Consumer Health Data Privacy Policy

This Consumer Health Data Privacy Policy applies to “consumer health data” as defined by the Washington My Health My Data Act (MHMDA), RCW 19.373, and to Washington residents and consumers whose consumer health data is collected in Washington. It supplements, and should be read together with, the Banana Bariatrics, LLC general Privacy Policy at www.bananabariatrics.com. This is a separate, distinctly linked notice as MHMDA requires.

Although Banana Bariatrics is not a HIPAA covered entity and the information described here is not protected by HIPAA, because it relates to your health status and health-related conditions it is treated as consumer health data under Washington law and is governed by this notice.

1. Categories of consumer health data we collect

We may collect: (a) information identifying you as a person seeking or receiving weight-management or bariatric/metabolic health services; (b) responses you provide in surveys, feedback forms, and questionnaires that relate to your health condition, symptoms, weight-management progress, or concerns about a practice; (c) information indicating your status as a patient of a participating practice or as an independent member struggling with obesity; and (d) any health-related information you voluntarily disclose during support group calls, in the Facebook group, by email, or through Zoom.

2. How we collect it (sources)

Directly from you at registration, through Gravity Forms surveys hosted on our WordPress/MemberPress website, through email correspondence, through the Facebook group, and through Zoom event registration and attendance records.

3. Purposes for collecting and using it

To confirm your eligibility as an active patient of a participating practice or as an eligible member; to operate and administer your membership; to facilitate peer support; to reconcile and summarize survey responses for reporting and accuracy (including de-duplicating repeat survey counts); to communicate feedback or concerns to the relevant practice at your request; to maintain attendance records supporting MBSAQIP support-group documentation; and to contact you regarding your membership, including if you are inactive.

4. Third parties and affiliates with whom we share consumer health data, and the categories of data shared

We do not sell your consumer health data. We share it only as follows:

  • Participating practices / facilitators — survey feedback, concerns, and Zoom attendance records for members belonging to that practice, for the practice’s support-group and MBSAQIP documentation purposes.
  • Service providers (“processors”) acting on our behalf under contract, including: our SSL website host and MemberPress/WordPress environment; Gravity Forms (survey collection); ActiveCampaign (email and contact/activity data); Zoom (video events and attendance); Google Drive (attendance record storage); our third-party payment processor (billing information); and third-party artificial intelligence tools (see paragraph 5). Each processor is contractually restricted to processing data only for the purposes we specify.
  • We share the specific categories of data necessary for each function above, and no more.

5. Use of artificial intelligence

Survey and form responses (and, where needed for accuracy, the associated email address) may be transmitted to third-party artificial intelligence tools to help reconcile, de-duplicate, summarize, and report survey data. These tools perform data-summarization functions only and do not make care decisions. You may decline this processing; declining will not affect your access to membership.

6. Your rights (Washington residents)

You have the right to: (a) confirm whether we collect, share, or sell your consumer health data and access it; (b) have your consumer health data deleted; (c) withdraw consent to our collection and sharing of your consumer health data; and (d) not be discriminated against for exercising these rights. To exercise any right, contact in**@**************cs.com. We will respond within the timeframe required by law. If we deny a request, you may appeal by replying to our decision; you may also file a complaint with the Washington State Attorney General.

7. Data we do not sell

We do not, and will not, sell your consumer health data without first obtaining your separate valid authorization as required by MHMDA. Any such authorization would be a separate, signed document — distinct from the consents below — containing the specific statutory elements (the specific data sold, the seller and purchaser identities, the purpose, a statement of the right to revoke, and an expiration no later than one year).

8. Security

Consumer health data submitted through the website is transmitted via SSL. We restrict access to authenticated users and to service providers bound by contract. We do not use geofencing around any healthcare facility to collect consumer health data or to send you messages.

Consumer Health Data Consent

MHMDA requires that consent be a voluntary, affirmative, freely given, specific, and unambiguous act — obtained before collection or sharing beyond what is strictly necessary to provide the product you requested, presented separately from other terms, and never obtained through pre-checked boxes or “dark patterns.” Accordingly, at registration and at the point of survey submission we present the following as separate, unchecked checkboxes. The collection, sharing, and AI consents are kept distinct and are not bundled into a single “I agree to the terms” checkbox, and membership is not conditioned on the sharing or AI consents.

  • Consent to collect consumer health data (at registration): “I consent to Banana Bariatrics, LLC collecting my consumer health data — including my identity as someone seeking weight-management or bariatric/metabolic support and my survey and feedback responses relating to my health — as described in this policy. I understand this information is not protected by HIPAA.”
  • Consent to share consumer health data with your practice and service providers: “I consent to Banana Bariatrics sharing my consumer health data with my participating practice/facilitator and with the service providers listed in this policy (including the website host, ActiveCampaign, Gravity Forms, Zoom, Google Drive, and the payment processor) for the purposes described in this policy. I understand I can withdraw this consent at any time by emailing in**@**************cs.com.”
  • Consent to AI processing of survey data: “I consent to Banana Bariatrics transmitting my survey and form responses (and, where needed, my email address) to third-party artificial intelligence tools solely to reconcile, summarize, and report survey data, as described in this policy. I understand declining will not affect my membership.”

Contact Us

Banana Bariatrics, LLC

Email Address: in**@**************cs.com

Effective as of August 24th, 2026.