Effective: October 2, 2026
Consumer Health Data Notice
For residents of Washington, Nevada and Connecticut
This notice explains how Halftime Health LLC ("Halftime", "we") collects, uses and shares consumer health data. It adds to our Privacy Policy. "Consumer health data" means personal information that identifies, or can reasonably be linked to, your past, present or future physical or mental health. The fact that you bought a blood test is consumer health data.
Halftime handles lab results as a business associate of Arora Health, under HIPAA. Your state's law exempts that protected health information. We still ask for your consent at checkout, and we give you the rights below.
What we collect, and where it comes from
| Category | Examples | Source |
|---|---|---|
| Identity and contact | Name, email, phone number, date of birth, sex, address, state | You |
| Purchase and order | The test you bought, when, and your order and kit status | You, and our kit partner |
| Lab results | Marker values and the laboratory's findings | Clinical Reference Laboratory, Inc., through our kit partner |
| Visit records | If you book a clinician video visit, the records of that visit | Arora Health |
| Website and app use | Pages you view on our platform, if you allow analytics | Your device |
Why we use it
- To sell you a test, confirm your age and state, arrange the clinician's authorization and the lab test, ship and reship kits, and show you your results.
- To check your results against our urgent cutoff, so that our operations team is alerted if a result crosses it.
- To handle support and refunds.
- To keep records the law requires, and to prevent fraud.
- To send the quarterly email described in our Privacy Policy, until you unsubscribe. We use only your name, your email address and the fact that you bought a test. We never use your results for it.
Who receives it
| Recipient | What they receive | Why |
|---|---|---|
| The clinician in Arora Health's network who authorizes your order | Their name goes on your lab order. If the laboratory finds a result in its critical range, the laboratory alerts them. | Federal lab rules require an authorized person to order the test, and require the laboratory to report a critical result to that person |
| Arora Health, if you book a video visit | Your identity, your results and the visit records | To give the visit |
| Clinical Reference Laboratory, Inc., through our kit partner | Your identity and your order | To test your sample |
| Tasso, Inc. d/b/a Ramorra | Your name, date of birth, sex, email, phone number, address and order | To ship your kit, pass your order to the laboratory, and pass your results to us |
| Our service providers (AWS, Neon, our payment processor NetValve/Corepay, and Sentry for error monitoring) | What each needs to run our platform, send email, take payment and fix errors | To provide the service, under contract |
| PostHog, only if you allow analytics | The pages you view, other than the pages that show your results | To understand how people use our platform |
| AEP, if you pay through an employer program AEP administers | The order reference you give AEP, and the payment you make through AEP. We send AEP no test data and no results. | To collect your payment as Halftime's payment agent |
| The partner whose link you used | A sales line with the test name and the partner's code, without your name, contact details or results | To pay the partner for the sale |
We do not sell consumer health data. We do not use geofences around health care facilities.
Your rights
You can ask us to:
- confirm whether we collect, share or sell your consumer health data, and give you access to it;
- give you a list of the third parties that received it, with their contact details;
- stop collecting it, and withdraw your consent. Withdrawing your consent stops the optional uses, such as the quarterly email. It never blocks the results you paid for;
- delete it (we may need to keep some records by law, such as lab results); and
- (Connecticut) correct it, and give you a copy you can take elsewhere.
Email privacy@halftime.health. We confirm your identity through your account email. We respond within 45 days. If we need more time, we tell you why, and we may take up to 45 more days.
Appeal. If we refuse your request, reply to our answer with the word "Appeal". We answer an appeal within 45 days. If we deny the appeal, you can contact your state Attorney General.
We will not treat you differently for using these rights.
Contact
Halftime Health LLC · Attention: Privacy Officer · 600 W. 6th Street, Suite 400, Fort Worth, TX 76102 · privacy@halftime.health