Privacy Policy

VeriSureHealth is powered by Solution Diagnostics, Inc. ("SDX," "VeriSureHealth," "we," "us," "our"), and offers VeriSureDX (at-home sample collection with CLIA-certified laboratory testing), VeriSureNOW (at-home rapid testing), and VeriSureCare (a membership offering telemedicine, VeriSureDX testing, and catastrophic insurance access). This Privacy Policy describes how we collect, use, and disclose personal information when you visit or use our online store at verisurehealth.com (the "Site"), which is built on and powered by Shopify. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

By using or accessing the Site, you acknowledge that you have read this Privacy Policy and understand how we collect, use, and disclose your information as described here.

This Site is designed to be "health-blind." Checkout collects only what's needed to fulfill your order — your name, address, email, phone number, and payment details. We do not collect health information, symptoms, medical history, or your reason for testing anywhere on this Site.

If you complete a purchase, you'll be directed to a separate, secure intake system to provide your health questionnaire, telehealth consent, and the other information a licensed physician needs to review and authorize your test. That information — along with your test results and the records created by our contracted physicians — is Protected Health Information ("PHI") under the Health Insurance Portability and Accountability Act ("HIPAA") and is governed by our HIPAA Notice of Privacy Practices, not this Privacy Policy. You can read our Notice of Privacy Practices at [link].

This distinction matters throughout this Policy: nothing described below about marketing, advertising, analytics, or the sale or sharing of personal information applies to your health information, because your health information never passes through this Site.

If you purchase a Genetic Test (a test that analyzes your DNA, RNA, or other genetic material), a growing number of states — including Alaska, Arizona, California, Florida, Illinois, Montana, Nevada, South Dakota, Utah, and Wyoming — have their own genetic privacy laws that require us to publicly disclose our genetic data practices, separate from the specific consent you sign before testing. This section satisfies that disclosure requirement; see our Genetic Testing & Genetic Material Consent for the consent itself.

•     What we collect: your genetic data (the results of analyzing your sample) and, separately, your physical biological sample, which is processed by our contracted, CLIA-certified laboratory.

•     How we use it: solely to perform the test you ordered and deliver your results through your reviewing physician. We do not use your genetic data to profile you or to make decisions about you outside of the testing service itself.

•     Who has access: your reviewing physician, authorized laboratory personnel, and VeriSureHealth staff on a minimum-necessary basis — the same access model described in Section 2.

•     Disclosure: we do not sell your genetic data, and we do not disclose it to employers, insurers, or other third parties without your separate, explicit authorization. We do not use your genetic data for marketing unless you separately opt in, as described in your Genetic Testing & Genetic Material Consent.

•     Your sample: you choose whether your physical sample is destroyed after testing or retained for a defined period, and you may request its destruction or return at any time.

•     Your rights: depending on your state of residence, you may have the right to access, delete, or request destruction of your genetic data and sample, and to revoke your consent for future use. See your Genetic Testing & Genetic Material Consent for the full list of rights and how to exercise them.

This Section 3 is the publicly available genetic data notice required by these state laws; it works alongside, and does not replace, the specific consent you sign before any Genetic Test and the protections described in Section 2 for information handled under HIPAA.

We may collect or process the following categories of personal information through the Site, depending on how you interact with it, where you live, and as permitted or required by applicable law:

•     Contact details, including your name, billing address, shipping address, phone number, and email address.

•     Financial information, including payment card information, transaction details, form of payment, and payment confirmation, handled through our payment processor.

•     Account information, including your username, password, security questions, preferences, and settings.

•     Order information, including the products you view, add to your cart, or purchase, and your past orders, returns, or exchanges. Products are listed on the Site under neutral names (for example, "VeriSureDX Panel 4") that do not describe a specific health condition.

•     Communications with us, including customer support messages you send us.

•     Device and usage information, including information about your device, browser, or network connection, your IP address, and how you navigate the Site.

This Site is not designed to collect health information, medical history, symptoms, or genetic information, and we ask that you not include this kind of detail in any notes, comments, or customer support fields on the Site. If you do include health details in a message to us, we will route that message to a secure, HIPAA-covered channel rather than handling it as ordinary store correspondence.

•     Directly from you, including when you create an account, place an order, or contact us.

•     Automatically through the Site, including from your device when you browse or use the Site, and through cookies and similar technologies (see Section 9).

•     From our service providers, including Shopify and other vendors who help us operate the Site.

•     From our shipping and fulfillment partners, to coordinate delivery of your order.

Provide, Tailor, and Improve the Site

We use your personal information to process payments, fulfill and ship orders, manage your account, process returns and exchanges, and otherwise operate the store side of the Services.

Marketing and Advertising

If you opt in through our separate Marketing Communications Consent, we may send you marketing emails or text messages about VeriSureHealth products, promotions, and educational content. We do not use information about which specific test or panel you purchased, viewed, or added to your cart to show you targeted or interest-based advertisements, and we do not share that information with advertising networks or platforms (such as Meta or Google) for advertising purposes. See Section 9 for how this is enforced on the Site itself.

Security and Fraud Prevention

We use personal information to authenticate your account, provide a secure checkout experience, and detect or prevent fraudulent or unsafe activity. You're responsible for keeping your account credentials confidential.

Communicating With You

We use personal information to respond to customer support requests and maintain our relationship with you as a customer.

