Privacy Policy

Castle Biosciences, Inc. Privacy Policy

Castle Biosciences, Inc. values the privacy of patients, other customers and visitors to our website.



“Site”:  Our website at (or successor URLs)


“User(s)”: Visitors to the Site


This Privacy Policy describes what information we gather from you, how we use that information, and what we do to protect it. By using the Site, you consent to the information handling practices described in this policy.


This Privacy Policy is subject to Castle’s Terms of Use. Your use of the Site and any personal information you provide on the Site are subject to the terms of this Privacy Policy and Castle’s Terms of Use.


The Information Castle Collects:

  • User-Provided Information: You may provide to Castle what is generally called “personally identifiable” information (such as your name, email address, postal mailing address, information relating to your medical practice, home/mobile telephone number, fax number, resume, or curriculum vitae/resume) when using the Site. For example, if you use the Site to contact Castle, we will ask for your email address so that we can respond to you.


  • “Cookies” Information: When you visit the Site, we may send one or more cookies – small text files containing a string of alphanumeric characters – to your computer. Castle may use both session cookies and persistent cookies. A session cookie disappears after you close your browser. A persistent cookie remains after you close your browser and may be used by your browser on subsequent visits to the Site. Persistent cookies can be removed. Please review your web browser “Help” file to learn the proper way to modify your cookie settings. Please note that disabling cookies may prevent you from accessing some of the functionality and offerings available via the Site.


  • “Automatically Collected” Information: When you visit the Site, we may automatically record certain information from your web browser by using different types of technology, including “clear GIFs” or “web beacons.” This “automatically collected” information may include Internet Protocol address, web browser type, the web pages or sites that you visit just before or just after the Site, the pages you view on the Site, and the dates and times that you visit the Site.



The Way Castle Uses Information:

  • Castle uses the information you provide or that we collect to operate, maintain, enhance, and provide all the features and information found on the Site. We will use your email address, without further consent, for administrative purposes, for customer service purposes, and to address intellectual property infringement, rights of privacy, or defamation issues.


  • Castle uses all information that we collect to understand and analyze the usage trends and preferences of our Users, to improve the way the Site works and looks, and to create new features and functionality.


  • Castle may use “automatically collected” information to: (a) remember your information so that you will not have to re-enter it during your visit or the next time you visit the Site; and (b) monitor aggregate site usage metrics such as total number of visitors and pages viewed.


  • Castle may use your email address or other personally identifiable information to send promotional messages or otherwise contact you about our products and services or other information.



When Castle Discloses Information:

  • Castle does not share your personally identifiable information with other organizations for their marketing or promotional uses without your express consent.


  • Castle discloses automatically collected and other aggregate non-personally-identifiable information with interested third parties to assist such parties in understanding the usage, viewing, and demographic patterns for certain programs, content, services, advertisements, promotions, and/or functionality on the Site.


  • Castle works with some authorized service providers to provide website hosting and maintenance as well as other services. To the extent it is necessary for these service providers to complete their contractual obligations; these third parties may have access to or process your personally identifiable information.


  • Castle may also disclose User information if required to do so by law or in the good-faith belief that such action is necessary to comply with state and federal laws or respond to a court order, judicial or other government subpoena, or warrant. In some cases, we may make such disclosures without first providing notice to Users.


  • Castle also reserves the right to disclose User information that we believe, in good faith, is appropriate or necessary to take precautions against liability; protect Castle from fraudulent, abusive, or unlawful uses; to investigate and defend ourselves against any third-party claims or allegations; to assist government enforcement agencies; to protect the security or integrity of the Site; or to protect the rights, property, or personal safety of Castle, our Users, or others.



Your Choices:

You may, of course, decline to share your personally identifiable information with Castle, in which case we will not be able to provide to you some of the features and functionality found on the Site.


Notice of Privacy Practices under HIPAA:

Under the HIPAA Privacy Standards, you have certain rights with respect to your protected health information (PHI). You have the right to:


  • Request a copy of your PHI,
  • Receive your PHI via confidential communications
  • Receive Castle’s Notice of Privacy Practices
  • Request restrictions on the use and disclosure of your PHI
  • Amend your PHI
  • Receive an accounting of disclosures of your PHI
  • Complain
  • Be notified of a breach of your PHI


You may contact Castle Customer Service at 866-788-9007 (opt 1) or to request your medical information. We may ask you to verify your identity and to provide additional details, by completing forms, before we are able to further assist you.



Our Commitment to Children’s Privacy:

Protecting the privacy of young children is especially important. For that reason, Castle does not knowingly collect or maintain personally identifiable information on Site from persons under 13 years of age, and no part of Site is directed to persons under 13. IF YOU ARE UNDER 13 YEARS OF AGE, THEN PLEASE DO NOT USE OR ACCESS THE SITE AT ANY TIME OR IN ANY MANNER. If Castle learns that personally identifiable information of persons less than 13 years of age has been collected by the site, we will take the appropriate steps to delete this information.



Our Commitment to Data Security:

Castle uses commercially reasonable physical, managerial, and technical safeguards to preserve the integrity and security of your personal information. We cannot, however, ensure or warrant the security of any information you transmit to Castle, and you do so at your own risk. Once we receive your transmission of information, Castle makes commercially reasonable efforts to ensure the security of our systems. However, please note that this is not a guarantee that such information may not be accessed, disclosed, altered, or destroyed by breach of any of our physical, technical, or managerial safeguards.



International Visitors:

Personally identifiable information collected on the Site may be stored and processed in the United States or any other country in which Castle or its affiliates, subsidiaries, or agents maintain facilities, and by using the Site you consent to any such transfer of information outside of your country.



In the Event of Merger or Sale:

In the event that Castle is acquired by or merged with a third-party entity, we reserve the right, in any of these circumstances, to transfer or assign the information that we have collected from Users as part of such merger, acquisition, sale, or other change of control without prior notice to you.



Changes and Updates to this Privacy Policy:

This Privacy Policy may be revised periodically without further notice to you, and this will be reflected by a “last modified” date below. Please revisit this page to stay aware of any changes. In general, we only use your personal information in the manner described in the Privacy Policy in effect when we received that personal information. Your continued use of the Site constitutes your agreement to this Privacy Policy and any future revisions.


For revisions to this Privacy Policy that may be materially less restrictive on our use or disclosure of personal information you have provided to us, we will make reasonable efforts to notify you and obtain your consent before implementing such revisions with respect to such information.



Effective Date, Date Last Modified:
This Privacy Policy is effective as of June 25, 2019. This Privacy Policy was last modified of October 12, 2019. V2



Castle Contact Information:

Please contact Castle with any questions or comments about this Privacy Policy, your personal information, our third-party disclosure practices, or your consent choices at: