Consumer Health Data Privacy Policy (Washington)
Effective: March 31, 2024
We are committed to respecting your privacy. Our Privacy Policy describes how we handle most of your personal information across our stores and platforms. This Consumer Health Data Privacy Policy explains our practices for “Consumer Health Data” that is defined and regulated by the Washington My Health My Data Act (Washington State consumers only). As used in this Privacy Notice, “Beyond Yoga”, “our”, “us” and “we” means I Am Beyond Yoga, LLC, a corporation headquartered in the United States.
“Consumer Health Data” means personal information that can be linked or reasonably linked to a consumer and that that identifies past, present, or future physical or mental health status. Consumer Health Data includes information about medical conditions as well as non-medical information, such as biometric data, information about use of non-prescription health-related products, and access to healthcare, reproductive care, or gender-affirming care.
This Policy does not apply to “protected health information” (PHI) that is processed subject to the Federal Health Information Portability and Accountability Act (HIPAA) or to health data of our employees.
CATEGORIES OF CONSUMER HEALTH DATA THAT WE MAY COLLECT
We may collect, use, and disclose Consumer Health Data including the following categories:
Accommodation requests/use.
For example, the use of screen readers or other accessibility services available on our websites, or in person accessibility support provided to you in our facilities.
Individual Health Conditions, Medical Treatment.
Information that you voluntarily provide in connection with purchases that may express a medical or health condition, such as maternity wear, accidents or health emergencies in our facilities such as vital signs, symptoms, identification of injured body parts and need for medical assistance.
Biometric Data.
Recordings captured on our CCTV cameras in our stores.
WHY WE COLLECT IT:
- As part of providing requested products and services.
- To provide support and services such as if you need assistance accessing our products, stores, or websites.
- In connection with accidents or health events or emergencies in our facilities (such as by creating an incident report, or contacting medical services on your behalf, such as an ambulance).
- To comply with law or legally binding process, to enforce our legal rights or to protect you, us or others against injury or harm, for legal and/or other reporting or recordkeeping obligations.
- To maintain the safety, security, functionality, and integrity of our business.
- To prevent, investigate, deter, and take action regarding unlawful or improper activities in our facilities.
HOW WE COLLECT CONSUMER HEALTH DATA
- Directly from you or through your interactions with us.
- From technologies such CCTV cameras or tools deployed on our websites.
WE SHARE IT WITH
We do not sell any Consumer Health Data. We may disclose the categories of Consumer Health Data described above in the following circumstances:
- Within the LS&Co. corporate family as needed to achieve the purposes set forth above. Our affiliates are all bound by our Global Privacy Policy and committed to protecting your Consumer Health Data. A list of our affiliated companies is available upon request to privacy@levi.com.
- With our data processors, service providers and contractors who assist us in providing goods and services or who provide us with professional services. These companies may only use the data only as permitted by our contracts with them.
- As permitted by law, such as (i) with your consent, (ii) to an acquiring organization if we are involved in a sale or a transfer of our business, (iii) as needed to prevent, detect, protect against, or respond to security incidents, identity theft, fraud, harassment, malicious or deceptive activities, (v) as needed to preserve the integrity or security of our systems, or (iv) to investigate, report, or prosecute those responsible for any action that is illegal under applicable state or Federal law.
YOUR PRIVACY RIGHTS
You have specific rights with respect to your Consumer Health Data including:
- The right to know if we are collecting, using, or disclosing your Consumer Health Data, to access that data, and to receive a list of the affiliates and the categories of third parties with whom we have shared your information.
- To withdraw consent if we are processing your Consumer Health Data with your consent.
- To request that we delete your Consumer Health Data.
We will not discriminate against you for exercising any of your rights.
To exercise these rights, please use this link. We will authenticate your requests and process it as required by law. Please allow 45 days for a response. If we deny your request, you may appeal that denial by contacting us at privacy@levi.com. If you are not satisfied following your appeal, you can file a complaint with the Washington State Attorney General at www.atg.wa.gov/file-complaint.