Consumer Health Data Privacy Policy

This Consumer Health Data Privacy Policy describes how Sacred Sun Energy Medicine™ and Antone Baillie (“Sacred Sun,” “we,” “us,” or “our”) collect, use, disclose, and protect consumer health data.

This Policy is intended to provide heightened transparency for individuals whose information may be protected by consumer-health-data privacy laws, including the Washington My Health My Data Act where applicable.

It supplements Sacred Sun’s general Privacy Policy.

What Is Consumer Health Data?

For purposes of this Policy, “consumer health data” means personal information that identifies or is reasonably linkable to an individual and that identifies or may reveal information concerning that individual’s physical or mental health status, health-related condition, behavior, symptoms, or efforts to seek health-related services where covered by applicable law.

Washington law broadly protects information that identifies a consumer’s past, present, or future physical or mental health status and information related to efforts to obtain health services. (Washington State Legislature)

Categories of Consumer Health Data We May Collect

Depending on what you voluntarily provide and the services you request, Sacred Sun may collect information concerning:

• the fact that you sought information about or requested Sacred Sun services;
• goals or reasons for seeking hypnosis, guided imagery, coaching, wellness, or related services;
• stress, sleep, habits, behavior, performance, emotional experiences, or personal concerns you choose to disclose;
• physical or mental-health information you voluntarily provide;
• appointment and service history;
• communications concerning your requested or received services;
• information reasonably necessary to determine whether Sacred Sun’s services are appropriate for you.

Sacred Sun does not request information unrelated to the purposes for which you seek its services.

Sources of Consumer Health Data

Sacred Sun may receive consumer health data:

• directly from you;
• from communications you initiate with Sacred Sun;
• through PocketSuite when you use that service to request or manage Sacred Sun services;
• from a person you authorize to communicate with Sacred Sun on your behalf.

Sacred Sun does not intentionally purchase consumer health data from data brokers.

Why We Collect and Use Consumer Health Data

Sacred Sun may collect and use consumer health data only as reasonably necessary to:

• respond to your request for information or services;
• evaluate whether Sacred Sun’s services appear appropriate for your stated goals;
• schedule and administer requested services;
• prepare for and provide requested services;
• communicate with you concerning services;
• maintain appropriate business and service records;
• protect health, safety, security, and legal rights;
• comply with applicable law.

Where applicable law requires consent for a particular collection or use, Sacred Sun will obtain that consent before engaging in that activity.

Washington law generally permits collection with consumer consent or when collection is necessary to provide a product or service the consumer requested. (Washington State Legislature)

Sharing of Consumer Health Data

Sacred Sun does not sell consumer health data.

Sacred Sun does not share consumer health data for advertising or behavioral profiling.

Consumer health data may be disclosed only when reasonably necessary to:

• PocketSuite, when information is submitted or processed through PocketSuite in connection with scheduling, service administration, or related functionality;
• service providers or processors acting on Sacred Sun’s behalf when necessary to provide requested services or securely operate applicable business systems;
• a person or organization specifically authorized by you;
• governmental, regulatory, judicial, or law-enforcement authorities when legally required;
• appropriate persons where disclosure is legally permitted and reasonably necessary to address an immediate safety concern.

Where Washington law applies, sharing that requires consent will be subject to consent separate from collection consent unless an exception applies because the disclosure is necessary to provide the service you requested. (Washington State Legislature)

Categories of Third Parties

Depending on your interaction with Sacred Sun, consumer health data may be made available to the following categories of recipients:

• scheduling and business-administration service providers, including PocketSuite;
• technology service providers acting as processors on Sacred Sun’s behalf;
• professional or legal advisers where necessary and subject to appropriate obligations;
• governmental or legal authorities when disclosure is required or legally permitted.

Sacred Sun does not currently disclose consumer health data to advertising networks or data brokers.

Sale of Consumer Health Data

Sacred Sun does not sell consumer health data.

Washington law requires a separate, signed authorization before consumer health data may be sold and imposes detailed requirements on such authorization. (Washington State Legislature)

Sacred Sun has no current business practice involving the sale of consumer health data.

Your Consumer Health Data Rights

Where applicable law provides these rights, you may request to:

• confirm whether Sacred Sun is collecting, sharing, or selling consumer health data about you;
• access consumer health data concerning you;
• obtain information about applicable third parties or affiliates with whom consumer health data has been shared or sold;
• withdraw consent to future collection or sharing when processing is based on consent;
• request deletion of consumer health data;
• appeal a refusal to act on an eligible request.

Washington law expressly provides rights to confirmation/access, withdrawal of consent, deletion, and appeal. (Washington State Legislature)

How to Exercise Your Rights

You may submit a consumer-health-data request by emailing:

sacredsunenergymedicine11@gmail.com

Please use the subject line:

Consumer Health Data Privacy Request

You may also contact Sacred Sun at:

864-453-8271

You are not required to create a new account to exercise applicable consumer-health-data rights.

Sacred Sun may request information reasonably necessary to verify your identity and authenticate the request before releasing or deleting sensitive information.

Where Washington law applies, eligible requests generally must be handled without undue delay and within 45 days, subject to a permitted extension in appropriate circumstances. (Washington State Legislature)

Deletion Requests

Where applicable law grants a deletion right, Sacred Sun will take reasonable steps required by that law to delete qualifying consumer health data from its records.

Where Washington law applies, a deletion request may also require notice to applicable processors, contractors, affiliates, or other third parties that received the data. Backup deletion may be delayed where permitted by law. (Washington State Legislature)

Deletion rights may be subject to applicable legal exceptions or obligations.

Withdrawal of Consent

Where Sacred Sun relies on consent to collect or share consumer health data, you may withdraw that consent for future collection or sharing by contacting Sacred Sun using the methods above.

Withdrawal does not necessarily affect processing that lawfully occurred before withdrawal or information that Sacred Sun is legally permitted or required to retain.

Security

Sacred Sun restricts access to consumer health data to persons or service providers for whom access is reasonably necessary for the purposes for which the data was collected or to provide a service requested by the consumer.

Sacred Sun uses reasonable administrative, technical, and organizational safeguards appropriate to the sensitivity and volume of the information maintained.

Washington law requires entities subject to the Act to restrict access and maintain reasonable security practices appropriate to the nature and volume of consumer health data. (Washington State Legislature)

Geofencing

Sacred Sun does not use geofencing technology to identify or track individuals seeking health-related services at health-care facilities or to target them based on such activity.

Washington law prohibits specified health-related geofencing practices. (Washington State Legislature)

Changes to the Categories or Purposes Described Here

Where applicable law requires affirmative consent before Sacred Sun collects, uses, or shares additional categories of consumer health data or uses existing consumer health data for materially new purposes, Sacred Sun will update this Policy and obtain the required consent before doing so.

Washington expressly imposes this requirement on entities subject to its Act. (Washington State Legislature)

Other Privacy Rights

This Consumer Health Data Privacy Policy supplements, and does not replace, Sacred Sun’s general Privacy Policy.

Other state or federal laws may provide additional rights or impose additional obligations depending on the nature of the information and the circumstances.

Contact