Consumer Health Data Privacy Policy

LITA does not provide health care. But some things clients choose to share with us — for example grief, emotional state, stress, a health condition mentioned in a pastoral, coaching or divination conversation, or (if massage services resume) health history and contraindications — may be "consumer health data" under Washington law and other applicable state laws. This policy explains how we handle it. It supplements our Privacy Policy.

1. Consumer health data we may collect

• Statements you volunteer about physical or mental health, emotional well-being, grief, substance use, or medical conditions, in chat, intake answers, sessions or notes.
• Crisis or safety indicators detected in conversations (used only to protect you).
• Information that a person is seeking a pastoral, coaching or spiritual service, to the extent a law treats it as health data.
• If massage/in-person services resume: health history, medications, injuries, pregnancy status, contraindications and areas to avoid.

We do not collect precise geolocation, biometric data, or genetic data.

2. Sources

Directly from you, and from our practitioners' notes about your sessions.

3. Why we collect and use it

Only to provide the service you ask for, keep you and practitioners safe (including crisis response), comply with law, and defend legal claims. We do not use consumer health data for advertising, and we do not sell it.

4. Consent

We collect and use consumer health data only (a) as necessary to provide the service you requested, or (b) with your separate, affirmative consent obtained by an unchecked box before collection. Before any sharing beyond what is necessary to provide your service, we ask for a separate consent that names the recipient and purpose. You may withdraw consent at any time by emailing staff@lostintheastral.com.

5. Who we share it with

Only processors that help us deliver your service under contracts limiting use: Supabase (database), Vercel (hosting), DeepInfra (concierge AI replies — see Privacy Policy Section 6), Google Workspace/Meet (sessions and email), Resend and Twilio (messages you request). We never give consumer health data to Meta, Google advertising products or any data broker. We disclose it to others only where required by law or to prevent serious, imminent harm.

6. Your rights

You may (a) confirm whether we collect, share or sell your consumer health data and get a list of recipients, (b) access it, (c) withdraw consent, and (d) have it deleted, including from our processors' systems. Email staff@lostintheastral.com (subject "Health Data Request") or use /your-privacy-choices. We respond within 45 days (extendable once by 45 days with notice). If we decline, you can appeal by replying "Appeal" and, if still unsatisfied, contact the Washington Attorney General or your state attorney general.

7. Prohibited practices we follow

We do not sell consumer health data, do not set up a geofence around any health facility, do not discriminate against you for exercising your rights, and limit staff access to those who need it.

8. Security, retention and changes

See Privacy Policy Sections 8–10 and 13. Health information from paused massage services is not collected while those services are paused.

Contact: staff@lostintheastral.com · (971) 588-5845 · Lost in the Astral LLC, 5441 S Macadam Ave #6788, Portland, OR 97239 · Version CHD-2026-10-23-v4 · Effective October 23, 2026