Consumer Health Data Privacy Policy

This policy is separate from our Privacy Policy and applies only to consumer health data. It explains what health-related information Soul Lumos LLC collects, why we collect it, who we share it with, and how you can see it, withdraw your consent, or have it deleted.

It is written for Washington State's My Health My Data Act. If you live in Nevada or Connecticut, similar protections apply and we handle your health data the same way.

We are not a healthcare provider. Soul Lumos is a private yoga and breathwork studio. We are not a doctor's office, we are not covered by HIPAA, and nothing we hold is a medical record.

1. What Health Data We Collect

We only ever collect what you type into a form yourself. We do not buy health data, and we do not infer it from your browsing.

• Bodily and physical condition: injuries, pain, surgeries, pregnancy, mobility limitations and similar considerations you choose to share so sessions can be adapted safely.
• Wellness and lifestyle: your energy levels, sleep, diet and lifestyle notes, and your relationship with movement and exercise.
• Health-related goals: what you want your practice to change — for example stress, recovery, or returning to movement after illness or injury.
• Session notes: what was worked on and how your body responded, recorded so your practice can progress sensibly.

We do not collect precise location data, and we do not use it to infer anything about your health.

2. Where It Comes From

Every piece of health data we hold comes from one of three places, all of them you:

• the enquiry and intake form on this website;
• what you tell your instructor in a consultation or during a session;
• messages you send us by email.

3. Why We Collect It

For one reason: so that private instruction is safe and suited to your body. Specifically, to adapt postures and breathwork to your injuries and limitations, to plan a sensible progression, and to avoid asking you to do something that could hurt you.

We do not use your health data for advertising, and we do not use it to build a profile of you.

4. We Never Sell It

Soul Lumos does not sell consumer health data, and never has. Selling health data requires your signed, separate authorization under Washington law. We do not ask for one, because we do not do it.

5. Who We Share It With

Health data is seen by your instructor. Beyond that, it is only ever handled by the companies that run the website itself, and only to the extent they store the database it sits in:

• Hostinger International Ltd. — web hosting and database storage.
• Google LLC — the calendar used to schedule sessions, and email delivery.

Stripe, Inc. processes payments. Stripe receives your name, email and payment details. Stripe does not receive any health data.

We will also disclose data if the law compels us to — a subpoena, court order, or similar. If that happens and we are permitted to tell you, we will.

6. How Long We Keep It

While you are a student, and for up to three years after your last session, so that a returning student's history is still there. After that it is deleted. You can ask us to delete it sooner at any time, and we will.

7. Your Rights

You may, at any time and free of charge:

• Ask what we hold — we will send you a copy, including a list of everyone it has been shared with.
• Withdraw your consent — we stop collecting and using it from that point on.
• Have it deleted — we delete it from our records, and tell the companies above to do the same.

Email sanctuary@soullumos.com with the subject line "Health Data Request". We reply within 45 days. If we need longer we will tell you why, and take no more than 45 further days.

One honest caveat: if you ask us to delete the injuries and limitations we rely on to keep you safe, we may not be able to continue teaching you privately. We will tell you plainly rather than teaching you without knowing.

8. If We Say No

If we refuse a request, we will tell you why in writing. You may then appeal by replying with "Appeal" in the subject line; a person will look at it again and answer within 45 days.

If you are still unhappy, you may complain to the Washington State Attorney General at atg.wa.gov/file-complaint.

9. Changes to This Policy

If we change how we handle health data, we will update this page and change the date at the top. If the change is significant, we will email students before it takes effect rather than changing it quietly.

10. Contact

Soul Lumos LLC • Newcastle, Washington
sanctuary@soullumos.com