Last Updated: March 26th, 2024
This notice (“Notice”) supplements the Rover Privacy Statement and applies to personal data defined as “consumer health data” subject to the Washington State My Health My Data Act (“MHMDA”) and other U.S. state consumer health data laws, including the Nevada Consumer Health Data Privacy Law. The definitions set forth in the Privacy Statement shall apply to this Notice, unless otherwise specified.
Consumer Health Data We Collect
As described in the How Do We Collect Your Information section of our Privacy Statement, the information we collect varies on how you interact with us, which Services you use, and the choices you make. Because consumer health data is defined very broadly, many of the categories of data we collect could also be considered consumer health data. Examples of consumer health data may include the following:
- Health information that you choose to share with us to enable us to process Rover Guarantee claims and provide you with customer service. For example, you may choose to submit receipts and insurance documentation as a part of our claims process that could include health data.
- Biometric data, in the form of an identity verification check in order to prevent, detect, protect against, or respond to security incidents, identity theft, fraud, harassment, malicious or deceptive activities, or unlawful activity, and other such security purposes permitted by law. If you complete an identity verification check, our third-party identity verification provider may collect your photo and an image of your passport, government identity card, or driver’s license to verify your identity.
- Information you voluntarily submit through Rover that could include health data or identify your attempt to seek health care services. This includes, for example, information that you choose to post on your Rover profile or pet’s profile, submit through free-form text fields on our site, or send to other Rover users.
- Other information that may be used to infer or derive data related to the above or other health information.
Why We Collect and Use Consumer Health Data
We collect and use consumer health data for the purposes described in the How Do We Use Your Information section of the Privacy Statement. Primarily, we collect and use consumer health data as reasonably necessary to provide you with the products you have requested or authorized. This may include delivering and operating the products and their features, personalization of certain product features, ensuring the secure and reliable operation of the products and the systems that support them, troubleshooting and improving the products, and other essential business operations that support the provision of the products (such as analyzing our performance, meeting our legal obligations, developing our workforce, and conducting research and development). We also may use such data to assist in coordinating claims made by our users as a part of our Rover Guarantee and for security purposes, which includes prevention, detection, protection against, or response to security incidents, identity theft, fraud, harassment, malicious or deceptive activities, or unlawful activity.
Sources of Consumer Health Data
As described in the How Do We Collect Your Information section of our Privacy Statement, we collect personal data (which may include consumer health data) directly from you, automatically when you interact with our products and services, and from third parties.
Our Sharing of Consumer Health Data
We may share each of the categories of consumer health data described above for the purposes described in the How Do We Use Your Information and How Do We Disclose Your Information sections of the Privacy Statement. In particular, we may share categories of consumer health data with third parties when you tell us to do so, such as when you make or accept a booking or use options available through our Services to publicly display and disclose certain information, such as creating a user profile or writing a review. We may also share categories of consumer health data described above if we believe your actions are inconsistent with our user agreements or policies, to operate and maintain the security of our services, including to prevent or stop an attack on our computer systems or networks or to protect the rights, property or safety of Rover, its employees, its users (including their pets), or the public, or if we believe disclosure is in accordance with, or required by, applicable law, regulation or legal process.
Third Parties With Which We Share Consumer Health Data
As necessary for the purposes described above, we may share consumer health data with the categories of third parties described below:
- Individuals you interact with on Rover. If you use Rover to post, send or submit health data (for example, on your Rover profile, in free text fields, or through Rover messages), this information will be made available accordingly with other users.
- Service Providers. We share information with vendors, consultants, business partners, and other service providers who need access to such information to carry out work on our behalf. For example, our customer service support vendors may access consumer health data that you provide to them in the process of administering your Rover Guarantee claim.
- Government agencies and law enforcement. We may disclose information in response to a request for information if we believe disclosure is in accordance with, or required by, applicable law, regulation or legal process.
- Other third parties for security, safety, and protecting rights. We may share your information if we believe your actions are inconsistent with our user agreements or policies, to operate and maintain the security of our services, including to prevent or stop an attack on our computer systems or networks or to protect the rights, property or safety of Rover, its employees, its users (including their pets), or the public.
- Corporate transactions. We may disclose information in connection with, or during negotiations of, any merger, sale of company assets, financing, acquisition, divestiture, bankruptcy, dissolution, or other transaction or proceeding involving sale, transfer or divestiture of all or a portion of our business or assets to another company, to the extent permitted under applicable law.
- Affiliates. We may share information between and among Rover and our current and future parents, affiliates, subsidiaries and other companies under common control and ownership, for example, where we share common data systems or where access helps us to provide our services and operate our business. Our corporate affiliates are listed here.
How to Exercise Your Rights
MHMDA provides certain rights with respect to consumer health data, including rights to access, delete, or withdraw consent relating to such data, subject to certain exceptions. You can request to exercise such rights through our Privacy Management Center or using the various other tools and mechanisms described in the Your Choices section of the Privacy Statement. For example, depending on the product you use, you can access and make choices about your data through product controls. You can also access and clear some of your data directly in your Rover account. And if you want to access or control consumer health data processed by Rover that is not available via those tools or directly through Rover Site, you can always contact us at the contact information in the Contact Us section.
If your request to exercise a right under the MHMDA is denied, you may appeal that decision by contacting our privacy support team via the Contact Us section. If your appeal is unsuccessful, you can raise a concern or lodge a complaint with the Washington State Attorney General at www.atg.wa.gov/file-complaint.
