may be collected.
Data that identifies a consumer seeking health care services.	Direct contact with users through Platforms, affiliates and third parties.	Internal reporting and analytics purposes, to facilitate more personalized messaging, to facilitate customer purchases and viewing lab test results
Any information that we, or our respective third party vendors, process to associate or identify a consumer with the data described above that is derived or extrapolated from nonhealth information (such as proxy, derivative, inferred, or emergent data by any means, including algorithms or machine learning).	Direct contact with users through Platforms, affiliates and third parties.	Internal reporting and analytics purposes, to facilitate more personalized messaging

 

We do not consider Consumer Health Data to include information that can no longer be used to identify a specific natural person, whether in combination with other information or otherwise. For example, de-identified or aggregated consumer information.

Additionally, the following types of information are not considered Consumer Health Data: publicly available information from government records.

If we combine non-personally identifiable information with Consumer Health Data, we will treat such information appropriately, but not all rights may apply to the non-personally identifiable information portion.

How We Use Consumer Health Data That We Collect for Business or Commercial Purposes

We may use your Consumer Health Data:

• to fulfill the purposes for which the information was provided (e.g., to provide a service or perform on a contract);
• to identify you in order to respond to requests, provide services or products, personalize information we provide to you, or otherwise as described below;
• to communicate with you about your account or our relationship, such as making announcements about the Platforms or our privacy policies and terms;
• to send push notifications and other information through our Platforms;
• to design, improve and administer our Platforms;
• to improve our products and services;
• to audit and measure user interaction with our Platforms, so we can improve the relevancy or effectiveness of our content and messaging;
• to develop and carry out marketing, advertising and analytics;
• to provide texts or emails containing information about our products or services, or events or news, that may be of interest to recipients, as permitted by law;
• to deliver content and products or services relevant to your interests, including targeted ads on third party sites;
• to detect security incidents or monitor for fraudulent or illegal activity;
• to enable security measures (such as, to protect our Platforms, customers, employees and business partners);
• debugging to identify and repair errors;
• to protect our rights and to protect your safety or the safety of others;
• to investigate fraud or respond to government inquiries;
• to complete corporate transactions (from time to time, we may sell, buy, merge or otherwise reorganize our businesses, and these corporate restructurings may involve disclosure of Consumer Health Data to prospective or actual purchasers, or the receipt of it from sellers);
• to comply with laws, regulations or other legal process; or
• otherwise use your Consumer Health Data with your consent.

We also may use your Consumer Health Data to:

• provide you with the services and products you request;
• process or collect payments for our services; or
• respond to your questions and otherwise provide support your request.

We may use Precise Location Data from your device in accordance with the device’s consent process on some of our Platforms to help us improve your user experience and provide information that is relevant to you, such as nearby Quest Diagnostics Patient Service Center locations.

Sharing of Consumer Health Data

We do not sell Consumer Health Data. We may share the following categories of Consumer Health Data to the categories of third parties or specified affiliates listed below.

