Consumer Health Data Privacy Policy

Last updated: March 19, 2026

BreastCancer.Org, its affiliates, and its brands (collectively, “BreastCancer.Org”, “we”, “our”, and “us”) respect your concerns about privacy and personal data protection and value our relationship with you. If you are a resident of a state that provides specific consumer rights related to health data, you are entitled to certain notices and have certain choices regarding your health data, as described below.

These laws usually only apply to “consumer health data” about your past, present, or future health condition to the extent such data is not subject to certain other laws, including HIPAA.  This policy only applies when we process “consumer health data” covered by state consumer health data privacy laws. 

We collect data from a variety of sources. Because consumer health data is defined very broadly, some of the categories of data we collect could also be considered consumer health data. Examples of consumer health data we collect may include:

• Information about your health-related conditions, symptoms, status, diagnoses, testing, or treatments. For example, when you create an account with us or use our website, surveys, or chat box you may give us insight into your health status. We also collect health information when you provide us your email address so that we can send you information about your health condition.

• In addition to the data you provide to us directly, data collected may include pages visited, actions taken (button clicks),  files downloaded,  searches performed, and other actions taken.

• Information that could identify your propensity to seek health care services in the future.

• Inferences derived from the above data.

We collect personal data (which may include consumer health data) from a few sources:

• You provide us this information directly when you use our services, sign up to receive information from us, fill out surveys, and when you interact with us directly online, including through our chat boxes.

• We collect some of this information automatically when you browse our website or interact with us online.

We collect and use consumer health data as reasonably necessary to provide you with the services you have requested. Providing requested services to you may include delivering the products or information you requested and making suggestions about what other services or information are appropriate for you, and/or personalization of certain product features. We also use consumer health data to improve our products and for other essential business operations, such as analyzing our performance, meeting legal obligations, securing our systems, and conducting research and development.

We may share each of the categories of consumer health data described above with your consent or as reasonably necessary to provide our products and services you request.

We may also share your information with service providers who operate on our behalf to help us provide you with products and services you have requested, to make product improvements, and to market and advertise our products and services to you.

As necessary for the purposes described above, we may share consumer health data with the following categories of third parties:

• Our Service Providers

• Parties to a Business Transaction, such as during a corporate merger

• Government Agencies and Law Enforcement

• Other third parties. In certain circumstances, it may be necessary to provide data to other third parties, for example, to comply with the law or to protect our rights or those of our customers.

• Social Media

State consumer health data privacy laws, including those in Washington, Nevada and Connecticut, provide certain rights with respect to consumer health data. These rights include your right to access your consumer health data and receive a list of all third parties and affiliates—including contact information—who receive your health data. You also have the right to request that we delete your consumer health data. You can withdraw consent relating to the collection and sharing of your data too, subject to certain exceptions.

You can request to exercise such rights using the information described in the “Contact Us” section below.

If your request to exercise a right under the state consumer health data privacy laws is denied, you may appeal that decision by emailing us at privacy@breastcancer.org or contacting us using the contact information below.

If your appeal is unsuccessful, and you are a resident of Washington state, you can raise a concern or lodge a complaint with the Washington State Attorney General at www.atg.wa.gov/file-complaint.

If you have any questions about this Policy, please contact Breastcancer.org directly at Privacy@breastcancer.org

Or by U.S. mail at

Breastcancer.org

Attn: Legal – Privacy Notice Inquiry

40 East Montgomery Ave, 4th Floor

Ardmore, PA 19003