Consumer Health Data Privacy Notice

This Notice describes how Beyond Healthy collects, uses, and shares consumer health data, and the rights you have over that data. It is provided under state consumer-health-data laws, including the Washington My Health My Data Act and Nevada Senate Bill 370, and it applies to consumer health data that is not governed by HIPAA. Beyond Healthy provides non-medical health education and wellness consulting; it does not bill health insurance, and the data described here is not "protected health information" under HIPAA.

Consumer health data we collect

• Information you provide — application and intake responses, health history and goals you share, medications and supplements you disclose, and what you tell us in sessions and messages.
• Session records — notes and, with your consent confirmed at the start of each session, session recordings used to prepare notes and action items.
• Wearable and monitoring data — measurements from consumer devices used in the engagement, such as heart-rate variability, sleep, heart rhythm, and blood-pressure readings.
• Wellness panel results — results of consumer-initiated panels you order in connection with the engagement, which may include nutrient, hormone, gut, toxin-burden, methylation, genetic, and cognitive-performance data.
• Inferences — patterns and educational insights drawn from the data above in order to structure your program.

We do not collect your precise location, and we do not use geofencing of any kind.

Why we collect it

We collect and use consumer health data for one purpose: to deliver the services you have requested — designing and calibrating your program, preparing your reports and reviews, coordinating testing and logistics, communicating with you, and meeting our legal and safety obligations. We collect only what is reasonably necessary for those purposes. We do not use your consumer health data for advertising, and we do not sell it. If we ever wished to use your data for a purpose beyond delivering the services, we would ask for your separate consent first.

Who we share it with

We share consumer health data only as needed to deliver the services, with:

• Laboratories and testing platforms that process the panels used in your engagement, including the independent licensed physicians engaged by those platforms to authorize and review testing where the law requires.
• Independent licensed providers you choose to engage at your direction — for example, IV-therapy providers, imaging centers, or a licensed phlebotomist.
• Service providers that operate under our instructions and confidentiality obligations — scheduling, client-records, communication, payment, transcription, and secure storage vendors.
• Legal recipients where disclosure is required by law or legal process.

We do not sell consumer health data, and we will not sell it without the signed authorization those laws require. We do not share consumer health data with affiliates for their own use, and we do not share it with advertisers.

Your rights

• Access — you may ask what consumer health data we have collected about you, and with whom it has been shared.
• Deletion — you may ask us to delete your consumer health data, including from our service providers and backups within the timeframes the law allows.
• Withdraw consent — you may withdraw your consent to our collection or sharing of your consumer health data at any time. Because the engagement runs on this data, withdrawing consent may limit or end the services we can provide, but the choice is always yours and exercising it will never result in different pricing or retaliation.

To exercise any of these rights, email [email protected] with the subject line "Health Data Request." We will confirm your identity and respond within forty-five (45) days.

Appeals

If we decline a request, you may appeal by replying to our response with the subject line "Health Data Appeal." We will respond to an appeal within forty-five (45) days with a written explanation. If you are a Washington resident and are dissatisfied with the outcome, you may contact the Washington State Attorney General at atg.wa.gov. Residents of other states may contact their state attorney general.

How we protect and keep data

We apply administrative, physical, and technical safeguards to consumer health data, including access controls and encrypted transmission and storage where practicable. Access within the practice is limited to personnel who need it to deliver your services. We retain consumer health data for the duration of your engagement and thereafter only as long as needed for the purposes above or as the law requires, after which it is deleted or de-identified.

Changes to this Notice

If we make material changes to this Notice, we will post the updated version at this address with a new effective date and, for active clients, notify you directly before the changes apply to you.