Privacy

Effective Date

Effective: September 1, 2025

Last Updated: September 1, 2025

Scope and Applicability

This Privacy Policy describes how Be Active Skagit Pharma Hub ("we," "us," or "our") collects, uses, discloses, and safeguards personal information when you visit beactiveskagit.org, communicate with us, or use our services in the United States of America. This Policy is intended to comply with applicable U.S. laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA) and Washington State’s My Health My Data Act (MHMDA). If you do not agree with this Policy, please discontinue use of our services.

We are not a healthcare provider or a HIPAA-covered entity. Any health-related information you provide to us is not protected health information (PHI) under HIPAA; it is handled in accordance with this Privacy Policy and applicable consumer privacy laws.

Identity of the Controller and Contact Information

Be Active Skagit Pharma Hub is owned and operated by Terrance Neal.

Postal Address: 3000 184th St SW, Lynnwood, WA 98037

Email: [email protected]

Notice at Collection

Categories of Personal Information We May Collect

• Identifiers: name, email address, postal address, IP address, device identifiers, cookie IDs.
• Internet or Network Activity: pages viewed, links clicked, time on site, referring/exit pages, browser and device information, general location derived from IP.
• Communications and Account Information: messages you send us, newsletter preferences, account credentials (if accounts are offered).
• Inferences: interests or preferences derived from your interactions with our content.
• Sensitive Personal Information (as defined by certain laws): consumer health data you choose to provide (e.g., conditions you research or mention in messages). We do not collect precise geolocation, government ID numbers, or biometric data.

Sources of Personal Information

• Directly from you: when you submit forms, contact us, subscribe to newsletters, or provide feedback.
• Automatically: via cookies and similar technologies when you browse our site.
• Service providers: analytics, hosting, email delivery, and customer support vendors acting on our behalf.

Purposes for Collection and Use

• Provide, maintain, and improve our website and content.
• Respond to inquiries, send administrative communications, and manage subscriptions.
• Analyze usage to enhance user experience and site performance.
• Detect and prevent fraud, security incidents, and misuse.
• Comply with legal obligations and enforce our terms.
• With your consent, personalize content or communications related to our services.

Categories of Recipients/Disclosures

• Service providers and processors: hosting, analytics, security, email distribution, and support providers bound by contractual confidentiality and use limitations.
• Legal and safety: regulators, law enforcement, or others when required by law or to protect rights, safety, and property.
• Business transfers: in connection with a merger, acquisition, or asset sale (subject to this Policy or a successor policy providing materially similar protections).

Retention

We retain personal information only as long as reasonably necessary to fulfill the purposes outlined above, comply with legal obligations, resolve disputes, and enforce agreements. Typical retention periods include: contact and communications data for up to 3 years after last interaction; analytics data for up to 26 months; and consumer health data for the shorter of 3 years or until you withdraw consent and we fulfill deletion, unless law requires longer retention.

Selling or Sharing

We do not sell personal information for monetary consideration. We may "share" limited identifiers and internet activity with analytics or advertising partners to measure interactions and, where used, to provide cross-context behavioral or targeted advertising. You may opt out of such sharing as described in the "Global Privacy Control and Do Not Track" and "How to Exercise Your Rights" sections. We do not sell or share Sensitive Personal Information (including consumer health data).

Consumer Health Data (Washington MHMDA)

What Consumer Health Data We Collect

We may collect consumer health data that you choose to provide, such as health topics you research, conditions or medications mentioned in contact forms or emails, and your engagement with health-related content on our site. We do not collect precise geolocation or medical records.

How We Use Consumer Health Data

• To respond to your requests and provide relevant educational content.
• To improve and tailor our health education resources.
• To maintain security and comply with law.

How We Share Consumer Health Data

We share consumer health data only with service providers acting on our behalf under written contracts that limit use to our instructions. We do not sell consumer health data and do not share it for targeted advertising.

