Consumer Health Data Privacy - Pixel Point ERP Platform

Consumer Health Data Privacy Disclosure

Protecting Your Sensitive Health Information

Effective Date: December 20, 2025

Covered Applications

This policy applies to all applications powered by the Pixel Point ERP Platform, including:

• Hula Market (Consumer Marketplace)
• Pixel Point POS (Merchant Point-of-Sale Application)
• Pixel Point Terminal (Store Checkout Application)
• Other current and future Pixel Point-powered applications

Important Disclosure:

This policy covers health-related data collected through applications powered by the Pixel Point ERP Platform, including health and wellness products, services, and features. If you do not use health-related features, this disclosure may not fully apply to you.

The Pixel Point ERP Platform is committed to safeguarding your health and wellness data with the highest standards of privacy and security. Health information is sensitive and requires special legal protections. This disclosure explains how we handle consumer health data across all platform applications under applicable state and federal laws.

1. What is Consumer Health Data?

Consumer health data includes any information about your health, health conditions, treatments, medical devices, health insurance, or wellness activities collected through Pixel Point ERP Platform applications:

Information from health and wellness products you purchase (trackers, monitors, supplements)
Health categories or tags you select when browsing products
Reviews and ratings for health products mentioning health conditions
Fitness, nutrition, or wellness tracking data shared through integrated apps
Prescription or medical device information provided for compatibility checking
Health insurance information (if applicable for purchasing or discounts)
Pregnancy-related product purchases or searches
Mental health, sexual health, or sensitive wellness categories

NOT Included in Health Data:

General product searches (e.g., "running shoes", "yoga mat") are not considered health data unless directly linked to medical conditions.

2. How We Collect Consumer Health Data

A. Direct Collection

You provide health information when purchasing health products
You select health categories or filters to personalize your shopping
You write reviews mentioning health conditions or treatments
You voluntarily disclose health information in product Q&A or messages

B. Inferred Collection

We may infer health conditions based on product categories you browse
Patterns in your purchase history may suggest health interests
Search queries containing health terms are flagged as potential health data

3. Restrictions on Sharing Health Data

The platform has strict limitations on sharing consumer health data:

We DO NOT sell your health data to third parties
We DO NOT share health data with advertisers for targeted ads
We DO NOT use health data for discriminatory pricing or redlining
We DO NOT disclose health data to data brokers or aggregators

A. Limited Sharing Allowed

We may share health data only in these limited circumstances:

Service Providers: Third parties who help us operate (cloud hosting, payment processing) under strict confidentiality agreements
Legal Requirements: Law enforcement, court orders, or regulatory bodies as required by law
Merged Entity: In case of acquisition, health data transfer will be disclosed with opt-out rights
Your Explicit Consent: With your clear, written permission for specific purposes

4. How We Protect Your Health Data

We implement industry-leading security measures to protect health data:

AES-256 encryption for data at rest (stored)
TLS 1.3 encryption for data in transit (transmitted)
Segregated databases: Health data stored separately from general account data
Access controls: Only authorized employees can access health data
Multi-factor authentication (MFA) required for all health data access
Regular security audits and penetration testing
Breach notification: We'll notify you within 24 hours of discovering unauthorized access
Employee training: Staff undergo quarterly privacy and security training

5. Your Rights Regarding Health Data

A. Right to Access

You have the right to request a copy of all health data we hold about you, including how it's been used and shared.

B. Right to Deletion

You can request deletion of your health data at any time. We'll delete it within 30 days except where required by law to retain it for compliance or legal purposes.

C. Right to Opt-Out

You can opt-out of having health data used for marketing, personalization, or analytics. You'll still be able to purchase health products without health profiling.

D. Right to Know Sharing

You have the right to know if and with whom we've shared your health data. Request this information and we'll provide details within 30 days.

6. How Long We Keep Health Data

Active Account: Health data retained while your account is active
After Deletion Request: Deleted within 30 days
After Account Termination: Deleted within 90 days unless legally required to retain
Backup Systems: May retain copies in secure backups for up to 1 year for disaster recovery
Aggregated Data: We may retain anonymized health data indefinitely for research

7. Health Data and Marketing Restrictions

Under consumer health data protection laws, we have strict limitations on using health data for marketing:

No Health-Based Targeting: We cannot target ads based on specific health conditions
No Health Profiling: Cannot create detailed health profiles for marketing purposes
Generic Product Ads Only: If we advertise health products, they're based on product category, not condition
Opt-In for Communications: Health product emails require explicit opt-in from you

Health-Related Emails

You can unsubscribe from all health product emails at any time. Click "Unsubscribe" at the bottom of health-related emails or contact privacy@hulamarket.co.ke.

8. Special Protections for Minors

The platform does not knowingly collect health data from children under 13. For children ages 13-17, we:

Require verifiable parental consent before collecting health data
Never sell or share health data of minors
Apply heightened security protections
Allow parents to request access or deletion of child's health data

9. California Consumer Health Privacy Act (CHPA)

If you are a California resident, you have additional rights under the California Consumer Health Privacy Act (CHPA):

Right to Know: Request what health data we collect and how it's used
Right to Delete: Request deletion of your health data
Right to Correct: Request correction of inaccurate health data
Right to Opt-Out: Opt-out of selling/sharing of health data (we don't do this anyway)
Right to Appeal: Appeal our decision on your health data request
Contact California Attorney General: If you believe your rights are violated

10. Submit a Health Data Request

To exercise your rights regarding health data:

Email us with the type of request:

Email: privacy@hulamarket.co.ke

Subject: Health Data Request [Access/Delete/Opt-Out/Correction]

Include: Your full name, account email, and specific request details

We will verify your identity and respond within 30 days of receipt. All health data requests are confidential and do not affect your account access.