Privacy Policy

Scope

This policy describes how Continuum handles information on this website and in its direct-to-consumer testing service. The HIPAA Notice of Privacy Practices separately addresses protected health information handled by the clinical provider.

Information you provide

Depending on your stage in the service, information may include account and contact details, questionnaire answers, consent records, order details, test results, and communications. The initial eligibility screen precedes account creation; avoiding an account does not by itself make health answers anonymous.

How information is used

Purposes include evaluating test eligibility, providing clinical services, processing orders, delivering results, maintaining account security, and meeting applicable obligations. Information used for clinical care is distinguished from information used for marketing.

Service providers and disclosures

Continuum uses service providers for hosting, identity verification, payment processing, fulfillment, and communications where needed to operate the service. Health information shared with business associates is handled under the appropriate arrangements. Accepting this privacy policy is not a substitute for a required HIPAA authorization.

Cookies and analytics

The website may use cookies, analytics, and similar technologies needed to operate the site and understand how it is used. Essential account and security functions are separate from optional analytics. See Your Privacy Choices for how to ask about optional tracking.

Retention and security

Account and clinical information are protected with appropriate safeguards. Retention periods distinguish temporary eligibility answers, incomplete drafts, submitted evaluations, completed orders, and clinical records, including backups. Leaving without purchasing does not necessarily require or permit deletion of a clinical record.

Your rights and requests

Depending on applicable law, you may have rights to access, correct, delete, or restrict certain information, and to make a complaint. How those rights apply differs for clinical records and other information. Account deletion is not automatic deletion of all health records. Use the contacts in this policy or the HIPAA Notice of Privacy Practices to make a request.