Inspired Health, LLC — ihealthmi.org
Last updated: September 13, 2026
1. Why this policy exists
This is a standalone policy about one specific thing: consumer health data.
Washington’s My Health My Data Act requires businesses that collect health-related information from Washington consumers to publish a separate consumer health data privacy policy, distinct from their general privacy policy. Nevada and Connecticut have comparable requirements. We apply this policy to everyone, not only to residents of those states, because we would rather have one honest practice than three.
This policy supplements our Privacy Policy. Where the two describe the same thing differently as applied to consumer health data, this policy controls.
Important: we are not a HIPAA-covered entity
Inspired Health, LLC is a health and wellness education and coaching practice. Carla Wysko is a Certified Functional Medicine Practitioner, Certified Professional Coach, and RAA-certified reflexologist. She is not a physician, nurse, dietitian, psychologist, or licensed clinical provider.
That means the information you share with us is not protected health information under HIPAA, and it is not covered by physician–patient or therapist–patient privilege. This policy describes the protections that do apply. Please read it before deciding what to share with us.
2. What “consumer health data” means
Under Washington law, consumer health data is broadly defined. It means personal information that is linked or reasonably linkable to you and that identifies your past, present, or future physical or mental health status.
It is wider than most people expect. It includes not only what you tell us about your body, but also information we might process to associate you with a health status — including information derived or extrapolated from data that is not itself health information. For example, the fact that someone repeatedly reads Archive entries filed under “Fertility & postpartum” can, in combination with an identifier, be consumer health data even though no one typed a symptom.
Throughout this policy, “you” means the consumer whose data we hold, and “consumer health data” is used as defined above.
3. What consumer health data we collect, why, and how we use it
We collect the following categories. For each, we describe the purpose and the use — we do not collect health data “just in case.”
| Category | Why we collect it and how we use it |
|---|---|
| Health conditions, symptoms, and diagnoses you describe to us | To understand and answer your Ask Carla question, respond to your message, or work with you as a client. Used only to prepare and deliver that specific response or service. |
| Medications, supplements, and other treatments or interventions you tell us about | To give a relevant educational answer, and to flag interactions or cautions we are aware of. |
| Bodily functions, vital signs, and measurements you describe (sleep, digestion, energy, weight, pain, cycle timing) | Same as above. |
| Reproductive and sexual health information you describe (menstrual cycles, fertility, pregnancy, postpartum, perimenopause, menopause) | Same as above. We treat this category with particular care; see Section 8. |
| Mental and behavioral health information you describe (stress, anxiety, mood, sleep, coping, history of overwhelm) | Same as above, and to recognize when a question falls outside our scope so we can point you toward a licensed professional. |
| Diet, nutrition, and lifestyle information you provide | To give practical, relevant educational guidance. |
| Laboratory and testing information you choose to share | For education on what those lab results may mean, or for referral to the appropriate licensed clinical professional. |
| Information indicating that you are seeking health information or services — including that you contacted us, asked about a session, requested the Free Healing Workbook, joined the membership, or submitted a question. It also includes which pages you visit, which our server logs record: health-topic pages inside the membership, tied to your account, and pages on the public part of the Site — the workbook request page, or the Archive’s list of categories — recorded by IP address and browser rather than by name. No analytics service is involved; see Section 5 of our Privacy Policy. | To operate the membership, deliver what you asked for, keep the Site secure and working, and understand which topics readers and members find useful. |
| Inferences we draw from any of the above | Only to answer your question or serve you. We do not build profiles, score members, or use inferences for advertising. |
We do not use consumer health data for advertising, targeted advertising, profiling, or automated decision-making, and we do not use it to train artificial intelligence models.
We will not collect additional categories of consumer health data, or use it for purposes not listed above, without first disclosing that and obtaining your affirmative consent.
4. Where we collect it from
| Source | Detail |
|---|---|
| Directly from you | Ask Carla submissions, the contact form, the booking form, the Free Healing Workbook request form, email, phone or text, the Medical History form, the Lifestyle Questionnaire, the signed waiver, and anything you share during a session. |
| Automatically from your device | Server log data recording which pages you visit — within the membership, tied to your account, and on the public part of the Site, tied to an IP address and browser. |
We do not buy, license, or otherwise obtain consumer health data from data brokers, advertising networks, list vendors, or any other third-party source. Everything we hold came from you or from your own use of the Site.
