CONSUMER HEALTH DATA PRIVACY POLICY

Effective Date: September 28, 2026
Last Reviewed: September 28, 2026

This Consumer Health Data Privacy Policy describes how FINESSE Aesthetics collects, uses, shares, and protects consumer health data as required by the Washington My Health My Data Act. This policy is separate from our general Privacy Policy and applies to consumer health data that is not otherwise exempt from the Act.

Consumer Health Data We May Collect

Depending on how you interact with us, we may collect:
• Contact information connected to a request for treatment or care
• Appointment and consultation information
• Treatment interests, preferences, and history
• Information you provide about health conditions, medications, allergies, goals, or eligibility for services
• Communications about services, symptoms, concerns, or desired outcomes
• Payment or financing related information connected to a health care service
• Website activity or device information that may be associated with an interest in a health care service
• Other information that may identify or be used to infer a consumer’s past, present, or future physical or mental health status

Sources of Consumer Health Data

We may collect consumer health data directly from you through our website, contact forms, consultation forms, appointment requests, telephone calls, text messages, email, social media messages, and in person communications. We may also receive information from service providers you choose to use, including appointment scheduling, payment, financing, and communication platforms.

How We Use Consumer Health Data

We may use consumer health data to:
• Respond to questions and appointment requests
• Determine service availability or eligibility
• Schedule and manage appointments
• Provide consultations, treatments, aftercare, and follow up
• Process payments or financing requests
• Maintain records and communicate with you
• Protect safety, prevent fraud, and comply with legal obligations
• Improve our services and website when permitted by law

Consumer Health Data We May Share

We may share consumer health data only as permitted by law, with your consent when required, or as reasonably necessary to provide a product or service you requested. Categories of recipients may include:
• Authorized FINESSE Aesthetics providers and staff
• Scheduling and practice management providers, including Aesthetic Record
• Website and form service providers, including Showit
• Payment processors and financing providers, including Cherry and Alle, when you choose those services
• Communication and email service providers
• Information technology, security, hosting, and data storage providers
• Professional advisers, regulators, or legal authorities when required
• Other parties you direct us to share information with

FINESSE Aesthetics does not sell consumer health data. We do not share consumer health data for cross context behavioral advertising unless we first obtain any consent required by law.

Your Rights

Subject to applicable law, you may have the right to:
• Confirm whether we collect, share, or sell your consumer health data
• Access your consumer health data
• Request deletion of your consumer health data
• Withdraw consent from future collection or sharing
• Receive a list of third parties and affiliates with whom your consumer health data has been shared
• Appeal a refusal to act on your request

To exercise these rights, call (503) 389 0243 or submit a request through finesseaesthetics.co/contact. Please state that your request concerns consumer health data privacy. We may take reasonable steps to verify your identity before completing a request. You are not required to create a new account to submit a request.

If we decline your request, you may appeal by contacting us through the same method and stating that you are submitting a privacy appeal. We will respond as required by applicable law.

Consent

When consent is required, we will request it before collecting or sharing consumer health data for the stated purpose. Consent to share consumer health data will be requested separately from consent to collect it when required. You may withdraw consent for future collection or sharing by contacting us.

Security and Retention

We use administrative, technical, and physical safeguards appropriate to the nature of the information we maintain. No system is completely secure. We retain consumer health data only as reasonably necessary for the purposes described in this policy, to provide requested services, and to meet legal, regulatory, tax, accounting, or professional obligations.

Changes to This Policy

We may update this policy when our practices or legal obligations change. The revised policy will be posted with an updated effective date. When required, we will obtain consent before collecting, using, or sharing additional categories of consumer health data or using data for materially different purposes.

Contact

FINESSE Aesthetics
1111 Main Street, Suite 107
Vancouver, WA 98660
Phone: (503) 389 0243
Contact Form: finesseaesthetics.co/contact