Consumer Health Data Privacy Policy

1. Consumer Health Data We Collect

Depending on which part of the site you use, this may include:

• Patient Application: medical condition/diagnosis related to hair loss, treatment status and duration, physician name and contact information, and your uploaded physician's letter or supporting medical documentation.
• Hair Donation: general health information about your hair (chemical treatment history, condition) that you provide as part of donation eligibility.
• Any health-related information you choose to include in a public story, review, or campaign profile.

2. Why We Collect It

• To verify eligibility for the Medical Hair Bank patient program
• To evaluate hair donations for suitability
• To communicate with you about your application, order, or donation
• To publish a story or review, but only the specific information you've explicitly agreed to share publicly

We do not use consumer health data for advertising, and we do not sell it.

3. Sources

We collect consumer health data directly from you, through the forms on this website. We do not purchase or receive consumer health data about you from data brokers or other third parties.

4. Sharing

We share consumer health data only with the service providers necessary to operate the Patient Application and Hair Donation programs — currently, Netlify, which hosts this website, processes form submissions, and stores application data. We do not share consumer health data with data brokers, advertisers, or any other third party, and we do not share it across state lines for any purpose other than the recipient service provider performing the function described above.

5. Your Consent

Where our Patient Application or Hair Donation forms ask for consumer health data, we ask for your affirmative, opt-in consent before collecting it, separately from our general Terms of Service and Privacy Policy agreement. You can decline to consent, but we won't be able to process an application or donation without the information it depends on.

You may withdraw your consent at any time by contacting us using the information below. Withdrawing consent doesn't affect anything we've already done with your information based on consent you gave before withdrawing it, and may mean we're no longer able to continue processing an active application or donation.

6. Your Rights

If you are a Washington resident, you have the right to:

• Confirm whether we're collecting, sharing, or selling your consumer health data, and access it
• Withdraw consent to our collection or sharing of your consumer health data
• Request deletion of your consumer health data, including from any service providers or affiliates we've shared it with

To exercise any of these rights, email support@mypostiche.com with the subject line "Washington Consumer Health Data Request." We'll respond within 45 days, as required by law (with one 45-day extension where reasonably necessary). We will not discriminate against you for exercising these rights. If we decline a request, you may appeal by replying to our decision email, and if we uphold the denial, you may contact the Washington Attorney General at atg.wa.gov.

7. Contact Us

The House of Postiche
P.O. Box 607285, Orlando, FL 32860
support@mypostiche.com
689-213-1842