Consumer Health Data Privacy Policy

Effective Date: October 5, 2026 Applies to: HueVine Skincare LLC and HueVine PLLC (together, "HueVine," "we," "us")

This Consumer Health Data Privacy Policy explains how HueVine collects, uses, shares, and protects consumer health data, and the rights you have over it. It is a separate policy, linked from our homepage, as required by the Washington My Health My Data Act (RCW 19.373), Nevada SB 370 (NRS 603A), and the health-data provisions of the Connecticut Data Privacy Act and similar state laws. It supplements our main Privacy Policy; where a specific consumer-health-data law gives you greater rights, that law controls and we honor it.

This policy addresses consumer health data as those laws define it. Clinical medical records created in the course of care by HueVine PLLC are separately governed by Michigan medical-records law and, where applicable, HIPAA and our Notice of Privacy Practices.

1. What consumer health data we collect

Consumer health data is information that identifies your past, present, or future physical or mental health status. For HueVine this may include: the treatments and services you express interest in; appointment and booking details; intake responses and skin or health information you choose to share with us; products and services you purchase; and the content of communications with us about your care or service needs.

2. Where it comes from

We collect consumer health data directly from you — when you book, complete an intake, purchase, or communicate with us — and from your activity in our booking and purchase systems. We do not buy consumer health data about you from data brokers.

3. Why we collect it and how we use it

We collect and use consumer health data only to: provide and schedule the services you request; maintain accurate service and booking records; respond to your questions and requests; and meet our legal obligations. We do not use consumer health data for targeted advertising, and we do not sell it.

4. Who we share it with

We share consumer health data only with service providers that process it on our behalf under contract — for scheduling, payments, secure storage, and message delivery — and only to provide those services to us. We also disclose it where required by law or to protect rights and safety. We never sell consumer health data, never share it for any third party's marketing, and never allow it to be sent to advertising or analytics platforms. Any disclosure beyond what you request requires your separate, valid authorization.

5. No sale; no geofencing

We do not sell your consumer health data. Under the Washington My Health My Data Act, a "sale" requires your separate valid authorization — we do not sell it, so we do not seek such authorization. We do not use a geofence around any health-care facility to track, collect data from, or send messages to consumers based on their presence.

6. Your rights

Depending on your state, you have the right to: confirm whether we collect, share, or sell your consumer health data and access it; withdraw your consent to our collection and sharing; and request deletion of your consumer health data. We honor deletion consistent with our legal and professional record-keeping obligations and will tell you if an exception applies. We do not discriminate against you for exercising these rights. If we deny a request, you may appeal by replying to our decision.

How to exercise your rights: contact us using Section 9. We will verify your request and respond within the time your law requires.

7. Consent and withdrawal

We collect and share consumer health data with your consent to provide the services you request, and we limit collection and sharing to what is necessary for those services. You may withdraw consent at any time; withdrawal is prospective and does not affect processing already carried out, and we will stop the affected collection or sharing and honor any related deletion request consistent with our legal obligations.

8. How we protect it

Access to consumer health data inside HueVine is limited to staff who need it to serve you. We store it in our protected systems rather than general-purpose tools, apply administrative, technical, and physical safeguards, and retain it only as long as needed to provide services and meet legal requirements, after which we delete or de-identify it. Our employees, contractors, and service providers are bound to protect it on the same terms.

9. Contact and requests

HueVine — Consumer Health Data Privacy 17641 W 12 Mile Rd, Lathrup Village, MI 48076 hello@huevine.com · (248) 234-5001

You may submit access, withdrawal, deletion, or appeal requests to the contact above. This is the separate Consumer Health Data Privacy Policy referenced in Section 7 of our main Privacy Policy.

10. Changes

We may update this policy; the effective date above shows the latest version, and material changes will be noted on this page. Changes are not retroactive and do not reduce rights tied to data we already hold.

---

This is a consumer disclosure, not legal advice. A Michigan-licensed attorney should confirm the consumer-health-data analysis before reliance.