Legal Reasons

We use personal information to comply with applicable law, respond to valid legal process, and enforce our terms and policies.

•     With Shopify and other service providers who perform services on our behalf (payment processing, IT hosting, shipping and fulfillment, customer support tools), under contractual confidentiality and security obligations, and only to operate the Site.

•     We do not sell personal information collected through this Site.

•     We do not share personal information collected through this Site for cross-context behavioral advertising or targeted advertising, as those terms are defined under applicable state privacy law.

•     With business or marketing partners only where you have separately opted in, and never using information about a specific test or health product you purchased.

•     In connection with a business transaction such as a merger, financing, or sale of assets.

•     To comply with legal obligations, respond to subpoenas or similar legal process, enforce our policies, or protect the rights, property, or safety of VeriSureHealth, our users, or others.

The Site is hosted on Shopify's platform, and order and account information you submit through the Site is transmitted to and processed by Shopify in order to provide and improve the Site for you. Shopify does not receive the health information described in Section 2, because that information is never entered into the Site. To learn more about how Shopify processes personal information, see the Shopify Consumer Privacy Policy, and depending on where you live, you may be able to exercise certain rights directly through Shopify's Privacy Portal.

We use cookies and similar technologies on general pages of the Site (for example, the homepage and informational pages) for analytics and to support the store's core functionality.

We do not place advertising or analytics pixels — including Meta Pixel, Google Ads remarketing tags, or TikTok Pixel — on any page of the Site that names or describes a specific health test, panel, or condition, and we do not use a visitor's viewing of a specific test or panel page for advertising or audience-building purposes.

You can control non-essential cookies through [cookie preference tool / your browser settings]. Declining non-essential cookies will not affect your ability to browse or purchase from the Site.

The Site may link to websites or platforms operated by third parties. We are not responsible for the privacy or security practices of those third parties, and we encourage you to review their policies before providing them with information.

This Site is not intended for use by children under 18, and we do not knowingly collect personal information directly from children through the Site. If you are placing an order on behalf of a minor, the order, checkout, and any required consent forms must be completed by the minor's parent or legal guardian, consistent with our Medical Consent. If you are a parent or guardian and believe your child has provided us with personal information directly, contact us using the details in Section 15 to request its deletion. As of the effective date of this Policy, we do not have actual knowledge that we "sell" or "share" (as those terms are defined under applicable law) the personal information of individuals under 16 years of age.

We use administrative, technical, and physical safeguards designed to protect the personal information collected through the Site, but no security measures are perfect, and we cannot guarantee absolute security. We recommend against sending sensitive information to us through unsecured channels such as ordinary email or the Site's contact forms.

How long we retain order and account information depends on factors such as whether we need it to maintain your account, provide the Services, comply with legal or tax obligations, or resolve disputes. Retention of your health information and lab records is governed separately by our HIPAA Notice of Privacy Practices and applicable CLIA recordkeeping requirements, not by this Policy.

Some state privacy laws (such as California's CPRA) treat certain kinds of information as "sensitive personal information" requiring extra protection. Because the products sold on this Site are health tests, we treat order information that could reveal a specific test purchased as sensitive, and we limit our use of it to fulfilling your order, providing customer support, and the other purposes described in Section 6 — we do not use it for profiling or advertising, and you have the right described below to further limit its use where applicable law provides that right.

Depending on where you live, you may have some or all of the following rights regarding personal information we hold about you. These rights are not absolute and may be subject to exceptions under applicable law.

•     Right to Know / Access — request access to the personal information we hold about you.

•     Right to Delete — request that we delete personal information we maintain about you.

•     Right to Correct — request that we correct inaccurate personal information.

•     Right of Portability — request a copy of your personal information in a portable format.

•     Right to Opt Out of Sale or Sharing / Targeted Advertising — as noted above, we do not currently sell personal information or share it for cross-context behavioral advertising, but you may still submit a request and we will honor applicable opt-out preference signals (such as Global Privacy Control) where required by law.

•     Right to Limit Use of Sensitive Personal Information — request that we limit our use of sensitive personal information to what is necessary to provide the Services.

•     Managing Communication Preferences — unsubscribe from marketing emails at any time using the link in those emails; you'll continue to receive non-promotional messages related to your account or orders.

You may exercise these rights by contacting us using the details in Section 15. We will not discriminate against you for exercising any of these rights. We may need to verify your identity before processing a request, and you may designate an authorized agent to act on your behalf, subject to proof of authorization. Requests relating specifically to your health information should be directed as described in our HIPAA Notice of Privacy Practices, which has its own access, correction, and accounting-of-disclosures process required under HIPAA.

If you have concerns about how we handle personal information collected through this Site, contact us at support@solutiondx.com. Depending on where you live, you may also have the right to lodge a complaint with your state attorney general or local data protection authority. Complaints specifically about the handling of your health information (PHI) may also be directed to the U.S. Department of Health and Human Services, Office for Civil Rights, as described in our HIPAA Notice of Privacy Practices.

Questions about this Privacy Policy, or requests to exercise the rights described above, can be sent to support@solutiondx.com. For questions specific to your health information or medical records, please refer to the contact information in our HIPAA Notice of Privacy Practices.

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal or operational reasons. We will post the revised Policy on the Site and update the "Last updated" date above.

Effective Date: 1 Sept 2026       Last Updated: 1 Sept 2026