Consumer Health Data Privacy Policy

This policy describes how FlourishBx LLC ("FlourishBx") collects, uses, and shares consumer health data through the website getflourishbx.com.

1. Categories of consumer health data we collect, and why

FlourishBx does not ask for information about any person's health condition, diagnosis, treatment, or medication through this website.

We collect one item that may be treated as consumer health data because of what it can imply:

Self-identified role. On our waitlist form, a visitor selects either "BCBA" or "Caregiver." Because FlourishBx is a product for autism and ABA therapy, selecting "Caregiver" may imply that the visitor cares for a person receiving, or seeking, ABA therapy services. We collect it to send the visitor information about FlourishBx relevant to their role.

We also collect the visitor's name and email address alongside that selection. Those items are not themselves health data, but because they identify the person who made the selection, we treat them together with it.

How we use it. Solely to communicate with the visitor about FlourishBx early access and product updates, and to understand in aggregate which audiences are interested in the product.

We do not use consumer health data for advertising, do not use it to infer or record anything about any specific child, and do not combine it with data obtained from other sources.

2. Categories of sources

We collect this data from one source only: the consumer, who provides it directly by completing a form on our website.

We do not obtain consumer health data from data brokers, advertising networks, public records, affiliates, or any other third party.

3. Categories of consumer health data that we share

We share the categories described in Section 1 — self-identified role, together with name and email address — with the service providers listed in Section 4, and only so that they can perform services for us.

We do not sell consumer health data. We have never sold consumer health data and we do not collect it for the purpose of selling it.

4. Categories of third parties and specific affiliates we share with

• Google LLC (Google Cloud Platform) — cloud hosting and database provider. Hosts the website and stores waitlist submissions, in United States regions.
• Google LLC (Google Workspace / Gmail) — email service provider. Delivers email we send.

We have no affiliates with whom we share consumer health data.

We may also disclose consumer health data where required by law or legal process.

5. Your rights, and how to exercise them

If you are a Washington resident — or a consumer whose consumer health data we have collected — you have the right to:

• Confirm whether we are collecting, sharing, or selling your consumer health data;
• Access the consumer health data we hold about you, including a list of all third parties with whom we have shared it, and contact information for each;
• Withdraw consent to our collection and sharing of your consumer health data; and
• Delete your consumer health data.

To exercise any of these rights, email contact@getflourishbx.com with the subject line "Consumer Health Data Request," or write to us at:

FlourishBx LLC

We will verify your identity, then respond within 45 days of receiving your request. We may extend that period by a further 45 days where reasonably necessary; if we do, we will tell you within the first 45 days and explain why.

Deletion. When you request deletion, we will delete your consumer health data from our records and notify all affiliates, processors, contractors, and third parties with whom we have shared it, directing them to delete it as well.

If we decline your request, we will tell you why and how to appeal. We will respond to an appeal within 45 days. If we deny the appeal, we will provide you a method to contact the Washington State Attorney General to submit a complaint.

6. Changes to this policy

If we materially change how we collect, use, or share consumer health data, we will update this policy and obtain consent where the law requires it before applying the change to data we already hold.