Consumer Health Data Privacy Policy

Who runs this

This site is run by Pharma Coa S.L., 4354 collins avenue, Miami Beach , [email protected]. It is a publisher of information, not a clinic, and HIPAA does not count it as a covered entity. We wrote this page to meet the Washington My Health My Data Act, Nevada's consumer health data rules (NRS 603A.400 to 603A.550) and the Connecticut Data Privacy Act.

What we gather and why

You type a name, an email address (you may skip it if you choose calls and texts), a mobile number, a ZIP code and a choice from a short list of hair and scalp concerns. A choice like that can point to a health condition, or to care you are thinking about, so we treat the whole form as consumer health data. We add a log of your consent: the time, the wording versions you accepted and a shortened network address.

All of it serves one job: keeping your place on the waitlist and letting you know when a verified clinic opens near you. Every entry is wiped automatically once 12 months have passed since you signed up. Then, for 3 years, only a coded proof of consent remains, free of any name, ZIP code, concern or readable contact detail. Storage is a database kept by our hosting provider in the European Union, open only to the people who run the waitlist.

Where it comes from

You are the only source. We do not purchase lists, guess from what you browse, or collect from anywhere else.

Who else receives it

No third party or affiliate receives your consumer health data, so there is no list of recipients to show you yet. Cloudflare, Inc. hosts the database for us as a processor and works only under a contract that follows our instructions.

A partner clinic would change that, and only after your say-so: first a separate consent that names the clinic, and, if the clinic pays us for your contact, a separate signed authorization to sell, of which we would keep a copy.

Trackers

Nobody else collects consumer health data about you through this site, now or over time, on this site or elsewhere online. There are no cookies, advertising pixels or third-party scripts.

Using your rights

Send an email to [email protected] titled "Consumer health data request". You can ask whether we collect, share or sell your consumer health data, receive a copy, and see the list of third parties it went to (so far, none). You can also take back your consent, fix your data or ask us to delete it. We may ask you to write from the address you signed up with, or to confirm the mobile number you entered, so we can find your entry.

We answer in 45 days, with room for one more 45 days if we tell you the reason. Once we have confirmed your request, we delete within 30 days and ask our processors to do the same; backups can take longer, as the law permits. Two requests a year cost nothing, and asking will not change how we deal with you.

If you disagree with a refusal

Reply with "Appeal" as the subject. Our written answer, with reasons, comes within 45 days. If you still disagree, you can take it to the Attorney General of your state: Washington, Nevada, Connecticut.

When this policy changes

A change in the data we collect, our purposes or who receives the data means a new version of this page with a fresh effective date. If you gave us an email, you will hear from us, and we will ask for your consent once more before the change touches your data.