Effective Date: 03/30/2026

Scope of this Policy

If you reside in the State of Washington, this policy supplements QLaw’s Privacy Policy and applies to “Consumer Health Data” as defined by the Washington State My Health My Data Act (“Consumer Health Data”). Terms not defined in this policy have the meaning assigned to them in our Privacy Policy.

1. Why We Collect and Use Consumer Health Data

While we do not intentionally collect Consumer Health Data, we may come into possession of Consumer Health Data through your use of our Platform. QLaw may collect Consumer Health Data in connection with your use of our Platform for the services described in the “How We Manage Your Personal Data” section of our Privacy Policy. We may also use Consumer Health Data for other purposes where you provide us consent to do so or as otherwise permitted by law.

2. The Categories of Consumer Health Data That QLaw May Collect From You Include:

The categories of personal information, including any Consumer Health Data, QLaw collects is described in our Privacy Policy. What Consumer Health Data includes varies depending on your interactions with our Platform. Examples of Consumer Health Data may include information such as:

1. Information about health-related conditions, symptoms, diagnoses, or treatments that you provide to us through intake forms, surveys, forms, or other communication regarding community health.
2. Photographs, which may be considered biometric information under the MHMDA.
3. Information that could identify your attempt to seek health care services or information, including services that allow you to assess, measure, improve, or learn about your or another person’s health.
4. Other information that may be used to gather or obtain data related to the above or other health care information.

3. Sources of Consumer Health Data

The “Data We Collect” section of our Privacy Policy explains the sources of personal information that we collect, which may include Consumer Health Data that you choose to share through your use of our Platform.

4. Use of Consumer Health Data

We collect and process personal data from you only for lawful reasons, such as to perform Services you have requested or authorized, for our legitimate business interests or to fulfill our legal or contractual obligations. We may use Consumer Health Data for other purposes for which we give you choices and/or obtain your consent as required by law – for example, for advertising or marketing purposes.

1. Third-Parties who may receive Consumer Health Data

We share Consumer Health Data with the following categories of third-parties:

• Service Providers. Vendors or agents working on our behalf may access Consumer Health Data for the purposes above. For example, companies we have hired to provide customer service support or assist in protecting and securing our systems and services may need access to data to provide those functions.
• Business partners. We may share Consumer Health Data with other companies. For example, where you use a service that is cobranded and jointly operated with another company, or where you use our services and interact with another company.
• Financial Institutions & payment processors. When you make a donation or enter into a financial transaction, we will disclose payment and transaction information to banks and other entities as necessary for payment processing, fraud prevention, or other related financial services.
• Business Merger. We may share consumer health data in connection with asale of all, or substantially all, of the assets of QLaw, or the merger of QLaw into another entity, or any consolidation, share exchange, combination, reorganization, or like transaction in which QLaw is not the survivor.
• Legal Obligations. We may share consumer health data to comply with a subpoena, to comply with a legal process, to comply with what we reasonably believe in good faith is a valid and enforceable warrant or subpoena, or to comply with any other legal obligation. Additionally, consumer health data may be shared to prevent, investigate, detect, or prosecute criminal offenses or attacks on thetechnical integrity of our Services, when we reasonably believe in good faith that disclosure is necessary to protect the rights, privacy, property, business, or safety of QLaw, our partners and employees, you, or the public, and/or to investigate fraud.

2. Categories of Shared Consumer Health Data

As described further in the How We Manage Your Personal Data section of our Privacy Policy, we may share personal data, including Consumer Health Data, with your consent or as reasonably necessary to complete any transaction or provide any product you have requested or authorized.

5. How to Exercise your Rights

If you are a resident of Washington State, you have the right to access, delete, or withdraw consent as it relates to Consumer Health Data, subject to certain exceptions. While we do not intentionally collect Consumer Health Data, we may come into possession of Consumer Health Data through your use of our Platform as set forth above.

If your request to exercise a right under the MHMDA is denied, you may appeal that decision by contacting info@qlawfoundation.org. If your appeal is unsuccessful, you can raise a concern or lodge a complaint with the Washington State Attorney General at www.atg.wa.gov/file-complaint

Effective Date: 03/30/2026