Consumer Health Data Privacy Policy

This Consumer Health Data Privacy Policy explains how After Forty Digest ("we," "us," or "our") collects, uses, and protects Consumer Health Data as defined by Washington State's My Health My Data Act (MHMDA), Nevada's SB 370, Connecticut's expanded privacy law, and similar state-level consumer health data laws.

This policy supplements our general Privacy Policy. Where the two conflict on the topic of consumer health data specifically, this policy governs.

1. What Is "Consumer Health Data"?

Under applicable state laws, "Consumer Health Data" generally means personal information that is linked or reasonably linkable to a consumer and that identifies the consumer's past, present, or future physical or mental health status. This can include information about:

• Health conditions, treatments, diseases, or diagnoses
• Health-related interventions, procedures, or medical products used
• Bodily functions or vital signs
• Use or purchase of prescribed medications
• Reproductive or sexual health information
• Gender-affirming care information
• Biometric data (fingerprints, retinal scans, etc.)
• Genetic data
• Precise location information that could indicate an attempt to acquire health services or supplies
• Information that would allow inference of any of the above from other data

2. Categories of Consumer Health Data We May Collect

After Forty Digest is a publication, not a healthcare provider. We do not collect medical records, diagnoses, or clinical information directly from readers. However, in the course of publishing health-related content, we may passively collect the following categories of data that could be considered consumer health data under applicable law:

• Browsing activity on health articles. Our servers log which articles you read on our site, including health-related articles. This could allow inferences about health topics you're interested in.
• Newsletter engagement. If you subscribe to our newsletter, we track which articles you click on within our emails, which could indicate health-topic interest.
• Voluntarily submitted information. If you contact us with a health-related question or story tip, we may retain the content of your message.
• Advertising identifiers. Our advertising partners may use cookies or similar identifiers when serving ads on our site. In the context of health-related articles, this could produce data covered by MHMDA.

We do not collect biometric data, genetic data, precise geolocation data, or clinical medical records.

3. How We Use Consumer Health Data

To the extent we collect data that is or could be considered consumer health data, we use it only for the following purposes:

• Delivering the article or newsletter content you requested
• Understanding aggregate reader interest patterns to improve our editorial coverage
• Responding to your inquiries when you contact us
• Serving relevant advertising, subject to your consent where required by law
• Detecting and preventing fraud, security incidents, or abuse
• Complying with legal obligations

We do not use consumer health data to determine your eligibility for insurance, employment, credit, or housing. We do not sell consumer health data.

4. Sources of Consumer Health Data

We collect consumer health data from these sources:

• Directly from you (when you subscribe to our newsletter or contact us)
• Automatically through your interaction with our website (server logs, cookies, analytics)
• From our advertising partners (which may share aggregate performance data)

5. When We Share Consumer Health Data

We share consumer health data only with:

• Service providers. Third-party vendors who help us operate the site (analytics, email delivery, hosting, ad serving) under contractual data protection obligations.
• Advertising partners. Only where you have provided any required consent, and only for the purposes of ad measurement and targeting.
• Legal compliance. If required by law, subpoena, court order, or valid governmental request.

We do not sell your consumer health data. We do not share it with data brokers, health insurance companies, employers, or law enforcement except as legally required.

6. Your Rights Regarding Consumer Health Data

Depending on your state of residence, you have the right to:

• Access the consumer health data we have collected about you
• Delete consumer health data we have collected about you
• Withdraw consent to our collection or sharing of consumer health data at any time
• Appeal a denial of any of the above requests
• Non-discrimination for exercising these rights

To exercise these rights, please contact us at [email protected] with the subject line "Consumer Health Data Request." We will respond within the timeframe required by applicable law (generally 45 days).

7. Authentication of Requests

Before honoring a request, we may need to verify your identity to ensure that the person making the request is the individual whose data is being requested. Verification typically involves confirming information you provided when you subscribed or interacted with us. We will use minimum information necessary for verification.

8. Data Retention

We retain consumer health data only as long as necessary for the purposes described in this policy or as required by law. Newsletter engagement data is typically retained for 24 months. Server logs are typically retained for 90 days. When you unsubscribe or request deletion, we delete your data within 30 days, subject to any legal retention requirement.

9. Security of Consumer Health Data

We use commercially reasonable administrative, technical, and physical safeguards to protect consumer health data against unauthorized access, disclosure, alteration, and destruction. Access to consumer health data within our organization is limited to personnel with a legitimate business need.

10. Changes to This Policy

We may update this Consumer Health Data Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The "Last updated" date at the top of this page reflects the most recent revision.

11. Contact & Appeals

Washington State residents who believe their consumer health data rights under MHMDA have been violated may file a complaint with the Washington State Attorney General.