Consumer Health Data Privacy Policy

Why this page exists

Washington and Nevada have passed laws about “consumer health data”, and both require a business that collects it to publish a policy about it, separate from its general privacy policy and linked from its home page. This is that policy. It applies to everyone who uses this site, wherever you live: drawing lines by state seemed worse than simply honoring the same rules for everyone.

Consumer health data means personal information that is linked or reasonably linkable to you and that identifies your past, present or future physical or mental health status. The laws say that includes information that identifies you as someone seeking health care services, and they define “health care services” broadly: any service to assess, measure, improve or learn about a person’s physical or mental health. Health coaching is not medical care, but it is a service to improve your health, so we treat an inquiry to us as consumer health data and handle it accordingly.

What consumer health data we collect, and why

The only consumer health data this site collects is what you send through the contact form, because sending it tells us you are seeking our services. That is:

• Your name and email address
• Which of our services you are interested in, if you selected one
• Anything about your health that you choose to write in the message, which we ask you not to do: symptoms, diagnoses, medications and lab results belong in the private intake process once we are working together, not in an email

We collect it for one purpose: to read your inquiry, reply to it, and, if we go on to work together, set up that engagement. We do not use it for anything else without first asking you. We do not sell it, we do not use it to build a profile of you, and we do not use it to advertise to you.

What we do not treat as consumer health data

Our Privacy Policy describes the site-usage information collected in the background by Google Analytics, Ahrefs Web Analytics and our host, Vercel: which pages were viewed, by a browser identified only by a random number, from roughly where. Some of those pages are about health conditions and lab tests. We do not use which pages you read to infer anything about your health, we do not combine that information with contact-form inquiries, and we do not send Meta anything you type. Since October 20, 2026 the Meta Pixel runs on every page, including the journal and the pages about conditions and lab tests, so Meta is told the address of each page a browser views. Global Privacy Control, which your browser can send, switches off the Meta Pixel; it does not switch off Google Analytics or Ahrefs.

This site does not collect precise location, biometric or genetic data, reproductive or sexual health data, information about medications, or any health data derived from other information. If that ever changes, this policy will change first.

Where it comes from

From you, directly, when you fill in and send the contact form. Nowhere else: we do not buy or receive information about you from data brokers, other businesses or public records.

Who it is shared with

Your inquiry is handled by a small number of service providers that process it on our behalf, under contract, only to provide their service to us. These are processors, not recipients who may use it for their own purposes:

• Vercel: hosts the site and runs the endpoint that receives the form
• Resend: delivers the inquiry to our inbox and sends you an automated confirmation
• Google (Gmail): the inbox that receives and stores our email

One third party learns that you sent an inquiry: Meta (Instagram and Facebook), whose advertising pixel runs on a few pages of this site to measure our ads. When the form reaches us, we tell Meta that an inquiry was sent, with your email address as a one-way SHA-256 hash, your IP address, your browser and the identifiers from Meta’s own cookies; never your name, the option you chose or anything you wrote. Meta receives this as an independent company under its own terms, and may use it to measure and improve advertising. We do not ask your permission first. The laws this policy exists for say we should, and we have chosen to measure our advertising and to tell you plainly instead. If your browser sends Global Privacy Control, Meta is told nothing. We have no affiliates, and we share consumer health data with no one else.

Your rights

Over the consumer health data we hold about you, you have the right to:

• Confirm whether we collect, share or sell it, and get a copy of it
• Be told who we have shared it with, which is the processors listed above and Meta, together with an email address for each so you can contact them directly
• Withdraw from the sharing: send Global Privacy Control and Meta is told nothing about your inquiry; after the fact, email us and we will ask Meta to delete what it received
• Have it deleted, from our records, from those of the processors above and from Meta; we will pass your request to each of them
• Appeal a decision we make about any of these requests
• Not be charged for a request, and not be treated differently for making one

To exercise any of these, email the address below from the address you contacted us with, or tell us enough to find your inquiry. We will respond within 45 days, and will tell you if we need up to 45 days longer and why. If we decline a request we will say why, and you may appeal by replying to that response; we will answer the appeal within 45 days. If you are not satisfied with the outcome, you may contact the Attorney General of Washington or of Nevada, as applicable, and we will tell you how.

Changes to this policy

If we change how we collect, use or share consumer health data, we will update this policy and the date at the top of the page first, and we will not use data already collected for a new purpose without asking you.

Contact

Questions and requests about consumer health data go to the email address below. A person reads them.