Consumer Health Data Privacy Policy

For Washington residents, as required by the Washington My Health My Data Act (RCW 19.373).
Effective Date: April 15, 2026.

This policy is separate from our general Privacy Policy. It applies specifically to consumer health data about Washington residents and is published as required by RCW 19.373.030. For everything else, please see our Privacy Policy.

1. Who we are

Wiser Workplace LLC (the "Company," "we," "us") is a California limited liability company. We operate wiserworkplace.com and provide workplace-concern intake, triage, and mediator-matching services.

We are a "regulated entity" under RCW 19.373.010(20) when we collect, process, share, or sell consumer health data about Washington residents.

2. What "consumer health data" means in this policy

Consumer health data means personal information that is linked or reasonably linkable to a consumer and that identifies the consumer's past, present, or future physical or mental health status, as defined in RCW 19.373.010(8). For our service, this includes, without limitation:

Information about disabilities, medical conditions, and requests for reasonable accommodation;
Information about mental-health conditions, treatment, or medications;
Information about pregnancy, reproductive or sexual health, or gender-affirming care;
Information about substance use or substance-use treatment;
Information contained in narrative descriptions of workplace concerns that references any of the above (for example, a disability-discrimination narrative or a medical-leave retaliation narrative);
Precise geolocation data that could reasonably indicate attempts to obtain health services (we do not collect precise geolocation);
Inferences drawn from any of the above.

3. Categories of consumer health data we collect

We collect the following categories of consumer health data directly from Washington residents who use our intake form:

Narrative descriptions of workplace concerns that reference health status, disability, accommodation, medical leave, or treatment;
The category label you select when classifying your concern (for example, "disability accommodation" or "leave and accommodation");
Dates of leave, accommodation requests, or medical appointments that you choose to disclose;
Identifiers associated with the data, including your name, email address, phone number, and, in some cases, the name of your employer or supervisor.

We do not purchase consumer health data from data brokers. We do not collect precise geolocation data. We do not infer health status from browsing behavior.

4. Sources of consumer health data

We collect consumer health data directly from you when you submit our intake form or otherwise communicate with us about your concern. We do not receive consumer health data from data brokers, affiliates, or third-party advertisers.

5. How we use consumer health data

We use consumer health data solely for the following purposes:

To triage your workplace concern and determine what services may be appropriate for you;
To match you with a mediator or other appropriate service provider;
To communicate with you about your matter;
To comply with our legal obligations, including responding to valid legal process;
To defend or pursue legal rights, including our own, when necessary.

We do not use consumer health data for targeted advertising, for profiling for decisions that produce legal or similarly significant effects, or for any purpose beyond delivering the services you requested.

6. How we share consumer health data

We share consumer health data only with:

Our own employees, contractors, and professional service providers (including attorneys, mediators, and case-management staff) who need the data to deliver the services you requested, subject to confidentiality;
Our processors (including Airtable for secure case storage and Brevo for transactional email) under written contracts that restrict their use to providing services for us;
Government authorities when required by law or valid legal process, and only to the extent required.

We do not sell consumer health data. We have not sold consumer health data in the preceding twelve months and have no plans to do so.

We do not share consumer health data with third parties for their own commercial purposes.

7. Your rights under the My Health My Data Act

If you are a Washington resident, you have the following rights under RCW 19.373.040 and RCW 19.373.050:

Right to confirm. You may confirm whether we are collecting, sharing, or selling your consumer health data and access that data.
Right to delete. You may request that we delete your consumer health data, including data stored by our processors. We will honor deletion requests within forty-five (45) days of receipt and will notify our processors.
Right to withdraw consent. You may withdraw consent to our collection and sharing of your consumer health data at any time, with effect going forward.
Right to appeal. If we decline to act on a request, you may appeal our decision within a reasonable time. If your appeal is denied, you may complain to the Washington Attorney General at atg.wa.gov/file-complaint.

To exercise any of these rights, submit a request through our privacy request form or email us at privacy@wiserworkplace.com. We will verify your identity before acting on requests for access, deletion, or correction. We will not discriminate against you for exercising any right under the My Health My Data Act.

8. Consent

When you submit consumer health data through our intake form, you are providing consent to our collection of that data for the purposes described in Section 5. This consent is separate from your agreement to our general Privacy Policy and Terms of Service.

We do not share consumer health data except with the processors and recipients identified in Section 6, which fall within the service-delivery exceptions of the Act. If we ever propose to share consumer health data outside these categories, we will obtain your separate, affirmative, opt-in "valid authorization" that meets the specific requirements of RCW 19.373.020(4) before doing so.

We do not sell consumer health data and accordingly do not request "valid authorization" for sale under RCW 19.373.030. If that ever changes, we will obtain separate valid authorization meeting the statutory requirements before any sale occurs.

9. Security

We maintain administrative, technical, and physical safeguards designed to protect consumer health data against unauthorized access, disclosure, alteration, or destruction, consistent with the duty of care in RCW 19.373.060 and applicable breach-notification requirements in RCW 19.255.010. Employees and contractors with access to consumer health data are bound by confidentiality obligations, and access is limited to those who need the data to deliver the services.

10. Retention

We retain consumer health data only for as long as necessary to provide the services you requested, or as required by law. Specific retention periods are set out in Section 4 of our Privacy Policy. When a retention period ends, we delete or de-identify the data.

11. Children

Our services are intended for adults (eighteen or older). We do not knowingly collect consumer health data from individuals under thirteen without verifiable parental consent as required by COPPA, and we do not knowingly collect consumer health data from individuals under sixteen without their affirmative consent as required by RCW 19.373.020(2).

12. How to contact us about this policy

Consumer Health Data Privacy Contact:
Wiser Workplace LLC
Attn: Privacy Contact
100 Wilshire Blvd., Suite 700
Santa Monica, CA 90401
privacy@wiserworkplace.com

To file a complaint with the Washington Attorney General, visit atg.wa.gov/file-complaint.

13. Changes to this policy

We will post any material changes to this policy on this page and update the Effective Date at the top. We will archive prior versions with a content hash for audit.