Legal
Privacy Policy
Last updated: August 2026
This page is a placeholder. This document must be drafted and reviewed by qualified counsel before this site is made public. It should address, at minimum, the categories listed below.
Required sections
- Categories of personal data collected
- Purposes for which each category is processed
- Recipients and categories of recipients, including processors
- Retention periods for each category
- GDPR and UK GDPR data-subject rights and the lawful basis for each processing activity
- Virginia Consumer Data Protection Act rights, and equivalent rights under other state privacy laws
- Washington My Health My Data Act treatment of consumer health data
- International transfers and the safeguards relied upon
- A named data-subject contact and the process for submitting requests