Skip to main content
Partner with us

Consumer Health Data Policy

Last Revised: July 28, 2026

If you are a resident of Australia, Connecticut, Nevada, Vermont, or Washington, this notice applies to you. This notice supplements the Zipline Privacy Policy and applies to personal information defined as “consumer health data” subject to the Washington State My Health My Data Act (MHMDA), the Nevada Health Data Privacy Act (NHDPA), the Connecticut Data Privacy Act (CTDPA), Vermont Data Privacy and Online Surveillance Act (VDPOSA), or other applicable state consumer health privacy law; or “health information” under Australia’s Privacy Act 1988 and the Australian Privacy Principles (APPs). This notice is subject to change at our discretion. We will indicate changes to the policy by updating the “Last Revised” date at the beginning of the notice. Your continued use of our websites or our other services after any update to this notice will constitute your acceptance of our changes.

CONSUMER HEALTH DATA WE COLLECT

Because consumer health data is defined very broadly, some of the categories of personal information we collect as described in the Privacy Policy could also be considered “consumer health data” as defined by applicable U.S. law. Examples of consumer health data we may collect include:

  • Information that may indicate information regarding your health status such as certain product purchase or search information, including purchases made on Zipline’s app or through one of our Merchants.

  • Precise location information that could reasonably indicate your attempt to acquire or receive health services or supplies. For example, if you attempt to order delivery at a health care provider, we may collect location data that could reveal health-related information.

  • Other information that may be used to infer or derive data related to the above or other health information.

SOURCES OF CONSUMER HEALTH DATA

As described further in our Privacy Policy, we collect personal information (which may include consumer health data) directly from you, from your interactions with our Services, from third parties, and from publicly available sources.

WHY WE COLLECT AND USE CONSUMER HEALTH DATA

Primarily, we collect and use consumer health data as reasonably necessary to deliver and facilitate delivery of the Services you requested or authorized. This may include fulfilling and managing your orders, delivering and operating the Services, ensuring the secure and reliable operation of the Services, troubleshooting and improving theServices, communicating with you, to conduct analytics, and other essential business operations that support the provision of the Services (such as analyzing our performance, meeting our legal obligations, developing our workforce, improving our Services, and conducting research and development).

We may use consumer health data for other purposes for which we give you choices and/or obtain your consent as required by law – for example, to send you information about our products, services, features, promotions, and other updates that we believe may be of interest to you. See the “How to Exercise Your Rights” section below for more details on the controls and choices you may have.

OUR SHARING OF CONSUMER HEALTH DATA

We may share the consumer health data we collect described above in accordance with applicable law, including with your consent or as reasonably necessary to complete any transaction or provide any Services you have requested or authorized, as described above.

For example, we share your content with Merchants, such as merchants whose products you seek to have delivered, to fulfill your orders. And we may disclose data to comply with applicable law or respond to a legal process.

THIRD PARTIES WITH WHICH WE SHARE CONSUMER HEALTH DATA

As necessary for the purposes described above and in accordance with applicable law, we share consumer health data with the following categories of third parties:

  • Vendors, Consultants, and Other Third-Parties that Assist with Our Business. We may disclose your consumer health data to third-parties, processors, vendors, or agents ("vendors") who perform services for us or on our behalf and require access to such information to do that work.

  • Recipients of Business Transfers. We may disclose or transfer your consumer health data in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

  • Affiliates. We may disclose your consumer health data to our affiliates. Affiliates include our parent company and any subsidiaries, joint venture partners, or other companies that we control or that are under common control with us.

  • Business or Government Partners & Merchants. We may disclose your consumer health data to our business or government partners and Merchants, such as merchants whose products you seek to have delivered, to fulfill your orders, meet applicable government regulations or Merchant requirements, or offer you certain products, services, or promotions.

  • Law Enforcement Agencies, Regulatory or Governmental Bodies, or Other Third Parties. We may disclose your consumer health data in order to respond to a legal process, comply with any legal obligation, protect or defend our rights, interests or property or that of third parties, or prevent or investigate wrongdoing in connection with the Services.

  • Other Third Parties With Your Consent. We may share your consumer health data in other ways if you have asked us to do so or have given your consent.

HOW TO EXERCISE YOUR RIGHTS

If you are covered by the MHMDA, the NHDPA, the APPs, or other applicable consumer health privacy law then you may have certain rights with respect to consumer health data, including rights to access, delete, or withdraw consent relating to such data, subject to certain exceptions. You can request to exercise such rights:

  • By contacting us via email at privacyrequest@flyzipline.com;

  • By calling us at 1-855-947-5163 (855-ZIP-L1NE);

  • By contacting us via mail at Zipline International Inc., 333 Corey Way, South San Francisco, CA 94080, United States; or

  • By filling out the privacy request form at https://www.zipline.com/privacy-request.

We may take steps to authenticate your identity before responding to your request by asking you a series of questions about your previous interactions with us or ask you to provide other knowledge-based qualifiers.

If your request to exercise a right is denied, you may appeal that decision by contacting us at privacyrequest@flyzipline.com. If your appeal is unsuccessful, you can raise a concern or lodge a complaint with the Washington State Attorney General at www.atg.wa.gov/file-complaint, the Nevada State Attorney General at https://ag.nv.gov/Complaints/CSU_Complaints___FAQ/, the Connecticut State Attorney General at https://portal.ct.gov/ag/common/complaint-form-landing-page, the Vermont State Attorney General at https://ago.vermont.gov/cap/get-help-consumer-complaint, the Office of the Australian Information Commissioner at https://www.oaic.gov.au/privacy/privacy-complaints/lodge-a-privacy-complaint-with-us, or other regulatory authority as applicable.

Written byZipline Team