We know that privacy is important to you. Your privacy is important to us too. This Notice explains how Quest Consumer Inc. (“Quest Consumer”, “we”, “our”) collects information from or about you (“you” or “your”) when you visit the questhealth.com website that links to this Notice (the “Site”), and how we may use, maintain, protect and disclose that information to affiliates and third parties.

This Notice is provided in compliance with certain privacy laws that do not include the Health Insurance Portability and Accountability Act of 1996 (commonly known as “HIPAA”). Because Quest Consumer is not a HIPAA covered entity such as a health plan or health care provider that submits electronic claims to health plans, it is not subject to the requirements of HIPAA that apply to such entities.

Collection, Use, Maintenance, and Disclosure of Genetic Data

If you use this Site to purchase or activate a Genetic Insights test, your genetic testing will be performed by Quest Diagnostics and medically overseen by PWNHealth and its affiliates.  Quest Consumer itself does not collect, use, maintain, disclose, access, transfer, secure, retain, or delete your genetic data

Quest Diagnostics will collect specific consents from you on https://qp.questdiagnostics.com during the test activation process, and will provide your Genetic Insights results to you on http://geneticinsights.questdiagnostics.com. Quest Diagnostics maintains your genetic data in compliance with HIPAA.

For additional information about how Quest Diagnostics may use and disclose your protected health information, including your genetic data, please visit the Quest Diagnostics Notice of Privacy Practices (https://www.questdiagnostics.com/our-company/privacy/notice-of-privacy-practices).

Information We Collect

We may collect information about you including non-personally identifiable information and/or “Personal Information,” which is information that may identify, relate to, describe, or be capable of being associated with or reasonably linked, directly or indirectly, with a particular identified or identifiable person or household.

Personal Information we might collect includes data such as the following:

Type of Information	Categories of Source	Business or commercial purposes for collection	Disclosed for a Business Purpose?	Third parties to whom Disclosed for Business Purpose
Identifiers such as a real name, postal address, unique personal identifier, online identifier, Internet Protocol address, signature, email address, account name, or other similar identifiers.	Direct contact with users through the Site, phone, email, web form and social media; affiliates and third parties.	As described below, e.g., to provide you with products and services and for internal purposes.	Yes	Service providers, marketing and promotional partners, other entities that provide a service directly to you.
Financial information such as credit card number or debit card number and address or other information related to a billing or payment transaction.	Direct contact with users through the Site, phone, email and social media; from subsidiaries and affiliates and third parties.	As described below, e.g., to provide you with products, schedule an appointment, or complete transactions, and for internal purposes.	Yes	Service providers and affiliates.
Commercial information, including products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.	The Site, cookies and other tracking technologies, third parties and affiliates such as service providers.	As described below, e.g., for internal and marketing purposes.	Yes	Service providers, analytics, marketing, and promotional partners.
Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, form submissions, email unsubscribes and subscribes, email engagement or advertisement.	The Site, cookies and other tracking technologies, third parties and affiliates such as service providers.	As described below regarding cookies, e.g., for internal purposes and for marketing purposes, as described in our Cookie Notice.	Yes	Service providers, analytics, marketing, and promotional partners.
Geolocation data.	The Site, cookies and other tracking technologies, third parties and affiliates such as service providers.	As described below regarding cookies, e.g., for internal, marketing, and other operational and business purposes.	Yes	Service providers, marketing and promotional partners.
Inferences drawn from any personal information collected to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.	Direct contact with users through the Site, phone, email and social media; cookies and other tracking technologies, third parties and affiliates such as service providers.	As described below, in order to facilitate more targeted marketing, as well as for internal reporting and analytics purposes.	Yes	Service providers, marketing and promotional partners, third parties for operational purposes.
Sensitive personal information, including race, national origin, religious or philosophical beliefs, sexual orientation, sex life, and precise geolocation.	Direct contact with users through the Site, phone, email and social media; cookies and other tracking technologies, third parties and affiliates such as service providers.	Internal reporting and analytics purposes, to facilitate more targeted marketing, to facilitate customer purchases and viewing lab test results, and additional uses as described below.	Yes	Service providers, analytics, marketing, and promotional partners, and third parties for operational purposes.
Health information, including content about specific health conditions and the tests you view or purchase.	Direct contact with users through the Site, phone, email and social media; cookies and other tracking technologies, third parties and affiliates such as service providers.	Internal reporting and analytics purposes, to facilitate more targeted marketing, to facilitate customer purchases and viewing lab test results, and additional uses as described below.	Yes	Service providers, marketing and promotional partners, third parties for operational purposes.

