Consumer Health Data Privacy Policy

This separate policy describes consumer health data processed by Hustle and Muscle LLC, DBA Chez Michelle Injectables & Skin Studio, under Washington’s My Health My Data Act. It applies to information linked to you that reveals that you are seeking aesthetic or healthcare services, to the extent the information is not exempt under that law. Clinical records protected under HIPAA or Washington healthcare-record law are addressed in our Notice of Privacy Practices.

We collect the contact details and service interests you provide when asking a question, choosing a service, requesting an appointment or signing up for an offer. This can include your name, email address, phone number, requested treatment, appointment preferences and information you choose to include in a message. The source is you, your authorized representative, or the booking and communication service you use to reach us.

We use this information to respond, arrange the service you request, communicate about the request, and deliver an offer or marketing communication you choose to receive. Technical information needed to load the relevant website, booking or form resource may include an IP address, browser details and page or resource requested. We collect or share consumer health data with the consent required by law, or as necessary to provide a product or service you request.

Contact details, service requests and related communications are handled by the studio and its service providers for the purposes above. These include Med Spa Marketing AI for website, CRM, forms and scheduling; communication and hosting providers; and Stripe for information necessary to process a requested payment. Technical information associated with linked booking-page resources is also received by Google, Cloudflare and Meta/Facebook, whose fonts, verification tools and web resources load on that service. If a disclosure to a treating provider or another recipient is needed for your requested service, it is limited to that purpose and the permissions required by law.

We will not sell your consumer health data or share it with affiliates for their own purposes. A change to the categories, recipients or purposes described here requires an updated disclosure and any additional consent required by law.

You may confirm whether we collect, share or sell your consumer health data; access it and obtain the list and contact details of applicable recipients; withdraw consent; or request deletion. To make a request, call Studio Management at 425-696-3883, email Chelly@chezmichelleboutique.com, or write to the studio address below. State the right you want to exercise and how we can reach you. Do not email sensitive medical records. We will verify identity using information reasonably needed for the request and arrange a secure exchange when needed; no new account is required.

We respond within 45 days, with one additional 45-day extension when allowed and explained within the initial period. Eligible requests are free up to twice annually. Deletion includes notifying applicable recipients; deletion from backups may take up to six months after authentication where the law permits.

If we deny your request, you may appeal by contacting Studio Management through the same methods and identifying it as a privacy appeal. We provide a written appeal decision within 45 days. You can also contact the Washington Attorney General. We do not discriminate against you for exercising these rights.

Hustle and Muscle LLC, DBA Chez Michelle Injectables & Skin Studio · 809 West Main Street, Suite D, Monroe, WA 98272 · 425-696-3883 · Chelly@chezmichelleboutique.com · chezmichelleboutique.com