Marquis Companies

Consumer Health Data Privacy Policy

Last Updated: July 15, 2026

 

1. What This Policy Is

This Consumer Health Data Privacy Policy supplements the Marquis Companies Privacy Policy and describes how Marquis Companies, LLC, and its affiliates and subsidiaries (collectively, “Marquis,” “We,” “Us,” or “Our”): marquiscompanies.com (Marquis); consonushealth.com, consonuspharmacy.com, and consonusrehab.com (Consonus); agerightcareathome.com, agerightcaremanagement.com, agerighttherapy.com, and agerightliving.com (AgeRight); and vitallifefoundation.org (Vital Life Foundation) collect, use, share, and protect "consumer health data" under specific state laws that go beyond general consumer privacy law.

Where any conflict exists between this Consumer Health Data Privacy Policy and the Marquis Companies Privacy Policy, this policy controls for consumer health data. Neither this policy nor the main Privacy Policy modifies the separate Notice of Privacy Practices governing Protected Health Information (PHI) under HIPAA.

2. What Is Consumer Health Data

Under Washington's My Health My Data Act and similar laws, "consumer health data" means Personal Information that is linked or reasonably linkable to a consumer and that identifies the consumer's past, present, or future physical or mental health status. Examples include:

  • Individual health conditions, diagnoses, diseases, or illnesses
  • Social, psychological, behavioral, or medical interventions
  • Surgeries or other health-related procedures
  • Use or purchase of prescribed medication
  • Bodily functions, vital signs, symptoms, or measurements
  • Attempts to obtain any of the above
  • Gender-affirming care information
  • Reproductive or sexual health information
  • Biometric data used to identify health conditions
  • Precise geolocation data that could indicate a visit to a health-related facility

Important: Consumer health data under these state laws is different from Protected Health Information (PHI) under HIPAA. Marquis handles PHI under its HIPAA obligations and the separate Notice of Privacy Practices. This policy addresses health-related information collected through our public-facing websites that may not be PHI, but that still qualifies as "consumer health data" under state law.

3. Consumer Health Data We Collect

Marquis collects consumer health data through our websites in limited circumstances:

  • Contact and inquiry forms: When you submit a form requesting information about healthcare services, the nature of your inquiry may reveal information about your health status or that of a family member.
  • Navigation data: When you visit pages on our websites dedicated to specific health conditions, services, or treatment programs, your IP address, combined with the page you visited, may constitute consumer health data under Washington and Nevada law. Marquis does not transmit personally identifying information to any advertising or analytical platform, including on health-related pages.

Marquis does not collect biometric data, precise geolocation, or diagnostic or clinical information of any kind through our websites in the normal course.

4. How We Use Consumer Health Data

Marquis uses consumer health data collected through our websites only for the following purposes:

  • To respond to your inquiry and provide the information or services you requested
  • To contact you or a family member who has requested information on your behalf
  • To improve our website content and understand how visitors use our service information (analytics, using consent-gated tools)
  • To comply with applicable law, legal process, or governmental requests
  • To prevent fraud, protect our security, or protect individuals' health or safety in emergencies

We do not use consumer health data for targeted advertising. We do not sell consumer health data. We do not share consumer health data with data brokers. We do not use consumer health data to make decisions about your eligibility for insurance, employment, housing, education, or credit.

5. How We Share Consumer Health Data

We share consumer health data only with:

  • Processors under written contract: Third-party vendors who process information on our behalf under contracts that specify processing instructions and limit the processor's permitted actions. These processors are not permitted to sell your consumer health data or use it for their own advertising purposes.
  • Affiliates: Other Marquis Companies entities that may need the information to respond to your inquiry or provide services you have requested.
  • Legal and safety disclosures: When required by law, court order, or governmental request; when necessary to protect Marquis's rights or property; or to protect the health or safety of any individual in an emergency.
  • Business transactions: In connection with a merger, acquisition, or sale of all or a portion of our assets, with appropriate notice to affected individuals.

We do not sell consumer health data. We do not share consumer health data with data brokers, advertisers, or advertising networks for their own use.

6. Your Consent

6.1 Consent to Collect

By voluntarily submitting an inquiry form or other information through one of our websites, you consent to our collection and use of the consumer health data you provide for the purposes described in Section 4. You may refuse to provide consumer health data, but we may be unable to respond to your inquiry without it.

6.2 Consent to Share with Advertising Platforms

Sharing of consumer health data with advertising platforms for advertising measurement occurs only with your prior, separate consent, obtained through our cookie consent banner. Specifically:

  • When you first visit our websites, you are presented with a cookie consent banner that allows you to accept or reject advertising cookies separately from other cookie categories.
  • Advertising cookies do not load on your device, and no consumer health data is transmitted for advertising purposes, until you provide consent through the banner.
  • Your consent is recorded by the Consent Management Platform (CMP) and may be exported upon request.
  • You may withdraw consent at any time by clicking the "Cookie Preferences" link in the website footer, after which advertising technologies will stop operating on your browser. Browsers transmitting a Global Privacy Control signal are treated as having opted out automatically.

This consent mechanism governs advertising and analytics cookies. Consent to collect consumer health data submitted through our forms is obtained separately, at the point of form submission, as described in Section 6.1.

6.3 Authorization for Sale

We do not sell consumer health data. Accordingly, we have not obtained, and do not request, the separate written authorization that applicable laws require for the sale of consumer health data. If our practices change, we will obtain a valid authorization containing all elements required by applicable law before selling any consumer health data.

7. Your Rights Regarding Consumer Health Data

Subject to applicable law and verification of your identity, you have the following rights with respect to your consumer health data:

  • Right to confirm and access: request confirmation that Marquis collects, shares, or sells your consumer health data and access to the categories collected, the third parties with whom it has been shared, and a list of affiliates with whom we have shared it.
  • Right to withdraw consent: withdraw consent for our collection or sharing of your consumer health data at any time. Withdrawal is prospective and does not affect data already collected.
  • Right to deletion: request that Marquis delete your consumer health data and that we instruct our processors to delete it. We may retain data necessary to comply with legal obligations or for the establishment, exercise, or defense of legal claims.
  • Right not to be subject to geofencing: Marquis does not use geofencing technologies to identify or collect data from individuals entering or near healthcare facilities.
  • Right not to have consumer health data sold: we do not sell consumer health data.
  • Right against discrimination: we will not deny goods or services, charge different prices, or provide a different quality of service to you because you exercised any of these rights.
  • Right to appeal: if we deny your request in whole or in part, you may appeal our decision by replying to our response or by contacting us using the information in Section 10.

7.1 Washington Residents — My Health My Data Act

Washington residents have all of the rights listed above with full legal force under the My Health My Data Act. In particular, you have a private right of action under the Washington Consumer Protection Act for violations of the MHMDA, in addition to enforcement by the Washington Attorney General. You may contact the Washington Attorney General's Office regarding any concerns:

  • Online: atg.wa.gov/file-complaint
  • Phone: 1-800-551-4636

Under the Washington My Health My Data Act, consent to the collection of consumer health data that is not necessary for the service you requested must be separate, distinct, and obtained before collection. Consent to collect consumer health data submitted through our forms is obtained at the point of form submission, as described in Section 6.1.

7.2 Nevada Residents — SB 370

If you are a Nevada resident, Nevada SB 370 (Chapter 603A) gives you the right to confirm whether Marquis has collected your consumer health data and to request deletion of your consumer health data. Nevada SB 370 also prohibits the sale of consumer health data without consent. Marquis does not sell consumer health data. You may contact the Nevada Attorney General's Office at ag.nv.gov.

7.3 Connecticut Residents

Connecticut residents have specific rights regarding consumer health data under Public Act No. 23-56 (amending the Connecticut Data Privacy Act). You may contact the Connecticut Attorney General's Office regarding any concerns at portal.ct.gov/ag.

7.4 Other States

Other states may enact similar consumer health data privacy laws. Marquis will honor rights under any then-applicable law. Check this page periodically for updates.

8. How to Exercise These Rights

To exercise your rights under this Consumer Health Data Privacy Policy:

  • Email: privacy@marquiscompanies.com
  • Phone: 971.206.5200
  • Mail: Marquis Companies I, Inc., 4560 SE International Way #100, Milwaukie, Oregon 97222, Attention: Privacy Officer

We will verify your identity before processing your request and will respond within 45 days, with a possible 45-day extension on notice. If we deny your request, you may appeal through the same channels and identify your message as an appeal. If your appeal is denied, Washington residents may contact the Washington Attorney General at atg.wa.gov.

8.1 Authorized Agents

You may use an authorized agent to submit a request on your behalf. We will require (a) written authorization signed by you, (b) verification of the agent's identity, and (c) verification of your identity.

9. Security and Retention

We apply the same security safeguards to consumer health data that we apply to Personal Information. Given the sensitivity of health-related information, we encourage you to contact us directly by telephone if you prefer not to submit health-related information through a web form.

We retain consumer health data collected through contact forms only as long as reasonably necessary to respond to your inquiry or comply with legal obligations. Analytics data about pages visited is retained per the applicable platform defaults and is subject to your consent choices.

10. Changes to This Policy

We may update this Policy from time to time. When we do, we will post the revised Policy on our websites. For material changes, we will provide additional notice. We will not collect, share, or sell consumer health data in ways materially different from those described in this Policy without obtaining any consent or authorization required by applicable law.

11. Contact Us

For questions about this Consumer Health Data Privacy Policy or to exercise your rights:

Marquis Companies I, Inc.

4560 SE International Way #100

Milwaukie, Oregon 97222

Email: privacy@marquiscompanies.com

Phone: 971.206.5200

For general privacy questions, see also the Marquis Companies Privacy Policy, available on our websites.