Consumer Health Data Policy
Washington and Nevada residents only
Camurus Inc (“Camurus,” “we,” “our,” or “us”) is a United States-based affiliate of Camurus AB, a Swedish science-led pharmaceutical company. Pursuant to the Washington My Health My Data Act and the Nevada Consumer Health Data Privacy Law (together, the “Health Privacy Laws”), we are providing the following details regarding the categories of Consumer Health Data that we collect, use, and share about Washington and Nevada consumers. This US Consumer Health Data Privacy Notice for Washington and Nevada Residents (the “Notice”) supplements our US Privacy Notice.
This Notice applies to all Camurus operations as well as websites and digital services ("Services") that link to or post it.
Scope
Health information for purposes of this Notice has the definition given in Washington or Nevada law, including information that identifies or is reasonably capable of being associated or linked, directly or indirectly, with a particular consumer and that identifies the consumer’s past, present, or future physical or mental health status. This Notice applies only to residents of Washington and Nevada and individuals whose information is processed in Washington or Nevada.
This Notice does not apply to the personal information that we collect and process about Camurus workforce members, including job applicants; active and inactive Camurus employees; former employees; retirees; dependents; beneficiaries; employees of our third-party vendors and partners, such as contractors on assignment at Camurus; and other individuals about whom Camurus collects personal information for HR-related purposes. It does not apply to health information that is used to engage in public or peer-reviewed scientific, historical, or statistical research that adheres to all other applicable ethics and privacy laws.
In certain circumstances, we may collect or use your information through our Services while acting as a “business associate” under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), and your information may constitute “Protected Health Information.” This Notice does not apply to Protected Health Information or any health information processed in circumstances where Camurus is acting as a business associate under HIPAA.
Categories of consumer health data we collect
The categories of health information we collect will depend on how you interact with our Services and the information you choose to provide. We may collect:
- Health conditions, treatments, diseases, or diagnosis
- Social, psychological, behavioral, and medical interventions
- Health-related surgeries or procedures
- Use or purchase of prescribed medication
- Bodily functions, vital signs, symptoms, or measurements of other types of consumer health data
- Diagnoses or diagnostic testing, treatment, or medication
- Reproductive or sexual health information
- Biometric data
- Genetic data
- Data that identifies a consumer seeking health care services
- Other information that may be used to infer or derive data related to the above or other health information.
Purposes for collecting consumer health data and how we use it
We collect, use, and disclose personal data (which may include health information) for the purposes of supporting research, manufacturing of and development of our products and services, and/or to provide our customers with the products or services they have contracted for.
As such, we may obtain and process Consumer Health Data for various purposes including:
- Providing our products and services, including performing customized services, and/or sending customized products as requested;
- Responding to customer service communications, questions, and/or requests for additional information;
- Providing support documentation about our products or services;
- Supporting security, including preventing, detecting, and investigating threats and protecting against malicious, fraudulent or other illegal activity;
- Complying with legal and regulatory requirements, such as audits, investigations, and data governance; and
- Advancing research and development, through both internal and collaborative research into the design and development of new products, services, and programs.
Sources of health information
We may collect personal data (which may include health information) from various sources, including:
- From healthcare providers, healthcare facilities, and health insurance providers;
- From publicly available sources and from commercial sources, including third parties who aggregate and sell Consumer Health Data or materials and derived information;
- From our customers in connection with the services that we perform at their request and per their instructions;
- From third parties in connection with the services and research which they perform at our request;
- From third parties in accordance with recognized Medical Waste disposal and research usage standards; and
- From website visitors utilizing cookies and similar technologies on our websites and applications.
Third parties and affiliates with whom we share consumer health data
We share personal data (which may include health information) between our affiliates, such as Camurus AB, and related companies worldwide to support our ability to provide our products and services and operate our businesses.
We may also share with the following third parties:
- Third-party marketing and advertising partners;
- Other third parties with your consent or at your direction;
- Other third parties to protect our rights, defend or pursue a legal claim, or investigate or prosecute illegal activities;
- Government or judicial authorities to comply with a subpoena, court order, governmental inquiry, legal process, legal obligation, or to protect the rights, property, or safety of other users or the public;
- Successor entity or purchaser upon a merger, consolidation, or other corporate reorganization in which we participate, a sale of all or a portion of our assets, or pursuant to a financing arrangement. In this situation, we will seek assurances that the successor entity or purchaser will process Consumer Health Data collected by us in accordance with this notice.
Individual rights
You have the following rights with respect to your health information:
- The right to confirm whether we are collecting, selling or sharing your health information
- The right to withdraw consent for us to collect or share your health information
- The right to request that we delete your health information
- The right to correct your health information
To exercise these rights, please contact us at [email protected]. We may require additional information to authenticate that you made the request(s). If we are unable to authenticate the request(s) using commercially reasonable efforts and asking for additional information, we will not be able to comply with the request.
We will respond to such requests within 45 days from when we receive your request. In some circumstances, we may need additional time to process your request. If we expect your request is going to take us longer than normal to fulfill, we will let you know.
If your request is denied, you may appeal that decision as specified in our letter or denial. We will process and respond to your appeal within the time permitted by law.
Changes to this notice
We may update this Notice from time to time. When we do update it, for your convenience, we will make the updated statement available on this page. We will always handle your health information in accordance with this Notice in effect at the time it was collected unless we provide you with the new notice and/or obtain your consent or authorization, as appropriate.
Effective Date: March 31, 2025