Type of Information Shared	Third parties and/or affiliates to whom Information is Shared	Business or commercial purposes for Sharing
Individual health conditions or status, treatment, diseases, or diagnosis.	Quest Diagnostics Incorporated (an affiliate), and other service providers, other entities that provide a service directly to you.	Determine eligibility for certain test purposes, internal reporting and analytics purposes, to facilitate more personalized messaging, to facilitate customer purchases and viewing lab test results, and for additional purposes described in the “How We Share Consumer Health Data for Business or Commercial Purposes” section below.
Health-related surgeries or procedures.	Quest Diagnostics Incorporated (an affiliate) and other service providers, other entities that provide a service directly to you.	Internal reporting and analytics purposes, to facilitate more personalized messaging, to facilitate customer purchases and viewing lab test results, and for additional purposes described in the “How We Share Consumer Health Data for Business or Commercial Purposes” section below.
Use or purchase of prescribed medication.	Quest Diagnostics Incorporated (an affiliate) and other service providers, other entities that provide a service directly to you	Determine eligibility for certain test purposes, internal reporting and analytics purposes, to facilitate more personalized messaging, to facilitate customer purchases and viewing lab test results, and for additional purposes described in the “How We Share Consumer Health Data for Business or Commercial Purposes” section below.
Bodily functions, vital signs, symptoms, or measurements of the information described herein.	Quest Diagnostics Incorporated (an affiliate) and other service providers, other entities that provide a service directly to you.	Determine eligibility for certain test purposes, to facilitate customer purchases.
Diagnoses or diagnostic testing, treatment, or medication.	Quest Diagnostics Incorporated (an affiliate) and other service providers, other entities that provide a service directly to you.	Internal reporting and analytics purposes, to facilitate more personalized messaging, to facilitate customer purchases and viewing lab test results, and for additional purposes described in the “How We Share Consumer Health Data for Business or Commercial Purposes” section below.
Gender affirming care information	Quest Diagnostics Incorporated (an affiliate) and other service providers, other entities that provide a service directly to you.	Internal reporting and analytics purposes, to facilitate more personalized messaging, to facilitate customer purchases and viewing lab test results, and for additional purposes described in the “How We Share Consumer Health Data for Business or Commercial Purposes” section below.
Reproductive or sexual health information.	Quest Diagnostics Incorporated (an affiliate) and other service providers, other entities that provide a service directly to you.	Internal reporting and analytics purposes, to facilitate more personalized messaging, to facilitate customer purchases and viewing lab test results, and for additional purposes described in the “How We Share Consumer Health Data for Business or Commercial Purposes” section below.
Precise location information that could reasonably indicate a consumer's attempt to acquire or receive health services or supplies.	Service providers, other entities that provide a service directly to you.	To provide nearby locations where test specimens may be collected.
Data that identifies a consumer seeking health care services.	Quest Diagnostics Incorporated (an affiliate) and other service providers, Pack Health, LLC (an affiliate) and other entities that provide a service directly to you.	Internal reporting and analytics purposes, to facilitate more personalized messaging, to facilitate customer purchases and viewing lab test results, and for additional purposes described in the “How We Share Consumer Health Data for Business or Commercial Purposes” section below.
Any information that we, or our respective third party vendors, process to associate or identify a consumer with the data described above that is derived or extrapolated from nonhealth information (such as proxy, derivative, inferred, or emergent data by any means, including algorithms or machine learning).	Quest Diagnostics Incorporated (an affiliate) and other service providers.	Internal reporting and analytics purposes, to facilitate more personalized messaging, to facilitate customer purchases and viewing lab test results, and for additional purposes described in the “How We Share Consumer Health Data for Business or Commercial Purposes” section below.

 

How We Share Consumer Health Data for Business or Commercial Purposes

We may share your Consumer Health Data:

• to fulfill the purposes for which the information was provided (e.g., to provide a service or perform on a contract);
• to identify you in order to respond to requests, provide services or products, personalize information we provide to you, or otherwise as described below;
• to communicate with you about your account or our relationship, such as making announcements about the Platforms or our privacy policies and terms;
• to send push notifications and other information through our Platforms;
• to design, improve and administer our Platforms;
• to improve our products and services;
• to audit and measure user interaction with our Platforms, so we can improve the relevancy or effectiveness of our content and messaging;
• to develop and carry out marketing, advertising and analytics;
• to provide texts or emails containing information about our products or services, or events or news, that may be of interest to recipients, as permitted by law;
• to deliver content and products or services relevant to your interests, including targeted ads on third party sites;
• to detect security incidents or monitor for fraudulent or illegal activity;
• to enable security measures (such as, to protect our Platforms, customers, employees and business partners);
• debugging to identify and repair errors;
• to protect our rights and to protect your safety or the safety of others;
• to investigate fraud or respond to government inquiries;
• to complete corporate transactions (from time to time, we may sell, buy, merge or otherwise reorganize our businesses, and these corporate restructurings may involve disclosure of Consumer Health Data to prospective or actual purchasers, or the receipt of it from sellers);
• to comply with laws, regulations or other legal process; or
• otherwise use your Consumer Health Data with your consent.

We also may share your Consumer Health Data to:

• provide you with the services and products you request;
• process or collect payments for our services; or
• respond to your questions and otherwise provide support your request.

We may share Precise Location Data from your device in accordance with the device’s consent process on some of our Platforms to help us improve your user experience and provide information that is relevant to you, such as nearby Quest Diagnostics Patient Service Center locations.

Additional Rights of Individuals in Washington and Nevada

If you live or receive services in Washington or Nevada, you may have certain rights with respect to Consumer Health Data that we have collected and used under certain circumstances, which may include the following:

1. The Right to Know About Consumer Health Data Collected, Shared, or Sold.

Residents and consumers in the states of Washington and Nevada have the right to request that Quest Consumer confirm whether it collects, uses, shares, or sells your Consumer Health Data. This is called the “Right to Know”. For further details about this information, please visit the Information We Collect section above.

