Consumer Health Data Privacy Policy

This Consumer Health Data Privacy Policy applies to "consumer health data" as defined under state consumer-health-data laws, including the Washington My Health My Data Act, the Nevada consumer health data law (SB 370), and the Connecticut Data Privacy Act's health-data provisions. It supplements our general Privacy Policy. Where this policy and the general Privacy Policy conflict as to consumer health data, this policy controls.

Who we are

MyStaq Health LLC ("MyStaq," "we," "us") operates mystaqhealth.com. Contact: contact@mystaqhealth.com.

What "consumer health data" means

Information that identifies your past, present, or future physical or mental health status, including health conditions and symptoms, and any health-related inferences we derive from the information you give us.

Categories of consumer health data we collect

• Health goals and the health concern you select (e.g., energy, sleep, cycle support).
• Symptom information you enter in the quiz.
• Age range and biological sex.
• Diet and lifestyle information you enter in the quiz.
• The supplements and medications you enter into the Interaction Checker or the quiz safety step. NOTE: medication and supplement entries used for interaction checking are processed transiently to generate your report and are NOT stored or linked to your identity. See "Data we do not retain" below.
• Health-related inferences we generate to build your recommendation (e.g., a likely nutrient focus).

How we collect it

We collect this data directly from you, when you choose to use the quiz or the Interaction Checker. We do not buy consumer health data or obtain it from data brokers.

Why we collect it (purposes)

• To generate your personalized supplement recommendation (the service you requested).
• To run the Interaction Checker report you requested.
• Only with your separate opt-in consent, given after you receive your results or anytime in your account settings: to retain de-identified quiz responses to improve our recommendation engine.

We do NOT use consumer health data for advertising, and we do not profile you for ads.

How we share it

We do not sell your consumer health data. We do not share it for advertising or for any third party's own purposes. We share it only with service providers that host and operate our platform, and only as needed to provide the service to you; these providers are contractually restricted to using it solely on our behalf.

We do NOT share your consumer health data with the suppliers who ship your orders. Those suppliers receive only your name and shipping address, never your quiz answers, symptoms, or medications.

Specific third parties / affiliates

We do not share consumer health data with any third party or affiliate for that party's own use. The only recipients are the service providers that operate our platform on our behalf: Replit for cloud hosting and infrastructure. These providers are contractually restricted to using consumer health data solely to provide services to us. We do not share consumer health data with our payment processor or with the suppliers who ship your orders; those parties never receive your quiz answers, symptoms, or medications.

Data we do not retain

Medications and supplements entered into the Interaction Checker (and the quiz safety step) are used only to generate your report and are discarded at the end of your session. We do not store them, and we do not associate them with your name, email, or account.

How long we keep consumer health data

Quiz responses are associated with a random session identifier, not your name or email, unless you provide contact details or place an order. If you do not opt in to engine improvement, we retain quiz responses only as long as needed to deliver your recommendation. If you opt in, we retain de-identified responses for up to 12 months, after which they are deleted or anonymized.

Your rights

You have the right to (1) confirm whether we collect, share, or sell your consumer health data; (2) access the consumer health data we hold about you; (3) have it deleted; and (4) withdraw your consent to our collection or sharing at any time. To delete saved results and email-list data, use our delete my data page. To exercise another right, email contact@mystaqhealth.com. We will respond within 45 days. Where your state allows an appeal of a denied request, you may appeal by replying to our decision.

Consent and withdrawal

We collect consumer health data to provide the service you request. For any use beyond providing that service (such as engine improvement), we ask for your separate, opt-in consent, which is offered after you receive your results or anytime in your account settings, and which is never a condition of using MyStaq. You may withdraw consent at any time by emailing contact@mystaqhealth.com or by turning it off in your account settings; withdrawal does not affect processing that already occurred.

No geofencing

We do not use geofencing around any health care facility to identify, track, collect data from, or send notifications to consumers.

Security

We use encryption in transit and at rest and maintain reasonable administrative, technical, and physical safeguards for consumer health data.

Changes

If we materially change how we handle consumer health data, we will update this policy and its date and provide additional notice where required.

Contact

MyStaq Health LLC
contact@mystaqhealth.com