Washington Consumer Health Data Privacy Notice

Last Updated: July 2026

This Washington Consumer Health Data Privacy Notice ("Health Data Notice") supplements our Privacy Notice and applies to "consumer health data" as defined under the Washington My Health My Data Act (MHMDA). Capitalized terms used in this Health Data Notice have the meaning assigned in our Privacy Notice.

1. Consumer Health Data We Collect

Our collection, use, disclosure, and processing of consumer health data about individuals will vary depending upon the circumstances, such as whether you ask Tranzact to obtain coverage options from insurance carriers on your behalf. This Health Data Notice is intended to describe our overall privacy and data protection practices concerning consumer health data. The categories of consumer health data we may collect include:

  • Health conditions, diseases, treatments, or diagnoses

  • Use or purchase of prescribed medication, and/or

  • Data that identifies a consumer seeking health care services

2. Sources of Consumer Health Data

We collect consumer health data directly from you, the consumer. Please see the "Personal Information Collected" section of our Privacy Notice for further information about how we collect personal data. 

3. Our Collection and Use of Consumer Health Data

We collect and may use consumer health data for the following purposes:

  • Providing the Services and support: including to provide the Services, operate our Websites, applications and online services; to communicate with you about your access to and use of the Services; to respond to your inquiries; to provide troubleshooting, fulfill your orders and requests, process your payments and provide technical support; and for other customer service and support purposes.

  • Securing and protecting our business: including to protect and secure our business operations, assets, Services, network and information and technology resources; to investigate, prevent, detect and take action against fraud, unauthorized access, situations involving potential threats to the rights or safety of any person or third party, or other unauthorized activities or misconduct.

  • Defending our legal rights: including to manage and respond to actual and potential legal disputes and claims, and to otherwise establish, defend or protect our rights or interests, including in the context of anticipated or actual litigation with third parties.

  • Auditing, reporting, corporate governance, and internal operations: including relating to financial, tax and accounting audits; audits and assessments of our operations, privacy, security and financial controls, risk, and compliance with legal obligations; our general business, accounting, record keeping and legal functions; and related to any actual or contemplated merger, acquisition, asset sale or transfer, financing, bankruptcy or restructuring of all or part of our business.

  • Complying with legal obligations: including to comply with the law, our legal obligations and legal process, such warrants, subpoenas, court orders, and regulatory or law enforcement requests.

4. Our Sharing and/or Disclosure of Consumer Health Data

We disclose the following categories of consumer health data:

  • Health conditions, diseases, treatments, or diagnoses

  • Use or purchase of prescribed medication

  • Data that identifies a consumer seeking health care services

As necessary for the purposes described in Section 3 above, we disclose consumer health data to the following categories of recipients:

  • Our clients, i.e., insurance carriers, so that they can provide coverage options based on the information you provide

  • Service providers that help us to provide the Services and to operate our business, including data analytics providers

  • Our affiliates TZ Insurance Solutions LLC, TruBridge, Inc., Anhelo Insurance Solutions LLC, and VTH Solutions LLC d/b/a/ Cignium Technologies

In addition, we may disclose consumer health data with law enforcement agencies, regulators, and other third parties to protect our legal interests or when required by law.

5. How to Exercise Your Rights

If you are a resident of Washington, you have the right to access, delete, and withdraw consent to use your consumer health data, subject to certain exceptions. You can request to exercise these rights by submitting a request through this link or emailing us at privacy@tranzact.net.

If your request to exercise a consumer health data right under the MHMDA is denied, you may appeal that decision by following the instructions provided with the decision or emailing our privacy support team at privacy@tranzact.net with the subject line “MHMDA Appeal.”  If your appeal is unsuccessful, you can raise a concern or lodge a complaint with the Washington State Attorney General at www.atg.wa.gov/file-complaint.

6. Changes to this Notice

We reserve the right to update and/or make changes to this Health Data Notice at any time. We will provide appropriate notification of any such changes consistent with applicable law.