Washington State Consumer Health Data Privacy

Washington State Residents Only

Consumer Health Data Privacy Notice

This notice supplements our Online Privacy Notice and applies to personal information defined as “consumer health data” subject to the Washington State My Health My Data Act (MHMDA). Because the definition of consumer health data under the MHMDA is broad, many of the categories of data we collect could be considered consumer health data.

Examples of consumer health data include information about your health-related activities, conditions, diseases, symptoms, status, diagnoses, testing, or treatments. For example, we may collect information about your level and nature of activity such as heart rate, number of steps, measurements of bodily functions, vital signs, symptoms, measurements, or characteristics, including photographs.

We collect and use consumer health data as reasonably necessary to provide you with the products and services you have requested or authorized. This may include fulfilling and delivering requested products and services and their features; personalizing certain features of the products or services; completing requested transactions; ensuring the secure and reliable operation of the services and the systems that support them; communicating with You; fulfilling product purchases and processing payments; purposes of de-identification of personal information; collecting, evaluating, and monitoring reports of undesirable events during or after use of our products and services; understanding how our products and services are used, troubleshooting, and improving the products and services, and other essential business operations that support the provision of the services (such as analyzing our performance, complying with laws and regulations and meeting our legal obligations, corporate governance (including mergers, acquisitions, divestitures, and other corporate restructurings), enforcing our Terms of Use and other service or program-specific terms, developing our workforce, and conducting research and development).

We use consumer health data for other purposes for which we give you choices and/or obtain your consent as required by law – for example, advertising and marketing purposes.

Sources of Consumer Health Data

As described further in the ”How We Collect Personal Information”  section of the Privacy Notice, we collect personal information (which may include consumer health data) directly from you (i.e., information you provide when you interact with Us, such as creating an account, subscribing to our emails or other marketing subscriptions, making purchases, user generated content (e.g., leaving ratings or reviews), provide the information in connection with surveys or research, or otherwise during your  use of our websites and Services); information we observe or collect automatically from your  interactions with our products and services (e,g, such as via cookies (and other similar technologies)); and personal information from third parties, including publicly available sources.

Our Sharing of Consumer Health Data

In connection with the purposes described above, we disclose all the categories of consumer health data we collect with third parties as summarized in this section.  For more information please see “How We Share Personal Information” in our Privacy Notice. For example, some of the features and functionality on our site are provided by our third party service provider(s)/data processor(s).  For example, when you take a product quiz or engage with our chat tools, our service provider/data processor will have access to consumer health data. If you make a purchase, we will share information about the transaction as necessary to process the payment, including to protect against fraud, and to ship the product to the selected address. We may also disclose data when we believe that doing so is necessary to comply with applicable law or respond to valid legal process. In some cases, consumer health data is shared with third parties for that third parties’ own use (see Other Third Parties, such as Ad Networks and Advertising Companies, below).

We share consumer health data with the following categories of third parties:

Service providers. Vendors or agents (“processors”) working on our behalf may access consumer health data for the purposes described above. For example, companies we’ve hired to provide customer service support, to provide digital and e-commerce services, to provide marketing technologies that help Us deliver our campaigns and analyze effectiveness, and to provide other technical services such as assisting in protecting and securing our systems and services.

Business partners. We may share consumer health data with other companies, for example, where you use a service that is cobranded and jointly operated with another company, or where you use our services to interact with another company.  

Financial institutions & Payment Processors. When you make a purchase or enter into a financial transaction, We will disclose payment and transactional data to banks and other entities as necessary for payment processing, fraud prevention, credit risk reduction, analytics, or other related financial services.  If you use a third-party service to checkout – such as Apple Pay or PayPal – information is shared with those third parties to complete Your requested transaction.

Parties to a Corporate Transaction. We may disclose consumer health data as part of a corporate transaction or proceeding such as a merger, financing, acquisition, reorganization, bankruptcy, dissolution, or a transfer, divestiture, or sale of all or a portion of our business or assets.

Other members of Lift Brands family may access consumer health data about you when they perform services on our behalf.  

