Consumer Health Data Privacy Policy
Effective date: July 13, 2026
This policy describes how IronMend LLC handles “consumer health data” as defined by Washington’s My Health My Data Act and similar state laws, and the rights those laws give you. It supplements our Privacy Policy; where this policy is more protective, it controls.
Consumer health data we collect
- The medical intake you submit with an order (health history and related answers)
- Your orders for wellness therapies, and their status
- Communications with us that reference your health
We do not collect biometric data, precise geolocation, or genetic data, and we do not use “geofencing” around any facility.
Why we collect it
Solely to provide the service you request: independent provider review of your order, pharmacy fulfillment, shipping, customer support, and legally required record-keeping. We do not collect or share consumer health data for advertising, and we do not sell it. Advertising and analytics tools on our site are deliberately disabled on all pages where health data is entered or displayed.
Who can access it
- The independent licensed provider who reviews your order
- The licensed pharmacy that prepares and ships it
- Authorized IronMend administrators, for order processing and support
- Our data-infrastructure processor (database/authentication provider), bound by contract to process it only on our instructions
We share consumer health data with no one else, except as required by law. Any future sharing beyond what is necessary to provide the service you requested would require your separate, explicit consent first, and selling consumer health data would require a signed authorization, which we do not seek.
Your rights
You have the right to:
- Know whether we collect, share, or sell consumer health data about you, and access it
- Withdraw consent for our collection and sharing of your consumer health data
- Have your consumer health data deleted, including from our processors’ systems
To exercise any right, email carloruggiero08@ironmendllc.com with the subject “Health Data Request.” We will confirm and respond within the time required by your state’s law (generally 45 days). Note that some records (for example pharmacy dispensing and payment records) are subject to legal retention requirements and may be exempt from deletion; we will tell you exactly what was deleted and what was retained and why. If we deny a request, you may appeal by replying to our decision, and we will respond to the appeal within the statutory period, including instructions for contacting your state attorney general if you disagree with the outcome.
Contact
IronMend LLC · 2310 N Henderson Ave, Ste B #1102, Dallas, TX 75206 · carloruggiero08@ironmendllc.com
© 2026 IronMend LLC. All rights reserved.