Consumer Health Data Privacy Notice

Last updated: August 12, 2026

Issued Pursuant to the Washington My Health My Data Act, RCW 19.373 et seq.

This Consumer Health Data Privacy Notice (“Notice”) is published by Wellness Rated, LLC (“WellnessRated,” “we,” “our,” or “us”) pursuant to the Washington My Health My Data Act, RCW 19.373 et seq. (“MHMD Act”). This Notice applies to Washington consumers and describes how WellnessRated collects, uses, and shares Consumer Health Data, and how Washington consumers can exercise their rights under the MHMD Act.

This Notice supplements our general Privacy Policy, which is available at https://www.wellnessrated.com/privacy. For questions about our general data practices, please review the Privacy Policy. For questions specifically about Consumer Health Data, use the contact information at the end of this Notice.

1. What This Notice Covers

This Notice covers Consumer Health Data as defined by the MHMD Act. Consumer Health Data means personal information that is linked or reasonably linkable to a Washington consumer and that identifies the consumer's past, present, or future physical or mental health status. This includes information such as individual health conditions, diagnoses, symptoms, treatments, medications, bodily measurements, reproductive health information, and health-related information derived or inferred from other data.

This Notice does not cover all personal information WellnessRated collects. For a full description of our general data practices, see our Privacy Policy.

2. Who We Are

WellnessRated is a software-as-a-service review platform that allows users to publish and read reviews about wellness coaches, fitness programs, and related services. WellnessRated is not a health care provider, health plan, or health care clearinghouse and is not subject to HIPAA. WellnessRated does not provide coaching, medical advice, therapy, nutrition counseling, or other wellness services.

3. Consumer Health Data We May Collect

WellnessRated does not design the Platform to collect Consumer Health Data as a primary function. WellnessRated does not ask users to disclose health conditions, diagnoses, treatments, or other health-related information as part of the registration process or Platform functionality.

However, users may voluntarily include Consumer Health Data in Reviews, comments, profile descriptions, or other content they submit to the Platform. For example, a reviewer might mention a health condition, physical limitation, or wellness goal in the context of describing their experience with a coach. This type of Consumer Health Data is:

  • voluntarily disclosed by the user as part of their review or comment;
  • incidental to the Platform's review function; and
  • limited to what the user chooses to share.

The categories of Consumer Health Data that may appear in user-submitted content on the Platform include:

  • individual health conditions, symptoms, or diagnoses mentioned in the context of a coaching relationship;
  • physical measurements, fitness metrics, or bodily functions referenced in the context of a coaching program;
  • health-related goals or outcomes described in connection with a coaching service; and
  • other health-related information that a user voluntarily includes in a review or comment.

WellnessRated does not collect Consumer Health Data from sources other than user-submitted content. We do not purchase Consumer Health Data, obtain it from data brokers, or receive it from third-party health services.

4. How We Collect Consumer Health Data

Consumer Health Data reaches WellnessRated only through direct user submission. When a user submits a Review or other content to the Platform, WellnessRated receives and stores the content, which may incidentally include Consumer Health Data if the user chooses to include it.

We do not use tracking technologies, automated inferences, device sensors, or third-party data sources to collect Consumer Health Data independently of what users submit. We do not collect Consumer Health Data from fitness trackers, health apps, wearable devices, or other health-related technology platforms.

Separately, product analytics on the Platform are strictly opt-in: no analytics tracking occurs unless you affirmatively consent through the cookie consent tools provided on the Platform, and you may withdraw that consent at any time through the same tools. A complete description of our data practices, including limited error-monitoring and transactional billing records, is provided in our Privacy Policy.

Consent at Submission: Before submitting a Review or other content that may contain Consumer Health Data, users are presented with a disclosure and asked to provide affirmative consent. Consent is recorded server-side with a timestamp associated with the submission. This consent record is retained for a minimum of four (4) years.

5. How We Use Consumer Health Data

WellnessRated uses Consumer Health Data only as necessary to:

  1. display the Review or content the user submitted on the Platform;
  2. operate and maintain Platform integrity, including moderation and abuse detection;
  3. respond to Consumer Health Data deletion requests as described in Section 7; and
  4. comply with applicable legal obligations.

We do not use Consumer Health Data to:

  • target advertising or marketing to users based on health information;
  • make inferences about a user's health status beyond displaying what the user submitted;
  • train AI or machine learning models on Consumer Health Data that is individually identifiable; or
  • make decisions that produce legal or similarly significant effects based on Consumer Health Data.

Consumer Health Data submitted in user Reviews is displayed publicly on the Platform as part of the review content. Users should consider this before including health-related information in a review.

6. How We Share Consumer Health Data

WellnessRated does not sell Consumer Health Data. WellnessRated does not share Consumer Health Data for advertising, marketing, or cross-context behavioral advertising purposes.