5. What we share, and with whom
We share consumer health data only as necessary to operate the Site and deliver what you asked for. We do not share it for anyone else’s marketing.
Categories of consumer health data shared: health conditions, symptoms and diagnoses you describe; medications and supplements; bodily functions and measurements; reproductive health information; mental and behavioral health information; diet and lifestyle information; and information indicating that you are seeking health information or services. In practice, most sharing is incidental to storage and transmission rather than substantive.
Specific third parties we share it with:
| Third party | Category of recipient | What they receive and why |
|---|---|---|
| [HOSTING PROVIDER] | Website hosting and infrastructure provider | Hosts the Site and its database, including your submitted questions and account records, and stores backups. |
| Stripe, Inc. | Payment processor | Your name, email, and membership level. Receives the fact that you are a member, which can indicate you are seeking health information. Does not receive the content of your questions or forms. |
| Intuit Mailchimp | Email marketing service provider | Your email address and subscription status if you subscribe. Receives the fact that you are on a health-related mailing list. Does not receive the content of your questions or forms. |
| Resend, Inc. | Transactional email service provider | Transmits emails from the Site, including notifications containing the content of your submissions. |
| Google LLC (Google Forms) | Form hosting and storage provider | Stores responses to the Medical History form and Lifestyle Questionnaire. This is the most health-sensitive sharing we do. |
| Professional advisors | Accountant, attorney, insurer | Only where reasonably necessary, and only the minimum needed. |
| Legal and safety recipients | Courts, regulators, law enforcement | Only where we believe in good faith that disclosure is required by law or legal process, or is necessary to protect someone’s safety. |
| A successor | Acquirer or transferee | If the practice is sold or transferred. We will notify affected individuals before consumer health data is transferred. |
Affiliates. Inspired Health, LLC has no parent, subsidiary, or affiliated entities. We share no consumer health data with affiliates because we have none.
Processors. Each service provider above processes consumer health data on our instructions under a written contract that limits their use of it to providing the service to us.
Featured Ask Carla questions. If you give permission and we feature your question, it may be published within the membership. We remove your name and edit identifying details. Publication happens only where you have affirmatively agreed to it, and you may withdraw that permission at any time for anything not already used or published in fixed form.
6. Consent
Where we rely on necessity. When you send us a question, a message, a booking request, or a completed intake form, we collect and use the health information in it because that is strictly necessary to provide the thing you asked us for. You asked a question; we cannot answer it without reading it.
Where we ask for your consent. For anything beyond that necessity — including featuring your question — we ask for your affirmative, opt-in consent first. That request will tell you the categories of data involved, the purpose, who receives it, and how to withdraw.
Consent to share is separate. We will not treat your consent to collect as consent to share. Those are asked for separately.
Withdrawing consent is always available and never costs you anything. See Section 7.
7. Your rights
You have the following rights regarding your consumer health data. These rights are available to everyone, regardless of where you live.
Right to confirm and access. You may ask us to confirm whether we are collecting, sharing, or selling your consumer health data, and to give you access to it. If we have shared it, we will give you a list of all third parties and affiliates who received it, along with an active email address or other online mechanism you can use to contact each of them directly.
Right to withdraw consent. You may withdraw your consent to our collection or sharing of your consumer health data at any time. Withdrawal applies going forward and does not undo processing that already happened lawfully.
Right to delete. You may ask us to delete your consumer health data. When you do, we will delete it from our own records and systems.
Right to non-discrimination. We will not deny you services, charge you a different price, or provide you a lower quality of service because you exercised any of these rights. Your membership is unaffected.
Right to appeal. If we refuse to act on your request, you may appeal. See Section 9.
A note on what deletion means for you. If you delete your consumer health data, we lose the context behind any prior answers, and we cannot retract a question that has already been published in anonymized form — though we will remove it from the Site going forward where reasonably practicable. We will tell you plainly if a request would have consequences like these before we act.
8. Reproductive and sexual health information
We collect information about menstrual cycles, fertility, pregnancy, postpartum recovery, perimenopause, and menopause, because members ask about them and because those are among the Archive’s published categories.
We want to be direct about how we treat it:
- We do not sell it, ever, to anyone, for any price.
- We do not share it for advertising or marketing purposes.
