Department of Aliveness · Bureau no. 01

● Open · Ogden, Utah

● Open · Ogden, Utah

Est. 2024

The fine print · Form L-03

Consumer Health Data Privacy Policy

Consumer Health Data Privacy Policy

Consumer Health Data Privacy Policy

Effective date

October 1, 2026

Last revised

October 11, 2026

This Consumer Health Data Privacy Policy describes how Alexander Geoffrey LLC, trading as The Department of Aliveness, collects, uses, and shares consumer health data and how you may exercise rights under applicable consumer health privacy laws, including Washington’s My Health My Data Act and Nevada’s consumer health data law where they apply.

1

CATEGORIES OF CONSUMER HEALTH DATA WE COLLECT

Depending on what you choose to share and the Service you request, we may collect information about your physical or mental wellbeing, health conditions, disability, symptoms, access or accommodation needs, and personal circumstances that reveal health status. A booking or participation record may itself reveal a health-related interest where it connects you to a sufficiently specific experience.

We may also collect health-related information included in your messages, forms, one-to-one notes, or separately authorized session recordings, transcripts, and AI-assisted summaries. Information derived from those materials that identifies your physical or mental health status is treated as consumer health data when the law defines it that way.

We do not request your complete medical history as a general condition of participation. We do not use advertising trackers to collect or infer consumer health data.

2

PURPOSES OF COLLECTION AND USE

We collect and use relevant consumer health data to understand the participation or accommodation request you make, deliver the particular wellbeing experience you request, maintain appropriate continuity in one-to-one sessions, respond to your questions, and carry out the specific documentation purpose described before any recording or transcription.

We also process information as specifically authorized or required by applicable law, including handling your privacy requests. We obtain the consent required for collection and use. Where the law allows processing necessary to provide a product or Service you request without separate consent, we limit that processing to the necessary purpose. We do not treat acceptance of general Terms as consent to health-data processing.

3

SOURCES OF CONSUMER HEALTH DATA

Sources are you; your forms, messages, and contributions; your conversations with a facilitator; facilitator notes; and the approved providers that process an authorized session recording, transcript, summary, registration, or community contribution. A record or summary created from information you supply may be a derived source. We do not purchase consumer health data from data brokers.

4

CATEGORIES OF DATA SHARED AND RECIPIENTS

Where necessary for the requested function and legally permitted, health-related form responses may be processed by scheduling or form providers; relevant participation and accommodation information by the facilitator and personnel arranging the experience; authorized session content by meeting, transcription, and restricted storage providers; and health-related messages or community contributions by the platform through which you choose to share them.

Providers performing these functions may include Calendly, Zoom, Circle, and, where deployed and specifically configured for that purpose, Supabase and Make. OpenAI and Anthropic may process authorized session material for the specifically disclosed documentation or summarization purpose. We may also use locally operated large language models; any connected external service is identified before use. Locally operated software is not itself a separate recipient company. We limit providers acting on our behalf through appropriate instructions and agreements.

Kit and general marketing lists receive ordinary contact and communication-preference information only, not sensitive narratives, health-revealing segment labels, or session records. We do not disclose consumer health data to Google, Meta, or other advertising recipients. We do not sell consumer health data.

If you choose to share health-related content in a community space, the participants in that space can see it. We explain the audience and obtain any separately required sharing consent. Where you specifically ask us to share with another recipient, we obtain the authorization or separate consent required for that disclosure. Disclosures compelled by law are limited to what is legally required and permitted.

Affiliates with which consumer health data is shared: none.

5

YOUR RIGHTS AND HOW TO EXERCISE THEM

Where applicable law provides these rights, you may ask us to confirm whether we collect, share, or sell your consumer health data; access that data; obtain the required information about recipients and disclosures; withdraw consent to collection or sharing; and delete the data. Washington consumers may request the list of third parties and affiliates with whom the data was shared or sold, including the contact information the law requires.

Send requests to departmentcontact@dralexlovell.com. We use proportionate steps to authenticate the request where required and respond within the applicable legal period. We explain any permitted extension or lawful basis for refusing a request.

For deletion, we notify the relevant providers and other recipients and address copies and backups as required by the applicable health-data law. We do not retain health data merely because an ordinary business retention schedule would otherwise keep it longer. Withdrawal of consent stops future processing based on that consent, subject only to a lawful alternative that actually applies; we explain any resulting limit on a requested Service.

If we deny your request, you may appeal by emailing departmentcontact@dralexlovell.com with a description of the decision you want reviewed. “Health Data Privacy Appeal” is a helpful subject line but is not required. We respond in writing within the applicable legal period and explain how to contact the relevant Attorney General if the appeal is denied.

We do not unlawfully discriminate against you for exercising your rights. Questions about this Policy may be directed to departmentcontact@dralexlovell.com.