Consumer Health Data Privacy Policy

Who we are

Pharma Coa S.L., 4354 collins avenue, Miami Beach , [email protected], publishes Microneedling Hair. It is not a clinic and not a HIPAA covered entity. This page is the notice required by Washington's My Health My Data Act, Nevada's NRS 603A.400 to 603A.550 and the Connecticut Data Privacy Act.

1. What we collect, and the reason

• Data: first name, mobile number, email, ZIP code, city and the topic you pick, plus the time of your consent, the wording versions and a shortened network address. A topic such as a hair loss consultation can point to your health, so it all counts as consumer health data.
• Reason: to keep your place on the waitlist and to say when a verified clinic opens near you. Nothing more.
• Storage: a database run by our hosting provider in the European Union. Only the people who run the waitlist can open it.
• Retention: 12 months from sign-up, then automatic deletion. A coded proof of consent, with no name, ZIP code, city or topic and no readable contact detail, stays 3 years longer.

2. Source

You. The form is the only way this data reaches us.

3. Sharing

None with third parties or affiliates, so the recipient list is empty. Cloudflare, Inc. is our hosting and database processor and acts only on our written instructions.

If a partner clinic ever joins, we will ask you first for a separate consent that names it. If it pays us for your contact, we will also need your separate signed authorization to sell, and we will keep a copy.

4. Tracking by others

No outside party collects consumer health data about you from this site over time or across other sites and services. We use no cookies, ad pixels or scripts from third parties.

5. Your rights

Email [email protected] with the subject "Consumer health data request" to confirm what we hold, get a copy and the list of recipients (none so far), withdraw consent, correct data or delete it. We may ask for the email or mobile number you used, to find your entry. You will have our answer within 45 days (45 more if we explain why). We delete within 30 days of confirming the request and tell our processors to do the same; backups can take longer within what the law allows. Two requests a year are free, and you are treated the same whether or not you make one.

6. Appeals

Reply with "Appeal" as the subject and we answer in writing within 45 days, with reasons. If the answer is still no, contact the Attorney General: Washington, Nevada, Connecticut.

7. Changes

If the data, the purposes or the recipients change, we will publish a new version with a new date, email you if we have your address, and ask for your consent again before the change applies to your data.