Consumer Health Data Notice

Last updated: 6 September 2026

A note to the site owner: this document was drafted as a solid starting point for a solo wellness practice, not as legal advice, and it has not been reviewed by an attorney. Have a lawyer licensed in your state read it before you rely on it, and delete this paragraph once you do.

Several states now regulate "consumer health data" separately from ordinary personal information, and they apply based on where you live rather than where this practice operates. Washington's My Health My Data Act and Nevada's SB 370 are the strictest of them, and this notice is written to their standard for everyone. It sits alongside the Privacy Policy.

The short version

Health information is deliberately kept out of the booking system. It is discussed in session, or collected on a separate intake form after you have booked, with your consent. Nothing about your health is sold, ever, and you can have it deleted by sending one email.

What counts as consumer health data here

Information that identifies your past, present, or future physical or mental health status. In this practice that can include:

• health and fitness goals you describe, and your general activity level;
• dietary preferences, restrictions, allergies, and intolerances;
• injuries, physical limitations, or areas of pain relevant to a balance session;
• measurements you choose to share, such as height, weight, or body composition;
• anything else about your health that you volunteer during coaching.

How it is collected

Only in two ways, and both are on purpose:

1. Directly from you, in a session. Notes may be kept so the next session picks up where this one left off.
2. On an intake form sent to you after booking, if the session calls for one. Completing it is voluntary, it explains what each question is for, and submitting it is your consent for that information to be used to coach you.

Health data is not collected from the booking form, from the website chat widget, from cookies, from trackers, or from any third-party data broker. The booking form asks for your name, email, timezone, and a brief goal, and you are asked not to include medical details there. The chat widget is built to refuse condition-specific questions rather than answer them, and it is not a channel for health information.

How it is used

To plan and adapt your sessions, to keep them safe for your body, and to track progress against goals you set. That is the entire list.

Who it is shared with

Your health data is never sold. No sale of consumer health data has occurred, and none is planned. It is not shared for advertising, and it is not disclosed to data brokers or marketing partners.

It is shared only where:

• you ask for it to be shared, for example with your physician or a Registered Dietitian on a referral, in which case you will be asked to confirm in writing first;
• a service provider needs it to operate the practice, for example the platform where intake notes are stored, under an obligation to protect it and use it for nothing else;
• the law requires disclosure, or disclosure is necessary to prevent serious harm.

Consent, and withdrawing it

Health data is collected only after you have been told what it is for, and only for the purposes described above. Consent for any new purpose would be asked for separately, in advance, and you would be free to say no.

You may withdraw consent at any time by emailing hello@example.com. Withdrawal stops future collection and use. It does not undo what has already lawfully happened, and it may mean coaching cannot safely continue.

Your rights

Regardless of the state you live in, you may:

• Access the health data held about you, and a list of anyone it has been shared with.
• Correct anything inaccurate.
• Delete it. On a deletion request, records are deleted from active systems and deletion is requested from any service provider holding a copy. Where a specific record must be retained by law, you will be told which one and why.
• Withdraw consent, as above.

Email hello@example.com to exercise any of these. Requests are answered within 45 days, and a single 45-day extension will be explained to you in advance if one is genuinely needed. There is no charge, and you will not be treated differently for asking. If a request is refused, you will be given the reason and told how to appeal; if an appeal is denied, you may complain to your state Attorney General.

Security

Health data is kept to the minimum needed, stored in access-controlled accounts protected by strong authentication, and deleted when it is no longer needed for the purpose it was collected for. No system is perfectly secure, and no claim of perfect security is made here.

Who is responsible

Coach Name Wellness is responsible for the consumer health data described in this notice. There is no separate affiliate or parent company involved. Contact: hello@example.com.