CONSUMER HEALTH DATA PRIVACY POLICY

Effective Date: September 21, 2026

Last Reviewed: September 21, 2026

Brandon Medical Center Weight Management and Wellness Centers (“we,””us,” or “our”) provides this Consumer Health Data Privacy Policy to residents of Washington, Nevada, and Connecticut. It describes how we collect, use, share, and protect consumer health data as those states define it, and how you may exercise your rights over that data.

What This Policy Covers, and What It Does Not

Consumer health data means personal information linked or reasonably linkable to you that identifies your past, present, or future physical or mental health status. That includes your interest in, inquiry about, or acquisition of health care services or products — not only clinical records.

This Policy applies only to consumer health data that is not otherwise regulated. It does not apply to:

Protected Health Information governed by HIPAA, which is addressed in our Notice of Privacy Practices.
Information governed by other federal or state health privacy law, including patient medical records maintained under Florida law.
Deidentified data that cannot reasonably be linked to you.

In practice, this Policy governs the information we collect before or apart from a clinical relationship — what you tell us through our website, what we learn when you inquire about a service, and what our website collects automatically.

Categories of Consumer Health Data We Collect

Health conditions, symptoms, and status you describe to us, including weight, body composition, and hormone-related concerns.
The health care services or products you inquire about, browse, schedule, or purchase — including medical weight management, hormone replacement therapy, peptide therapy, IV therapy, and injectable treatments.
Information about medications or treatments you use, have used, or ask about.
Measurements you provide to us, including height, weight, and body mass index.
Appointment information, including the service requested and appointment history.
Information you volunteer in a free-text message field, a phone call, an email, or a text message.
Information that, in combination, identifies you as someone seeking health care services — for example, contact details submitted through a form on a specific treatment page.
Approximate location derived from your IP address.

We do not collect precise geolocation, biometric identifiers, genetic data, or data concerning reproductive or sexual health or gender-affirming care through our website.

Sources of Consumer Health Data

Directly from you: website forms, telephone calls, email, text messages, and in-person visits.
Automatically from your device when you use our website: IP address, browser and device identifiers, pages viewed, and cookie identifiers.
From our service providers: our online scheduling provider and our telephone service provider.

How We Use Consumer Health Data

To respond to your inquiry and answer your questions about our services.
To schedule, confirm, and remind you about appointments.
To provide the services you request and to bill for them.
To operate, secure, and maintain our website.
To comply with our legal obligations.

We collect and use consumer health data only as necessary to provide a product or service you have requested, or with your consent.

Categories of Consumer Health Data We Share, and With Whom

We share consumer health data only with the categories of third parties below, and only as needed for them to perform services for us:

Online scheduling provider. Receives your name, contact details, and the service you are booking, in order to manage appointments.
Telephone service provider. Receives call routing and call detail information.
Website hosting provider. Stores form submissions and site data on our behalf.
Email service provider. Delivers messages you have asked to receive.
Payment processor. Processes transactions for products and services you purchase.
Legal and regulatory recipients. Courts, regulators, or law enforcement, where required by law.

We do not sell consumer health data. We have not sold consumer health data and will not do so without first obtaining your valid written authorization, separate from this Policy and from any other agreement.

We do not share consumer health data with advertising networks, data brokers, or social media platforms, and we do not use it to target advertising to you.

Third-Party Tracking on Our Website

We use analytics technology on our website to understand how visitors use the site. We have configured it so that it does not receive information identifying the specific treatments or health services an individual visitor views or requests, and so that it is not used to build advertising audiences based on health interests.

Aside from that analytics provider, third parties do not collect consumer health data over time and across different websites or online services when you use our website.

Geofencing

We do not use a geofence around any health care facility to identify or track consumers seeking health care services, to collect consumer health data, or to send notifications, messages, or advertisements relating to consumer health data or health care services.

Data Security and Access

We maintain administrative, physical, and technical safeguards designed to protect consumer health data. We restrict access to employees and contractors for whom access is necessary to perform their role, and we require our service providers to protect the data they handle on our behalf.

Your Rights

If you are a resident of Washington, Nevada, or Connecticut, you have the right to:

Confirm whether we collect, share, or sell your consumer health data.
Access the consumer health data we have collected about you, including a list of the third parties with whom we have shared it.
Withdraw your consent to our collection and sharing of your consumer health data.
Request deletion of your consumer health data.
Be free from discrimination or retaliation for exercising any of these rights.

Where we are required by law to retain information — for example, medical records subject to Florida retention requirements — we will tell you and explain the basis.

How to Submit a Request

Email: privacy[@]brandonmedicalcenter.com

Telephone: (813)502-6430

Mail: 122 S. Moon Ave. Brandon, FL 33511

We will verify your identity before acting on a request. We respond within 45 days. Where reasonably necessary given the complexity or volume of requests, we may extend once by an additional 45 days and will notify you of the extension and the reason for it before the first period expires.

If We Deny Your Request

You may appeal by writing to

Appeals: appeals[@]brandonmedicalcenter.com

We will respond to an appeal in writing within 45 days, explaining the reasons for our decision. If we deny the appeal, you may submit a complaint to your state attorney general:

Washington: Office of the Attorney General, atg.wa.gov/file-complaint
Nevada: Office of the Attorney General, ag.nv.gov/Complaints
Connecticut: Office of the Attorney General, portal.ct.gov/AG

Changes to This Policy

If we materially change how we collect, use, or share consumer health data, we will update this Policy, revise the Effective Date, and — where required — obtain your consent before applying the change to data we already hold.

Contact Us

Brandon Medical Center Weight Management and Wellness Centers

122 S. Moon Ave. Brandon, FL 33511

Email: privacy[@]brandonmedicalcenter.com

Phone: (813)502-6430