Consumer Health Data Privacy Notice

Why this page exists

Washington’s My Health My Data Act defines “consumer health data” broadly. It covers not just medical records but inferences that could be drawn about someone’s health — including from behavior like reading about a treatment.

We are a publisher, not a healthcare provider. We are not a HIPAA covered entity and we hold no medical records. But this site is about a mental-health treatment, and a person who subscribes to it may be researching their own condition. We take the view that the law reaches us, and we would rather over-disclose than argue about it.

What we collect

• Your email address, if you subscribe or write to us. Nothing else, unless you volunteer it in a message.
• Aggregate, non-identifying analytics — page views, referrer, country, device type, performance timings. Not linked to you and not used to build a profile. We use Google Analytics with Google Signals and ad personalization switched off and IP anonymization on, so your reading here is not fed into an advertising graph.

We do not ask for, and do not want, your diagnoses, symptoms, medications, treatment history, biometric data, precise location, or any information about care you have sought or received. There is no form on this site that asks for any of it.

Where it comes from

Directly from you, when you type it into a form or send us an email. We do not buy data, we do not enrich or append it from third parties, and we do not obtain it from data brokers.

Why we collect it

• To send you the Preparation & Integration Workbook, if you asked for it
• To send the periodic digest you subscribed to
• To reply to your message, if you wrote to us

That is the complete list. Not for advertising, profiling, or resale.

Who we share it with

We share your email address with the service providers who deliver our email, and with no one else:

• Resend — email delivery
• Vercel — hosting and performance measurement
• Google Analytics — aggregate traffic measurement. It receives page URLs and standard request data, never your email address, and never in a form we link to you.
• Cloudflare — DNS and email routing

Each acts as a processor on our instructions. None is permitted to use your data for its own advertising.

Consent

We collect your email only when you affirmatively give it to us and tick the consent box on the form. Consent is not bundled with anything else, and nothing on this site is withheld from you for declining — every article, the legal tracker and all our data stay free and open whether you subscribe or not.

You can withdraw consent at any time by unsubscribing (one click, in the footer of every email) or by writing to [email protected]. Withdrawal stops future collection and use.

Your rights

If you are a Washington or Nevada resident, you have the right to:

• Confirm whether we hold consumer health data about you
• Access it, including a list of everyone we shared it with
• Withdraw consent to its collection and sharing
• Have it deleted — including from our backups and from our processors, whom we will instruct accordingly

Write to [email protected]. We respond within 45 days, usually far sooner, and we extend these rights to everyone regardless of where they live, because running two standards is more work than running one.

If we decline a request you may appeal by replying to our decision. If we deny the appeal, Washington residents may complain to the Washington State Attorney General.

How long we keep it

Your email stays on the list until you unsubscribe or ask for deletion. Correspondence is kept while it is useful for handling a correction, then deleted. Aggregate analytics are retained only in non-identifying form.

Changes to this notice

Material changes get a new date at the top, and we notify subscribers by email rather than changing this page quietly. Our general privacy policy covers everything outside the scope of consumer health data.