Consumer Health Data Privacy Notice
Who this is for
This notice is for residents of Washington and Nevada, and for anyone else who wants to understand how we handle consumer health data. It supplements our Privacy Policy and is provided by Brand Merchants Network LLC, doing business as Yucca Health.
If anything in this notice conflicts with our Privacy Policy with respect to consumer health data, this notice governs.
What consumer health data means
Consumer health data is personal information linked or reasonably linkable to you that identifies your past, present, or future physical or mental health status.
That includes obvious things like a condition or a medication. It also includes less obvious things, such as information that can be used to infer an interest in seeking a particular kind of treatment — for example, the pages you look at on our site, or the fact that you started an intake questionnaire.
What this notice does not cover
Information held about your care by your treating clinician, provider organization, or pharmacy is protected health information under federal health privacy law and is governed by their Notice of Privacy Practices, not by this notice. Washington’s consumer health data law does not apply to that information.
This notice covers the consumer health data we collect through our website, portal, and business operations.
What we collect
Information you give us:
Answers to intake and screening questions, including medical history, current medications, and allergies
Weight and related measurements you log
Treatment goals and preferences
Messages you send us about your care
Records of medications you have received through us
Information collected automatically:
Pages you visit on our site, including treatment and product pages
Whether you started or completed an intake
Device and browser information, and approximate location derived from your IP address
Where it comes from
Directly from you; automatically from your device when you use our site; and from provider organizations, pharmacies, and service providers involved in your care and our operations.
Why we collect it
To let you request a consultation and give a clinician the information needed to evaluate you
To coordinate fulfillment and delivery of a prescription
To provide customer support and respond to your questions
To operate, secure, and improve our website and portal
To comply with legal obligations
To measure and deliver advertising, unless you turn that off
Who we share it with
We share consumer health data with these categories of recipients:
Provider organizations and clinicians, so a clinician can evaluate and treat you
Pharmacies, so a prescription can be filled and dispensed
Service providers who perform functions on our behalf under contract, including hosting, communications, customer support tooling, shipping, and payment processing
Advertising and analytics partners, unless you have turned advertising and analytics off through our privacy preference center
Legal and regulatory recipients, where required by law
A list identifying the specific affiliates and categories of third parties with whom we share consumer health data is available on request at hello@tryyucca.com.
Advertising, and your control over it
Advertising and analytics technologies are active by default when you visit our site. These technologies collect information about your device and the pages you view, and share it with our advertising and analytics partners. Because the pages you visit here can indicate an interest in treatment, the information collected this way may relate to your health.
You can turn this off at any time. Use the “Your Privacy Choices” link in the footer of any page. Your choice takes effect immediately and applies to that browser, including in your patient portal.
We also honor the Global Privacy Control. If your browser sends that signal, we treat it as an instruction to turn advertising and analytics off, automatically and without any action from you.
Turning it off stops future collection for that purpose. It does not undo collection that already happened.
We do not receive payment in exchange for your consumer health data, and we do not make it available to anyone for their own independent purposes beyond what is described in this notice.
Your rights
You have the right to:
Confirm whether we are collecting, sharing, or selling your consumer health data
Access the data we hold, including a list of the third parties and affiliates with whom we have shared it, and contact information for each
Withdraw consent to collection or sharing
Delete your consumer health data
Appeal if we decline a request
Deletion
If you ask us to delete your consumer health data, we will delete it from our records and notify our service providers, processors, and affiliates who have received it, directing them to do the same.
Some information may need to be retained where the law requires it — for example, records held by a pharmacy documenting a dispensed prescription, or records a provider organization must keep under its professional obligations. If that applies to part of your request, we’ll tell you what was retained and why.
How to make a request
Use the “Your Privacy Choices” link in the footer of any page
Email hello@tryyucca.com
Call (888) 388-1878
We will confirm receipt within 10 business days and respond within 45 calendar days. If we need more time we will tell you why, and take no more than an additional 45 days. There is no charge, and you do not need an account.
We will verify your identity before acting on a request. If someone is making a request for you, we’ll ask for proof they’re authorized.
Appeals
If we decline a request, we’ll explain why and tell you how to appeal. Send appeals to hello@tryyucca.com with the subject line “Consumer Health Data Appeal.” We will respond within 45 days.
If we deny your appeal, you may contact the Washington State Attorney General at atg.wa.gov/file-complaint or the Nevada Attorney General at ag.nv.gov.
Security
We use administrative, technical, and physical safeguards designed to protect consumer health data, including encryption in transit and at rest, access controls limiting access to those who need it, and monitoring. Our service providers are contractually required to protect it as well.
Changes
We may update this notice. If a change materially affects how we handle consumer health data, we will provide notice before it takes effect and, where the law requires, obtain your consent again.
Contact
Brand Merchants Network LLC d/b/a Yucca Health 9350 Wilshire Blvd, Suite 203 Beverly Hills, CA 90212 (888) 388-1878 hello@tryyucca.com