Need help or have questions about your order? Call 1-888-BRELLO-1

My Health My Data Act

WASHINGTON CONSUMER HEALTH DATA PRIVACY NOTICE

Last updated August 2026

Brello Health, LLC (“we,” “us,” or “our”) prepared this Washington Consumer Health Data Privacy Notice (“Notice”) to supplement the information already explained in Brello Health’s Privacy Notice. It applies solely to Washington consumers who interact with us in an individual or household capacity, and covers only Personal Information defined as “consumer health data,” subject to Washington’s My Health My Data Act.

1. Scope of this Notice

This Notice describes what consumer health data we collect, how we collect and use it, who we disclose it to and why, and the choices you may have regarding our use or disclosure of your consumer health data. This Notice only applies to consumer health data, which is a subset of personal information that identifies your past, present, or future physical or mental health status.

2. What This Notice Does Not Cover

This Notice does not apply to any Personal Information other than consumer health data that is subject to the Washington My Health My Data Act. Consumer health data does not include information generated by your interactions with us, such as browsing or purchasing, that does not identify your health status. Consumer health data also does not include publicly available information, protected health information subject to HIPAA, or Personal Information that has been deidentified in accordance with applicable law does not qualify as consumer health data. To the extent we process deidentified information, we will maintain and use the information in deidentified form, and will not attempt to reidentify the information, unless otherwise permitted by applicable law.

3. What Categories of Consumer Health Data Do We Collect?

We may collect or receive the categories of consumer health data listed below. Not all categories will be collected or received for every individual.
  • Health information you give us in an intake, eligibility, or screening questionnaire, including height, weight, medical history, current medications, allergies, and symptoms.
  • The products or medications you view, add to a cart, order, or receive, and your refill schedule.
  • The fact that you visited a page about a specific medication, treatment, or health condition.
  • Information from which any of the above could reasonably be inferred, including a product-specific web address, a product or medication name inside an analytics or advertising event, or a purchase amount that corresponds to a single product.
  • Precise location information that could reasonably indicate an attempt to obtain health services or supplies.
  • Biometric data and genetic data, if collected.
  • Reproductive or sexual health information and gender-affirming care information, if collected.
  • Information identifying a health condition, treatment, disease, or diagnosis, such as purchases of hearing aids or medication used to treat an identifiable, sensitive health condition
  • Information identifying the purchase of prescribed medication, unless that information constitutes PHI subject to HIPAA
  • Measurements of the information listed above
  • Information that identifies an individual’s intention to seek health care services
  • Information that we derive or extrapolate from data that is not consumer health data, and then use to associate an individual to the information listed above

4. Categories of Sources From Which We Collect Your Consumer Health Data

We may obtain consumer health data from different sources, including information:
  • Provided directly by you or a member of your household via questionnaire responses or other communications with us
  • Collected from a device associated with you or your household
  • Collected from another company within our family of companies
  • Collected from another solution or asset

5. What Are the Purposes for Collecting Your Consumer Health Data?

We may collect and use consumer health data as set out below:
  • To provide you with products and services you request, such as displaying the products you place in your online cart, completing your purchase, serving responses to your online searches, suggesting products that may be of interest to you based on your browsing, searching, or shopping, and displaying your past purchase history for your reference. Depending on your communication preference settings, we also may send communications regarding your requests, such as a reminder to complete your transaction with respect to items in your cart or notifying you that a product you browsed is back in stock.
  • To fulfill your requests, such as providing you with a list of products available for reorder, participating in subscription services, or performing customer service activities.
  • To fulfill our legal functions or obligations, such as maintaining and auditing compliance.
  • Helping to ensure security and integrity of our systems, including detection and prevention of security incidents.
  • To detect or prevent harmful behavior such as identity theft, fraud, harassment, or deceptive activities, or activities that are illegal under applicable law.
  • For other purposes with your consent.

6. What Categories of Consumer Health Data Do We Share?

We may share each of the categories of consumer health data described above with your consent to complete transactions or provide products or services you have requested, and for the purposes described in this Notice.

7. Who Do We Share Your Consumer Health Data With and Why?

We may share consumer health data with business partners, including as those providing advertising and technology services, governmental agencies and legal bodies, and purchasers of or successors to our business or assets. We may also share consumer health data within our family of companies, including among these affiliates:
  • AP MAX, Inc., d/b/a Southend Pharmacy
  • HelloWellness
  • Allia Health Group

8. How Can You Exercise Your Washington Consumer Health Data Rights?

If you are a resident of Washington, you may have the right to (1) request access to your consumer health data; (2) confirm whether we have disclosed or sold your consumer health data; (3) delete your consumer health data; or (4) withdraw your consent or authorization relating to such data. You can make these requests by writing to us at info@brellohealth.com

9. How To Submit an Appeal

You may appeal our decision concerning your request for consumer health data by going to contacting us directly at: Brello Health Attn.: Compliance 415 Westheimer RD. #103 Houston, TX 77006 info@brellohealth.com