EVERGREEN MARKET
Health Data Privacy Notice
The Effective Date of this Health Data Privacy Notice is December 2025
This Health Data Privacy Notice describes how Evergreen Market (North America), Inc., (“Evergreen Market” or “we” or “our” or “us”) treats certain health data collected or provided in connection with an end user’s (“you” or “your” or “user”) use of Evergreen Market’s website, www.evergreenmarket.com, and any other website, social media pages, or other digital medium owned or operated by Evergreen Market. This Health Data Privacy Notice also applies to any health data collected, stored, or used by us, such as information you provide us through the above mediums, by email, mail, or telephonic communications (collectively, the “Site”).
The information provided in this Health Data Privacy Notice is designed to inform you of what consumer health data we collect, why we collect such information, how we use the information we collect, and the choices we offer, including how to access and update information.
This Health Data Privacy Notice applies to our services in Washington. Please read this Privacy Notice carefully.
Our Collection and Use of Health Data
We may collect the following categories of health data from you. And at times to the extent that you voluntarily provide such information in specific circumstances, such as if you are a medical patient or medical recognition card holder:
- Individual health conditions, treatment, diseases, or diagnosis.
- Social, psychological, behavioral, and medical interventions.
- Health-related surgeries or procedures.
- Use or purchase of prescribed medication.
- Diagnoses or diagnostic testing, treatment, or medication.
- Data that identifies a consumer seeking health care services.
We may collect the following health data to deliver services that you requested, such as recommendations on products or information on how to obtain a medical recognition card, including:
- My personal identification details (name, phone number, medical recognition card number, effective & expiration dates, authorizing healthcare provider name, designated provider ID name, card number, effective & expiration dates)
You can choose not to provide certain information to us, but it may delay or prevent us from providing our services to you.
Categories of Health Data Shared
We share the following categories of health data with third parties:
- Data that identifies a consumer seeking health care services, such as analytics data processed by our analytics service provider.
Categories of Third Parties That May Receive Your Health Data
In order to provide the services that you have requested, we may disclose Health Data to:
- Our service providers and vendors, such as payment processors, website hosts, legal counsel, and various customer, tech, and operational support.
- Law enforcement agencies, regulatory bodies, courts, or other public authorities, to comply with our legal and regulatory obligations, to respond to requests from governmental authorities, to protect our rights, to defend against legal claims, or as otherwise required by law.
- Third parties with whom you have granted consent for us to share your health data, such as a medical provider that issued you a medical recognition card.
Your Rights
You have the following rights:
- You have the right to confirm whether we are collecting, sharing, or selling your health data.
- You have the right to request access to your health data in our possession.
- You have the right to withdraw your consent to our collection or sharing of your health data.
- You have the right to request we delete your health data in our possession.
You may exercise your rights by sending a request to rightsrequest@theevergreenmarket.com. If we inform you that we decline to take action regarding your request, you have the right to appeal our decision by contacting us at rightsrequest@theevergreenmarket.com within 45 days of receiving our decision.