 

We do not consider Personal Information to include information that can no longer be used to identify a specific natural person, whether in combination with other information or otherwise. For example, de-identified or aggregated consumer information. Publicly available information from government records is also not considered Personal Information.

If we combine non-personally identifiable information with Personal Information, we will treat such information appropriately, but not all rights may apply to the non-personally identifiable information portion.

How We Use Personal Information That We Collect for Business or Commercial Purposes

We may use your Personal Information:

• to fulfill the purposes for which the information was provided (e.g., to provide a service or perform on a contract);
• to identify you in order to respond to requests, provide services or products, personalize information we provide to you, or otherwise as described below;
• to communicate with you about your account or our relationship, such as making announcements about the Site or our privacy policies and terms;
• to design, improve and administer our Site;
• to improve our products and services;
• to audit and measure user interaction with our Site, so we can improve the relevancy or effectiveness of our content and messaging;
• to develop and carry out marketing, advertising and analytics;
• to provide texts or emails containing information about our products or services, or events or news, that may be of interest to recipients, as permitted by law;
• to deliver content and products or services relevant to your interests, including targeted ads on third party sites;
• to detect security incidents or monitor for fraudulent or illegal activity;
• to enable security measures (such as, to protect our Site, customers, employees and business partners);
• debugging to identify and repair errors;
• to protect our rights and to protect your safety or the safety of others;
• to investigate fraud or respond to government inquiries;
• to complete corporate transactions (from time to time, we sell, buy, merge or otherwise reorganize our businesses, and these corporate restructurings may involve disclosure of Personal Information to prospective or actual purchasers, or the receipt of it from sellers);
• to comply with laws, regulations or other legal process; or
• otherwise use your Personal Information with your consent.

We may also use your Personal Information to:

• provide you with the services and products you request or that have been ordered and/or requested by your healthcare provider;
• process or collect payments for our services; or
• respond to your questions and otherwise provide support you request.

We may use Precise Location Data from your device in accordance with the device’s consent process to help us improve your user experience and provide information that is relevant to you.

How Long We Retain Your Personal Information

Quest Consumer retains your Personal Information only for as long as is necessary for our legitimate business purposes. We will retain and use your Personal Information to the extent necessary to comply with our legal, accounting, or reporting obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes and enforce our legal agreements and policies. Additionally, we may continue to store your Personal Information contained in our standard back-ups. This applies to all categories of Personal Information in use by us.

Selling Personal Information or Disclosing of Personal Information for Targeted Advertising

We do not sell Personal Information. We may disclose the following categories of Personal Information to the categories of third parties listed below for the purpose of targeted or cross-context advertising (under California law, this is called “Sharing”):

Type of Information	Disclosed for Targeted Advertising?	Third parties to whom Disclosed for Targeted Advertising	Business or commercial purposes for Disclosing for Targeted Advertising
Identifiers such as a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, or other similar identifiers.	Yes	Marketing and promotional third parties such as advertising and social networks.	For marketing our products and services to you.
Commercial information, including products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.	Yes	Marketing and promotional third parties such as advertising and social networks.	For marketing our products and services to you.
Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement.	Yes	Marketing and promotional third parties such as advertising and social networks.	For marketing our products and services to you.
Geolocation data.	Yes	Marketing and promotional third parties such as advertising and social networks.	For marketing our products and services to you.
Inferences drawn from any personal information collected to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.	Yes	Marketing and promotional third parties such as advertising and social networks.	For marketing our products and services to you.

 

Cookie Notice

Our websites, like almost all other websites, use cookies and other technologies to make the website work as you expect and to collect and share information. Please see our Cookie Notice for more information.

Keeping Your Information Secure

Physical, technical and administrative measures are in place that are designed to prevent unauthorized access or disclosure, maintain data accuracy, and ensure appropriate use of Personal Information. We cannot, however, ensure or warrant the security of information. No security measures are infallible.

How can you help protect your information?

If you registered and chose a password in connection with your use of the Site, you should not divulge your password to anyone. We will never ask you for your password in an unsolicited phone call or in an unsolicited email. Also, remember to sign out of the Site and close your browser window when you have finished your work.

Links to Other Sites

Our Site may be accessed from or contain links to other websites that we do not own or operate. If you access those links, you will leave our Site. Quest Consumer does not control those third party websites or their privacy practices, which may differ from ours. We do not endorse or make any representations about third-party sites, including about the content or security of those sites. The information you choose to provide to or that is collected by these third parties is not covered by this Notice.

