Consumer health data privacy policy (Washington)

This policy is for Washington's My Health My Data Act, which counts biometric data as consumer health data. The ID check is the only place Canonset, Inc. ("Canonset", "we") collects any. Our biometric data policy (canonset.com/policies/biometric-data) and our privacy notice (canonset.com/privacy) cover the rest.

The consumer health data we collect

Biometric data: the pictures of your face and of your ID that you take for our ID check, and the face measurements our software makes from them to check that they match.

Why, and how we use it

Only to confirm your identity and prevent fraud before paid work. We use it for nothing else: never for advertising, and never to train AI models.

Where it comes from

From you, through our ID check, after you've given your separate consent.

What we share, and with whom

None of it with any third party or affiliate. It stays on our own servers, which Amazon Web Services hosts for us in the United States.

How long we keep it

The face measurements are never stored. The pictures are deleted once the check is decided, and in any case within 7 days; our 7-day backups let go of them within 7 days more.

Your rights

You can ask us to confirm whether we hold your consumer health data and to see it, to delete it, and to withdraw your consent. Email privacy@canonset.com; we answer within 45 days. If we turn a request down, you can appeal by replying to our answer, and if we turn the appeal down, you can contact the Washington State Attorney General at atg.wa.gov.

Contact

Canonset, Inc., 10239 Northeast 26th Street, Bellevue, WA 98004, privacy@canonset.com.