The NuChristianist

Consumer Health Data Privacy Policy

How The NuChristianist collects, uses and shares consumer health data, and how Washington and Nevada residents can use their rights.

Draft for review: the highlighted placeholders and notes must be filled in or removed before launch. Until then this page stays out of search results.

Effective date: {{EFFECTIVE_DATE}}

This policy is for people protected by Washington's My Health My Data Act and Nevada's consumer health data law. It covers "consumer health data," which means personal information that is linked to you and identifies your past, present or future physical or mental health. "I," "me" and "my" mean {{LLC_LEGAL_NAME}}, which does business as The NuChristianist. My Privacy Policy covers everything else.

The consumer health data I collect

Depending on what you choose to share, I may collect:

health goals and concerns you describe, including in a message to me;
health conditions, symptoms, diagnoses and medications you tell me about;
eating habits, food allergies and intolerances, and dietary needs;
measurements and activity details, such as weight, sleep, energy levels and exercise habits;
pregnancy, postpartum or breastfeeding status;
stress and emotional wellbeing, as they relate to your coaching goals;
photos you choose to send, such as of your meals or workouts; and
the fact that you asked about or bought a health coaching plan.

How and why I use it

I collect it only when you choose to share it with me, to get the answers or coaching you've asked for. I use it to answer your questions, decide with you whether my coaching is a good fit, create and adjust your plans, coach you, keep records of our work together, and handle payments and refunds. I don't use it for advertising, I don't sell it, and I don't make automated decisions about you with it.

Where it comes from

Directly from you, through my contact form, intake forms, coaching sessions, email and messages.
From your doctor or another provider, only if you ask me to coordinate with them.

I don't buy health data, and I don't guess at your health from your browsing.

I don't sell consumer health data. I share it only:

With service providers that store or carry it for me. These are website hosting (Vercel), contact form delivery (Slack), email and documents ({{EMAIL_PROVIDER}}), intake forms ({{INTAKE_FORM_TOOL}}), video sessions ({{VIDEO_PLATFORM}}), scheduling ({{SCHEDULING_TOOL}}), messaging (WhatsApp, owned by Meta), texts and calls (my mobile phone carrier), {{OTHER_CLIENT_TOOLS}}, and payments (Stripe). Stripe receives only what it needs to process your payment, which shows that you bought a coaching plan.
With the person who maintains this website, who can see messages sent through the contact form.
With people you ask me to share it with, such as your doctor or dietitian, and only with your consent.
In an emergency, with emergency services, if I believe someone's life or safety is in immediate danger.
When the law requires it, such as a court order, or to prevent fraud or respond to a security incident.

Any of the categories listed above may be stored by my service providers. When you ask me to share with a provider, I share only what's needed for that purpose. I have no affiliates.

Tracking across websites

This site has no third-party trackers. If you click an affiliate link to a store, the store learns that you came from my site and which link you clicked, under its own privacy policy.

Your rights

You can:

confirm whether I collect, share or sell your consumer health data, and get a copy of it;
get a list of every third party I've shared it with, and how to contact them;
review your consumer health data and ask me to correct it;
withdraw your consent, so I stop collecting or sharing it; and
ask me to delete it. I'll also tell my service providers to delete it. Copies in backups are deleted within six months. If you've bought a plan, I keep only the payment record that tax law requires, and I use it for nothing else.

How to make a request. Email {{CONTACT_EMAIL}} with the subject line "Health data request." I'll confirm your identity, usually by replying to the email address I already have for you. I'll answer every request within 45 days after I receive it. For a deletion request, I'll also finish within 30 days after I confirm your identity, if that's sooner. If I need more time for any other request, I'll tell you why within those 45 days and take no more than 45 more. Requests are free. I may charge a reasonable fee, or decline, only if a request is clearly unfounded, excessive or repetitive.

How to appeal. If I decline your request, reply to my answer with the subject line "Appeal." I'll respond in writing within 45 days and explain my decision. If I deny your appeal, you can contact your Attorney General:

Washington: atg.wa.gov/file-complaint
Nevada: Office of the Nevada Attorney General, ag.nv.gov

Changes to this policy

I'll post any change on this page with a new effective date, and I'll email current clients about significant changes. I won't collect, use or share consumer health data in new ways, or for new purposes, without telling you first and getting your consent.