Consumer Health Data may be shared only in the following limited circumstances:

Service Providers: We share Consumer Health Data with service providers that process data on our behalf, such as cloud hosting providers and moderation tools. These service providers receive Consumer Health Data only as necessary to provide their services to us, under data processing agreements that restrict their use of the data to the purposes we specify and that require them to implement appropriate security measures.

Payment Processor: Our payment processor (Paddle.com Market Limited) does not receive Consumer Health Data in connection with billing or subscription processing.

Legal Compliance: We may disclose Consumer Health Data where required by law, court order, or other valid legal process, or where necessary to protect rights, safety, or property. Where legally permitted, we will attempt to notify affected users before disclosing Consumer Health Data in response to legal process.

Business Transfers: Consumer Health Data may be transferred in connection with a merger, acquisition, or sale of assets, subject to appropriate confidentiality protections and compliance with applicable law.

We do not share Consumer Health Data with data brokers, advertising platforms, analytics platforms for cross-site tracking, or any third party for purposes unrelated to operating the Platform.

7. Your Rights Under the MHMD Act

If you are a Washington consumer, you have the following rights with respect to Consumer Health Data:

Right to Confirm and Access: You have the right to confirm whether WellnessRated is collecting, sharing, or selling your Consumer Health Data, and to access the Consumer Health Data associated with your account. To exercise this right, contact us at privacy@wellnessrated.com with the subject line “Washington Consumer Health Data Access Request.”

Right to Withdraw Consent: You have the right to withdraw consent for WellnessRated's collection of Consumer Health Data. Withdrawing consent does not affect the lawfulness of processing that occurred before withdrawal. To withdraw consent, submit a Consumer Health Data deletion request as described below.

Right to Deletion: You have the right to request deletion of your Consumer Health Data. Deletion requests under the MHMD Act are content-specific — you may request deletion of Consumer Health Data from specific content you submitted, such as a Review that includes health-related information. A deletion request for Consumer Health Data does not automatically result in deletion of your entire account or non-health-related data.

To submit a deletion request:

  1. Email privacy@wellnessrated.com with the subject line “Washington Consumer Health Data Deletion Request.”
  2. Describe the specific Review or content from which you are requesting deletion of Consumer Health Data. If possible, include the URL of the Review or the approximate date of submission.
  3. We may ask you to verify your identity before processing your request.

We will respond to verified deletion requests within forty-five (45) days of receipt. If we require additional time to fulfill your request, we will notify you within the initial 45-day period. We may extend our response by up to an additional forty-five (45) days with notice.

Upon a valid deletion request:

If Consumer Health Data is severable from the rest of the content, we will redact the health-related information while retaining the non-health-related portions of the content where permitted by our policies.

If Consumer Health Data is integral to the content and cannot be separated without rendering the content unintelligible, we may remove the content in its entirety.

We will direct our service providers that received the Consumer Health Data to delete it as well.

Note: Deletion of Consumer Health Data from a specific Review does not constitute deletion of your account. For general account deletion or deletion of personal information other than Consumer Health Data, see our Privacy Policy.

Right Not to Be Discriminated Against: We will not deny you goods or services, charge you different prices, or provide a different level of service because you exercised any right under the MHMD Act.

8. Data Security for Consumer Health Data

We implement reasonable technical and organizational safeguards to protect Consumer Health Data from unauthorized access, disclosure, alteration, or destruction. These safeguards include encrypted data transmission, access controls, authentication requirements, and system monitoring.

No security measure can guarantee complete protection. If you believe your Consumer Health Data has been compromised, contact us immediately at security@wellnessrated.com.

9. Retention of Consumer Health Data

Consumer Health Data submitted in user Reviews or other content is retained as long as the content remains on the Platform, consistent with our general data retention practices described in the Privacy Policy. Following a valid deletion request, Consumer Health Data is deleted or de-identified within the timeframes described in Section 7.

Consent records and deletion request logs are retained for a minimum of four (4) years, as required by the MHMD Act.

10. Updates to This Notice

We may update this Notice to reflect changes in the Platform, our data practices, or applicable law. The “Last Updated” date at the top of this Notice reflects the most recent revision. Material changes will be communicated through the Platform or by email. We encourage you to review this Notice periodically.

11. How to Contact Us

For questions about this Notice or to exercise your Consumer Health Data rights, contact us at:

Wellness Rated, LLC

5625 German Church Road #2191

Indianapolis, Indiana 46235

United States

Privacy and Consumer Health Data rights: privacy@wellnessrated.com

General support: support@wellnessrated.com

If you believe your rights under the MHMD Act have been violated and we have not adequately resolved your concern, you may contact the Washington State Attorney General's Office at https://www.atg.wa.gov.