Consumer Health Data Privacy Policy
Effective August 1, 2026.
This is a separate policy, required by Washington's My Health My Data Act. It sits alongside our Privacy Policy and covers one narrow thing: information we hold that could reveal something about your health.
Who this covers. Residents of Washington and Nevada, whose laws give this information its own protection. We apply the same treatment to residents of Connecticut and Maryland by choice, because their laws point the same direction.
What we treat as consumer health data, and why
We never ask you a health question. We do not collect medical history, diagnoses, medications, lab results, or biometric data, and we do not want you to send them to us.
What we do hold is the fact that you bought, or looked at, a product named Works for Glucose Wellness. On its own that is an ordinary retail record. But because of the name, someone could use it to draw a conclusion about your health. Rather than argue about whether that makes it health data, we treat it as health data. Specifically, we treat the following as consumer health data:
- The fact that you purchased or subscribed to Works, and your order and delivery history.
- The fact that you viewed the product page or added the product to your cart.
- The contact and shipping details attached to those events, because they are what connect the record to you.
- Anything you volunteer about your health in a message to support, which we ask you not to send.
Where it comes from
From you, when you browse the site, place an order, manage your subscription, or email us. Nothing in this category is bought from a data broker, appended from an outside list, or inferred from anything other than your own activity on our own site.
What we use it for
Three purposes, and no others:
- To take, bill, ship, and support your order and your subscription.
- To meet a legal obligation, such as keeping tax records or responding to a lawful request.
- To defend a legal claim, if one is ever made.
We do not use it to build a health profile of you, to score or segment you by health status, or to decide what price you see.
Who we share it with, and who we do not
We share it with:
| Category | Specific companies | What they receive |
|---|---|---|
| E-commerce and payment platform | Shopify, Shopify Payments | Order and account records |
| Subscription billing | Shopify Subscriptions (Shopify Inc.) | Contact and billing schedule |
| Email service provider | Klaviyo | Contact details and order confirmations |
| Shipping and fulfillment | ShipStation, All In Nutritionals | Name, shipping address, order contents |
Each is bound by contract to use the information only to do that job for us.
We do not share it with advertising platforms. For visitors in Washington, Nevada, Connecticut, and Maryland, we switch off the Meta and TikTok advertising trackers, so no purchase or product-page event from your visit reaches them. General website analytics, which does not identify you, still runs.
We do not sell consumer health data. Not for money, and not for anything else of value. We have not done so in the past and we have no plan to. If that ever changed, the law requires us to get your signed, specific authorization first, and we would have to ask you before anything moved.
Your rights
You have all of these, at no cost, and using them will not change your price or your service.
- Confirm and access. Ask whether we are collecting, sharing, or selling your consumer health data, and get a copy of what we hold.
- Get the list of recipients. Ask for a list of every third party and affiliate we have shared or sold your consumer health data to, with an active email address or other contact for each one.
- Withdraw consent. Take back your consent to our collecting or sharing it, at any time.
- Delete. Have it erased.
Deletion means deletion. When we accept a deletion request we remove the data from our live systems and from our archived and backup systems, and we notify every service provider, contractor, and third party we shared it with, and instruct them to do the same. We complete this within 30 days. The only thing we keep is what tax law or a live legal claim forces us to keep, and if that applies we will tell you exactly what and why.
Deleting your consumer health data will cancel any active subscription, because we cannot ship an order without a record of it. We will say so before we act, so nothing is a surprise.
How to use these rights
Email support@worksprobiotics.com with "Consumer health data request" in the subject line, and tell us which right you want to use.
We will ask you to send the request from the email address on your account, or to give us enough order detail to match you to a record. That step exists to stop someone else from getting your information or deleting your subscription.
We answer within 45 days. If the request is complicated we may take one further 45 days, and we will tell you before the first 45 days are up.
If we refuse. You can appeal. Reply to our answer with the word "Appeal." Someone who was not part of the first decision reviews it and responds in writing within 45 days. If we still refuse, we will give you a link to complain to your state Attorney General. Washington and Nevada residents may also have the right to bring their own claim.
Changes
If we change how we handle consumer health data, we will update this page and change the effective date. If the change is significant, we will say so here and, where we can email you, by email.
Contact
MetaBiotics LLC, dba Works Probiotics
PO Box 17263, Fountain Hills, AZ 85269
support@worksprobiotics.com