This policy applies to consumer health data collected by Inland Iron Fitness (“IIF,” “we,” “us,” or “our”) from Washington residents and from individuals whose consumer health data is collected in Washington. It is intended to satisfy the separate policy requirements of Washington’s My Health My Data Act.
Current operator: Jeremiah C. Wicken, doing business as Inland Iron Fitness. Mailing address: PO Box 8237, Spokane, WA 99203-3057. Email for requests under this policy: [email protected].
Depending on how you use our services, the categories of consumer health data we may collect can include: training history; injuries, limitations, or movement restrictions; symptoms or pain reports; exercise readiness and screening responses; body measurements or body-composition information you choose to provide; workout logs; training videos or photos that reveal health or physical condition information; recovery, sleep, or fatigue information; nutrition logs or food-pattern information; goals related to physical condition; and messages or notes that describe your physical or mental health status in connection with coaching services.
We do not collect every category listed above from every person. The categories we collect depend on the services you request and the information you choose to provide.
We collect and use consumer health data to evaluate fit for coaching, deliver the services you request, build or adjust programming, provide technique and accountability feedback, respond to questions, protect safety, maintain service records, and comply with legal obligations.
If we want to collect, use, or share additional categories of consumer health data for a new purpose that is not already disclosed in this policy and not reasonably necessary to provide a service you requested, we will update this policy and obtain any required affirmative consent before doing so.
Directly from you through consult forms, intake forms, waivers, questionnaires, messages, email, calls, coaching-platform entries, nutrition logs, uploaded videos or photos, and other materials you submit.
From your interaction with the coaching platform or related service tools when you log workouts, post videos, ask questions, or complete check-ins.
From service providers acting on our behalf, such as scheduling or payment providers, to the extent those records identify that you requested a coaching or health-related service.
From another person or professional only if you direct or authorize that sharing.
We may disclose or make available the following categories of consumer health data, only to the extent reasonably necessary to provide the services you requested or otherwise as permitted by law: intake and screening information; training history and workout records; uploaded videos or photos; nutrition-support records; recovery and readiness information; and coaching communications that include health-related content.
We do not sell consumer health data.
IIF currently has no corporate affiliates with whom it shares consumer health data.
Categories of third parties and processors that may receive consumer health data as reasonably necessary to operate the requested services include: coaching-platform providers; scheduling providers; payment processors to the extent service-selection or billing records reveal health-service usage; email, text, or communication providers; secure cloud-storage or IT-support providers; assistant coaches or contractors acting under confidentiality and access controls; legal, accounting, insurance, or compliance advisers; and emergency or legal authorities when required by law or when necessary to protect safety.
We collect consumer health data either because it is reasonably necessary to provide a product or service you requested or, where required, with your separate affirmative consent for a specified purpose.
We do not share consumer health data unless the sharing is reasonably necessary to provide a product or service you requested or we first obtain any separate and distinct consent required by law.
You may ask us to confirm whether we collect, share, or sell consumer health data about you and to provide access to that data as required by law.
You may withdraw consent from future collection or sharing of consumer health data where consent is the basis for that collection or sharing.
You may request deletion of consumer health data concerning you, subject to the authentication, backup, and timing rules allowed by law.
If we refuse to take action on a request, you may appeal that decision through the appeal process described below.
Send a request to [email protected] with the subject line “Washington Consumer Health Data Request,” or mail the request to Inland Iron Fitness, PO Box 8237, Spokane, WA 99203-3057.
You do not need to create a new account to make a request. We may ask for information reasonably necessary to authenticate your identity and your request.
We will respond without undue delay and generally within 45 days of receiving an authenticated request. Where permitted by law, we may extend the response period once by up to an additional 45 days and will explain the reason for the extension.
To appeal a refusal, send an email to [email protected] with the subject line “Washington Consumer Health Data Appeal” within 30 days after you receive the denial. We will respond to the appeal in writing within 45 days. If we deny the appeal, we will provide a method for you to contact the Washington Attorney General to submit a complaint.
We restrict access to consumer health data to personnel, contractors, and processors who need the data to further the purposes for which it was collected or to provide the product or service you requested.
We maintain administrative, technical, and physical safeguards that are reasonably appropriate to the volume and nature of the consumer health data at issue.
When a processor handles consumer health data on our behalf, we expect that processing to occur under binding instructions and contractual restrictions appropriate to the role of that provider.
We do not sell consumer health data. We do not use geofencing to identify, track, or target people based on health-care-service activity.
We may update this policy from time to time. We will post the updated version with a revised effective date and will obtain any additional consent required before collecting, using, or sharing newly disclosed categories of consumer health data.
Questions about this policy may be sent to [email protected].