Consumer Health Data Policy

Some of what people share with me can be health information: for example, that they are in recovery, or what they want to work on in a session. This policy explains how I handle it, as Washington’s My Health My Data Act asks. It adds to my Privacy Policy. “I” and “me” mean Jake Douglass (Jake Douglass, sole proprietor).

What health information I may receive

Your booking answers: your answer to “What brings you here?” (one choice is about recovery), and anything you write about your goals.
Sessions: the Zoom recording and the transcript Zoom makes of it, and my notes and your action plan, which may include anything you choose to share about your health, recovery or well-being.
The email list: a private recovery label, added only if you choose it yourself after signing up or joining the waitlist.

I never ask for medical records, and the site never collects health information through cookies or analytics.

Why

Only to provide what you asked for: to prepare and run your sessions, write your action plan, and, if you chose the label, send you writing about recovery. I never use it for advertising and never sell it.

Where it comes from

From you: what you type in the booking form or a form on this site, what you choose after signing up, and what you say in a session.

Who receives it

Only services that handle it for me under their data processing terms: Cal.com (booking), Zoom (recordings and transcripts), Anthropic (for notes and action plans, under its commercial terms, where it is not used to train models), Kit (the email list), Vercel (which runs the site’s forms), Google Workspace (my email and calendar) and Resend (form messages). Nobody else receives it unless the law requires it.

You share booking answers when you book, and you consent to recording before each session. The recovery label is never added unless you choose it. You can withdraw any of these at any time; for a session in progress, that means we stop recording, or stop working together if you prefer.

Your rights

You can ask to see the health information I hold about you, ask me to delete it, and withdraw your consent. Make your request through the contact form, choosing “Privacy or data request”, or by emailing privacy@jakedouglass.com; if you’re on my email list, you can also reply to any email from me. I’ll reply from my own email to confirm the request is yours, and act on it typically within 48 hours, and within the time the law allows at the latest. If I can’t do something you asked, I’ll tell you why, and you can ask me to look at it again the same way.

How long I keep it

I delete my copies of recordings, transcripts, notes, action plans and booking answers 12 months after your last session, or sooner if you ask. The recovery label stays on your email-list record until you ask me to remove it: reply to any email, or send a privacy or data request through the contact form. If you unsubscribe or leave the waitlist, it is deleted with that record within a year, as the Privacy Policy says.