Consumer Health Data Privacy Policy

Effective Date: October 16, 2026

Victoria Rose Retreats respects the privacy of participants and recognizes that information concerning health, physical limitations, dietary needs, and accessibility may be sensitive.

This Consumer Health Data Privacy Policy explains how Victoria Rose Retreats collects, uses, and shares consumer health data in connection with our yoga and wellness retreats. It is separate from our general Privacy Policy and is intended to address Washington's My Health My Data Act (RCW 19.373).

1. Categories of Consumer Health Data We Collect

When voluntarily provided by retreat participants, we may collect:

Information about food allergies, intolerances, and health-related dietary restrictions.
Information about injuries, physical limitations, mobility concerns, or activity modifications.
Information about health-related accessibility or accommodation needs.
Other health-related considerations a participant voluntarily discloses that are relevant to retreat participation or safety.

We do not routinely request complete medical histories, diagnoses, prescriptions, or medical records.

2. Sources of Information

We collect consumer health data directly from participants through:

Private retreat guest information forms.
Communications participants initiate regarding their dietary, accessibility, or participation needs.
Follow-up communications when clarification is necessary to arrange a requested accommodation.

3. How We Use Consumer Health Data

We use this information only as reasonably necessary to:

Coordinate appropriate meals and communicate relevant food allergies or dietary restrictions.
Consider reasonable accessibility arrangements.
Offer suitable activity modifications or alternatives.
Communicate relevant participation or safety considerations to appropriate retreat personnel.
Respond to an emergency when necessary and legally permitted.

We do not use consumer health data for unrelated advertising, audience profiling, or promotional campaigns.

4. Categories of Data We Share

When necessary to provide requested retreat services, we may share limited information concerning:

Food allergies, intolerances, and dietary restrictions.
Accessibility or mobility accommodations.
Activity modifications or participation-related safety considerations.

We do not routinely share participants' complete guest information forms or unrelated medical details.

5. Categories of Recipients

Depending on the participant's needs, information may be shared with:

Retreat venue and hospitality providers, including Casa Tara in Baja California Sur, Mexico, when necessary to coordinate meals, accommodations, or accessibility arrangements.
Retreat instructors and facilitators, when relevant to providing requested activity modifications or participation assistance.
Activity or excursion providers, when necessary to coordinate a requested accommodation or address a relevant safety consideration.
Website, form-hosting, and information-storage service providers, acting on our behalf to receive, store, or process information.

We seek to limit disclosures to information reasonably necessary for the requested service.

6. Collection and Sharing Permissions

Victoria Rose Retreats collects and shares consumer health data only where permitted under applicable law, including when necessary to provide a service requested by the participant or when appropriate consent has been obtained.

Where consent is legally required, we will request it before collecting or sharing the relevant information. Collection consent and sharing consent will be requested separately when required.

Participants may withdraw consent for future consent-based collection or sharing by contacting us. Withdrawal does not necessarily affect processing already lawfully completed or information that may lawfully be retained.

7. Your Consumer Health Data Rights

Subject to applicable law, you may request to:

Confirm whether we collect, share, or sell your consumer health data.
Access consumer health data we maintain about you.
Receive information about third parties or affiliates with whom your consumer health data has been shared.
Withdraw consent for future collection or sharing where consent was the basis for processing.
Request deletion of your consumer health data.
Appeal a decision concerning your privacy request.

To exercise these rights, email info@victoriaroseretreats.com with the subject line Consumer Health Data Privacy Request.

We may take reasonable steps to verify your identity and will respond within the timeframes required by applicable law. If we deny a request, we will explain the reason and provide information about how to appeal.

8. Security and Access

We take reasonable measures to limit access to consumer health data to people who need the information for legitimate retreat-related purposes.

We seek to minimize unnecessary collection, disclosure, and retention of sensitive information.

9. Retention and Deletion

We retain consumer health data only for as long as reasonably necessary to fulfill the purposes for which it was collected, or as otherwise permitted or required by law.

When information is no longer needed, we will delete it or otherwise handle it in accordance with applicable legal requirements.

10. Changes to This Policy

We may update this policy to reflect changes in our data practices or applicable law.

Before collecting, using, or sharing additional categories of consumer health data, or using existing data for additional purposes, we will provide any required notice and obtain affirmative consent where required by law.