01Who this policy covers
This Consumer Health Data Privacy Policy applies to residents of Washington and Nevada and describes how Live Healthy LLC (“Living Healthy,” “we,” “us,” or “our”) collects, uses, shares, and protects consumer health data in connection with the Just Right™ wellness programs.
It supplements our general Privacy Policy, which describes our handling of all other personal information.
02Health data we collect
We collect the following categories of consumer health data:
- Bodily characteristics: your age, your body composition, and your skin tone.
- Sun exposure and seasonal factors: how much sun you get and the seasonal conditions where you are.
- Location: where you live, used to determine your latitude.
- Measurements you report: your vitamin D level, if you know it.
- Eligibility screening answers: whether you take certain medications, have certain medical conditions, are pregnant, or are breastfeeding. We use these only to determine whether you can enroll.
- Program selection and products purchased: which Just Right program you choose and the supplement protocol recommended to you, which may indicate a health interest or need.
- Inferences: the personalized recommendation we generate from the information above, which is itself health data.
03Where we collect it from
- Directly from you, through our health questionnaires, your account, your orders, and your messages to us.
- Generated by us, when we produce a personalized recommendation from your responses.
- From service providers acting on our behalf, such as our payment processor and fulfillment partner, in connection with orders you place.
04Why we collect it
We collect and use consumer health data only to:
- Determine whether you are eligible to enroll in a program;
- Generate your personalized wellness recommendation;
- Provide, fulfill, and support the program you have requested, including shipping your products;
- Deliver the program content you signed up for by email or text; and
- Respond to your questions and requests, and meet our legal obligations.
If your questionnaire answers show that you are not eligible for a program — because you are pregnant or breastfeeding, or because of another excluding condition — we delete those answers once we have determined that you are not eligible.
06We do not sell health data
We do not sell consumer health data, and we do not exchange it for anything of value. We will not do so unless you first sign a valid authorization that meets the requirements of applicable law.
07Consent and withdrawal
We collect consumer health data that is strictly necessary to provide the program you have requested. Where we collect, use, or share consumer health data beyond what is necessary to provide that program, we ask for your affirmative consent first, and we ask separately for consent to share.
You may withdraw your consent at any time by contacting us at info@joinjustright.com. Withdrawing consent does not affect processing that took place before you withdrew it. We will not deny you goods or services, charge you a different price, or provide a different level of quality because you exercised a right under this policy.
08Your rights
You have the right to:
- Confirm whether we are collecting, sharing, or selling your consumer health data;
- Access your consumer health data, including a list of all third parties and affiliates with whom we have shared it, along with contact information for each;
- Delete your consumer health data;
- Withdraw consent to our collection and sharing of your consumer health data; and
- Appeal a denial of any request.
When you ask us to delete your consumer health data, we delete it from our records. Data stored on backup systems can take longer to remove.
09How to submit a request
Email info@joinjustright.com with the subject line “Consumer Health Data Request.” Because our programs are provided online, email is the method we use for these requests, and it is the fastest and most reliable way to reach us.
So that we do not disclose or delete data at the request of the wrong person, we will ask you to verify your identity — normally by confirming information already associated with your account. If we cannot authenticate you, we may decline the request and will tell you why.
We respond without undue delay and within 45 days of receiving your request. If we need more time, we will tell you within that period and may take up to 45 additional days. Requests are free up to twice per year.
If we deny your request, our response will explain why and how to appeal. To appeal, reply to our response. We will decide the appeal and notify you in writing within 45 days. If we deny the appeal, we will provide you with a method to contact your state Attorney General to submit a complaint.
10Changes to this policy
If we begin collecting or sharing categories of consumer health data we have not described here, or begin using it for a purpose we have not described here, we will update this policy and obtain your affirmative consent before doing so.