Washington State - Consumer Health Data Privacy Policy

Categories of Consumer Health Data We Collect

We collect the following categories of personal information linked or reasonably linkable to a consumer and that identifies the consumer's past, present, or future physical or mental health status as defined under Washington State law ("Consumer Health Data"), for the following purposes:

Categories of Consumer Health Data Purpose for Collection How data will be used
  • Individual health conditions or diagnosis;
  • Social, psychological, behavioral, and medical interventions;
  • Use or purchase of prescribed medication;
  • Bodily functions, vital signs, symptoms, or related measurements;
  • Diagnoses or diagnostic testing, treatment, or medication
  • Gender-affirming care information
Cake preparation   Enabling preparation of cakes that may suggest health information (such as a get well soon cake with an image of a cast for a broken leg or a cake congratulating new parents on the birth of their child) or indicate gender affirming care.
Biometric data, including imagery of the face and voice recordings Cake preparation; customer support. Enabling preparation of cakes showing photos of individual’s faces; customer support; responding to customer requests.
Data that identifies a consumer seeking “health care services” as defined under Washington State law, also referred to as “Identity Data;” Cake preparation Enabling preparation of cakes that may suggest health information (such as a get well soon cake with an image of a cast for a broken leg or a cake congratulating new parents on the birth of their child) or indicate gender affirming care.

Enabling preparation of cakes showing photos of individual’s faces; customer support; responding to customer requests.
Any information that we or our respective processor, processes to associate or identify you with data described above that is derived or extrapolated from non-health information (such as proxy, derivative, inferred, or emergent data by any means, including algorithms or machine learning), also referred to as “Inference Data.” Site Analytics See “How Your Information is Disclosed” section above

 

Sources of Consumer Health Data We Collect

We collect Consumer Health Data from various sources, which include: from you, from social media platforms (such as Facebook, Instagram, Pinterest, YouTube, and Twitter), from service providers, and from bakery partners.

Sharing of Consumer Health Data

Categories of Consumer Health Data We Share

We may share the following categories of Consumer Health Data with third parties and specific affiliates:

  • Any information that we or our respective processor, processes to associate or identify you with data described above that is derived or extrapolated from non-health information (such as proxy, derivative, inferred, or emergent data by any means, including algorithms or machine learning), also referred to as “Inference Data.”

Categories of Third Parties with Whom We Share

We may share Consumer Health Data with the following categories of third-party recipients: service providers, bakery partners, and social media platforms.

Specific Affiliates with Which We Share

DecoPac does not share Consumer Health Data with specific affiliates at this time.

My Health My Data Rights

Your Rights

Under the Washington State My Health My Data Act, Washington State residents and natural persons whose Consumer Health Data is collected in Washington may have the following rights, subject to verification, exceptions, and limitations:

Right to Confirm/Access/Know

- Up to twice annually, you have the right to (a) confirm whether we are collecting, sharing, or selling your Consumer Health Data, and (b) access such data, including a list of all third parties and affiliates with which we have shared or sold the consumer health data and an active email address or other online mechanism that you may use to contact these third parties.

Right to Delete

-You have the right to request deletion of the Consumer Health Data held by us and our affiliates, processors, contractors, and other third parties.

Right to Withdraw Your Consent/Opt-Out

- You have the right to withdraw any consent you have provided at any time regarding our collection and sharing of Consumer Health Data. The consequence of your withdrawing consent might be that we cannot perform certain services for you, such as location-based services, personalizing cakes, or making relevant certain types of advertising, or other services conditioned on your consent or choice not to opt-out.

Right to Non-Discrimination

- You have the right to not to receive discriminatory treatment as a result of your exercise of rights conferred by the My Health My Data Act.

How to Exercise Your Rights

You may exercise your rights under Washington State law as follows (please review our verification requirements section). If you have any questions or wish to appeal any refusal to take action in response to a rights request, contact us at privacy@decopac.com. We will respond to any request to appeal within the period required by law.

 

Cake preparation  Enabling preparation of cakes that may suggest health information (such as a get well soon cake with an image of a cast for a broken leg or a cake congratulating new parents on the birth of their child) or indicate gender affirming care.

Confirm, Access, Know, Delete
  • You may submit a Data Subject Request Form below.
  • You may call us at: 1-800-DECOPAC (1-800-332-6722). You may be directed to leave a voicemail where you will provide your email address, phone number, and address we have on file, along with your request.
  • You may send an email to privacy@decopac.com with your email address, phone number, and address we have on file, along with your request.
Withdraw Your Consent/Opt-Out
  • You may submit a Data Subject Request Form below.
  • You may call us at: 1-800-DECOPAC (1-800-332-6722). You may be directed to leave a voicemail where you will provide your email address, phone number, and address we have on file, along with your request.
  • You may send an email to privacy@decopac.com with your email address, phone number, and address we have on file, along with your request.
  • You may opt out or withdraw your consent to targeted advertising by submitting a Data Subject Request Form below and updating your Cookie Preference. In some cases, you may be able to opt-out by submitting requests to third party partners, including for the vendors listed below: