New York note (we are NY-based). This policy follows Washington's My Health My Data Act, which today reaches any Washington resident's data regardless of where a business sits. New York does not yet have an equivalent law in force — its proposed New York Health Information Privacy Act (reintroduced in the 2026 session as S9269) was not enacted as of this draft. We monitor it, and this policy will be updated if it becomes law.

Consumer Health Data Privacy Policy

Effective date: June 19, 2026

This policy describes how HVIH PLLC, operating the Hudson Valley Integrative Health store, handles "consumer health data" under Washington's My Health My Data Act and comparable state laws. It is separate from our general Privacy Policy.

Categories of consumer health data we may process

"Consumer health data" can include information that identifies your past, present, or future health status. For this store, it may include:

• The dietary supplement products you view, add to a cart, or purchase.
• Health status inferred from those purchases or browsing — for example, an inference that a product was bought to support a particular body system.
• Contact and order information when it is linked to the above (name, email, shipping address tied to a health-related purchase).
• Device or online identifiers associated with health-related browsing or buying.

Why we process it (purpose)

• To take, fulfill, and ship your order.
• To provide customer service and handle returns.
• To meet legal, tax, and security obligations.

We use information about what you buy and browse, including through Shopify's advertising features, to show you advertising that may be more relevant to you. Because the products we sell relate to health, this information can suggest health interests. Under Washington's My Health My Data Act and similar state laws, this may be treated as a sale or sharing of consumer health data. You can opt out at any time on our Your Privacy Choices page, and we honor Global Privacy Control signals sent by your browser.

Sources of this data

• Directly from you (what you enter to browse, order, and check out).
• Automatically from your device when you use the store (with your consent for non-essential collection).

Categories of data we share, and the specific parties who receive it

We share consumer health data only with the service providers needed to operate the store, and only for the purposes above. MHMDA requires us to name the specific affiliates and third parties who receive consumer health data. They are:

• Order & fulfillment data → Shopify
• Payment data → Shopify Payments (Stripe)
• Shipping data → USPS and UPS
• Order/email contact data → our email service provider
• Affiliates of HVIH PLLC → None

We share this information with Shopify and its advertising partners for that purpose.

Your rights: access, delete, and withdraw consent

You have the right to:

• Access the consumer health data we have about you, and a list of who we've shared it with.
• Delete your consumer health data.
• Withdraw consent to our collection and sharing of it.

To make a request, email info@somerinstitute.com. We will verify and respond within the time the law requires. If we deny a request, you may appeal by emailing info@somerinstitute.com, and you may contact your state Attorney General.

Consent — we ask first

We obtain your opt-in consent before collecting or sharing consumer health data beyond what is strictly necessary to provide a product you ask for, and we obtain separate consent before any sharing the law treats as a "sale." You can withdraw consent at any time.

No geofencing near health facilities

Consistent with MHMDA, we do not use geofencing within 2,000 feet of any healthcare facility to identify or track consumers, send notifications related to consumer health data, or collect such data.

Contact

Questions about this policy, or to exercise a right, email info@somerinstitute.com or write to HVIH PLLC at 291 Main Street, Suite 101, Beacon, NY 12508.