Consumer Health Data Privacy Policy

Last updated: October 25, 2026

This policy explains how Majesta Health LLC ("Majesta Health", "we", "us") collects, uses and shares consumer health data as defined in Washington's My Health My Data Act (RCW 19.373), and how you can use your rights under that law. It applies to consumer health data about Washington residents and to consumer health data collected in Washington. Our Privacy Policy describes our other privacy practices.

Majesta Health is preparing to offer online weight care. Enrollment, patient accounts, telehealth visits, prescriptions and payments are not open yet, so this policy covers our website, our early-access list and our communications. Before we collect, use or share consumer health data in other ways, we will update this policy and ask for your consent where the law requires it.

1. Consumer health data we collect and how we use it

Because our service is weight care, information showing that you are interested in it, such as your email address on our early-access list, can be consumer health data. We collect the following.

Early-access list

When you join our early-access list through our launch updates page, our waitlist, guide or pop-up sign-up forms, or the email step of our online assessment, we collect:

• your email address;
• which form you used and, if you chose them, the plan option or guide you asked about and your state;
• the time you joined and the version of the consent or notice you accepted;
• details of the link that brought you to our website, such as its source, medium and campaign tags, an advertising click identifier, the first page you visited and the address of the website that referred you. Our launch updates page keeps only a short campaign code in its signup record; it does not add click identifiers, campaign tags or referrers to that record;
• whether our emails to you were accepted for sending and whether you unsubscribed, and, for our launch updates page, a one-way hash of the private unsubscribe code in our emails to you.

We use this information to add you to the list, send you a confirmation and emails about our launch, honor your unsubscribe choices, count signups by the link or ad they came from, and prevent abuse of our forms.

Online assessment answers

Our online assessment asks about your goal, height and weight, health conditions and medications. Your browser saves your answers on your device so you can continue later; you can remove them by clearing this website's data in your browser. When you submit your email address, your browser also sends your goal, body mass index and health conditions to our server. While enrollment is not open, we do not keep these answers: we keep only the early-access details listed above.

Messages you send us

If you use the chat window on our general pages or email us, including through our contact form, we receive your message, your email address if you give it, and anything you choose to include, which may be health information. Our chat provider also receives technical information about your browser and device. We use this information to answer you and to keep a record of the conversation.

Website use

• When you visit our website, our hosting provider processes your IP address, browser type and the address of the page you request, including any query string, to deliver the page, and records them in its request logs. Our launch updates pages use your IP address only in memory to limit repeated requests.
• Our hosting provider's cookieless tools measure visits on our general pages and page performance across our website, including the assessment. They are designed not to identify individual visitors.
• If you accept analytics cookies in our cookie banner, Google Analytics runs in your browser on our general pages. It receives the pages you view, device and browser information, approximate location based on your IP address and a cookie identifier. We do not send Google Analytics any event about joining our list or about starting or submitting the assessment, and it does not receive your email address or your assessment answers. Google Analytics browser code does not load on our assessment, checkout, patient welcome or account pages.
• Our launch updates pages and this policy page do not use analytics, advertising or chat tools. We do not currently use advertising pixels, and we do not send your email address or assessment answers to advertising platforms.

2. Where we get it

• From you, when you use our forms, chat window or email.
• From your browser and device, when you use our website.
• From our service providers, for example the delivery status of our emails and technical details from our chat provider.

We do not buy consumer health data.

3. Who we share it with

We do not sell consumer health data, and we do not share it with any affiliate.

Service providers that process it for us

• Vercel, our website host: the website use information described above, and the data you send through our forms while it is delivered.
• Notion, our list database: early-access list and unsubscribe records.
• Resend, our email delivery provider: your email address, the emails we send you and their delivery status.
• Google Workspace, our email inboxes: messages you send us, and internal notices of new signups and unsubscribe requests that include your email address and, for signups, your state, consent and link details, but not your assessment answers.
• Crisp, our chat provider: chat messages and browser and device information.

Third parties

• Google, for Google Analytics, only if you accept analytics cookies: the website use information described above.
• Resend, for the limited service records its terms let it use for its own purposes, such as sender and recipient addresses and activity logs used to run, secure and prevent abuse of its service.
• Government authorities, courts or others, when the law requires us to disclose it.

4. Your rights

You have the right to:

• confirm whether we collect, share or sell your consumer health data, and get access to it, including a list of all third parties and affiliates we have shared it with or sold it to and an email address or other online way to contact them;
• withdraw your consent to our collection and sharing of your consumer health data. We then stop the collection and sharing that relied on your consent, and we tell you what we have stopped and anything we keep and why;
• have your consumer health data deleted. We delete it from our records without undue delay and tell our service providers and the third parties we shared it with about your request. If some of it is in archived or backup systems, we may delay deleting it there only to enable restoring those systems, and for no more than six months after we verify your request. Some providers also keep deleted data in their trash, logs or backups for a limited time under their own retention; that does not delay deleting our records, and we will tell you what we know about it in our reply.

Unsubscribing, with the link in our emails or on our unsubscribe pages, stops our marketing emails, and we keep a record of it so that they stay stopped. It does not by itself delete your data or withdraw your consent to other uses; to do that, send us a request. A request to delete your data covers all of our ordinary records about you, including your signups and your unsubscribe record; you do not need to ask separately. After we delete them, we do not restore your data from backups or other sources to email you. If a specific legal basis requires us to keep limited information, our reply will tell you the basis, what we keep and for how long.

How to make a request

Email support@majestahealth.com from the email address your request is about, or write to Majesta Health LLC, 30 N Gould St #11161, Sheridan, WY 82801. You do not need an account. We will ask you to confirm that you control the email address, for example by replying from it. If you no longer have access to it, tell us, and we will consider another reasonable way to verify your request. We share your data with you only after we verify your request.

Requests are free up to twice a year. We respond within 45 days of receiving your request. If we need more time, we will tell you within those 45 days and explain why, and we may take up to 45 more days. We will not treat you differently because you use these rights.

Appeals

If we decline to act on your request, we will explain why. You can appeal by replying to our decision or by emailing support@majestahealth.com with "Appeal" in the subject. We will tell you in writing within 45 days of receiving your appeal what we did and why.

If we deny your appeal, you can contact the Washington State Attorney General. You can file a complaint online with the General Consumer Complaint Form, listed on the Attorney General's complaint page, or by mail using the paper form on that page, sent to 800 5th Ave. Suite 2000, Seattle, WA 98104-3188. The Attorney General's office answers questions at 1-800-551-4636 (in Washington only) and 206-464-6684.

5. Changes to this policy

If we start collecting other categories of consumer health data, or using or sharing it for other purposes, we will update this policy first and ask for your consent where the law requires it. The date at the top shows when this policy last changed.

6. Contact us

Majesta Health LLC, 30 N Gould St #11161, Sheridan, WY 82801. Email: support@majestahealth.com.