Consumer Health Data Privacy Policy

Effective date: October 20, 2026

Burne Fitness LLC, operated by Jordan Bradburne in Seattle, Washington, handles health and fitness information to provide the products and services you request. This policy describes our practices concerning consumer health data, including information protected by Washington's My Health My Data Act. It applies to covered Washington consumers and information. Contact jordan@burnefitness.com to exercise your rights or ask questions.

This is a separate health data policy. The general Privacy Policy addresses other personal information.

Categories and purposes

Depending on the service and what you provide or authorize, we collect and use these categories:

·       Exercise activity, training history, goals, strength and performance records, workout logs, and progress information to design or deliver training and review progress.

·       Nutrition, eating habits, sleep, recovery, energy, stress, lifestyle, and related self-reported information to provide fitness education and general coaching within our scope.

·       Weight, measurements, progress photographs, and other body composition information you choose to submit to track progress and discuss goals.

·       Injuries, pain, limitations, health conditions, medications, pregnancy or reproductive information, and related screening responses that you provide to assess suitability, adapt exercise, or recommend appropriate professional care. We do not request information unrelated to those purposes.

·       Activity, steps, sleep, or other fitness and health measurements made available through an app or wearable integration you choose to connect.

·       Messages, form responses, coaching notes, and summaries that contain or reasonably reveal your physical or mental health status, including information derived from those records.

·       Account and contact information linked to these records, or that identifies a person seeking fitness or health-related coaching.

Not every category is collected from every person. You can decline optional information and integrations. If information is necessary for a requested service, we will explain the service limitation rather than treat your choice as permission for another purpose.

Sources

Sources include you and your submitted forms, files, messages, conversations, and workout records; coaching and program platforms; connected apps or wearables you authorize; and records or professional instructions you voluntarily provide. Jordan can create coaching notes or progress summaries from these sources.

We do not seek unrelated medical records or ask you to give us account credentials for a healthcare provider.

Collection and use choices

We collect and use consumer health data to the extent necessary to provide the product or service you request, or with the specific consent required by applicable law. Health screening, tailoring training, responding to coaching questions, and delivering tracking features are service purposes. Optional publication, unrelated uses, and nonessential disclosures are separate choices.

Accepting website terms, signing a general waiver, buying a program, or completing an intake does not by itself grant optional health data sharing consent. When consent is required, we explain the data, purpose, recipient categories, and withdrawal method before collecting or sharing it.

Processing and recipient categories

The health data categories above can be processed by service providers supporting the requested service. These can include Trainerize and My PT Hub for training, tracking, and messages; Google Forms and Google storage for forms and records; Tally for application information you provide; Calendly for health information you voluntarily include in a booking; and business email and storage providers such as Microsoft 365 for correspondence and records.

Payment and bookkeeping providers, including Stripe and Wave, can receive transaction and account information that identifies a purchase of a fitness-related service. Website, form, and messaging providers, including Squarespace, ManyChat where used, and Meta platforms, can receive information submitted through their features. Avoid putting detailed health information in public comments or lead-generation messages.

Administrative and AI providers, including OpenAI tools when used, can receive information supplied for organizing records or drafting communications. Disclosures of consumer health data to these providers must be limited to necessary service processing under appropriate contractual instructions, or supported by the specific separate sharing consent required by law. This policy itself is not that consent.

Where a provider qualifies as a processor under Washington law, processing is subject to a binding contract and instructions, and we limit access to the service purpose. If a provider's use falls outside that relationship, we treat disclosure according to the applicable sharing requirements. You may ask us which providers received your data and how to contact them.

Other third-party recipient categories are: social platforms and public viewers for specifically authorized materials; a professional or other recipient you specifically direct us to contact; and legally authorized recipients when a disclosure is required or permitted by applicable law. We do not have business affiliates receiving health data through a shared corporate group.

Public client wins and testimonials

We share only the data categories, materials, and channels covered by the separate permission you give. The written-wins option concerns selected future written excerpts about workout consistency, strength progress, confidence with exercise, and fitness habits on public Instagram and Facebook Stories. It excludes medical information, weight, body measurements, personal circumstances, photographs, videos, website testimonials, and paid advertisements.

Where you choose approval each time, written approval of the proposed final excerpt is needed before posting. Other testimonials or media use follows the separate testimonial and media release. We remove identifying details unless you expressly permit their use. That does not guarantee legal deidentification or complete anonymity.

The categories shared publicly are limited to what you authorize. Public posts are received by the social platforms, including Meta, and viewers. You can withdraw publication permission for future use by messaging Jordan or emailing jordan@burnefitness.com. Deletion requests are handled separately under your applicable rights.

Sale and geofencing

We do not sell consumer health data. We do not use geofencing around healthcare facilities to identify or track people seeking care, collect health data, or send related advertising.

Your rights and requests

Covered consumers can ask whether we collect, share, or sell their health data; access it and obtain recipient and contact information; withdraw consent to collection or sharing; and request deletion.

Send requests to jordan@burnefitness.com or through your existing coaching account. No new account is required. We may seek limited verification. We respond within 45 days of receipt. A necessary extension of up to 45 additional days will be explained within the first response period. Eligible access requests are free up to twice annually, subject to lawful exceptions for excessive requests.

For deletion, we delete covered records and notify relevant recipients and processors. Backup deletion may take up to six months after verification. Any exceptions must be supported by applicable law.

To appeal a denial, email the same address with "Health Data Appeal" and identify the decision. We provide a written appeal decision within 45 days. You can complain to the Washington Attorney General at https://www.atg.wa.gov/file-complaint.

We do not unlawfully discriminate against you for exercising these rights. If removal or withdrawal means we cannot provide a service safely or as requested, we will explain this and handle service termination and unused prepaid amounts under applicable law and our Refund and Cancellation Policy.

Security and changes

We limit access to what is needed and use reasonable protections appropriate to the sensitivity of these records. Health data is not retained simply because it might be useful for future marketing.

We will update this policy and obtain affirmative consent where required before collecting additional health data categories or using existing data for a new purpose. A revised policy does not override a prior permission choice.

Contact: Burne Fitness LLC, Seattle, Washington, United States; jordan@burnefitness.com.