Last Updated: June 4, 2026
Introduction
This Consumer Health Data Privacy Policy (“CHD Privacy Policy” ) supplements the Experience Life Sciences, LLC (“ELS,” “we,” “us,” or “our”) Privacy Policy and applies to personal information that falls within the definition of “consumer health data” under applicable laws including Washington’s My Health My Data Act, Connecticut’s Data Privacy Act, and Nevada’s SB 370.
This CHD Privacy Policy explains how ELS collects, uses, shares, and secures Consumer Health Data, and how consumers can exercise the rights provided by applicable consumer health data laws. This policy is separate from and in addition to our general website Privacy Policy. Where Consumer Health Data is involved, this policy controls. Capitalized terms used but not otherwise defined herein shall have the same meaning as the Privacy Policy.
Collection and Use of Consumer Health Data
We collect Consumer Health Data that you choose to provide in connection with our services and intake processes, including:
- Medical history, mental health information, substance use history and treatment history, prescription and over-the-counter medication history, supplement and vitamin usage, allergies, prior surgeries, cardiovascular and vascular conditions, blood pressure and clotting history, hormonal issues, neurological history including stroke or dizziness, psychiatric diagnoses or symptoms, and other conditions you describe in application and assessment forms;
- Information about the frequency, dosage, method of use, and timing for substances and medications you report;
- Family medical history, where you choose to provide it;
- Age, date of birth, height, and weight;
- Information about your alcohol and nicotine use, which can be relevant to safety screening; and
- Inferences of the above categories of health data derived or extrapolated from non-health information.
We use Consumer Health Data for the following purposes:
- Provide the Site and services;
- Fulfill our obligations under any contract with you;
- Evaluate eligibility and clinical suitability for our programs;
- Conduct safety screening and risk assessment;
- Respond to inquiries and provide information you request;
- To comply with our compliance and other legal obligations;
- Schedule consultations and coordinate logistics you request;
- Communicate with you about your application and services;
- Maintain quality assurance and safety records;
- With your consent where requested and received;
- Protect our services, prevent fraud and security incidents, and comply with law; and
- Carry out other uses that are described at the time of collection and that are reasonably necessary to provide the services you request.
We do not use Consumer Health Data for targeted advertising. We do not build profiles from Consumer Health Data for unrelated marketing.
Sources of Consumer Health Data
We collect Consumer Health Data directly from you when you submit application or assessment forms, communicate with us by phone, email, or social media, or otherwise interact with our Site and services. We also generate inferences about your health status from the information you supply where necessary to evaluate eligibility and safety. We may receive Consumer Health Data from our service providers that host and secure our intake and communications systems in the course of providing those services to us, and we may receive Consumer Health Data from your designated emergency contact if you direct us to engage them for safety reasons. We do not buy Consumer Health Data from data brokers.
Sharing of Consumer Health Data
We share Consumer Health Data with third parties to achieve the purposes and uses listed above when reasonably necessary, with your prior consent where required, and only for the purposes disclosed and authorized. We do not share Consumer Health Data with third parties for their independent marketing or advertising purposes. We share Consumer Health Data with the following categories of recipients:
- Our processors that provide services on our behalf, including secure website hosting and storage, intake platform hosting, secure communications tools, IT security and fraud prevention, email and messaging tools, customer support tools, and professional advisors who are bound to duties of confidentiality.
- Your designated emergency contact, with your direction or authorization, for safety purposes.
- Government authorities or other parties where required or authorized by law, including in response to valid legal process and for the protection of health, safety, and security, consistent with applicable law.
- We also disclose whether we share Consumer Health Data with any of our affiliates. As of the Effective Date of this policy, we share Consumer Health Data with the following specific affiliates for the disclosed purposes: S.A. de C.V. If this list changes, we will update this policy and obtain any required consent before sharing with a newly added affiliate.
- If ELS, including any of our subsidiaries, brands, or affiliates, is involved in a merger, acquisition, asset sale, or other corporate combination, your consumer health data may be transferred to the acquiring or surviving entity.
- We may share your consumer health data with other third parties with your consent or, if necessary, we may share your consumer health data in certain circumstances to protect our rights, our customers, or your safety.
Your Privacy Rights
As provided for in the “Your Rights and Choices” section of the Privacy Policy, you may make requests about your personal information. Applicable privacy laws provide you certain specific rights with respect to your consumer health data, subject to exceptions.
Nevada and Washington Residents
Nevada and Washington residents have the following rights in relation to their consumer health data, subject to certain exceptions:
- The right to know. You also have the right to obtain a list of all third parties and affiliates with whom we have shared or sold your Consumer Health Data, and an active email address or other mechanism that you may use to contact these third parties. If you are a Washington resident or otherwise subject to Washington law, you also have the right to access your Consumer Health Data that we collect, share, or sell.
- The right to deletion. You have the right to have us, as well as our affiliates, service providers, and contractors, delete the consumer health data we have about you.
- The right to withdraw consent. You have the right to withdraw consent related to your consumer health data where we rely upon consent to collect, use, or share your consumer health data.
- The right to non-discrimination. You have the right not to receive discriminatory treatment for the exercise of the privacy rights described above.
Connecticut Residents
Connecticut residents have the following rights in relation to your Consumer Health Data, subject to certain exceptions:
- The right to know. You have the right to know what consumer health data we collect, use, disclose, and/or sell or share as those terms are defined under applicable law. You may ask us to provide you a portable copy of this information up to two times in a rolling twelve-month period.
- The right to delete. You have the right to have us, as well as our affiliates, service providers, and contractors, delete the consumer health data we have about you.
- The right to opt-out. You have the right to opt-out of targeted advertising, the sale of your consumer health data, and profiling decisions that could produce legal or similarly significant effects concerning the consumer.
- The right to correction. You have the right to have us correct inaccurate consumer health data.
- The right to non-discrimination. You have the right not to receive discriminatory treatment for the exercise of the privacy rights described above.
- Rights concerning sensitive personal data. We cannot process your consumer health data, or use your consumer health data for certain purposes without your affirmative consent.
You may exercise your rights by contacting contact@experiencelifesciences.com with your request. As further stated in the Privacy Policy, your request may be denied where an exception applies, including but not limited to, where we are legally required to maintain your consumer health data or if we are unable to authenticate the request using commercially reasonable efforts.
We will respond to your request within forty-five (45 ) days after receipt and we reserve the right to extend the response time by an additional forty-five (45) days when reasonably necessary and provided consumer notification of the extension is made within the first forty-five (45) days. As described below, in some jurisdictions, an authorized agent may submit a request to exercise your rights on your behalf.
