Supplemental Consumer Health Data Privacy Policy

Last Updated: March 22, 2026

This Consumer Health Data Privacy Policy (the “Policy”) outlines how by Koursair LLC and its affiliates (collectively, “Koursair,” “we,” “us” or “our”) handle Consumer Health Data in compliance with Washington's My Health My Data (“MHMD”) law, Nevada’s Senate Bill 370 (“SB370”), the Connecticut Data Privacy Act (“CDPA”), and other applicable privacy regulations.

This Policy applies to residents of the Washington state, Nevada and Connecticut and whose Consumer Health Data we collect in those states (“Consumer(s),” “you” or “your.”). For purposes of this Policy, “Consumer Health Data” means personal information that is linked to, or reasonably linkable to, a Consumer and that identifies the Consumer’s past, present, or future physical or mental health status, diagnosis, or other similar terms as defined under applicable heath data laws and regulations. Consumer Health Data does not include personal health data regulated by the federal Health Insurance Portability and Accountability Act of 1996 and related regulations.

This Policy does not apply to other types of personal information. For more information on our collection or processing of personal information, please review our Privacy Policy.

Consumer Health Data We Collect

We may collect the following types of limited information related to your health that constitutes Consumer Health Data that you voluntarily provide us such as information about health condition, such as disability status or food allergies.

Sources of Consumer Health Data

We collect this Consumer Health Data from the following sources:

  • Directly from you; or
  • Our business partners and other third parties.

How We Use Your Consumer Health Data

We use Consumer Health Data to coordinate the provision of accommodations such as accommodating requests for room with accessibility features or alternative food arrangements based on your allergies or dietary restrictions.

How We Disclose Your Consumer Health Data

Your Consumer Health Data is disclosed only in the following circumstances:

  • We may disclose your data with third-party service providers who assist us providing you with the necessary accommodations.
  • We may disclose your data if required by law, such as in response to a legal request or to protect our legal rights. This may include sharing with lawyers, auditors, and consultants, as well as authorized legal representatives, family member, and anyone you authorize.
  • We may disclose data if you provide us with your consent.

Data Security

We implement reasonable security measures to protect your Consumer Health Data from unauthorized access, use, or disclosure. However, while we strive to protect your data, no method of electronic transmission or storage is completely secure.

Your Rights

To the extent afforded to you under MHMD, SB370, and CDPA, we will honor the following rights regarding your health data as a Consumer:

  • Access: You have the right to request access to the Consumer Health Data we hold about you.
  • Correction: You can request corrections to any inaccurate or incomplete Consumer Health Data.
  • Withdraw Consent: You may withdraw your consent from our collection and sharing of your Consumer Health Data at any time.
  • Deletion: You may request the deletion of your health data, subject to any legal and contractual obligations we have to retain it.

To exercise these rights, please contact us using the information in the “Contact Us” section below.

We may require identification verification before granting any request to access, withdraw consent, or delete your Consumer Health Data. We take special precautions to help ensure the security of your information when processing requests. We cannot respond to your request or provide you with Consumer Health Data if we cannot verify your identity or authority to make the request and confirm that the Consumer Health Data relates to you. We will only use consumer health data collected in connection with a verifiable consumer request to verify the requestor's identity or authority to make the request.

If your request to exercise a right under MHMD, SB370, or the CDPA is denied, you may appeal that decision by contacting us using the information below. If your appeal is unsuccessful, you may raise a concern or lodge a complaint with the Washington State Attorney General at www.atg.wa.gov/file-complaint, the Nevada State Attorney General at https://ag.nv.gov/Complaints/CSU_Complaints___FAQ, and Connecticut State Attorney General at https://portal.ct.gov/AG/Common/Complaint-Form-Landing-page/.

Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on our website with an updated effective date. We encourage you to review this Policy periodically.

Contact Us

If you have any questions or concerns about this Policy or how we handle your Consumer Health Data, please contact us at info@koursair.com.