Consumer Health Data Privacy Notice

1Scope

Sleep Balance Academy PC provides health care and also operates public websites and a retail store. Some state laws regulate 'consumer health data' that is outside HIPAA, including information that may reveal or permit an inference about a person's health interest before a clinical relationship begins. This Notice applies only to information that qualifies as consumer health data under an applicable law and is not otherwise exempt because it is protected health information or another category governed by a more specific health privacy law. When information is protected health information created or maintained in connection with patient care, our Notice of Privacy Practices governs.

2Categories of Consumer Health Data

Depending on the context, consumer health data may include:

• Health-related information you voluntarily enter in a public inquiry, intake request, product question, or other pre-patient communication.
• Public-site browsing, searches, product views, purchases, or other activity that applicable law treats as revealing or supporting an inference about a health condition, symptom, treatment interest, bodily function, or request for health care.
• Contact, account, device, and transaction information when it is linked to information that qualifies as consumer health data.
• Inferences derived from information above when applicable law treats the inference itself as consumer health data.

3Sources

We obtain consumer health data from you; from your browser or device when you use relevant public pages; and from processors or service providers that perform a transaction, security, fulfillment, or communications function for us. We do not purchase consumer health data from data brokers.

4Purposes for Collection and Use

We collect and use consumer health data only as permitted by applicable law, including as reasonably necessary to provide a product or service you request; respond to an inquiry; facilitate a request for care; fulfill, support, return, or recall a product; secure the service and prevent fraud; satisfy legal or regulatory duties; or for another purpose for which any required consent has been obtained.

5Sharing

We may disclose consumer health data to processors and service providers that need it to perform a specific function for us, such as hosting, security, payment processing, fulfillment, shipping, communications, or customer support, subject to appropriate contractual restrictions. We may also disclose information when required or expressly permitted by law, legal process, or a safety obligation. We do not disclose consumer health data to advertising networks, data brokers, or social-media advertising platforms for their independent advertising, audience-building, or profiling purposes. Third-party advertising technology, where used on public pages, is not permitted to transmit health-related search terms, care-seeking activity, clinical information, order contents that reveal health information, or other consumer health data.

6Sale and Geofencing

SBA does not sell consumer health data for money or other consideration. We do not use geofencing around health care facilities to identify or track a person seeking health care, collect consumer health data, or target advertising based on a person's presence at or near a health care facility.

7Consent

Where applicable law requires affirmative consent before collection or sharing for a particular purpose, we request that consent separately and describe the purpose before the activity occurs. A general website consent is not treated as a substitute for a separate authorization when a statute requires a more specific form of authorization.

8Your Rights

Depending on applicable law, you may have the right to confirm whether we collect, share, or sell consumer health data; access the data; obtain information about the categories and specific third parties or affiliates that received it; withdraw consent; request deletion; and appeal a refusal to act on a request. To exercise a right, email support@sleepbalanceacademy.com with the subject line 'Consumer Health Data Request.' Include the email address or other information reasonably necessary for us to locate the relevant record. We may verify your identity or authority before providing or deleting information. We will not unlawfully discriminate against you for exercising a right.

9Retention and Security

We retain consumer health data only for as long as reasonably necessary for the authorized purpose and any legal, safety, fraud-prevention, or recordkeeping obligation. We use safeguards appropriate to the sensitivity of the information and limit access to people and service providers with a legitimate need for it.

10Changes and Contact

We may update this Notice to reflect changes in law or our practices. Where a law requires consent before applying a materially different practice to consumer health data, we will obtain that consent before the new practice begins. Consumer health data requests: support@sleepbalanceacademy.com Sleep Balance Academy PC 350 W 6th #151 Dubuque, IA 52004