Children's Privacy

This Site is not intended for, or designed to attract, individuals under the age of 18. Quest Consumer does not knowingly collect information from children under the age of 18.

Additional Rights of Individuals in Certain Jurisdictions

Depending on where you live, you may have certain rights with respect to Personal Information that we have collected and used under certain circumstances, which may include the following:

1. The Right to Know About Personal Information Collected, Disclosed, or Sold.

Residents of certain U.S. states have the right to request that Quest Consumer disclose what Personal Information it collects, uses, discloses, and sells. This is called the “Right to Know”. Under the Right to Know, you can request a listing of the categories of Personal Information we have collected about you, the categories of sources from which that information is collected, how we use the information (e.g., our business or commercial purposes for collecting Personal Information), categories of other individuals and business with whom we share Personal Information, and the specific pieces of Personal Information that we have collected about you. For further details about this information, please visit the Information We Collect section above.

If you are a resident of a state that confers this right and would like to request to access your information, you may visit your state’s section below.

• California
• Colorado
• Connecticut
• Utah
• Virginia

When you make a request under your Right to Know, you can expect the following:

a) We will verify your identity. You will need to provide us with certain information such as your name, email address, physical address, or other information, as relevant, so that we can verify that you are who you say you are. Which information may depend on the type and sensitivity of information requested.

b) We will confirm our receipt of your request within 10 days. If you have not received a response within a few days after that, please let us know by contacting us at the webpage or phone number listed below.

c) We will respond to your request within 45 days. If necessary, we may need additional time to respond, up to another 45 days, but we will reply either way within the first 45-day period and, if we need an extension, we will explain why.

d) In certain cases, a Request to Know may be denied. For example, if we cannot verify your identity or if providing you the information could create an unreasonable risk to someone’s security (for example, we do not want very sensitive information disclosed inappropriately). If we deny your request, we will explain why we denied it. If we deny a request, we will still try to provide you as much of the information as we can, but we will withhold the information subject to denial.

2. The Right to Access and Receive your Specific Personal Information

Residents of certain U.S. states have the right to request that Quest Consumer provide a portable copy of the Personal Information it collects, uses, discloses, and sells. You can request a listing of the types of Personal Information we have collected about you, the sources of that information, how we use the information (e.g., our business or commercial purposes for collecting or selling personal information), other individuals and business with whom we share Personal Information, and the specific pieces of Personal Information that we have collected about you. For further details about this information, please visit the Information We Collect section above.

If you are a resident of a state that confers this right and would like to request a portable copy of your information, you may visit your state’s section below.

• California
• Colorado
• Connecticut
• Utah
• Virginia

When you request a portable copy of your information, you can expect the following:

a) We will verify your identity. You will need to provide us with certain information such as your name, email address, physical address, or other information, as relevant, so that we can verify that you are who you say you are. Which information may depend on the type and sensitivity of information requested.

b) We will confirm our receipt of your request within 10 days. If you have not received a response within a few days after that, please let us know by contacting us at the webpage or phone number listed below.

c) We will respond to your request within 45 days. If necessary, we may need additional time to respond, up to another 45 days, but we will reply either way within the first 45-day period and, if we need an extension, we will explain why.

d) In certain cases, a Request to Access may be denied. For example, if we cannot verify your identity or if providing you the information could create an unreasonable risk to someone’s security (for example, we do not want very sensitive information disclosed inappropriately). If we deny your request, we will explain why we denied it. If we deny a request, we will still try to provide you as much of the information as we can, but we will withhold the information subject to denial.

3. The Right to Correct Personal Information.

Residents of certain U.S. states have the right to request that Quest Consumer correct the Personal Information it collects, uses, discloses, and sells. This is called the “Right to Correct”. Under the Right to Correct, you can request a correction of any inaccurate Personal Information, and Quest will use commercially reasonable efforts to correct this information.

If you are a resident of a state that confers this right and would like to request to correct your information, you may visit your state’s section below.

