Washington Consumer Health Data Privacy Policy

Last Updated: June 29, 2026

This Consumer Health Data Privacy Policy ("CHD Policy") applies to "consumer health data" as defined by the Washington My Health My Data Act (RCW 19.373) and explains how OPTMZ, LLC ("OPTMZ Health," "we," "our," or "us") collects, uses, shares, and protects that data. It applies to Washington residents and to individuals whose consumer health data is collected in Washington (each, a "consumer"). It supplements, and should be read together with, our general Privacy Policy.

This CHD Policy is linked from our homepage, as required by Washington law.

How This Policy Works With HIPAA

OPTMZ Health connects consumers with independently licensed healthcare providers and pharmacies. Most of the health information involved in your care — your intake, evaluation, medical history, prescriptions, and treatment — is Protected Health Information ("PHI") governed by HIPAA and handled under the Notice of Privacy Practices of those providers and pharmacy. PHI and other information already regulated by HIPAA are exempt from the My Health My Data Act and are not covered by this CHD Policy.

This CHD Policy addresses the narrower category of consumer health data that is not governed by HIPAA — for example, information that indicates you are seeking or have sought our health-related services before you enter into a treatment relationship.

Consumer Health Data We Collect, and Why

Consumer health data subject to this policy may include:

• Information indicating you are seeking health services from us — for example, the program or health goal you inquire about or express interest in (such as weight, hormones, sexual health, skin, hair, or longevity), and the fact that you submitted an inquiry, eligibility request, or sign-up.
• Contact information you provide in connection with such an inquiry (name, email, phone, state).
• Limited device and usage information collected on our public website that, in context, may indicate an attempt to obtain health services (such as which program pages you viewed, and campaign/attribution data associated with a health-related inquiry).
• Inferences drawn from the above that are linked to you and relate to your interest in our health-related services.

We collect this data to respond to your inquiry, connect you with an independently licensed provider, provide and improve the services you request, communicate with you (with your consent for marketing), maintain security, and meet legal obligations.

We do not collect precise geolocation to identify an attempt to obtain health services, and we do not use geofencing around any health care facility.

Sources of Consumer Health Data

We collect consumer health data: (1) directly from you when you contact us, inquire, or sign up; (2) automatically from your device when you use our public website; and (3) from service providers acting on our behalf.

How We Share Consumer Health Data

We share consumer health data only as needed to provide the services you request and as described here. We share it with the following categories of third parties and affiliates:

• Our affiliates within the OPTMZ family of companies, for the purposes described in this policy.
• Website hosting and platform providers (e.g., Lovable).
• Customer-relationship and communications providers that help us respond to inquiries and manage sign-ups (e.g., HighLevel).
• Analytics providers used on our public website (e.g., Google Analytics), configured for analytics only and not deployed on pages where you submit health information or access the patient portal.
• Independently licensed healthcare providers and pharmacies with whom you choose to establish care (note: once a treatment relationship exists, that information is PHI handled under HIPAA).
• Professional advisors, and parties to a business transaction (such as a merger or acquisition), and as required by law or to protect rights and safety.

A list of the specific third parties and affiliates with whom we have shared your consumer health data, including their contact information, is available on request — email support@optmzhealth.com.

We Do Not Sell Consumer Health Data

OPTMZ Health does not sell consumer health data, and we will not sell it without first obtaining your separate, valid authorization as required by RCW 19.373.

Consent and Your Choices

We collect and share consumer health data only (1) with your consent, or (2) to the extent necessary to provide a product or service you have requested from us. We do not collect or share consumer health data for purposes beyond those described in this policy without obtaining your affirmative, opt-in consent. You may withdraw your consent at any time (see "Your Rights").

Your Washington Rights

If you are a Washington consumer, you have the right to:

• Confirm whether we are collecting, sharing, or selling your consumer health data, and to access that data;
• Obtain a list of all third parties and affiliates with whom we have shared or to whom we have sold your consumer health data, along with contact information for each;
• Withdraw consent to our collection and sharing of your consumer health data; and
• Delete your consumer health data. Upon a verified deletion request, we will delete the data from our records and notify our affiliates, processors, contractors, and other third parties with whom we have shared it to delete it as well.

How to exercise your rights. Email support@optmzhealth.com, or write to the address below. We will work to verify your request and respond within 45 days, with one 45-day extension where reasonably necessary, and will tell you if we need more time. You may designate an authorized agent to act on your behalf where permitted.

Appeals. If we decline to act on your request, we will explain why and how you may appeal. If your appeal is denied, you may contact the Washington State Attorney General at www.atg.wa.gov/file-complaint.

No discrimination / no waiver. We will not discriminate or retaliate against you for exercising these rights, and any provision that purports to waive or limit these rights is void.

Changes to This Policy

We may update this CHD Policy from time to time. When we do, we will post the revised version and update the "Last Updated" date above.

Contact Us