If you are a resident of, or receive services in, Washington or Nevada and would like to request to know your information, you may make a request as described in the How to Make Requests section below.

When you make a request under your right to know, you can expect the following:
a) We will verify your identity. You will need to provide us with certain information such as your name, email address, physical address, or other information, as relevant, so that we can verify that you are who you say you are. Which information may depend on the type and sensitivity of information requested.
b) We will confirm our receipt of your request within 10 days. If you have not received a response within a few days after that, please let us know by contacting us at the webpage or phone number listed below.
c) We will respond to your request within 45 days. If necessary, we may need additional time to respond, up to another 45 days, but we will reply either way within the first 45-day period and, if we need an extension, we will explain why.
d) In certain cases, a request to know may be denied. For example, if we cannot verify your identity. If we deny your request, we will explain why we denied it. If we deny a request, we will still try to provide you as much of the information as we can, but we will withhold the information subject to denial.

2. The Right to Access and Receive Your Specific Consumer Health Data and a List of Third Parties with Whom Quest Consumer Shares or Sells Consumer Health Data

Residents and consumers in the states of Washington and Nevada have the right to request that Quest Consumer provide a list of all third parties with whom Quest Consumer has shared or sold your Consumer Health Data. For further details about this information, please visit the Information We Collect section above.

If you are a resident of, or receive services in, Washington or Nevada and would like to request a list of third parties with whom Quest Consumer shares or sells your Consumer Health Data, you may make a request as described in the How to Make Requests section below.

When you request a list of third parties with whom Quest Consumer shares or sells your Consumer Health Data, you can expect the following:
a) We will verify your identity. You will need to provide us with certain information such as your name, email address, physical address, or other information, as relevant, so that we can verify that you are who you say you are. Which information may depend on the type and sensitivity of information requested.
b) We will confirm our receipt of your request within 10 days. If you have not received a response within a few days after that, please let us know by contacting us at the webpage or phone number listed below.
c) We will respond to your request within 45 days. If necessary, we may need additional time to respond, up to another 45 days, but we will reply either way within the first 45-day period and, if we need an extension, we will explain why.
d) In certain cases, a Request to Access may be denied. For example, if we cannot verify your identity. If we deny your request, we will explain why we denied it. If we deny a request, we will still try to provide you as much of the information as we can, but we will withhold the information subject to denial.

3. The Right to Request Deletion of Consumer Health Data about You.

Residents and consumers in the states of Washington and Nevada have a right to request the deletion of their Consumer Health Data collected or maintained by Quest. If you are a resident of, or receive services in, Washington or Nevada and would like to request to delete your information, you may make a request as described in the How to Make Requests section below.

When you make a request for deletion, you can expect the following:
a) We will verify your identity. You will need to provide us with certain information such as your name, email address, physical address, or other information, as relevant, in order for us to verify that you are who you say you are. Which information may depend on the type and sensitivity of information that you would like to have deleted.
b) We will confirm our receipt of your request within 10 days. If you have not received a response within a few days after that, please let us know by contacting us at the webpage or phone number listed below.
c) We will respond to your request within 30 days if you are a Nevada resident and 45 days if you are a Washington resident. Deletion requests may be delayed for information stored or archived on our backup systems.
d) In certain cases, a request for deletion may be denied, for example, if we cannot verify your identity; the law requires that we maintain the information (e.g., in the event of a legal claim or mandatory reporting); or, if we need the information for internal purposes such as to continue to provide you services. If we deny your request, we will explain why we denied it, and delete any other information that is not protected from deletion.

4. The Right to Appeal Our Refusal to Take Action

Residents and consumers in the states of Washington and Nevada have a right to appeal if the consumer’s privacy rights-related request is denied in whole or in part. For more information about your right to appeal, please see your state’s section below. You may make an appeal as described in the How to Make Requests section below.

5. The Right to Withdraw Consent

Residents and consumers in the states of Washington and Nevada have a right to withdraw consent from the collection and sharing of Consumer Health Data concerning the consumer. For more information about your right to withdraw consent, please see your state’s section below. You may withdraw consent as described in the How to Make Requests section below.

6. The Right to Non-Discrimination for the Exercise of a Consumer’s Privacy Rights

You have a right not to receive discriminatory treatment by Quest Consumer for exercising any of your privacy rights conferred by your state’s consumer privacy laws. Quest Consumer will not discriminate against any consumer because such person exercised any of the consumer’s rights under these privacy laws, including, but not limited to:

• denying goods or services;
• charging different prices or rates for goods and services, including through the use of discounts or other benefits or imposing penalties;
• providing a different level or quality of goods or services; or
• suggesting that the consumer will receive a different price or rate for goods or services or a different level or quality of goods or services.