- We do not use geofencing near any healthcare facility (see Section 11).
- We will disclose it in response to legal process only where we are legally required to do so, and where we are permitted to notify you first, we will, so that you have an opportunity to object.
9. How to make a request, and how we respond
To make a request, email [email protected] with the subject line “Health Data Request.” Tell us which right you are exercising and give us enough information to find your records.
| Authentication | We will take reasonable steps to confirm you are who you say you are before acting. We will not ask for more information than we need to do that, and we will not keep it any longer than necessary. |
| Timing | We will respond within 45 days. If we need more time, we may extend once by up to 45 additional days, and we will tell you within the first 45 days that we are extending and why. |
| Cost | Free, up to twice per year. If you make more requests than that in a twelve-month period, we may charge a reasonable fee or decline, and we will tell you which and why. |
| If we refuse | We will tell you in writing, explain our reasons, and tell you how to appeal. |
Appeals. To appeal a refusal, reply to our decision or email [email protected] with the subject line “Health Data Appeal.” We will respond in writing within 45 days, explaining any action taken or not taken and our reasons.
If we deny your appeal, you may submit a complaint to the Washington State Attorney General at https://www.atg.wa.gov/file-complaint, or to the attorney general of your own state.
10. We do not sell consumer health data
We have never sold consumer health data and we do not intend to. “Sell” here means exchanging it for money or other valuable consideration, as those terms are defined by applicable law.
If that ever changed, the law would require us to obtain a signed, written valid authorization from you first — separate from every other consent, identifying the data, the buyer, and the purpose, describing how to revoke it, and expiring one year after you sign. We would have to give you a copy. We would rather tell you now that we do not plan to be in that business.
11. Geofencing
We do not use geofencing. We do not use any technology that establishes a virtual boundary around a healthcare facility, or anywhere else, to identify or track you, collect consumer health data, or send you notifications or advertisements.
12. Data security
We restrict access to consumer health data to the people who need it to do their jobs — in practice, that is Carla. We use administrative, technical, and physical safeguards appropriate to the volume and sensitivity of the data, including access controls on the Site’s administrative area, encrypted connections, and account credentials that are not shared.
No system is perfectly secure, and we cannot guarantee absolute security. If a breach affecting your consumer health data occurs, we will notify you as required by applicable law.
13. How long we keep it
We retain consumer health data only as long as necessary for the purposes described in Section 3.
Health-specific content — including Ask Carla questions and any health information you share through forms or messages — is retained for the duration of your relationship with us — your membership, your engagement as a client, or both — then deleted or fully de-identified within 24 months after that relationship ends, unless you ask us to delete it sooner.
If you become a one-on-one client with Carla, the signed waiver and client agreement follow the 6-year period as described in Section 11 of our Privacy Policy.
Account and billing records that are not themselves health data (your name, email, dates, and amounts paid) are retained for up to 7 years after your membership ends, to meet our recordkeeping and legal obligations.
Anonymized content we’ve published with your permission (see Section 5) may be retained indefinitely, since it can no longer be linked back to you.
We delete consumer health data sooner if you ask. See Section 7.
14. Residents of Nevada and Connecticut
Nevada. Nevada’s consumer health data law (SB 370) gives Nevada consumers rights closely parallel to those described in Section 7, including confirmation, access, and deletion, and requires opt-in consent for collection and sharing beyond what is necessary. We extend the same rights and the same practices to Nevada residents. Nevada complaints may be directed to the Nevada Attorney General.
Connecticut. Connecticut treats consumer health data as sensitive data under its Data Privacy Act, requiring consent before processing. The consent practices in Section 6 and the rights in Section 7 apply to Connecticut residents.
Everyone else. We apply this policy to all users regardless of state.
15. Changes to this policy
We may update this policy. We will post the revised version with a new “Last updated” date and keep dated copies of prior versions.
We will not collect additional categories of consumer health data, or use or share it for purposes not disclosed in this policy, without first disclosing the change and obtaining your affirmative consent. A change to this document alone is not consent.
16. Contact us
Questions about this policy, or about the consumer health data we hold:
Inspired Health, LLC
2479 Woodlake Cir, Suite 340, Okemos, Michigan 48864
[email protected]
(989) 413-3752
Subject lines: “Health Data Request” for a request, “Health Data Appeal” for an appeal.