Consumer Health Data Privacy

Last Updated: September 8, 2026

Introduction

This Consumer Health Data Privacy Policy (this "CHD Policy") supplements the Nexlife Privacy Policy and applies to personal data that is defined as "consumer health data" ("CHD") by:

  • the Washington My Health My Data Act ("MHMDA");
  • the Nevada Consumer Health Data Privacy Law (SB 370);
  • the Connecticut Data Privacy Act ("CTDPA"), as amended; and
  • any other state law that establishes obligations specific to consumer health data.

Capitalized terms not defined here have the meaning given in the Nexlife Privacy Policy and the Nexlife Terms & Conditions.

This CHD Policy does not apply to protected health information ("PHI") that is governed by the Health Insurance Portability and Accountability Act of 1996 ("HIPAA"). Information you provide to Nexlife Medical Group P.C. and its Providers in the course of receiving healthcare services is generally PHI and is governed by the Notice of Privacy Practices, not by this CHD Policy.

Where this CHD Policy conflicts with the Nexlife Privacy Policy, this CHD Policy governs with respect to CHD, to the extent consistent with applicable law.

Categories of CHD We Collect

Depending on how you interact with Nexlife and on applicable law, we may collect the following categories of CHD, as those categories are broadly defined by the statutes named above:

Individual health conditions, treatments, diseases, or diagnoses — for example, information you provide when seeking weight management services through Nexlife.

Social, psychological, behavioral, and medical interventions — for example, information in the medical history you provide as part of an online health assessment.

Health-related surgeries or procedures — for example, prior bariatric or other surgery disclosed in your medical history.

Use or purchase of prescribed medication — for example, your current or prior use of GLP-1 or other medications, and medications dispensed through the Nexlife program.

Bodily functions, vital signs, symptoms, and measurements of health — for example, height, weight, body mass index, blood pressure, and laboratory values you report or that are reported to us.

Diagnoses, diagnostic testing, treatment, or medication — for example, laboratory results and treatment history collected during your care.

Reproductive or sexual health information — for example, information about pregnancy, plans to become pregnant, breastfeeding, or contraception, which is clinically relevant to GLP-1 treatment.

Gender-affirming care information — where such information is included in the medical history you provide.

Genetic data — where such information is included in the medical history you provide. 

Data that identifies a consumer seeking healthcare services — including information that identifies you as a person who has sought or obtained weight management services.

Precise location information that could reasonably indicate an attempt to receive healthcare services. 

Information used to infer or derive any of the above — including inferences we or our service providers generate from other data.

Sources of CHD

We collect CHD from the following sources:

  1. Directly from you — through health assessments, account registration, messages, uploaded photographs and documents, and customer support interactions.
  2. Automatically through your use of the Service — as described in the "Cookies and Similar Technologies" section of our Privacy Policy.
  3. From healthcare providers and pharmacies involved in your care, to the extent permitted by law.
  4. From service providers and other third parties that collect or provide data in connection with work performed on our behalf.
  5. From connected devices and applications you choose to link to your account.

Purposes for Collecting and Using CHD

We collect and use CHD as directed by you, with your consent, or as otherwise permitted by applicable law, for the following purposes:

To provide and manage the Service — including facilitating your access to Providers, coordinating prescription fulfillment, processing payment, administering your account, providing customer support, verifying your identity, and detecting and preventing fraud.

To analyze and improve the Service — including troubleshooting, testing, research, and developing new features or offerings.

For advertising and marketing 

For legal and compliance purposes — including complying with legal obligations, responding to valid legal process, and establishing, exercising, or defending legal claims.

To create aggregate or de-identified data — we may create data that does not identify you. We will not attempt to re-identify such data except as required by law.

Note for internal review: Washington's MHMDA and Nevada's law require consent before collecting or sharing CHD for purposes beyond providing a product or service the consumer requested, and require a separate, signed authorization meeting specific statutory content requirements before any sale of CHD. Disclosing CHD to advertising networks or advertising platforms may constitute a sale under these statutes.

The current Nexlife policy states that health data, sexual health data, and reproductive health data are used for marketing. If that is accurate, the consent and authorization mechanisms must be built before this policy is published. If it is not accurate, this purpose should be removed.

How and Why We Share CHD

Subject to applicable law and, where required, to your consent, we may share the categories of CHD described above with:

Healthcare providers and pharmacies — including Nexlife Medical Group P.C., its Providers, and the pharmacies that dispense your medication, in order to deliver the services you have requested.

Service providers — third parties that perform services on our behalf, including hosting, payment processing, customer support, analytics, and communications, and that are contractually restricted from using CHD for their own purposes.

Corporate affiliates — our subsidiaries and affiliated entities, where they share our systems or assist in providing the Service. 

Advertising and marketing partners 

Legal and regulatory authorities — where we believe in good faith that disclosure is necessary to comply with applicable law, to respond to valid legal process, or to protect the rights, property, or safety of our customers, ourselves, or others.

In connection with a business transaction — including any negotiation or completed merger, acquisition, financing, or sale of assets.

We do not sell CHD as "sale" is defined by the statutes named above without a signed authorization meeting the requirements of applicable law.

Your Rights

Depending on your state of residence, you may have the right to:

Confirm whether we are collecting, sharing, or selling your CHD.

Access your CHD, and to receive a list of all third parties and affiliates with whom we have shared or sold it, together with contact information for each.

Correct inaccuracies in your CHD.

Delete your CHD.

Withdraw consent to the collection or sharing of your CHD.

Appeal a decision denying any request.

How to exercise your rights

Submit a request through hq@nexlife.com, or contact us using the details below.

We may need to verify your identity before processing your request. We may ask you to confirm information we already hold, or, if we cannot verify you from that information, to provide additional identification, which we will use only for verification and fraud prevention.

We will never ask for your password, and no Nexlife employee will ask you to disclose it.

If we deny your request

We will explain the reason and tell you how to appeal. If your appeal is denied, you may contact your state attorney general:

Effect of deletion or withdrawal

Some CHD is necessary to provide the Service. If you request deletion of, or withdraw consent to, CHD we require, we may be unable to continue providing the Service or certain features of it. Deletion requests do not extend to information that is PHI held by Nexlife Medical Group P.C., which is governed by HIPAA and the Notice of Privacy Practices, or to records we are required by law to retain.

Changes to This CHD Policy

We may amend this CHD Policy to reflect changes in law, in our practices, or in the Service. The revised policy will be posted here with an updated date. Where a change is material, we will provide notice as required by applicable law. Your continued use of the Service after the effective date constitutes acknowledgment of the change.

Contact Us

Nexlife Inc.  300 Delaware Ave, Wilmington, DE 19801

Email: hq@nexlife.com | Care@nexlife.com Phone: (949) 818-8000