Consumer Health Data Privacy Policy


Last updated: 18.09.2026


This policy applies to consumers in the United States and describes how Dtablet AS handles consumer health data. It is provided separately from our general Privacy Policy as required by the Washington My Health My Data Act and similar state laws.

 

Categories of consumer health data we collect, and the purpose of collection

Category

Purpose

The fact that you sought or obtained a determination of medical necessity in connection with a purchase

To process a purchase made using a pre-tax health account

The fact that you paid using a Health Savings Account or Flexible Spending Account

To process and settle payment, and to process refunds to the correct account

Your purchase of a medication management device, and associated order details

To fulfil your order, provide support, and meet accounting obligations

Information you voluntarily provide to us about your use of the product

To respond to your support enquiry

 

We do not collect biometric data, precise location data, or diagnostic or treatment records.

 

Categories of sources

  • Directly from you, when you place an order or contact us.

  • From Truemed, our health account payment provider, when you choose that payment method.

 

Categories of consumer health data that is shared

  • The fact of a health account payment and the associated order details are shared with Truemed and with our payment processor in order to complete and settle the transaction.

  • Order details are shared with our e-commerce platform provider, which hosts our store and order records.

  • Order details may be shared with our shipping partners to deliver your order.

We do not share consumer health data with advertising or analytics providers. Purchases made through a health account are excluded from the data we send to advertising and analytics services.

We do not sell consumer health data. We would not do so without first obtaining your separate written authorization as required by law.

 

Categories of third parties and specific affiliates with whom we share consumer health data

Specific affiliates: Dtablet AS has no parent company, subsidiaries or affiliates. No affiliate receives consumer health data.

Specific third parties:

  • Truemed, Inc. — health account payment and eligibility determination

  • Shopify Inc. — e-commerce platform and order records

  • Shopify Payments. — payment processing and transaction information

 

How we use consent

We collect consumer health data only with your consent or as necessary to provide the product or service you have requested.

Where we share consumer health data, we obtain consent that is separate and distinct from the consent to collect it. Consent is requested at the point of collection and is not bundled into acceptance of our terms.

You may withdraw your consent at any time by emailing hello@dtablet.com. Withdrawal does not affect processing carried out before you withdrew.

 

Your rights

You have the right to:

  • confirm whether we collect, share or sell your consumer health data;

  • access your consumer health data, including a list of all third parties and affiliates with whom we have shared or sold it;

  • withdraw your consent to collection and to sharing;

  • have your consumer health data deleted, including by our affiliates and processors.

 

How to exercise your rights

Email hello@dtablet.com with the subject line "Consumer Health Data Request".

You do not need to create an account to make a request. If you already have an account, we may ask you to sign in so we can verify your identity. Otherwise we will ask you to confirm information associated with your order.

We will respond within 45 days. We may extend this by a further 45 days where reasonably necessary, and will tell you if we do.

If we decline your request, you may appeal by replying to our decision. We will respond to an appeal within 45 days. If we deny your appeal, you may contact the Washington State Attorney General at atg.wa.gov/file-complaint.

 

Geofencing

We do not use geofencing around any health care facility.

 

Contact

Dtablet AS Krambugata 2, 7011 Trondheim, Norway hello@dtablet.com