Consumer Health Data Privacy Policy

1. What Is Consumer Health Data?

Under the My Health My Data Act, “consumer health data” means personal information that is linked or reasonably linkable to a consumer and that identifies the consumer's past, present, or future physical or mental health status. This includes information that may be derived or inferred from non-health data when used to associate a consumer with health information.

2. Categories of Consumer Health Data We May Collect

We may collect the following categories of consumer health data:

• information indicating your interest in specific health treatments, such as peptide therapy, cognitive performance support, or related services — derived from your form submissions and the specific pages you visit on our website; and
• contact information (name, email) submitted in connection with a request for a health-related evaluation.

3. Sources of Consumer Health Data

We collect consumer health data from the following sources:

• directly from you, when you submit a form expressing interest in our services; and
• automatically, through website analytics that record which health-specific pages you visit.

4. Purposes for Collection

We collect consumer health data for the following purposes:

• to process your request for a clinical evaluation;
• to connect you with independently licensed healthcare providers;
• to communicate with you about services you have expressed interest in; and
• to improve our website and services.

5. Third Parties with Whom We Share Consumer Health Data

We share consumer health data with the following categories of third parties:

• CareValidate — our clinical infrastructure partner, for the purpose of routing your evaluation request to licensed healthcare providers and coordinating pharmacy fulfillment. Contact: carevalidate.com
• CRM Provider (to be designated) — for the purpose of managing communications related to your request.
• Email Service Provider (to be designated) — for the purpose of sending communications you have requested or consented to.
• Google (Ads Conversion Tracking) — receives only a click identifier and conversion signal for the purpose of measuring advertising effectiveness. No consumer health data, page URLs, or personal identifiers are shared with Google.
• Meta (Ads Conversion Tracking) — receives only a click identifier and conversion signal for the purpose of measuring advertising effectiveness. No consumer health data, page URLs, or personal identifiers are shared with Meta. We do not use Meta Pixel or Meta tracking technologies on health-related pages of our website.

We do not share consumer health data with advertising networks, data brokers, or any entity for purposes unrelated to the delivery of healthcare services.

6. Sale of Consumer Health Data

We do not sell consumer health data. We will not sell your consumer health data without first obtaining your separate, signed authorization as required by the Washington My Health My Data Act.

7. Your Rights Under the My Health My Data Act

• Right to know: You may request confirmation of whether we are collecting, sharing, or selling your consumer health data, and access a list of all third parties and affiliates with whom your individual data has been shared, including their contact information.
• Right to withdraw consent: You may withdraw your consent to the collection and sharing of your consumer health data at any time.
• Right to delete: You may request deletion of your consumer health data. Upon receiving a verified request, we will delete the data from our active systems and, within a commercially reasonable timeframe, from archives and backups. We will also notify all third parties who received your data and direct them to honor the deletion request.

8. Response Timeline

We will respond to verified requests within 45 days of receipt.

9. Authorized Agents

You may designate an authorized agent to exercise your rights on your behalf by providing written authorization or power of attorney. We may contact you directly to verify your identity.

10. Geofencing Prohibition

We do not use geofencing technology around any healthcare facility, clinic, hospital, or provider office to identify, track, collect data from, or send notifications or advertisements to consumers. This prohibition applies to all of our marketing and advertising activities.

11. How to Exercise Your Rights

Contact us at privacy@haylinghealth.comwith the subject line “WA Health Data Request.” We may ask you to verify your identity before fulfilling your request. We will not discriminate against you for exercising any of your rights under this Act.

12. Appeals

If we decline your request, we will provide a written explanation. You may appeal our decision by contacting us at the same email address with the subject line “WA Health Data Appeal.”

13. Changes to This Policy

We will provide you with notice before making material changes to this Consumer Health Data Privacy Policy.