Quest Consumer may, however, charge a different price or rate, or provide a different level or quality of goods or services, if that difference is related to the value provided to you by your data.

How to Make Requests
To make a request under the My Health My Data Acts in the State of Washington or Nevada you may visit our online request form. You also may call (833) 341-0196. To exercise your right to appeal, you may email us at privacy@questdiagnostics.com and include the Request ID from your previous request.

Washington Residents’ and Consumers’ Privacy Rights

Washington My Health My Data Act (WMHMDA)
The Washington My Health My Data Act (WMHMDA) is a law intended to enhance privacy rights and consumer protection for residents and consumers of the state of Washington with respect to their Consumer Health Data. The WMHMDA applies to certain business entities that do business or target consumers in Washington. For further details on the types of Consumer Health Data we have collected about you, the sources of that information, how we use the information (e.g., our business or commercial purposes for collecting, sharing or selling Consumer Health Data), other individuals and business with whom we share Consumer Health Data, and the categories of Consumer Health Data that we have collected or shared about you, please visit the Information We Collect section.

The following rights apply to all Washington residents and consumers (but not including legal entities, such as companies):

• The right to know.
• The right to receive (“access”) a list of all third parties and affiliates with whom Quest Consumer has shared or sold your Consumer Health Data and an active email address or other online mechanism you may use to contact these third parties and affiliates.
• The right to request deletion of your Consumer Health Data (Note: your request may be delayed for information stored or archived in our backup systems for up to six months).
• The right to withdraw consent from the collection and sharing of Consumer Health Data concerning you. You may withdraw your consent by unchecking the respective checkboxes in the “Manage Preferences” section of the Account page at https://www.questhealth.com/account
• The right to appeal a regulated entity’s refusal to take action regarding a privacy rights request.

These rights will not apply, however, if Quest Consumer does not collect any Consumer Health Data about you or if all of the information we collect is exempt from the statute (for example, the WMHMDA does not protect information that is already protected by certain other privacy laws like the federal protection of human subjects and other research privacy regulations, and does not protect information that is already publicly available).

Nevada Residents’ and Consumers’ Privacy Rights

Nevada My Health My Data Act (NMHMDA)
The Nevada My Health My Data Act (NMHMDA) is a law intended to enhance privacy rights and consumer protection for residents and consumers of the state of Nevada with respect to their Consumer Health Data. The NMHMDA applies to certain business entities that do business or target consumers in Nevada. For further details on the types of Consumer Health Data we have collected about you, the sources of that information, how we use the information (e.g., our business or commercial purposes for collecting, sharing or selling Consumer Health Data), other individuals and business with whom we share Consumer Health Data, and the categories of Consumer Health Data that we have collected or shared about you, please visit the Information We Collect section.

The following rights apply to all Nevada residents and consumers (but not including legal entities, such as companies):

• The right to know.
• The right to receive (“access”) a list of all third parties with whom Quest Consumer has shared or sold the Consumer Health Data.
• The right to request deletion of your Consumer Health Data (Note: your request may be delayed for information stored or archived in our backup systems for up to two years).
• The right to withdraw consent from the collection and sharing of consumer health data concerning you. You may withdraw your consent by unchecking the respective checkboxes in the “Manage Preferences” section of the Account page at https://www.questhealth.com/account
• The right to appeal a regulated entity’s refusal to take action regarding a privacy rights request.

These rights will not apply, however, if Quest Consumer does not collect any Consumer Health Data about you or if all of the information we collect is exempt from the statute (for example, the NMHMDA does not protect information that is already protected by certain other privacy laws like the federal protection of human subjects and other research privacy regulations, and does not protect information that is already publicly available).

Updates to This Privacy Policy

From time to time, we may change this Privacy Policy. If we make changes, we will revise the “Last Updated” date at the bottom of this Privacy Policy. We encourage you to review this Policy periodically to be sure you are aware of those changes. Changes will become effective as of the “Last Updated” date.

Contact Us

Should you have any questions about this Policy or Quest Consumer’s privacy practices more generally, please email Privacy@QuestDiagnostics.com or write to the address below:

Quest Consumer Inc.
Attention: Privacy Office
500 Plaza Drive Secaucus, NJ 07094

You can also call us at 800-222-0446, ext. 1020123.

Last Updated: November 7, 2024