Government Agencies. We transfer and disclose information to third parties to comply with our legal and compliance obligations, when we believe that the law requires it, or at the request of governmental authorities conducting an investigation.  

Other Third Parties. In certain circumstances, it may be necessary to provide data to other third parties, for example, to (i) comply with the law or to protect our rights or those of our customers; (ii) prevent, detect investigate, and respond to fraud, unauthorized activities and access, illegal activities, and misuse of the services; (iii) respond to situations involving potential threats to the health, safety, or legal rights of any person or third party; or (iv) enforce, and detect, investigate, and take action in response to, violations of our Terms of Use or other applicable terms.  We also disclose information related to litigation and other legal claims or proceedings in which we are involved, as well as for our internal accounting, auditing, compliance, recordkeeping, and legal function.  

Other Users and Individuals. If you use our services to interact with other users of the service or other recipients of communications, such as during a 1:1 consultation, we will share data, including consumer health data, as directed by you and your interactions.

Other Third Parties, such as Ad Networks and Advertising Companies.  We share or make available consumer health data (e.g., identifiers, internet and network browsing activities, commercial information, inferences) with third party marketing and advertising networks and social media platforms to service tailored and personalized advertisements on other websites and services and across other devices you may own.  When you use our sites and services, we use cookies (or other similar technologies) provided by third parties. Information collected by these third parties is used to build a profile of your interest to show you relevant advertising on other websites or to other devices connected to you (cross-device advertising) by Us or other companies.  These companies use personal information they receive to improve their own products and optimize their own ad targeting systems. 

The public. you may select options available through our services to publicly display and disclose certain information, such as Your profile, ratings & reviews, demographic data, content and files, or geolocation data, which may include consumer health data.

Updates to this Notice

Please note, we may change information in this Privacy Notice at any time and any changes will be effective immediately upon the publication of revisions.

How to Exercise Rights Available to You

MHMDA provides certain rights with respect to consumer health data, including rights to: request confirmation whether we are collecting, sharing, or selling Your consumer health data; access your consumer health data; access a list of the third parties and affiliates with whom your consumer health data has been shared or sold and an email address or other online mechanism you may use to contact such third parties; request we delete your consumer health data; and withdraw consent to collection, sharing, or selling of Your consumer health data (including to withdraw an authorization for the ‘sale’ of consumer health data to third parties), subject to certain exceptions. 

If your request to exercise a right under the MHMDA is denied, you may appeal that decision by contacting our privacy team at privacy@liftbrands (Attn: Snap Fitness). If Your appeal is unsuccessful, you can raise a concern or lodge a complaint with the Washington State Attorney General at www.atg.wa.gov/file-complaint.

You must provide sufficient information that allows us to reasonable verify you are the person about whom we collected consumer health data.   We may not be able to respond to your request or provide you with consumer health data if we cannot verify your identity or authority to make the request and confirm the consumer health data relates to you or if we are unable to locate you in our system.  

We will ask you for the email information that you used to interact with Us or sign up for a loyalty or email or other marketing subscription.   We will use information you submit along with other information in our systems to help verify Your entity or authority to make the request and confirm that you information is in our system.   Information provided to make a request will only be used in connection with the request.  We may ask you to provide additional information so that we can properly identify You.  If you choose not to provide this information, we may only be able to process Your request to the extent we are able to identify you in our systems.  We will endeavor to respond to a verified request within 45 days.  If we require more time, we will inform you of the reason and extension in writing (including by email).  We do not charge a fee to process or respond to a verified consumer request unless it is excessive, repetitive, or manifestly unfounded.  If we determine the request warrants a fee, we will provide an explanation and a cost estimate prior to completion of the request.  You may only make a request twice within a 12-month period.

Each right may be subject to certain exceptions. You can request to exercise such rights using the various tools and mechanisms described in the  “Other State Privacy Rights” section of the Privacy Notice, or contact us. To exercise the right to revoke consent or withdraw an authorization, you may also use one of the following:

You may email us at Privacy@liftbrands.com or by contacting us using the methods in our Contact Us page.

Click on “cookie settings” or “online preferences” on the footer of a brand Site and change the setting regarding online (browsing) personal information.