consumer health data privacy policy.

Last updated: October 28, 2026

This Consumer Health Data Privacy Policy explains how SALT. Hydration & Wellness, operated by Chiyu LLC ("SALT.," "we," or "us"), collects, uses, and shares consumer health data, and how you can use your rights over it. Washington's My Health My Data Act requires this policy. We follow the same practices for everyone, wherever you live, and anyone can use the rights below.

This policy adds to our Privacy Policy. If the two say different things about consumer health data, this policy controls.

What consumer health data means

Consumer health data is personal information that is linked or reasonably linkable to you and identifies your past, present, or future physical or mental health. For SALT., that includes the services you ask about or receive, the health information you share with your nurse and provider, and information that shows you are seeking care from us.

Consumer health data we collect

• Contact and booking details tied to care, such as your name, phone number, email, zip code, and the services you ask about.
• Health history and intake answers you give on the intake and consent forms your nurse sends once your appointment is set.
• Visit and treatment details, such as the services you receive, measurements or vital signs taken at a visit, notes from your nurse and provider, and your treatment plan.
• Prescription details, such as the medications your provider prescribes and the pharmacy orders that fill them.
• Lab testing details, such as the tests ordered and your results.
• Location details, such as the address where your nurse meets you and the address where a prescription is shipped.
• Purchase and membership details that show which services you buy, including SALT Vault membership.
• Website activity, only if you say yes: the pages you visit, the buttons you tap (such as Text or Call), and general device and location details, such as browser type and city.

How we use it

We use consumer health data to:

• Schedule, provide, and follow up on the care you ask for.
• Let a licensed provider review your health information, decide whether a service is right for you, and create and manage your plan.
• Send prescriptions to pharmacies, order lab tests, and have products shipped to you.
• Take payments and manage memberships.
• Talk with you about appointments, orders, and your care.
• Send you offers and wellness updates, only if you have agreed to receive them.
• Keep you safe, keep medical records, and meet our legal, licensing, and recordkeeping duties.
• With your OK, see how people use our website so we can make it easier to use.

We do not sell consumer health data.

Where it comes from

• You, when you text or call us, fill out a form on our website, book a visit, or complete the intake and consent forms your nurse sends.
• Your nurse and providers, when they document your visit and care.
• Pharmacies and labs, such as order updates and test results.
• Payment processors, such as confirmation that a payment went through.
• Your browser, when you use our website, only if you say yes.

Consumer health data we share

• Health history, treatment, prescription, and lab details, with the providers, pharmacies, and labs involved in your care.
• Contact, visit location, and appointment details, with your nurse and the scheduling, charting, and messaging services we use.
• Purchase and membership details, with our payment processor.
• Website activity, with our website host, and with Google Analytics only if you say yes to sharing.

Who we share it with

We share consumer health data only with these categories of recipients, and only as needed for the purposes above:

• The registered nurses and licensed providers who deliver and oversee your care
• Pharmacies that fill and ship your prescriptions
• Electronic prescribing services
• Clinical laboratories
• Practice management, scheduling, charting, and payment software
• Payment processors
• Text message, phone, and email providers
• Our website host, Webflow
• Google Analytics, only if you say yes to sharing
• Government agencies, courts, or others when the law requires it

Affiliates: we do not share consumer health data with any affiliates.

Your rights

• Access. Confirm whether we collect, share, or sell your consumer health data, get a copy of it, and get a list of every third party and affiliate we have shared it with, plus an email address or other way to contact each one.
• Withdraw consent. Withdraw your consent to our collection and sharing of your consumer health data. For website activity, use Privacy choices at the bottom of any page.
• Delete. Ask us to delete your consumer health data. We will also tell everyone we shared it with to delete it.

How to make a request

Email info@salthw.com with "Health data request" in the subject line and tell us what you would like to do. You can also write to us at 2177 E Dunyon St, Ste 103, Eagle, ID 83616. You do not need an account.

To protect your information, we confirm who you are before we act, usually by matching details we already have, such as your phone number. If we can't confirm it, we may ask for a little more information.

We respond within 45 days. If we need more time, we may extend that once by up to 45 more days, and we will tell you why within the first 45 days. Requests are free up to twice a year. Removing deleted data from backup systems can take up to six months after we confirm your request.

How to appeal

If we decline your request, you can appeal by replying to our decision or by emailing info@salthw.com with "Health data appeal" in the subject line. We will answer in writing within 45 days and explain what we did and why. If we deny your appeal, you can file a complaint with the Washington State Attorney General at atg.wa.gov/file-complaint.

How we protect it

Only the people and companies who need your consumer health data to care for you or run our business can access it, and we use reasonable safeguards to protect it. Companies that process it for us may use it only to provide their services to SALT.

Information covered by other health privacy laws

Some information we hold is covered by other health privacy laws, such as HIPAA or Washington's Uniform Health Care Information Act (chapter 70.02 RCW), and the My Health My Data Act does not apply to it. We protect that information as those laws require, and they may require us to keep certain records, such as medical records.

Changes to this policy

If we start collecting, using, or sharing consumer health data in a new way, we will update this policy first and ask for your consent when the law requires it. The date at the top shows the latest version.

Contact us

Questions about this policy? Email info@salthw.com or write to SALT. Hydration & Wellness (Chiyu LLC), 2177 E Dunyon St, Ste 103, Eagle, ID 83616.