• California
• Colorado
• Connecticut
• Virginia

When you make a request under your Right to Correct, you can expect the following:

a) We will verify your identity. You will need to provide us with certain information such as your name, email address, physical address, or other information, as relevant, so that we can verify that you are who you say you are. Which information may depend on the type and sensitivity of information requested.

b) We will confirm our receipt of your request within 10 days. If you have not received a response within a few days after that, please let us know by contacting us at the webpage or phone number listed below.

c) We will respond to your request within 45 days. If necessary, we may need additional time to respond, up to another 45 days, but we will reply either way within the first 45-day period and, if we need an extension, we will explain why.

d) In certain cases, a Request to Correct may be denied. For example, if we cannot verify your identity or if providing you the information could create an unreasonable risk to someone’s security (for example, we do not want very sensitive information disclosed inappropriately). If we deny your request, we will explain why we denied it. If we deny a request, we will still try to provide you as much of the information as we can, but we will withhold the information subject to denial.

4. The Right to Request Deletion of Personal Information about You.

Residents of certain U.S. states have a right to request the deletion of their Personal Information collected or maintained by Quest Consumer. If you are a resident of a state that confers this right and would like to request to delete your information, you may visit your state’s section below.

• California
• Colorado
• Connecticut
• Utah
• Virginia

When you make a request for deletion, you can expect the following:

• We will verify your identity. You will need to provide us with certain information such as your name, email address, physical address, or other information, as relevant, in order for us to verify that you are who you say you are. Which information may depend on the type and sensitivity of information that you would like to have deleted.
• We will confirm our receipt of your request within 10 days. If you have not received a response within a few days after that, please let us know by contacting us at the webpage or phone number listed below.
• We will respond to your request within 45 days. If necessary, we may need an additional period of time, up to another 45 days, but we will reply either way within the first 45-day period and, if we need an extension, we will explain why.
• In certain cases, a request for deletion may be denied, for example, if we cannot verify your identity; the law requires that we maintain the information (e.g., to comply with federal and state medical record retention requirements); or, if we need the information for internal purposes such as to continue to provide you services. If we deny your request, we will explain why we denied it, and delete any other information that is not protected from deletion.

5. The Right to Opt-Out of the Sale or Cross-Context Behavioral Advertising of Personal Information

This Section of the Notice also serves as a Notice to residents of the State of California and the Commonwealth of Virginia of their right to opt-out of the sale of Personal Information and of the use of Personal Information for certain types of advertising.

Residents of California have a right to direct businesses not to sell or share their Personal Information if the businesses otherwise would. Virginia residents have the right to direct businesses not to process their personal data for purposes of (i) targeted advertising, (ii) sale, or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer. Under California and Virginia law, this is known as the “right to opt out.” We do not sell your Personal Information. However, when you visit our websites, we may share information about your use of our website with our advertising and analytics partners. You can opt out of sharing or using your Personal Information for the purposes of targeted advertising, by interacting with the cookie banner that may appear at the bottom of Quest Consumer website the first time you come to the website or the “Your Privacy Choices” link that may appear in the footer of our websites. You can also opt back into these cookies through the same link.

For more information about your right to opt-out, please see your state’s section below.

• California
• Colorado
• Connecticut
• Utah
• Virginia

6. The Right to Limit the Use or Disclosure of Sensitive Personal Information

Residents of certain U.S. states have a right to limit the use or disclosure of sensitive Personal Information, including one’s precise geolocation and certain health-related information, by Quest Consumer. For more information about your right to limit the use or disclosure of sensitive Personal Information, please see your state’s section below.

• California

7. The Right to Appeal a Business or Controller’s Refusal to Take Action

Residents of certain U.S. states have a right to appeal if the consumer’s privacy rights-related request is denied in whole or in part. For more information about your right to appeal, please see your state’s section below.

• Colorado
• Connecticut
• Virginia

8. The Right to Non-Discrimination for the Exercise of a Consumer’s Privacy Rights

You have a right not to receive discriminatory treatment by Quest Consumer for exercising any of your privacy rights conferred by your state’s consumer privacy laws. Quest Consumer will not discriminate against any consumer because such person exercised any of the consumer’s rights under these privacy laws, including, but not limited to:

• denying goods or services;
• charging different prices or rates for goods and services, including through the use of discounts or other benefits or imposing penalties;
• providing a different level or quality of goods or services; or
• suggesting that the consumer will receive a different price or rate for goods or services or a different level or quality of goods or services.

Quest Consumer may, however, charge a different price or rate, or provide a different level or quality of goods or services, if that difference is related to the value provided to you by your data.

9. Authorized Agents

Certain state residents may designate an authorized agent to make a request on your behalf. We will deny requests from agents that do not submit proof of authorization from you. To verify that an authorized agent has authority to act for you, we may require a copy of a power of attorney or require that you provide the authorized agent with written permission and verify your own identity with us.

