Our approach
Your sample is sensitive.
We treat its data that way.
- We use personal information to fulfill orders, process samples, deliver results, support you, and protect the service.
- We do not use your sample for ancestry, paternity, or genetic sequencing.
- We do not sell consumer health data or use it for targeted advertising.
Scope and who we are
Keep Going Kid LLC operates PlasticTox and plastictox.vip. In this Privacy and Consumer Health Data Policy, “PlasticTox,” “we,” “us,” and “our” mean Keep Going Kid LLC operating the PlasticTox service. This policy explains how we collect, use, share, retain, and protect personal information when you visit plastictox.vip, purchase or register a kit, send a sample, view a result, use our customer portal, or contact us.
PlasticTox is a consumer awareness service and may not be a “covered entity” or “business associate” under the federal Health Insurance Portability and Accountability Act (HIPAA). Information that is not protected by HIPAA may still be protected by state consumer-health, privacy, breach-notification, and consumer-protection laws.
Information we collect
We do not ask for or perform ancestry, paternity, or genetic sequencing. Please do not send medical records, government identifiers, full payment-card numbers, or other information we have not requested.
Consumer health data notice
Depending on where you live, sample and result information, inferences drawn from it, and data identifying you as someone seeking a microplastic screening service may be “consumer health data” or similarly sensitive information.
Categories and sources
We collect the sample and result categories described above from you; from the kit and sample you return; from our lab when it processes the sample; and from service providers that support ordering, registration, identity matching, hosting, security, delivery, and customer support.
Why we collect and use it
We use consumer health data to register and match a kit, receive and process the sample through our lab, perform quality control, generate and deliver the private result, provide requested support, maintain records, prevent fraud or misuse, comply with law, and improve service reliability using aggregated or deidentified information where appropriate.
Sharing and recipients
We may share the minimum consumer health data reasonably necessary with these categories of recipients: our laboratory; hosting, database, portal, security, communications, and customer-support processors; professional advisers and insurers subject to appropriate duties; and government authorities or transaction counterparties only when legally permitted or required. We do not currently share consumer health data with a corporate affiliate. We require processors to handle the data consistently with our instructions and this policy.
Consent
Where required, we obtain affirmative consent before collecting or sharing consumer health data for a specified purpose. If we want to collect a new category or use data for a materially different purpose, we will update the notice and obtain additional consent when required. Any sale of consumer health data would require a separate, valid authorization; PlasticTox does not sell consumer health data.
How we use personal information
- process payment, fulfill and deliver orders, and administer returns;
- register kits, coordinate sample logistics, and deliver results;
- authenticate accounts and maintain the customer portal;
- answer questions and send transactional communications;
- with any consent required by law, send optional marketing communications;
- detect fraud, abuse, security incidents, and technical problems;
- measure and improve site performance, product quality, and customer experience;
- establish, exercise, or defend legal claims and comply with legal obligations.
PlasticTox does not use individual sample results for targeted advertising or make decisions about employment, credit, insurance, housing, or medical eligibility.
When information is disclosed
We disclose personal information only as reasonably necessary to the categories below:
- Processors and service providers: commerce hosting, payment processing, shipping, laboratory processing, database and cloud hosting, email, portal, analytics, security, fraud prevention, and customer support.
- Professional and legal recipients: auditors, attorneys, accountants, insurers, regulators, courts, or law enforcement when appropriate and lawful.
- Business transactions: a prospective or completed merger, financing, acquisition, reorganization, or sale of assets, subject to lawful safeguards and notice where required.
- At your direction: a person or service you affirmatively ask us to share with.
We do not sell personal information for money. We do not sell or share personal information for cross-context behavioral advertising and have not done so in the preceding 12 months. We do not knowingly sell or share the personal information of anyone under 18.
Retention and samples
We retain each category only as long as reasonably necessary for the purpose described, including providing the service, maintaining quality and transaction records, responding to disputes, meeting tax or legal obligations, and protecting the service. Retention varies by record type, the status of your account or order, laboratory workflow, consent, legal requirements, and applicable limitation periods.
Physical samples are used only for the ordered screening and related quality control. Our lab may retain a sample for the limited period reasonably needed for processing, quality review, dispute resolution, and legal obligations, then destroys or disposes of it under its applicable procedures. We do not use identifiable samples for unrelated research without separate affirmative consent.
When information is no longer required, we delete it, deidentify it, or isolate it from routine use as appropriate. Deidentified data will be maintained in deidentified form, and we will not attempt to reidentify it except as legally permitted to test our deidentification processes.
Security and breach response
We use administrative, technical, and physical safeguards designed for the nature and sensitivity of the information. No website, database, laboratory workflow, or transmission method can be guaranteed completely secure.
If a security event triggers a legal notification duty, we will investigate and notify affected individuals, regulators, or others in the manner and time required by applicable law, including the federal Health Breach Notification Rule when it applies.
Your privacy rights
Depending on where you live and subject to legal exceptions, you may have the right to:
- confirm whether we process your information and access it;
- correct inaccurate information;
- delete information, including consumer health data;
- obtain a portable copy of certain information;
- withdraw consent for future collection or sharing of consumer health data;
- opt out of sale, targeted advertising, or certain profiling—we do not currently engage in these practices;
- limit certain uses of sensitive personal information where applicable;
- appeal a decision on your request; and
- exercise rights without unlawful discrimination.
Submit a request at plastictox.vip@gmail.com with the subject “Privacy Request,” or through the customer portal. Tell us the right you want to exercise and the email associated with your order. We may verify your identity and authority before acting. An authorized agent may submit a request where permitted by law, but we may require proof of authorization and direct identity verification.
To appeal, reply to our decision within 30 days with the subject “Privacy Appeal” and explain why you believe it should be reconsidered. We will respond within the period required by applicable law and explain any further complaint options.
State-specific disclosures
Washington and Nevada. The consumer-health-data notice above describes the categories, sources, purposes, sharing, recipients, and rights associated with consumer health data. You may withdraw consent and request access or deletion as described above. If an appeal is denied, you may contact your state attorney general.
California. If the California Consumer Privacy Act applies to PlasticTox and your information, you may have rights to know, delete, correct, opt out of sale or sharing, limit certain uses of sensitive personal information, and receive equal service. The categories collected, sources, business purposes, and recipients are disclosed above. We do not sell or share personal information as those terms are defined for cross-context behavioral advertising.
Nothing in this policy limits a right that applicable law does not allow you to waive.
Age limits, third parties, and changes
PlasticTox is intended only for adults age 18 or older. We do not knowingly collect personal information from children. If you believe a child has provided information, contact us so we can investigate and take appropriate action.
Our site and portal may link to third-party services with their own privacy practices. This policy does not govern those independent services. We may update this policy as our service or legal obligations change. We will post the revised policy with a new effective date and provide additional notice or obtain consent when required.