Consent and Withdrawal

By voluntarily submitting consumer health data (e.g., through a form or email), you authorize our collection and use for the purposes stated herein. You may withdraw consent at any time by contacting us at [email protected]. Upon verified withdrawal, we will cease processing and delete such data, subject to legal retention requirements.

Geofencing

We do not implement geofencing around healthcare facilities or otherwise use geofencing in a manner restricted by Washington law.

Cookies and Similar Technologies

We use cookies, web beacons, and similar technologies to operate the site, remember preferences, analyze traffic, and, where applicable, tailor content. You can manage cookies through your browser settings. Disabling cookies may affect site functionality. Where required by law, we will obtain consent before setting non-essential cookies.

Your Privacy Rights

California Privacy Rights (CCPA/CPRA)

• Right to know/access: request the categories and specific pieces of personal information we collected about you.
• Right to delete: request deletion of personal information, subject to legal exceptions.
• Right to correct: request correction of inaccurate personal information.
• Right to portability: request a portable copy of your information.
• Right to opt out: opt out of sale or sharing of personal information for cross-context behavioral advertising.
• Right to limit use/disclosure of Sensitive Personal Information: we limit such use to permitted purposes and do not use it to infer characteristics.
• Right to non-discrimination: we will not discriminate against you for exercising your rights.

Virginia, Colorado, Connecticut, and Utah Rights

• Confirm whether we process your data and access it.
• Correct inaccuracies.
• Delete personal data.
• Obtain a portable copy of personal data.
• Opt out of targeted advertising, sale, and certain profiling.

Washington State Rights (MHMDA)

• Confirm whether we collect consumer health data about you and access such data.
• Obtain a list of all third parties and affiliates with whom we have shared or sold consumer health data (we do not sell).
• Withdraw consent and request deletion of consumer health data.

How to Exercise Your Rights

Submit a verifiable request by emailing [email protected] with your name, state of residence, the right you wish to exercise, and sufficient information to verify your identity. You may also include "Privacy Request" or "Do Not Sell or Share" in the subject line as applicable. We will respond within the timeframes required by law.

Verification and Authorized Agents

We may require reasonable verification, such as confirmation via the email address on record or additional information we maintain. Authorized agents must provide proof of authorization, and we may require the consumer’s verification and confirmation of the agent’s authority, as permitted by law.

Appeals Process

If we deny your request, you may appeal by replying to our decision email or contacting [email protected] with "Appeal" in the subject line. If your appeal is denied, you may contact your state attorney general as applicable.

Global Privacy Control and Do Not Track

We recognize Global Privacy Control (GPC) signals as a request to opt out of sharing or targeted advertising where required. You can also opt out by emailing us with "Do Not Sell or Share" in the subject line. Browser "Do Not Track" signals are not uniformly honored by industry standards; however, we respect legally required opt-out mechanisms.

Email Communications and Marketing

You may receive service or administrative emails related to your requests. Where we offer newsletters, we will send them only with your consent or as permitted by law. You may unsubscribe by following instructions in the email or by contacting [email protected].

Security

We employ administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, destruction, loss, alteration, or disclosure. No method of transmission or storage is fully secure, and we cannot guarantee absolute security.

Data Retention

We retain data for the periods described in the "Retention" section above or as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce agreements. When retention is no longer necessary, we will delete or deidentify data in accordance with applicable law.

Children’s Privacy

Our services are intended for a general audience and are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information to us, please contact [email protected] and we will take appropriate action.

International Visitors

Our services are intended for use in the United States. If you access our services from outside the U.S., you understand your information may be processed in the U.S., where laws may differ from those in your jurisdiction.

Third-Party Services and Links

Our site may reference third-party content or services. We are not responsible for the privacy practices of third parties. We encourage you to review their privacy policies before providing information.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be indicated by updating the "Effective" date. Your continued use of our services after changes take effect constitutes acceptance of the updated Policy.

Accessibility and Alternative Formats

If you need this Policy in an alternative format or have difficulty accessing it, please contact [email protected]. We will make reasonable efforts to accommodate your request.