CALIFORNIA RESIDENTS’ PRIVACY RIGHTS

California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA)

The California Consumer Privacy Act (CCPA), which has been amended by the California Privacy Rights Act (CPRA), is a law intended to enhance privacy rights and consumer protection for residents of the state of California. The CCPA and CPRA apply to certain business entities that do business in California. For further details on the types of Personal Information we have collected about you, the sources of that information, how we use the information (e.g., our business or commercial purposes for collecting or selling Personal Information), other individuals and business with whom we share Personal Information, and the specific pieces of Personal Information that we have collected about you, please visit the Information We Collect section above.

The following rights apply to all California residents (but not including legal entities, such as companies):

If you are a California resident, you have certain rights regarding your Personal Information that is covered under the CCPA. Please review each of the rights, below, and the section that follows for more information applicable to these rights.

• The Right to Know
• The right to receive (“access”) a copy of your Personal Information
• The Right to Correct
• The right to request deletion of your Personal Information
• The right to opt out of certain disclosures (“sharing”) of your Personal Information (for more information about your right to opt-out, please see our Notice of Right to Opt-Out
• The right to limit the use or disclosure of your sensitive Personal Information. We collect sensitive Personal Information either (i) when we collect your IP address when you visit a website related to your health information or (ii) when you make a purchase or login to questhealth.com. You can limit the use or disclosure of your sensitive Personal Information as set forth in subsection (i) by interacting with the cookie banner that may appear at the bottom of Quest Consumer website the first time you come to the website or the “Your Privacy Choices” link in the footer of our website. You can also opt back into these cookies through the same link. With regard to subsection (ii) click here to submit a request to limit the use of your sensitive personal information.

These rights will not apply, however, if Quest Consumer does not collect any Personal Information about you or if all of the information we collect is exempt from the statute (for example, the CCPA and CPRA do not protect information that is already protected by certain other privacy laws and do not protect information that is already publicly available).

Request under CPRA

To make a request under the CPRA visit this online form. You may also call (833) 341-0196.

“Shine the Light” Law

Under California Civil Code Section 1798.83, California residents with whom we have an established business relationship are entitled to request and receive, free of charge, once per calendar year, information about the Personal Information we shared, if any, with other businesses for their own direct marketing uses during the prior year.

COLORADO RESIDENTS’ PRIVACY RIGHTS  

Colorado Privacy Act (CPA) 

The Colorado Privacy Act (CPA) is a law intended to enhance privacy rights and consumer protection for residents of the state of Colorado. For further details on the types of Personal Information we have collected about you, the sources of that information, how we use the information (e.g., our business or commercial purposes for collecting or selling Personal Information), other individuals and business with whom we share Personal Information, and the specific pieces of Personal Information that we have collected about you, please visit the Information We Collect section above.

The following rights apply to all Colorado residents (but not including legal entities, such as companies):

• The Right to Know 
• The right to receive (“access”) a copy of your Personal Information 
• The Right to Correct 
• The right to request deletion of your Personal Information 
• The right to opt out of certain disclosures of your Personal Information (for more information about your right to opt-out, please see our Notice of Right to Opt-Out)
• The right to appeal a Controller’s refusal to take action regarding a privacy rights request. 

These rights will not apply, however, if Quest does not collect any Personal Information about you or if all of the information we collect is exempt from the statute (for example, the CPA does not protect information that is already protected by certain other privacy laws such as HIPAA and does not protect information that is already publicly available). 
 
Requests under CPA 
To make a request under the CPA you may visit our online request form. You may also call (833) 341-0196. To exercise your right to appeal, you may email us at privacy@questdiagnostics.com and include the Request ID from your previous request. 
 

CONNECTICUT RESIDENTS’ PRIVACY RIGHTS  
Connecticut Data Privacy Act (CTDPA) 
 
The Connecticut Data Privacy Act (CTDPA) is a law intended to enhance privacy rights and consumer protection for residents of the state of Connecticut. The CTDPA applies to certain business entities that do business in Connecticut. For further details on the types of Personal Information we have collected about you, the sources of that information, how we use the information (e.g., our business or commercial purposes for collecting or selling Personal Information), other individuals and business with whom we share Personal Information, and the specific pieces of Personal Information that we have collected about you, please visit the Information We Collect section above. 

