Consumer Health Data Privacy Policy

Last updated: August 19, 2026 Effective: August 19, 2026

This policy applies to consumer health data as defined by the Washington My Health My Data Act, Nevada SB 370, and the consumer health data provisions of the Connecticut Data Privacy Act.

It applies to you if you are a resident of Washington, Nevada, or Connecticut, or if you are physically located in one of those states when you use skinprofinder.com.

This document sits alongside our main Privacy Policy. Where the two differ on consumer health data, this one governs.

Operated by: The Extraordinary Esthetician LLC, a California limited liability company Contact: [email protected] Post: c/o Underwood & Rosenblum, 1630 Oakland Rd a114, San Jose, CA 95131, United States

1. What we are, and what we are not

Skincare Pro Finder is a directory. We help people find licensed skincare professionals. We are not a healthcare provider, we do not provide medical advice or treatment, and we do not hold medical records. We are not a HIPAA covered entity.

That distinction matters here, because the state laws above define health data far more broadly than HIPAA does. Information can be consumer health data simply because it indicates that someone is seeking health-related services, even where no diagnosis, provider, or medical record is involved.

2. What counts as consumer health data on this site

You can use most of this site without giving us any health information. Browsing listings, reading the blog, and searching by location all work without it.

These are the ways health-related information can reach us:

Information you actively give us

• What you write in a message to a professional through our contact form, if you describe a skin condition, concern, treatment, or diagnosis
• What you write in a review, if you mention a condition you were treated for
• Anything you tell us directly by email or through a support request
• Details you add to your account profile about your skin concerns

Information inferred from how you use the site

• Which treatment or concern categories you browse, including Oncology Esthetics, Acne Treatment, Compromised Skin, Pigmentation, and Age Management
• Which blog articles you read, where those articles concern a specific condition
• Search terms you enter, where those terms describe a condition
• Which professionals you view or save, where that professional’s listed specialty indicates a condition

Location information associated with any of the above, where it could indicate that you sought health-related services in a particular place.

We treat all of the above as consumer health data for residents of the three states named.

3. How we collect it

• Directly from you, through forms, messages, reviews, your account, and email
• Automatically, through cookies, server logs, and analytics technologies that record which pages you view
• From our advertising and analytics partners, as described in Section 5

4. Why we collect it, and what we do with it

We collect and use consumer health data only for these purposes:

• To provide the service you asked for. Showing relevant listings, running searches and filters, and delivering your message to the professional you chose to contact.
• To respond to you. Answering support requests and questions you send us.
• To operate and secure the site. Preventing fraud and abuse, and diagnosing technical faults.
• To improve the directory. Understanding in aggregate which categories and articles are used, so we know what to build next.

We do not:

• Sell consumer health data. Not for money, and not for anything else of value.
• Use consumer health data to determine eligibility for any service, price, or benefit.
• Provide it to law enforcement without a valid warrant, subpoena, or court order.
• Use geofencing around any healthcare facility, medical office, or treatment location. Doing so is separately prohibited by Washington law and we do not do it.

5. Who we share it with, and your choices

Service providers

We use vendors to run the site: hosting, email delivery, payment processing through Stripe, mapping through Google Maps, and customer support. They act under contract, may only use the information to provide their service to us, and may not use it for their own purposes.

Professionals you contact

When you send an enquiry through our contact form, we transmit your message to that professional, including anything you wrote about your skin. That is how the form works and we cannot connect you without it.

Once it reaches them, that professional controls it as an independent business under their own privacy practices. If you do not want to share condition details with a business before speaking to them, contact them using their listed phone number instead of our form, or keep your message general.

Advertising and analytics partners

We use Google Analytics 4, Google Tag Manager, Google Ads, and the Meta Pixel across the site. These tools record which pages you view, which can include treatment and concern category pages.

We do not knowingly transmit the content of your messages, reviews, or profile to these partners. We do not target advertising to you on the basis of a health condition.

You can stop this entirely. Decline advertising cookies in our consent banner, enable Global Privacy Control in your browser, use the “Do Not Sell or Share My Personal Information” link in our footer, or email [email protected]. We honour all four.

Affiliates

We share limited information with The Skin Games and affiliated entities for verification and operational purposes.

Legal

We disclose only where required by law and, for consumer health data, only on a valid warrant, subpoena, or court order.

6. Consent and authorisation

Collection. We collect consumer health data either because it is necessary to provide a service you specifically requested, such as delivering your message to a professional you chose, or because you have given consent. Where we want to collect it for any other purpose, we will ask first, separately and clearly.

Sharing. We do not share consumer health data with third parties for their own purposes. If that ever changes, we will obtain your separate, signed authorisation beforehand, distinct from any consent to collect, exactly as Washington law requires.

Withdrawal. You may withdraw consent at any time by emailing [email protected]. Withdrawal applies going forward and does not affect processing already carried out.

7. How long we keep it

We delete consumer health data when it is no longer needed for the purpose it was collected for, or sooner if you ask.

8. Your rights

If you are a resident of Washington, Nevada, or Connecticut, you have the right to:

• Confirm whether we are collecting, sharing, or selling your consumer health data
• Access it, together with a list of every third party and affiliate we have shared it with, including contact details for each so you can follow up with them directly
• Withdraw consent to our collection and sharing of it
• Delete it

How to make a request

Email [email protected] with the subject line “Consumer Health Data Request”, tell us which right you want to use, and tell us which state you live in.

We verify identity by confirming control of the email address associated with your account or enquiry. We do not require you to create an account to make a request.

We respond within 45 days. If we need more time we will tell you within that window and may extend once by a further 45 days.

Deletion

When you ask us to delete consumer health data, we delete it from our live systems and from our backups, and we notify every service provider, contractor, and affiliate that has received it, instructing them to do the same.

One limit you should know about. Where you have already sent a message to a listed professional, that professional holds their own copy as an independent business. We will tell them you have asked for deletion, but we cannot compel them. To delete it fully, contact that professional directly.

Appeals

If we refuse a request, we will explain why. You may appeal by replying to our decision, and we will respond to the appeal within 45 days. If your appeal is denied, you may complain to:

• Washington: the Office of the Attorney General, at atg.wa.gov
• Nevada: the Office of the Attorney General, at ag.nv.gov
• Connecticut: the Office of the Attorney General, at portal.ct.gov/ag

9. Who has access internally

Access to consumer health data is limited to personnel who need it to do their jobs, which in practice means support staff responding to enquiries and technical staff maintaining the systems. Access is controlled by role, and everyone with access is contractually bound to confidentiality.

10. Changes

We may update this policy. The “Last updated” date shows the current version.

We will not apply any material change retroactively to consumer health data already collected without first obtaining your consent.

11. Contact

Email: [email protected] Post: The Extraordinary Esthetician LLC, c/o Underwood & Rosenblum, 1630 Oakland Rd a114, San Jose, CA 95131, United States