What information do you collect?

We collect identifiers (name, email, phone, IP address), professional or business details and certifications, the city/state you provide plus approximate location derived from your IP, internet and network activity, commercial information about listings or inquiries, and limited inferences to improve search relevance. See "Categories of Information We Collect."

Do you collect protected health information (PHI)?

Not as a HIPAA covered entity. MobilePhlebotomy.app is not a healthcare provider and does not collect PHI for treatment purposes. Some information may qualify as consumer health data under state laws such as the Washington My Health My Data Act; see "Consumer Health Data."

Do you sell personal data?

We do not sell personal information for money. Because we use advertising and analytics technologies, certain activity may be considered "sharing" for cross-context behavioral advertising under California law. You can opt out, including via the Global Privacy Control (GPC).

How is my information shared?

Only with your consent, with trusted service providers under contracts limiting their use of the data, to comply with legal obligations, to protect the Services and prevent fraud, or in connection with a merger, acquisition, or sale of assets. See "How We Disclose Information."

What are my privacy rights?

Depending on your state, you may have the right to access, correct, delete, or port your data, opt out of the "sale" or "sharing" of personal information and targeted advertising, and limit use of sensitive personal information. We will not discriminate against you for exercising these rights.

Privacy Policy | MobilePhlebotomy.app

Introduction

MobilePhlebotomy.app, operated by Speedy Sticks, LLC ("we," "our," or "us"), respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, store, disclose, and protect information when you use our website, platform, forms, and related services (the "Services").

Because we operate nationally, this policy is written to address the privacy laws of California, Washington, Nevada, Virginia, Colorado, Connecticut, Texas, Oregon, Utah, and other states with comprehensive privacy or consumer-health-data laws. Where a state grants you specific rights, those rights are described below.

By using the Services, you agree to the practices described in this policy.

Categories of Information We Collect

In the past 12 months we have collected the following categories of personal information (using the categories defined by California law):

Identifiers — name, email address, phone number, IP address.
Professional or employment information — provider/business details, certifications, service offerings.
Geolocation data — city/state you provide, and approximate location derived from IP address. We do not knowingly collect precise GPS-level location.
Internet or network activity — browser type, device type, pages visited, referring URLs, interactions with the Services.
Commercial information — listings or services you submit or inquire about.
Inferences — limited inferences drawn from the above to improve search relevance and platform accuracy.

We collect this information from you directly (forms, profiles, inquiries), automatically through your device when you use the Services, and from analytics or hosting providers that support the Services.

How We Use Information

We use collected information to:

Operate, maintain, and improve the Services
Connect providers with patients and organizations seeking services
Respond to inquiries and support requests
Improve search relevance and platform accuracy
Monitor site performance, security, and prevent fraud
Communicate platform updates and respond to your requests
Comply with legal obligations

We retain personal information only as long as necessary for the purposes described above or as required by law. Our general retention criteria are: active account and profile data is retained while your account is active; inquiry and form submissions are retained for 24 months; and analytics data is retained for 26 months. We delete or de-identify information when it is no longer needed for these purposes or as required by law.

How We Disclose Information; "Sale" and "Sharing"

We disclose personal information only:

With your consent (for example, when a provider submits a public listing)
To trusted service providers that support the Services (analytics, hosting, payment processing), under contracts limiting their use of the data
To comply with legal obligations or valid legal process
To protect the security of the Services and prevent fraud
In connection with a merger, acquisition, or sale of assets

We do not sell your personal information for money. However, our use of certain advertising and analytics technologies may be considered "sharing" personal information for cross-context behavioral advertising under California law, even when no money is exchanged. We may "share" the following categories for these purposes: identifiers and internet or network activity. You can opt out of this "sharing" as described in "Your Privacy Rights" and "Cookies, Analytics & Opt-Out Preference Signals" below.

We do not sell or share the personal information of consumers we know to be under 16 years of age.

Cookies, Analytics & Opt-Out Preference Signals

We use cookies and similar technologies to understand user behavior, improve performance, and track aggregated usage statistics. You can control cookies through your browser settings.

We honor browser-based opt-out preference signals, including the Global Privacy Control (GPC), where required by law. When we detect a GPC signal, we treat it as a request to opt out of "sale" and "sharing" for that browser or device.

Consumer Health Data (Washington, Nevada & Related Laws)

Some information collected through the Services — for example, an inquiry to schedule a phlebotomy or specimen-collection appointment — may be considered consumer health data under the Washington My Health My Data Act, the Nevada consumer health data law, and similar laws.

We collect consumer health data only to facilitate the service you request and to operate the Services. We do not sell consumer health data, and we will not sell it without your separate, valid authorization. We do not use geofencing to identify or track consumers seeking health services.

If you are a Washington or Nevada resident, you have the right to access your consumer health data, withdraw consent to its collection or sharing, and request its deletion. To exercise these rights, contact us using the methods in "How to Exercise Your Rights."

Healthcare & HIPAA Notice

MobilePhlebotomy.app is not a healthcare provider and does not collect protected health information (PHI) for treatment purposes or as a HIPAA covered entity. Any health-related services are provided directly by independent third-party providers. Those providers and organizations are responsible for their own HIPAA compliance when communicating or exchanging patient data outside of our platform. This HIPAA notice is separate from, and does not limit, the consumer-health-data rights described above.

Your Privacy Rights

Depending on where you live, you may have some or all of the following rights regarding your personal information:

Access / Know — request the categories and specific pieces of personal information we have collected about you.
Correct — request correction of inaccurate personal information.
Delete — request deletion of your personal information.
Portability — request a copy of your data in a portable format.
Opt out — opt out of the "sale" or "sharing" of personal information and of targeted advertising and certain profiling.
Limit sensitive data — direct us to limit use of sensitive personal information (where applicable).
Non-discrimination — we will not discriminate against you for exercising any of these rights.

California (CCPA/CPRA): California residents have the rights above. You may also designate an authorized agent to make a request on your behalf. We will not require you to create an account to submit a request.

Virginia, Colorado, Connecticut, Texas, Oregon, Montana, Utah, and other states: Residents of these states have the rights granted by their respective laws. If we deny your request, residents of states that provide an appeal right (including Virginia, Colorado, and Connecticut) may appeal our decision by contacting us at info@speedysticks.com; we will respond to appeals within the timeframe required by your state's law.

How to Exercise Your Rights

You may submit a request by:

Email: support@getdraw.com
Our contact page

We will verify your identity before fulfilling a request, which may require confirming information we already hold. We will respond within the timeframe required by applicable law (generally 45 days, extendable where permitted). If you use an authorized agent, we may require proof of authorization.

Data Security

We implement reasonable administrative, technical, and organizational safeguards to protect personal information. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Children's Privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it.

Third-Party Links

Our website may contain links to third-party sites. We are not responsible for the privacy practices or content of those sites.

Policy Updates

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated revision date. Material changes will be communicated as required by law.

Frequently Asked Questions

Contact Us

For privacy-related questions or requests, please contact:

support@getdraw.com

MobilePhlebotomy.app

Privacy Policy