Consumer Health Data Privacy Policy

Effective September 25, 2026. Last updated September 25, 2026.

This Consumer Health Data Privacy Policy applies to "consumer health data" of consumers in Washington and Nevada, as those states' laws define it. Our Privacy Policy covers all other personal information.

What we collect

Health information you choose to share with us, such as symptoms, conditions or health goals, when you:

  • use our on-site chat assistant
  • contact customer service by email or through our contact forms
  • add a comment when cancelling a subscription

We also keep notes our support team adds to your cancellation record.

Where it comes from

Directly from you, and from our support team, which may add notes to your cancellation record.

Why we collect and use it

Only to answer your questions, recommend products, and provide the support and services you ask for, including handling your cancellation. We may keep statistics that cannot reasonably be linked to you (de-identified information). We process de-identified information only in de-identified form, we will not try to re-identify it, and we require anyone we share it with to make the same commitments.

Who we share it with

We share the health information described above only with service providers that help us provide these services, under contracts that limit their use of it to providing services to us. We may also disclose it when the law requires it. These service providers are:

  • the AI providers that power our chat assistant and the tools our support team uses to answer you (Anthropic and Google)
  • our website hosting and database providers
  • our email and customer service software providers
  • our subscription and email marketing providers, for cancellation comments, including notes our support team adds

We do not sell the health information described above, we do not share it with advertising partners, and we do not share it with affiliates. Advertising and analytics partners collect information about your activity on our website, over time and across websites, as described in our Privacy Policy. We do not give them the health information described above.

This information is stored and processed electronically by us and these service providers.

Your rights

You may ask us to:

  • confirm whether we collect, share or sell your consumer health data
  • give you access to it, including a list of the third parties and affiliates we have shared it with and how to contact them
  • let you withdraw your consent, and stop collecting, sharing or selling your consumer health data
  • delete it, including from our service providers

To make a request, email customerservice@zumanutrition.com with the subject "Health Data Request." You can also use this process to review your consumer health data and ask us to correct it. We will verify your request by matching the information you provide to our records, and respond within 45 days. We may extend this once by up to 45 days if needed, and will tell you why within the first 45 days. We complete deletion requests within 30 days of verifying them, and no later than 45 days after we receive them (or the extended period described above), and we tell our service providers to delete the information too. Copies in our backup systems are deleted automatically as those backups expire, within 60 days of verifying your request. If we deny your request, you may appeal by replying with the subject "Appeal." We will respond to an appeal within 45 days. If you disagree with our decision, you may contact the Washington State Attorney General at www.atg.wa.gov/file-complaint, or the Nevada Attorney General at ag.nv.gov.

Changes to this policy

If we change this policy, we will post the updated version on this page and update the dates at the top. We will not collect, use or share consumer health data in a new category, for a new purpose, or with a new type of recipient not described in this policy without first telling you and getting your consent.

Contact us

customerservice@zumanutrition.com