Last updated 2026-08-03
Consumer Health Data Privacy Policy
Soom Retreat runs day retreats in Snohomish, Washington, facilitated by licensed mental health counselors. When you register for a retreat we ask a small number of questions that Washington's My Health My Data Act (RCW 19.373) treats as consumer health data. This policy says exactly which ones, what happens to each answer, how long it is kept, and how to make it stop. It applies to registrations taken through soomretreat.com and covers only that data; our general practices are in the Privacy notice.
What counts as consumer health data here
Only the answers you give to registration questions that Soom Retreat has classified as health-related or as being about a minor. In practice these are questions such as dietary needs and allergies, accessibility or mobility needs, and anything you choose to tell us about a health condition so that a facilitator can keep you safe during the day. We do not diagnose, treat, or bill insurance, and we do not operate as a health care provider; these questions exist so that the room, the food, and the facilitation are safe for the person in them.
What we do not ask for
We never ask for a diagnosis code, a medical record, an insurance identifier, biometric data, or precise location. We do not track you across other websites and we run no advertising trackers on this site. If a question ever seems to ask for more than a retreat facilitator needs, you can leave it blank where it is optional, or tell us instead of writing it down.
Consent comes before collection
A registration form that asks a health-related question cannot go live until it carries a consent request. You see the question, you see why it is asked, and you agree separately before it is stored. Consent for collection and consent for sharing are asked separately, and neither is bundled into a general terms acceptance. If you do not consent, you can still register; you simply do not answer that question.
Who sees an answer
A health-related answer is hidden on the participant roster until someone deliberately chooses to show it, and it is left out of roster exports by default. Revealing one is a permission-gated action that is recorded with who did it and when. In practice the people who see one are the facilitator and the kitchen, because a dietary need is exactly what they have to know.
How long it is kept
Health-related answers and answers about a minor are deleted 90 days after the retreat they were given for. Ordinary answers and contact details are kept for 12 months after the event and then deleted. Deletion is automatic; you do not have to ask for it, and asking earlier is also your right.
Marketing
A health-related answer is never used for marketing. An answer about a minor never enters a marketing audience at all, under any circumstances. Registering for a retreat does not add you to a marketing list; joining one of those is a separate choice you make yourself and can undo from any email we send.
We do not sell consumer health data
Soom Retreat does not sell consumer health data, and does not share it for cross-context behavioral advertising. Washington's My Health My Data Act requires a separate, signed authorization before any such sale, and we have never sought one and do not intend to. If that ever changes, we would have to ask you for that authorization in writing first, and you would be free to refuse.
Registrations for someone under 18
Some retreats admit attendees aged 13 and up. For those, we ask a guardian for consent and keep the record of it. From the attendee themselves we ask only for a display name and an age band. Never an email address, a phone number, or a date of birth. Everything else on the registration is the guardian's. A guardian can withdraw consent at any time using the contact details below, and we will delete the registration's health-related answers on request.
Who handles it
Soom Retreat decides what is asked and why, and is the regulated entity under RCW 19.373. F2B operates the website, the registration system, and the records behind it as Soom Retreat's service provider, under contract, and processes this data only on Soom Retreat's instructions. Payments are taken through Stripe, which receives the amount, the item, and your email address for the receipt. Never any registration answer. No health-related answer is sent to a payment provider, an email marketing tool, or an analytics service.
Your rights and how to use them
You have the right to confirm whether we hold consumer health data about you, to see it, to have it deleted, and to withdraw a consent you previously gave. Withdrawing consent does not undo what was lawfully done before you withdrew it, but it stops any further use. To make any of these requests, email soomretreat@gmail.com or call 425-540-1653 and say what you want. We will respond within 45 days, and we will tell you if we need longer and why. If we refuse a request you may appeal by replying to our answer; if the appeal is denied you may complain to the Washington State Attorney General.
Contact
Soom Retreat, 18310 James St, Snohomish, WA 98296. Email soomretreat@gmail.com, telephone 425-540-1653. Please put "health data request" in the subject line so it reaches the right person quickly.
Changes to this policy
If we change what we ask, who sees it, or how long it is kept, we update this page and change the date at the top before the change takes effect. We do not apply a new purpose to data already collected without asking you again.