Consumer Health Data Privacy Policy

This Consumer Health Data Privacy Policy explains how Leads.net, LLC, which operates NationalBenefitsHelper.com ("NationalBenefitsHelper.com," "we," "us," or "our"), collects, uses, and shares consumer health data about residents of Washington and Nevada, and how you can exercise your rights. It is provided under the Washington My Health My Data Act (RCW 19.373) and Nevada's consumer health data privacy law (Senate Bill 370, NRS Chapter 603A). It supplements our Privacy Policy.

NationalBenefitsHelper.com is an advertising website. We are not a law firm, not a lawyer referral service, and not affiliated with the Social Security Administration or any government agency. Attorneys, advocates, and marketing partners who participate ("Providers") pay to advertise on our website.

"Consumer health data" means personal information that is linked or reasonably linkable to you and that identifies your past, present, or future physical or mental health status.

1. Consumer health data we collect

Our request form does not ask about medical conditions, medical treatment, or benefits you receive. Because the form relates to a Social Security Disability Insurance (SSDI) inquiry, the following information may be treated as consumer health data:

• The fact that you asked to be contacted about an SSDI claim.
• How long you have been unable to work, or expect to be unable to work.
• Any health information you choose to share with us by email or phone.
• Inferences about your health status drawn from the information above.

We collect this information together with your name, contact information, date of birth, ZIP code, state, work history, and whether you already have an attorney or advocate. When linked to the information above, that information is also treated as consumer health data under this policy.

We do not collect diagnoses, medical records, prescription information, or precise location information.

2. Why we collect and use consumer health data

We collect and use consumer health data only to:

• Process your request to be contacted about a possible SSDI claim, which is the service you asked for.
• Show you the Provider that serves your area and, if you agree, share your request with that Provider so they can contact you, which is how we provide the service you asked for.
• Keep records showing your request and consent, as required by law.
• Respond to your questions and privacy requests.
• Prevent fraud and keep our systems secure.
• Comply with legal obligations.

We do not use consumer health data for advertising, we do not send your form answers to advertising or analytics platforms, and we do not send advertising conversion events for Washington or Nevada residents.

3. Where we get consumer health data

We collect consumer health data directly from you, through our request form, email, or phone. We do not buy consumer health data from other sources.

4. Who we share consumer health data with

We share the categories of consumer health data listed in Section 1 (your request, how long you have been or expect to be unable to work, and the linked contact, identity, location, work history, and representation information) with the following categories of recipients:

• Providers (participating attorneys, advocates, and marketing partners). When you submit a request and agree, we share it, including your consumer health data, only with the one Provider named on the form so they can contact you about your request. Marketing partners may share your request with attorneys and advocates who work with them. Companies that pay to advertise on this site are listed on our Participating Partners page.
• Service providers (processors). Companies that process data for us under contract and only on our instructions, including our lead management platform, website and form hosting provider, consent recording service (TrustedForm), phone and lead verification services, and email delivery provider.
• Legal and safety. Government authorities or others when required by law, or to protect our rights or the safety of others.
• Business transfers. A buyer or successor in a merger, acquisition, or similar transaction, who must follow this policy.

We do not share consumer health data with affiliates.

5. Sharing with Providers

We share your consumer health data with a Provider only to provide the service you request: having a participating attorney or advocate contact you about a possible SSDI claim. When you submit our form, you consent to this sharing. We tell Washington and Nevada residents this on the form, and name the Provider, before they submit.

• Sharing is limited to the information you give us on the form and the one Provider named on the form.
• You do not have to submit the form to use our website.
• You can withdraw your consent at any time by emailing info@leads.net or calling 213-695-6121. We will stop sharing your information and will tell the Provider who received it.
• Each Provider uses your information under its own privacy policy and professional obligations. Once a Provider receives your information, it may no longer be covered by this policy.

6. Your rights

Washington residents have the right to:

• Confirm whether we collect, share, or sell your consumer health data, and access that data.
• Receive a list of all third parties and affiliates with whom we have shared or sold your consumer health data, with an active email address or other online contact for each.
• Withdraw your consent to our collection and sharing of your consumer health data.
• Have your consumer health data deleted. When we delete it, we also notify the processors and third parties, including Providers, who received it, and they must delete it too.
• Appeal our decision on your request.

Nevada residents have the right to:

• Confirm whether we collect, share, or sell your consumer health data.
• Receive a list of all third parties with whom we have shared or to whom we have sold your consumer health data, and the contact information of each.
• Ask us to stop collecting, sharing, or selling your consumer health data.
• Have your consumer health data deleted.

We will not discriminate against you for exercising any of these rights.

7. How to exercise your rights

To make a request, email info@leads.net with the subject line "Consumer Health Data Request," or call 213-695-6121. Tell us your state and what you are asking for. To protect your privacy, we will verify your identity by matching information you give us, such as your name, phone number, and email address, with information we have. An authorized agent may make a request for you with proof of your permission.

We will respond within 45 days. If we need more time, we may extend this by up to 45 more days and will tell you why. Requests are free, up to twice a year, unless they are clearly unfounded or excessive.

Appeals. If we deny your request, you may appeal by replying to our decision with the subject line "Appeal." We will respond within 45 days. If we deny your appeal, you may contact your Attorney General:

• Washington Attorney General: https://www.atg.wa.gov/file-complaint or 1-800-551-4636
• Nevada Attorney General: https://ag.nv.gov/Complaints/File_Complaint/

8. Security and retention

We limit access to consumer health data to employees and processors who need it to provide the service, and we use reasonable administrative, technical, and physical safeguards to protect it. We keep consumer health data only as long as needed for the purposes above, and keep records of your request and consent as required by law.

9. Changes to this policy

We may update this policy. We will post the updated policy on this page with a new effective date. If we make a material change, including collecting new categories of consumer health data or using it for a new purpose, we will notify you and get your consent where the law requires it.

10. Contact us

Email: info@leads.net

Phone: 213-695-6121

Mail: Leads.net, LLC, 26565 Agoura Rd., Suite 200, Calabasas, CA 91302