The following rights apply to all Connecticut residents (but not including legal entities, such as companies): 

• The Right to Know 
• The right to receive (“access”) a copy of your Personal Information 
• The Right to Correct 
• The right to request deletion of your Personal Information 
• The right to opt out of certain disclosures of your Personal Information (for more information about your right to opt-out, please see our  Notice of Right to Opt-Out)
• The right to appeal a Controller’s refusal to take action regarding a privacy rights request. 

These rights will not apply, however, if Quest does not collect any Personal Information about you or if all of the information we collect is exempt from the statute (for example, the CTDPA does not protect information that is already protected by certain other privacy laws such as HIPAA and does not protect information that is already publicly available). 

Requests under CTDPA 
To make a request under the CTDPA you may visit our online request form. You may also call (833) 341-0196. To exercise your right to appeal, you may email us at privacy@questdiagnostics.com and include the Request ID from your previous request. 
 

UTAH RESIDENTS’ PRIVACY RIGHTS

Utah Consumer Privacy Act (UCPA)

The Utah Privacy Act (UCPA) is a law intended to enhance privacy rights and consumer protection for residents of the state of Utah. The UCPA apples to certain business entities that do business in Utah. For further details on the types of Personal Information we have collected about you, the sources of that information, how we use the information (e.g., our business or commercial purposes for collecting or selling Personal Information), other individuals and business with whom we share Personal Information, and the specific pieces of Personal Information that we have collected about you, please visit the Information We Collect section.

The following rights apply to all Utah residents (but not including legal entities, such as companies):

• The Right to Know
• The right to receive (“access”) a copy of your Personal Information
• The right to request deletion of your Personal Information
• The right to opt out of certain disclosures of your Personal Information (for more information about your right to opt-out, please see our Notice of Right to Opt-Out)

These rights will not apply, however, if Quest does not collect any Personal Information about you or if all of the information we collect is exempt from the statute (for example, the UCPA does not protect information that is already protected by certain other privacy laws like HIPAA and does not protect information that is already publicly available).

Requests under UCPA

To make a request under the UCPA you may visit our online request form. You may also call (833) 341-0196. To exercise your right to appeal, you may email privacy@questdiagnostics.com and include the Request ID from your previous request.

VIRGINIA RESIDENTS’ PRIVACY RIGHTS

Virginia Consumer Data Protection Act (VCDPA)

The Virginia Consumer Data Protection Act (VCDPA) is a law intended to enhance privacy rights and consumer protection for residents of the state of Virginia. The VCDPA applies to certain business entities that do business in Virginia. For further details on the types of Personal Information we have collected about you, the sources of that information, how we use the information (e.g., our business or commercial purposes for collecting or selling Personal Information), other individuals and business with whom we share Personal Information, and the specific pieces of Personal Information that we have collected about you, please visit the Information We Collect section.

The following rights apply to all Virginia residents (but not including legal entities, such as companies):

• The Right to Know
• The right to receive (“access”) a copy of your Personal Information  
• The Right to Correct
• The right to request deletion of your Personal Information
• The right to opt out of certain disclosures of your Personal Information (for more information about your right to opt-out, please see our Notice of Right to Opt-Out.
• The right to appeal a Controller’s refusal to take action regarding a privacy rights request.

These rights will not apply, however, if Quest Consumer does not collect any Personal Information about you or if all of the information we collect is exempt from the statute (for example, the VCDPA does not protect information that is already protected by certain other privacy laws and does not protect information that is already publicly available).

Requests under VCDPA

To make a request under the VCDPA you may visit this online request form. You may also call (833) 341-0196. To exercise your right to appeal, you may email privacy@questdiagnostics.com and include the Request ID from your previous request.

EU/European Economic Area/United Kingdom: If you are located in one of these locations, this Notice does not apply to you.

Non-Discrimination Notice and Language Assistance Services

Please refer to the Non-Discrimination Notice which describes the language assistance services available to you.

Updates To This Privacy Notice

From time to time, we may change this Privacy Notice. If we make changes, we will revise the “Last Updated” date at the bottom of this Notice. We encourage you to review this Notice periodically to be sure you are aware of those changes. Changes will become effective as of the “Last Updated” date.

Contact Us

Should you have any questions about this Notice or our privacy practices more generally, or if you believe your privacy rights have been violated and wish to make a complaint, please email privacy@questdiagnostics.com or write to:

Quest Diagnostics
Attention: Privacy Office
500 Plaza Drive
Secaucus, NJ 07094
You can also call 800-222-0446, ext. 1020123.

Last Updated: December 29th, 2023