top of page

Credexa Health Data Privacy Notice

Last Updated: 5/28/2025

This Health Data Privacy Notice supplements the Credexa Privacy Notice and provides additional information about how we collect, use, and disclose health data as required by laws like Washington’s My Health My Data Act. 

COLLECTION OF HEALTH DATA

We collect the following categories of health data:

​

  • Work restrictions and accommodations; 

  • Vaccinations; and 

  • Drug test results.

SOURCES OF HEALTH DATA

We collect health data directly from you when you create an account, use the Service, or otherwise communicate with us.

USE OF HEALTH DATA

We collect and use health data for the following purposes:

​

  • Service Delivery: to provide and maintain our Services, including to assess your eligibility for jobs available through the Services. 

  • Protection and Compliance: to detect, investigate, and help prevent security incidents and other malicious, deceptive, fraudulent, or illegal activity, help protect the rights and property of Credexa and others, and comply with our legal and financial obligations.

 

We may use health data for other purposes with your consent as required by law.

SHARING OF HEALTH DATA

We may share each of the categories of health data described above with the following categories of third parties:

​

  • Vendors: vendors, service providers, contractors and consultants that need this information to provide services to us may access health data. For example, companies that assist us with web hosting and customer service may need access to health data to provide those functions. 

  • Legal Authorities: we may disclose health data to legal authorities and others for the purposes described in the Protection and Compliance sub-section above, including if we believe that disclosure is in accordance with, or required by, any applicable law or legal process, including lawful requests by public authorities to meet national security or law enforcement requirements, if we believe that you have violated the law, or if we believe it is necessary to protect the rights, property, and safety of Credexa, our users, the public, or others.

  • Corporate Transactions: we reserve the right to disclose health data in connection with, or during negotiations of certain corporate transactions, including the merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.

  • Consent: we may disclose health data when we have your consent or you direct us to do so.

YOUR RIGHTS

You can access or delete your health data or withdraw consent to our processing of your health data, subject to certain exceptions. To request or exercise any of these rights, email legal@credexa.com. 

If we deny your request to exercise one of those rights, you may appeal that decision by emailing legal@credexa.com. If your appeal is unsuccessful, you may be able to raise a concern or lodge a complaint with the Attorney General in your state. (Washington residents click here).

bottom of page