CONSUMER HEALTH DATA PRIVACY POLICY

# Consumer Health Data Privacy Policy

**Inter Tribal Beauty (ITB)**

**Effective date:** June 9, 2026

 **Publishing requirement (Washington My Health My Data Act, RCW 19.373):** This is a standalone policy. Publish a distinct, prominent link to it on your homepage, separate from the general Privacy Policy link. Do not merge it with your general policy and do not add marketing language. Under the Act, this policy may contain only the information the Act requires.

This Consumer Health Data Privacy Policy describes how Inter Tribal Beauty ("ITB," "we," "us") collects, uses, and shares consumer health data of Washington residents under the Washington My Health My Data Act.

Categories of consumer health data we collect

- Information about your skin condition, skin type, and skin concerns
- Allergies, sensitivities, and adverse reactions you report
- Information about the aesthetic, skincare, Reiki, or wellness services you seek or receive
- Information you provide in intake, consultation, or booking forms related to your health, wellness, or treatment needs
- Product and service preferences that relate to a health or wellness condition

Categories of sources from which we collect consumer health data

- Directly from you, when you complete intake or consultation forms, book a service, purchase products, or communicate with us
- Automatically, through your interactions with our website and booking tools
- From third parties that help us provide our products and services, such as our booking and payment providers

Purposes for collecting and using consumer health data

- To provide the products and services you request
- To assess suitability and personalize the services and product recommendations you ask for
- To follow up on services and support your care
- To maintain safety, including responding to allergies, sensitivities, or adverse reactions
- To keep records as required for our business and legal obligations

Categories of consumer health data we share

[Confirm and edit to match your actual practice. If you do not share consumer health data except with the processors below, state that here.] We share consumer health data only as needed to provide the products and services you request and to operate our business. We do not sell consumer health data, and we do not share it for advertising purposes.

Categories of third parties and specific affiliates with whom we share consumer health data

- **Service providers (processors) acting on our behalf**, which may include our booking/scheduling platform [INSERT NAME], our payment processor [INSERT NAME], and our website host [Wix], each of which uses the data only to perform services for us
- **Specific affiliates:** [List the legal name of any affiliated entity you share with, for example a related business or practitioner. If none, state "None."]

Your rights under the My Health My Data Act

If you are a Washington resident, you have the right to:

- **Confirm** whether we are collecting, sharing, or selling your consumer health data, and to access that data
- Obtain a **list of the third parties and affiliates** with whom we have shared your consumer health data, and a way to contact them
- **Delete** your consumer health data
- **Withdraw consent** to our collection or sharing of your consumer health data
- Not be **discriminated against** for exercising any of these rights

## How to exercise your rights

Submit a request to [INSERT DEDICATED CONTACT EMAIL OR REQUEST LINK]. We will respond without undue delay and within 45 days of receiving your request. We may extend this period by an additional 45 days when reasonably necessary, and we will tell you if we do. We may need to verify your identity before completing your request.

How to appeal

If we deny your request, you may appeal by contacting us at [INSERT APPEAL CONTACT]. We will respond in writing with our decision and the reasons for it. If your appeal is denied, you may contact the Washington State Office of the Attorney General.