Effective date: October 1, 2026 Washington Specialty Physicians, Inc., doing business as Longevistic · 19203 Edgecliff Dr SW, Normandy Park, WA 98166 · hello@longevistic.com · (206) 486-0662

Scope. This policy covers “consumer health data” under Washington’s My Health My Data Act (RCW 19.373). That means personal information linked to you that identifies your past, present, or future physical or mental health status and is not protected health information under HIPAA. Once you become our patient, your health information is PHI and is governed by our Notice of Privacy Practices (/notice-of-privacy-practices/) instead.

At the end of intake, acceptance is two required checkboxes and Submit. There is no typed name. Ticking the boxes and selecting Submit is your electronic signature, and we record your account name and email.

The first checkbox is agreement to the Terms of Service, the Privacy Policy, this Washington Consumer Health Data Policy, and the HIPAA Notice of Privacy Practices, and consent to telehealth care. The full agreement under that checkbox covers evaluation and care, telehealth, messages, health records, and costs.

The second checkbox is separate because Washington’s My Health My Data Act requires sharing consent to be separate. It reads: “I consent to Longevistic sharing my health information with Fullscript and its lab partners to order and deliver my labs and supplements.” Labs are part of this agreement, not merely a disclosure. Fullscript is how Longevistic orders labs and supplements. You can withdraw that consent in the portal Account tab or by emailing hello@longevistic.com. If you withdraw it, labs and supplements cannot be ordered through Fullscript. Annual-plan renewal and Runway refund terms are described in the Terms of Service.

Categories of consumer health data we collect

• The fact that you signed up for, or asked about, a longevity or preventive-health membership, and the plan you chose
• Health topics you mention in contact-form messages before becoming a patient
• Newsletter subscription information

Purposes and how the data is used

• To respond to your inquiry, set up your account, and let you pay for the membership you requested
• To send the newsletter, if you subscribed
• To operate and secure the Site

Sources

• You, through forms on the Site
• Our payment processor, for payment status only

Categories of consumer health data we share

• Health information shared with Fullscript and its lab partners, only with your separate consent, so Longevistic can order and deliver labs and supplements. Labs are part of that agreement, not merely a disclosure. Fullscript is how Longevistic orders labs and supplements
• Name, email, billing details, and plan name, shared with Stripe to process the payment you request

Third parties and affiliates we share with

• Payment processor: Stripe, Inc.
• Labs and supplements: Fullscript (Healthy Web Inc. / Natural Partners, Inc.) and its lab partners
• Service providers: AWS under the applicable HIPAA BAA for the member portal and health-data systems; the public website’s separate hosting provider; email and newsletter service providers
• Affiliates: We do not share consumer health data with affiliates.

We do not sell consumer health data. We do not use geofences around health care facilities. Health data for the member portal and care systems is stored with AWS under the applicable BAA; the public website is hosted separately and does not store PHI.

Your rights (RCW 19.373.040)

You may:

1. Confirm whether we collect, share, or sell your consumer health data and access it, including a list of all third parties and affiliates with which we have shared it and their contact information.
2. Withdraw consent to our collection and sharing of your consumer health data.
3. Have your consumer health data deleted. We will also tell our processors and the third parties with which we shared it to delete it.

How to use these rights: email hello@longevistic.com with the subject “Consumer health data request,” or call (206) 486-0662.

• We will verify your identity and respond within 45 days. We may extend that once by another 45 days when reasonably necessary and will tell you if we do.
• Requests are free up to twice a year.
• If we deny a request, you can appeal by replying to our decision. We will answer the appeal within 45 days. If you are still unsatisfied, you can contact the Washington State Attorney General at https://www.atg.wa.gov/file-complaint.

Withdrawing Fullscript consent: withdraw it in the portal Account tab, or email hello@longevistic.com. If you withdraw it, labs and supplements cannot be ordered through Fullscript.

Changes

If we want to collect or share new categories of consumer health data, or use it for new purposes, we will update this policy and ask for your consent first.