Consumer Health Data Privacy Policy

Business: Community Tech Solutions

Effective Date: January 01, 2024

This policy is provided in accordance with the Washington My Health My Data Act (MHMDA). It describes how Community Tech Solutions collects, uses, and shares "Consumer Health Data" during the course of providing IT services.

1. Categories of Consumer Health Data Collected

In the course of technical support, data migration, or device configuration, we may incidentally process the following:

• Biometric Identifiers: Data used for system authentication, such as fingerprint or facial recognition setup (e.g., Windows Hello, Apple FaceID).

• Health-Related Information: Files or applications stored on your devices that may contain information regarding physical or mental health conditions, diagnoses, or treatments.

• Location Data: Precise location data that could reveal a consumer’s attempt to acquire or receive health services.

2. Purpose of Collection and Use

We collect and process this data only as necessary to provide the services you have requested, including:

• Troubleshooting hardware and software.

• Performing data backups and migrations.

• Securing devices via biometric authentication. We do not use this data for marketing, profiling, or any purpose other than fulfilling our service agreement.

3. Sources of Collection

All data is collected directly from you or the devices you provide to us for service.

4. Sharing of Consumer Health Data

We do not sell your health data. We only share it with "Service Processors" (such as encrypted cloud backup providers) strictly to the extent necessary to complete your requested service. These processors are contractually required to maintain the same level of privacy protection.

5. Your Rights

Under Washington law, you have the right to:

• Confirm & Access: Verify if we are processing your health data and access a list of third parties with whom it has been shared.

• Withdraw Consent: Retract your authorization for us to process this data at any time.

• Request Deletion: Request that we delete your health data from our records and notify our processors to do the same.

6. How to Exercise Your Rights

To exercise your rights or file a request, please contact us at: Email: hr@ctechsolution.tech

Subject: MHMDA Privacy Request

We will respond to authenticated requests within 45 days.