This Consumer Health Data Privacy Policy supplements our Privacy Policy and applies to consumer health data as that term is defined by the Washington My Health My Data Act (RCW 19.373) and the Nevada Consumer Health Data Privacy Law (SB 370). If you are a resident of Washington or Nevada, this policy describes how Pacific Shores Research Group, LLC (“Raeliva,” “we,” “us”) handles consumer health data, and the rights you have over it.
Scope: which data this policy covers
This policy covers all consumer health data that Pacific Shores Research Group holds — whether it came from our marketing pages, from your progress through our intake form, or from the limited patient record that CareValidate sends us. Specifically, it covers the categories listed in the next section.
It does not cover your clinical record: your medical history, your questionnaire answers, your prescription, your dose, or your consultation. Those are held by CareValidate Incorporated and its affiliated medical practice, which are the responsible parties for that information under their own privacy practices and the laws that apply to them. It also does not cover your payment card details, which we never receive. See How This Site Works for the full division of responsibility.
Categories of consumer health data we collect
- Information you volunteer to us — your name, email address, phone number, and anything you tell us in a contact form, email, SMS, or chat message, including statements about your health goals, weight, medications, or interest in a specific treatment category (for example, weight loss or longevity).
- Which treatment you were interested in — the category you selected in our intake form, and when you started and completed it. Because the categories are treatments, this indicates an interest in a health condition, and we treat it as consumer health data.
- Your eligibility outcome — if screening determined that treatment was not appropriate for you, we record only that fact, so that we stop marketing you a treatment you cannot receive. We do not record why. The reason, and the conditions you reported, stay in your clinical record with CareValidate.
- Your treatment and order status — the limited record CareValidate sends us: whether treatment was approved, your visit type, and your order and payment counts, including the dates of your first and most recent payment.
- Inferences drawn from your browsing — the pages you view on our site can indicate an interest in a health condition or treatment. Where that inference relates to your past, present, or future physical or mental health status, we treat it as consumer health data.
- Technical and device information — IP address, device and browser type, and cookie or pixel identifiers collected when you visit our pages, to the extent that data is linked or reasonably linkable to you and to the health inferences described above.
We do not collect biometric data, precise location data, or genetic data. We do not hold your medical history, your questionnaire answers, your prescription, your dose, your date of birth, your street address, or your payment card details.
Sources of consumer health data
- Directly from you, when you submit a form, subscribe, or message us.
- Automatically from your device, through cookies, pixels, and analytics tools when you use our website, where you have given us permission to do so.
- From your progress through our intake form, including the treatment category you chose and your eligibility outcome.
- From CareValidate, which sends us the limited patient record described above so that we can send you service and marketing communications.
- From advertising and analytics partners who tell us how you arrived at our site.
Why we collect and use it
- To respond to your questions and provide the information or support you asked for.
- To send you service messages about treatment you have started — order confirmations, shipping and tracking updates, and refill reminders. These relate to a transaction you asked us to carry out, and you receive them whether or not you have opted into marketing.
- To send you marketing messages, only where you have agreed to receive them. You can withdraw that agreement at any time, and doing so does not stop the service messages above.
- To follow up if you started an intake form and did not finish it, so that you can pick up where you left off.
- To avoid marketing a treatment to you that a provider has already determined is not appropriate for you.
- To operate, secure, debug, and improve our website.
- To measure the performance of our marketing and understand which pages are useful.
- To show you relevant advertising about our services on other platforms, where permitted.
- To comply with legal obligations and enforce our Terms & Conditions.
We do not use consumer health data to make decisions about your medical eligibility — those decisions are made by licensed clinicians, and the clinical record behind them is held by CareValidate.
Who we share it with
We share consumer health data only with the categories of recipients below, and only for the purposes described above:
- Analytics providers, which help us understand website traffic and performance.
- Advertising and marketing platforms, which help us reach and measure audiences.
- Technology service providers, including hosting, email, SMS, and customer-support vendors that process data on our behalf under contract.
- CareValidate Incorporated and its affiliated medical practice, when you choose to begin a consultation and your information is passed into the intake flow.
- Legal and safety recipients, when required by law, subpoena, or to protect rights and safety.
- A successor entity, in connection with a merger, acquisition, or sale of assets.
Sharing is not the same as selling, and we want to be precise about both.
We do not sell consumer health data. Under the Washington My Health My Data Act and the Nevada Consumer Health Data Privacy Law, to “sell” consumer health data means to exchange it for monetary consideration — being paid for it. We are not paid for your consumer health data, we do not accept anything of value in exchange for it, and we have never collected or processed the signed authorization those laws require before a sale could lawfully occur.
We do share consumer health data, with the categories of recipients listed above, for the purposes described earlier in this policy. Where the law requires your consent before we collect or share it, we ask for that consent first, and you can withdraw it at any time — see Your Privacy Choices and the “Your rights” section below.
Your rights
If you are a Washington or Nevada resident, you have the right to:
- Confirm whether we are collecting, sharing, or selling your consumer health data, and to access that data.
- Obtain a list of all third parties and affiliates with whom we have shared your consumer health data, along with an active contact for each.
- Withdraw your consent to our collection and sharing of your consumer health data.
- Delete your consumer health data, including from our archived and backup systems, subject to the limited exceptions the law allows.
- Not be discriminated against for exercising any of these rights.
How to exercise your rights
Email support@raeliva.com with the subject line “Consumer Health Data Request.” Tell us which right you want to exercise and give us enough information to locate your records.
We will verify your identity before acting on your request, and we will respond within 45 days. If we need more time, we will tell you why and take no more than an additional 45 days. An authorized agent may submit a request on your behalf with written permission that we can verify.
Appeals. If we decline your request, we will explain why. You may appeal by replying to our decision or emailing support@raeliva.com with the subject line “Consumer Health Data Appeal.” We will respond to an appeal within 45 days. If your appeal is denied, Washington residents may file a complaint with the Washington State Attorney General, and Nevada residents may file a complaint with the Nevada Attorney General.
Changes to this policy
We will post any changes to this policy on this page and update the “Last updated” date above. If the changes are material, we will obtain your consent where the law requires it.
Contact us
Pacific Shores Research Group, LLC 4993 Niagara Ave, Suite 206 San Diego, CA 92107 support@raeliva.com