Consumer Health Data Privacy Notice
This notice is for residents of Washington (My Health My Data Act), Nevada (SB 370) and anyone else covered by a consumer health data law. It covers only the health-related information Veg Eats collects. Our Privacy Policy covers everything else. Veg Eats, 653 Coppertree Ct, Simi Valley, CA 93065 (“Veg Eats”, “we”) is responsible for this information.
1. The consumer health data we collect
- That you avoid gluten, nuts, soy or sesame, when that reflects a health condition;
- Whether that is an allergy or celiac disease, or a preference.
We do not ask about any other health condition, and we do not collect precise location near health care facilities or any biometric or genetic data.
2. Why we collect it and how we use it
Only to provide what you asked for: filtering restaurant menus to dishes the menu says are free of what you avoid, setting up your account for you, and showing your settings back to you. We collect it only with your consent, given on the onboarding question that asks for it, and it is always optional. We record each consent: your account, the version of this notice you were shown (currently 0.2), the date and time, and which answers it covered; and we record each withdrawal the same way. You get those records in your data download. We never use it for advertising or to infer anything else about you.
3. Where it comes from
Only from you, when you answer the question in onboarding or change your filters.
4. Sharing
We do not share consumer health data with third parties or affiliates, and we do not sell it. It is stored and processed for us by our hosting provider, Cloudflare, Inc., acting as our processor under contract and only on our instructions. If we ever want to share it with anyone else, we will ask for your separate consent first, and we will never sell it without the signed authorisation the law requires.
5. Your rights
- Confirm and access: use Download your data in the account menu, or ask whether we hold your consumer health data, get a copy, and get a list of all third parties and affiliates it has been shared with (today, none) and how to contact them.
- Withdraw consent: at any time, by removing the answers with Edit your filters in the account menu (choose “None of these”), or by emailing us. Withdrawing deletes the answers and is recorded.
- Delete: remove it with Edit your filters, use Delete account in the account menu, or email us. When you delete your account it is hidden at once and purged after a 30-day grace period (within 24 hours of the grace period ending); database backups roll off within a further 30 days. Your consent records are purged with the account.
- Appeal: if we refuse a request, reply to our answer or email us with “Appeal” in the subject. We will respond within 45 days. If you are not satisfied, you can contact the Washington State Attorney General at atg.wa.gov or the Nevada Attorney General at ag.nv.gov.
How to make a request: use the account menu, or email [email protected] from the address on your account. We will confirm it is you before acting, respond within 45 days (the law lets us extend once by 45 more days if we tell you why), and will not charge you or treat you differently for asking.
6. Contact
Veg Eats
653 Coppertree Ct, Simi Valley, CA 93065
[email protected]