Legal consumer health data privacy
This policy covers "consumer health data" as defined by Washington's My Health My Data Act. It supplements our Privacy Policy.
Last updated October 24, 2026
Health data we collect
Before a procedure, our intake and consent forms ask about:
- Allergies and sensitivities, including to pigments, numbing products, and latex.
- Medications and supplements, such as blood thinners, retinoids, and acne treatments.
- Health conditions, such as diabetes, autoimmune or blood disorders, cold sores, keloid scarring, and skin conditions.
- Pregnancy and breastfeeding status.
- Recent cosmetic or medical treatments, such as Botox, fillers, peels, or laser.
- Photos and notes about your skin, hair, and treatment area, and how you healed.
Where it comes from
Directly from you, on intake and consent forms, during your consultation and appointments, and when you contact us. We do not buy health data from anyone.
Why we collect and use it
- To decide whether a procedure is safe for you, or should be postponed.
- To choose the right technique, pigments, and aftercare.
- To keep treatment records for touch-ups and future appointments.
- To respond to any reaction or complication.
- To meet our legal, licensing, and health-and-safety obligations.
We collect and use it only with your consent, which you give when you complete and sign our forms, or as needed to provide the service you asked for.
Who we share it with
We do not sell consumer health data. We share it only:
- With the artist or technician performing your service.
- With service providers (processors) that store or handle it on our behalf, who may use it only to provide services to us:
- WaiverForever, for our intake, consent, and waiver forms.
- Wix (Wix.com Ltd.), for online booking and client records.
- Vercel (Vercel Inc.), which hosts our website, including any before-and-after photos you have agreed to let us post.
- When required by law, or to protect your health or safety in an emergency.
- Publicly, as before-and-after photos on our website, Instagram, or other social media, only with your separate permission. You can withdraw it at any time and we will remove the photos from the accounts we control.
- With anyone else only with your separate consent.
We do not have affiliates that receive consumer health data.
Your rights
You have the right to:
- Confirm whether we collect, share, or sell your consumer health data.
- Access that data, including a list of the third parties and processors we have shared it with.
- Withdraw your consent to our collection and sharing of it.
- Have it deleted, including from our processors' systems.
To make a request, email Info@Calypso-Beauty.com with "Health Data Request" in the subject line, or call (425) 324-6612. We will confirm your identity, then respond within 45 days (we may extend that by 45 more days when reasonably necessary, and will tell you if we do). We won't charge you or treat you differently for making a request. If you withdraw consent or ask us to delete your data, we may not be able to safely perform some services.
Appeals
If we decline your request, you can appeal by replying to our decision or emailing Info@Calypso-Beauty.com with "Health Data Appeal" in the subject line. We will respond in writing within 45 days and explain our decision. If your appeal is denied, you can contact the Washington State Attorney General.
