Privacy Policy

Scope

This policy applies to the Solia Health consumer website and application at direct.soliadirect.com, including account creation, testing selection, checkout, collection scheduling, provider-order submission, support requests, and result access.

Solia Health coordinates the consumer experience. Laboratory testing is performed by a partner laboratory, and collection may be performed by a mobile phlebotomy or partner collection provider. Those parties handle information under their own obligations for the services they perform.

This is a reference implementation. The contracting entity and performing laboratory are established per deployment and are identified in the applicable agreement rather than named here.

Information we collect

We collect only what the service needs to operate. Categories include:

• Account and identity information — name, date of birth, and sign-in email.
• Contact information — email address and mobile number.
• Order and transaction information — panels and add-ons selected, membership status, amounts, and payment confirmation details. Full card numbers are handled by our payment processor and are never stored by Solia.
• Testing information — the panels you choose, specimen and order status, and results returned to your account where available.
• Collection and scheduling information — service ZIP code, collection address, and appointment preferences.
• Provider-order information — details you submit when you already have an order from your own provider.
• Support and contact information — messages you send through contact or support forms.
• Device and site-usage information — browser and device type, pages viewed, and basic diagnostics used to keep the service secure and reliable.
• Privacy-request information — the details you provide when submitting a privacy request.

Where information comes from

Information reaches us from a limited set of sources:

• Directly from you, through the site, your account, checkout, and support requests.
• Automatically from your device and browser as you use the site.
• From the payment processor, in the form of transaction and payment status.
• From the performing laboratory, in the form of specimen and result status.
• From ordering-provider and collection services involved in fulfilling your order.
• From hosting, authentication, and messaging infrastructure that operates the service.

How we use information

We do not use health information for advertising, and we do not sell personal information. See Do Not Sell or Share My Personal Information.

• Creating and operating your account and authenticating you.
• Processing orders, memberships, and payments.
• Coordinating collection visits and routing specimens to the performing laboratory.
• Making results available in your account where the laboratory has released them.
• Responding to support, contact, and privacy requests.
• Security, fraud prevention, and abuse protection.
• Diagnosing problems and improving the product.
• Meeting legal, regulatory, and recordkeeping obligations.
• Sending service communications and, where you have opted in, product updates.

Service providers and partners

We share information with the parties needed to deliver what you asked for, limited to what each party needs, and under confidentiality obligations. Categories currently applicable:

• Payment processing (card payments and receipts)
• Performing laboratory (specimen analysis and authoritative results)
• Mobile collection providers (phlebotomy visits)
• Ordering / reviewing provider services (where a provider order is required)
• Hosting, database, and authentication infrastructure
• Transactional email and messaging
• Product analytics, only where enabled by your cookie preferences
• Professional advisors where legally necessary

Cookies and similar technologies

The site uses storage that is strictly necessary for sign-in, holding an appointment, checkout, and delivering results securely. Optional analytics and marketing-measurement categories are off until you allow them, and no third-party advertising or retargeting technology is deployed on this reference implementation.

You can review and change your choices at any time through Cookie Settings, and exercise data-rights requests through Privacy Choices.

Retention

Account, order, and testing records are kept for as long as your account is active and thereafter as needed to meet legal, laboratory, and medical recordkeeping obligations, resolve disputes, and enforce agreements. Support and privacy-request records are kept only as long as needed to process and document the request.

Fixed retention schedules depend on the performing laboratory and applicable state requirements and are established per deployment rather than stated generically here.

Security

Information is encrypted in transit and at rest. Account records are readable only by the authenticated account holder and authorized personnel with an operational need, enforced at the database layer rather than in the browser. Result files are delivered through time-limited secure links.

No system is perfectly secure, and we describe practices here without claiming certifications that have not been established for this reference implementation.

Minors

The service is intended for adults. Eligibility, including any minimum age and whether a parent or legal guardian may order on behalf of a minor, is set by the performing laboratory and applicable state requirements, and is confirmed during ordering rather than assumed here. We do not knowingly collect information from children outside that process.

U.S. privacy rights

Privacy rights depend on where you live and which laws apply to you. Depending on your jurisdiction, you may have the right to access, correct, or delete personal information, to obtain information about disclosures, to withdraw consent, to opt out of targeted advertising or the sale or sharing of personal information, and in some states to appeal a decision.

Rights may vary based on applicable law and your jurisdiction. Submit a request through Privacy Choices — we verify requests before acting on them and do not require you to identify the statute you are relying on.

Consumer health data

Some states regulate consumer health data separately from other personal information. Those disclosures, including the categories we process, who receives them, and applicable rights, are in the Consumer Health Data Privacy Policy.

Contact and updates

Privacy questions and requests reach us through Privacy Choices or the contact form. A dedicated privacy mailbox and postal address are established at deployment; we do not publish an unmonitored address here.

If this policy changes, we update the date at the top of the page and, where a change is material, provide additional notice.