Consumer Health Data Privacy Policy
Effective date: November 9, 2026
This policy applies to consumers in Washington (under the My Health My Data Act) and Nevada (under SB 370), and to anyone whose consumer health data we collect in those states. It supplements our Privacy Policy.
“Consumer health data” means personal information that identifies, or could reasonably be linked to, you and that reveals your past, present or future physical or mental health, including information inferred from other data.
Consumer health data we collect, and why
| Category | Examples | Why we collect it |
|---|---|---|
| Health details you share in a story | Diagnosis, cancer type and stage, treatments, side effects, your or a loved one’s experience; photos and recordings | To prepare and publish your story as you agreed, and to contact you about it |
| Health interest suggested by what you read | Addresses and titles of the cancer-related pages you view, linked to a cookie or device ID and IP address; for subscribers Klaviyo recognizes, the pages they visit | To run, measure and improve the site, our content and our email campaigns |
| Health interest suggested by email activity | Which cancer-related emails or links you open or click | To send and improve the newsletter you asked for |
| Health details in messages, comments, online forms or event registrations | Anything you choose to tell us | To respond to you and run events |
Where it comes from
Directly from you (forms, interviews, recordings, emails, comments, event registrations); automatically from your browser or device when you use our site and open our emails (Privacy Policy, Section 1).
Who we share it with
Processors that handle it only on our instructions: WP Engine and Cloudflare (hosting), Google Analytics and Tag Manager (analytics), Microsoft Clarity (session recordings), Klaviyo (email and signup forms), Typeform (online forms), Akismet (comment spam filtering), YouTube (video playback), eWebinar (events and webinars).
Third parties: none. We do not sell consumer health data or share it with third parties.
Affiliates: we have none.
Your rights
You can:
- Confirm whether we collect, share or sell your consumer health data, and see it.
- Get a list of every third party and affiliate we’ve shared it with, and how to reach them.
- Withdraw any consent you’ve given.
- Have your consumer health data deleted, including by our processors and anyone we shared it with.
To use these rights, visit Your Privacy Choices or email connect@thepatientstory.com with the subject “Health data request.” We respond within 45 days (extendable once by 45 days when reasonably necessary, and we’ll tell you why). We won’t charge you or treat you differently.
Appeal. If we deny your request, reply to our decision to appeal. We’ll respond in writing within 45 days, explaining what we did and why. If you disagree, you can file a complaint with the Washington or Nevada Attorney General.
Changes
We’ll post changes here with a new effective date, and ask for your consent again before using consumer health data in a materially different way.
Contact
The Patient Story LLC
732 S 6th St., Suite #7477
Las Vegas, NV 89101
connect@thepatientstory.com