Consumer Health Data Privacy Policy

Last updated: July 15, 2025

This Consumer Health Data Privacy Policy explains how MiraDx, Inc. (“MiraDx”, “we” or “us”) collects, uses, shares, and protects “consumer health data” as defined under applicable U.S. state laws, and the privacy rights and choices you have with respect to such data. This Policy supplements our general Privacy Notice.

1. Categories of Consumer Health Data We Collect

When you order and/or purchase patient testing through our website or affiliated platforms, such as tests for detecting genetic variants, we may collect the following categories of consumer health data:

Individual health conditions, treatment, diseases, or diagnoses, such as your personal cancer diagnosis, current or past treatments.
Social, psychological, behavioral, and medical interventions, such as information you provide about prior treatments, planned medical procedures, or whether you have received or intend to receive genetic counseling or screening based on your test results.
Health-related surgeries or procedures, diagnostic testing, treatment, or medication, such as records of prior genetic or cancer-related testing if you choose to provide them.
Genetic data, such as variant detection results from your test.
Use or purchase of prescribed medication, such as current medications relevant to your test interpretation.
Data that identifies a consumer seeking health services or supplies, e.g., your ordering information.
Any data derived or extrapolated from the categories above, e.g., clinical interpretations or genetic variant analysis related to your testing.

The information you provide may also include demographic details – such as sex, birth date, race, and ethnicity – which, while not separately listed above, are often necessary for scientific validity and are processed as part of your order.

2. Categories of Sources of Consumer Health Data

We collect consumer health data:

Directly from you, when you place orders or complete intake forms (e.g., about your cancer history or treatment status).
From biological samples submitted for variant analysis.

3. Purposes for Which We Collect and Use Consumer Health Data

We use your data to:

Process and perform your test, including analyzing genetic variant information.
Communicate with you about your test, such as regarding status, results, or clarifications.
Meet legal, regulatory, and ethical obligations, including those related to diagnostic laboratories.
Improve our services, using aggregated and de-identified data to enhance testing accuracy and interpretation.
Ensure security and prevent fraud, such as verifying orders or detecting misuse.
Comply with your direction or consent, such as if you direct us to share your test results with your doctor or genetic counselor.

4. Disclosures of Consumer Health Data

We may disclose the categories of consumer health data described above to:

With processors or service providers, who assist us in providing products and services to you, such as hosting, research, and analytics.
With law enforcement or regulators, when required by law.
In business transactions, such as mergers or acquisitions.
With others, at your direction or with your consent, such as when you ask us to share your test results with your authorized healthcare provider or genetic counselor.

We do not sell your consumer health data or use it for advertising.

5. Your Rights

Depending on your location and subject to applicable law, you may request the following in relation to your consumer health data:

Confirm whether we collect, share, or sell your consumer health data, and access your consumer health data.
Withdraw your consent from our collection or sharing of your consumer health data.
Request deletion of your consumer health data.

To exercise these rights, contact us at info@miradx.com. You are entitled to exercise the rights described above free from any discrimination.

Appeal. If your request to exercise a right under consumer health data privacy laws is denied, you may appeal that decision by emailing us at info@miradx.com. If your appeal is unsuccessful, you can raise a concern or lodge a complaint with the Washington State Attorney General at www.atg.wa.gov/file-complaint, or other regulatory authority as applicable.

6. Changes to This Policy

We reserve the right to update this Consumer Health Data Privacy Policy at any time. When changes are material, we will update the “Last Updated” date, revise this Policy online, and, if required, provide direct notice (e.g., email). Continued use of our services after updates signifies acceptance of the new Policy.