Consumer Health Data Privacy Policy

This policy explains how MDLupdate.com ("MDL Update," "we," "us") handles consumer health data — personal information that identifies your (or your child's) past, present, or future physical or mental health status. It supplements our Privacy Policy and applies to all users, and is provided in particular for residents of Washington (My Health My Data Act) and Nevada (SB 370).

Consumer Health Data We Collect

We collect health-related information only when you (or a parent or legal guardian, for a minor) choose to provide it through a case inquiry form:

• Health conditions and effects you select as relevant to a litigation (for example, a diagnosis or symptom list)
• A free-text description of your situation, if you choose to add one
• Whether treatment was sought
• Date of birth or age, where provided
• A minor's age and health effects, when submitted by their parent or legal guardian
• The litigation-related pages viewed on our site, when attached to your submission as described in the Privacy Policy — these can indicate an interest in a health-related litigation

We do not collect health data from wearables, apps, medical records, or any source other than what you type or select on this site. We do not use health data for advertising.

Sources

• You, directly, through our forms
• A parent or legal guardian submitting on a minor's behalf
• Our own site, for the litigation pages viewed during your visit (attached only if you submit)

Why We Collect It

• To evaluate and route your case inquiry to the law firm designated for the litigation you selected
• To respond to you and follow up on an inquiry you started
• To keep required records of the consent language shown when you submitted

We do not use consumer health data for marketing analysis beyond knowing which litigation an inquiry concerns, and we do not process it for any purpose requiring separate authorization under Washington law.

Who We Share It With

We share consumer health data only as needed to fulfill your inquiry, with these categories of recipients:

• Law firms: the participating law firm designated for your selected litigation receives your inquiry, including health details, to evaluate your potential case and contact you. The firm handles it under its own privacy policy. MDL Update may receive compensation from participating law firms for advertising and marketing services or case referrals.
• Form delivery provider: Web3Forms transmits form submissions.
• Email and spreadsheet provider: Google Workspace hosts the inboxes and logs where submissions are received.
• Hosting provider: Vercel hosts the website and keeps standard server logs.

We do not sell consumer health data. No one may sell it on our behalf, and we do not share it with data brokers, ad networks, or anyone else for advertising.

Your Rights

You (or the parent/guardian who submitted for a minor) may at any time:

• Access: confirm whether we hold your consumer health data, see it, and get a list of who it was shared with
• Withdraw consent: withdraw consent to our collection or sharing of your consumer health data
• Delete: have it deleted from our inboxes and logs — and we will pass your deletion request to the law firm that received your inquiry

To exercise a right, email privacy@mdlupdate.com from the address you used on the site (that is how we verify the request; we may ask a follow-up question if needed). We respond within the timelines required by applicable law — generally within 45 days.

How to Appeal a Decision

If we decline any part of your request, we will tell you why. You may appeal by replying to our response (or emailing privacy@mdlupdate.com with the subject "Appeal"). A different reviewer will consider the appeal and respond in writing within 45 days. If your appeal is unsuccessful, you may contact your state Attorney General — for Washington residents, the Washington Attorney General; for Nevada residents, the Nevada Attorney General.

Retention

Consumer health data is kept only as long as needed for your inquiry. Inquiries that do not proceed are routinely purged from our inboxes and logs, typically within 24 months, and you may request earlier deletion at any time.

Changes & Contact

We may update this policy from time to time; the "Last updated" date above will change when we do. Questions and requests: