1. What this notice covers
“Consumer health data” means personal information that identifies your past, present or future physical or mental health status. This notice applies to that data when we collect it as a retailer.
It does not apply to protected health information held by our licensed pharmacy as a HIPAA covered entity, to information governed by the Washington Uniform Health Care Information Act, or to de-identified data. Pharmacy records are covered by our pharmacy Notice of Privacy Practices, available at either store.
2. Categories of consumer health data we collect
- Health-related purchase and interest data, such as over-the-counter medicines, supplements, first aid, mobility or wellness products you buy, save to a list, or set a stock alert for.
- Pharmacy interaction data you voluntarily submit through the Services, such as a prescription number, medication name, or refill request. Once received by our pharmacy this becomes HIPAA-protected information.
- Information you include in contact or support messages that describes a health condition or need.
- Precise location data is not collected. Approximate store selection is used only to route orders.
We do not collect biometric data, and we do not infer health conditions for advertising purposes.
3. Sources of this data
- Directly from you when you shop, create a list, submit a refill request, or contact us.
- Automatically from your use of the Services, limited to what is necessary to complete your request.
- From our pharmacy staff when you ask us to act on a request you submitted online.
4. Why we collect and use it
- To fulfill the order, refill request, stock alert or support request you asked for.
- To meet pharmacy, product safety, recall and record-keeping obligations.
- To prevent fraud and secure our systems.
- For no other purpose without your separate consent. We do not use consumer health data for targeted advertising or profiling.
6. How long we keep it
We keep consumer health data only as long as necessary for the purpose it was collected, and then delete it or de-identify it. Refill request records are retained for the period required by Washington pharmacy law; retail purchase records follow our standard retention schedule described in the Privacy Policy.
7. Your rights
You have the right to:
- Confirm whether we are collecting, sharing or selling your consumer health data, and access that data, including a list of all third parties and affiliates with whom we have shared it.
- Withdraw your consent to our collection and sharing of your consumer health data at any time.
- Have your consumer health data deleted, including from our backups and, where applicable, by directing our processors to delete it.
- Not be discriminated against or denied goods or services for exercising these rights.
To make a request, email privacy@oldmillcountrystore.com with the subject line “Consumer Health Data Request”, call (509) 248-1650, or write to 1504 S 36th Ave, Yakima, WA 98902. We respond within 45 days and may extend once by a further 45 days where permitted, with notice to you. We may need to verify your identity before acting.
If we deny your request you may appeal by replying to our decision. If the appeal is denied, you may submit a complaint to the Washington State Attorney General at atg.wa.gov/file-complaint.
8. Security and employee access
Consumer health data is encrypted in transit and at rest, restricted by row-level database policies, and accessible only to personnel whose role requires it. Administrative access is logged and reviewed.
9. Changes to this notice
We will post any changes here with a new effective date. Where a change materially expands how we use consumer health data, we will obtain your consent before applying it to data already collected.