Skip to content

Consumer Health Data Notice

Consumer Health Data Privacy Notice

LAST UPDATED: August 29, 2026

This Consumer Health Data Privacy Notice ("Notice") supplements the Pine Street Clinic Privacy Policy and applies to "consumer health data" as defined by the Washington My Health My Data Act and Nevada's consumer health data law (SB 370). It describes how Pine Street Clinic, LLC ("we", "us", "our") collects, uses, and shares consumer health data, and the rights available to Washington and Nevada residents (and to others whose consumer health data is collected in those states).

This Notice does not apply to protected health information governed by HIPAA or to medical information governed by the California Confidentiality of Medical Information Act. For information about our clinical privacy practices, see our Notice of HIPAA Privacy Practices.

WHAT CONSUMER HEALTH DATA WE COLLECT

We collect only the consumer health data reasonably necessary to provide the products and services you request. Depending on how you interact with us, this may include:

  • Purchase and order information: records of the nutritional supplements and related products you purchase, to the extent those records are considered consumer health data under applicable law
  • Communications: health information you voluntarily share with us in emails, phone calls, voicemail messages, chats, or product questions (for example, mentioning an allergy or a condition when asking about a product)
  • Customer service records: support history related to the above

We do not collect biometric data, and we do not use your precise location or attempt to identify your presence at any health care facility (no "geofencing").

WHY WE COLLECT AND HOW WE USE CONSUMER HEALTH DATA

We collect and use consumer health data only to:

  • Process, fulfill, and ship your orders, and manage returns and exchanges
  • Answer your questions and provide customer support you request
  • Notify you of product recalls or safety information
  • Maintain records as required for tax, accounting, and legal compliance
  • Prevent fraud and secure our services

We process consumer health data by collecting it through our website, ordering, and communications systems, storing it in our e-commerce and customer support platforms, and permitting access only by personnel and processors who need it for the purposes above.

SOURCES OF CONSUMER HEALTH DATA

  • Directly from you (your orders, and communications you send us)
  • From your transactions and interactions with our website

HOW WE SHARE CONSUMER HEALTH DATA

We do not sell consumer health data. We share consumer health data only with:

  • Processors and service providers acting under contract on our behalf and only as necessary to provide the services you request: our e-commerce platform (Shopify), payment processors, shipping and fulfillment carriers, email and customer support providers
  • Legal authorities where required by subpoena, court order, or applicable law

The categories of consumer health data shared with these recipients are the categories described above: purchase and order information (to the extent it constitutes consumer health data), health-related communications, and related customer service records, shared only as necessary for the functions described.

Affiliates: We do not share consumer health data with any affiliates.

ADVERTISING DISCLOSURE

Like most online stores, we share certain ordinary commercial information with advertising and analytics platforms, currently Google, Microsoft, and Shopify, to measure our advertising and to advertise our store to past visitors and customers. This information consists of hashed identifiers (such as a hashed email address) and records of orders and website activity. We do not consider this information to be consumer health data: we do not use it to draw inferences about your health status, and we do not build advertising audiences based on health conditions or the health purposes of particular products. Health information you share with us in emails, phone calls, voicemails, or chats is not shared with advertising platforms.

We disclose this advertising practice here so that Washington and Nevada residents can make an informed choice. If you prefer that we not share this information with advertising platforms, you may opt out at any time, and we honor Global Privacy Control signals:

RETENTION

We retain consumer health data under the criteria described in the Security and Retention section of our Privacy Policy: order and transaction records for as long as tax, accounting, and audit rules require, and communications and support records while your relationship with us is active plus a reasonable period afterward.

COLLECTION ACROSS WEBSITES

We do not knowingly permit third parties to collect consumer health data, as defined by applicable law, through our website, except as disclosed in this Notice and as permitted by applicable law. Third-party advertising services on our website collect ordinary browsing information over time and across websites, as described in our Privacy Policy and in the Advertising Disclosure above.

YOUR RIGHTS

If you are a Washington or Nevada resident (or your consumer health data was collected in those states), you have the right to:

  • Access: confirm whether we are collecting, sharing, or selling your consumer health data, and access it, including a list of the third parties with whom we have shared it and how to contact them
  • Withdraw consent: withdraw any consent you have given for the collection or sharing of your consumer health data
  • Review and correction: ask us to review and correct inaccurate consumer health data we maintain about you
  • Delete: request deletion of your consumer health data, including from our archives and backups (deletion from archived or backup systems may occur on the timeline permitted by applicable law), and have the deletion request passed to our processors and any third parties with whom the data was shared

We will not discriminate against you for exercising these rights.

HOW TO EXERCISE YOUR RIGHTS

Submit a request by emailing hello@pinestreetclinic.com with the subject line "Consumer Health Data Request", by using our Data Requests page, or by calling (800) 456-9654. We will need to verify your identity using information associated with your account or order before acting on a request.

We will respond without undue delay, and no later than 45 days after we receive and are able to authenticate your request. Where permitted by law, this period may be extended once by an additional 45 days when reasonably necessary; if so, we will notify you of the extension and the reason within the initial 45-day period.

APPEALS

If we decline to act on your request, you may appeal by replying to our response or by emailing hello@pinestreetclinic.com with the subject line "Consumer Health Data Appeal" within a reasonable period after receiving our decision. We will respond to your appeal in writing within 45 days (Washington) or as otherwise required by your state's law, including an explanation of the reasons for our decision. If your appeal is denied, you may contact your state Attorney General:

CHANGES TO THIS NOTICE

We may update this Notice from time to time. We will post the updated Notice on this page with a new "Last Updated" date, and where changes are material, we will provide additional notice and obtain any consent required by law before applying new practices to previously collected consumer health data.

CONTACT US

Email: hello@pinestreetclinic.com
Toll Free: (800) 456-9654
Local: (415) 485-0484
Mail: Pine Street Clinic, 124 Pine St, San Anselmo, CA, 94960