Washington My Health My Data Notice
Effective Date: August 11, 2026
This Consumer Health Data Privacy Policy supplements the Pure Forge Labs Privacy Policy and describes practices of NORTHGATE WELLNESS LLC d/b/a Pure Forge Labs relating to information that may constitute “consumer health data” under the Washington My Health My Data Act and similar applicable laws.
1. Important Context
Pure Forge Labs sells laboratory and research materials strictly for Research Use Only.
Our products are not intended for human or veterinary consumption, diagnosis, treatment, or therapeutic use.
We do not request or intend to collect customer diagnoses, symptoms, treatment histories, prescriptions, clinical records, dosing information, or other medical records.
However, some privacy laws define consumer health data broadly enough that information derived or inferred from browsing, purchasing, searching, communications, or other activity could potentially be considered consumer health data.
Accordingly, we provide this Policy as a conservative disclosure of our practices.
2. Categories of Consumer Health Data We May Collect
To the extent the following information qualifies as consumer health data under applicable law, we may collect:
Research-Product Interaction Information
Information concerning research products viewed, searched for, added to a cart, purchased, or otherwise interacted with.
Transaction Information
Purchase and order information that, alone or when combined with other information, could be interpreted or inferred as relating to a person’s health status or health-related interests.
Research-Purpose Information
Information voluntarily supplied concerning laboratory, analytical, scientific, educational, business, or research purposes.
Communications
Information contained in customer-support communications if a customer voluntarily provides information that qualifies as consumer health data.
We ask customers not to submit personal medical histories, symptoms, diagnoses, treatment information, dosing information, or descriptions of personal consumption.
Derived or Inferred Information
In limited circumstances, technical, browsing, transactional, or other information could be processed in a manner that creates or permits a health-related inference.
We seek to minimize this type of processing.
3. Sources
Consumer health data may be obtained:
- directly from you;
- from your interactions with the Site;
- from transaction and order activity;
- from communications with us;
- from your browser or device;
- from service providers processing information on our behalf; or
- from other sources where permitted by law.
4. Why We Collect or Process Consumer Health Data
To the extent relevant information constitutes consumer health data, we may process it where necessary to:
- provide a product or service you requested;
- process and fulfill an order;
- operate the shopping cart and checkout;
- process payments and refunds;
- fulfill and ship orders;
- respond to customer-service requests;
- comply with the Research Use Only Policy;
- conduct compliance or fraud review;
- protect the security and integrity of our Site and business;
- investigate fraudulent, deceptive, malicious, or unlawful activity;
- maintain records required by law;
- exercise or defend legal claims; and
- perform other processing for which we obtain legally required consent.
Where applicable law requires affirmative consent for a purpose beyond what is necessary to provide a product or service you requested, we will seek that consent before conducting the relevant processing.
5. Sharing of Consumer Health Data
We may disclose information that constitutes consumer health data to processors or service providers to the extent reasonably necessary to provide requested products and services, such as:
- e-commerce infrastructure providers;
- hosting and security providers;
- payment processors;
- fraud-prevention providers;
- fulfillment providers and suppliers fulfilling orders on our behalf;
- shipping and logistics providers;
- customer-service providers;
- professional advisers; and
- other processors acting under appropriate instructions and contractual restrictions.
Where a disclosure constitutes “sharing” requiring separate consent under applicable consumer health data law, we will seek that consent separately from any consent required for collection.
6. Advertising Platforms
Pure Forge Labs does not intend to disclose diagnoses, symptoms, medical histories, treatment information, prescriptions, or other personal medical information to advertising platforms.
We also seek to configure our advertising and analytics integrations to reduce transmission of information that could impermissibly reveal or imply health-related information.
If a contemplated disclosure to an advertising or analytics provider constitutes sharing of consumer health data requiring affirmative consent, we will obtain legally required consent before that sharing.
Our use of advertising platforms is also subject to the applicable platform’s data restrictions.
7. Categories of Third Parties
To the extent a disclosure is treated as sharing of consumer health data rather than processing by a processor or another statutory exception, categories of recipients may include:
- fulfillment and logistics entities;
- payment and transaction providers;
- fraud, security, and compliance providers;
- professional advisers;
- technology providers; and
- other entities specifically disclosed at the time consent is requested.
We currently have no specific commonly branded affiliate identified as an affiliate with whom Pure Forge Labs shares consumer health data.
This section will be updated if that changes.
8. Service Providers Currently Used or Planned
Our general technology environment includes or is expected to include:
- Cloudflare — security and infrastructure;
- WordPress / WooCommerce — website and e-commerce technology;
- hosting and infrastructure providers;
- payment and transaction processing providers;
- fulfillment providers;
- and carriers and other logistics providers used to complete requested transactions.
Our broader Site also uses or plans to use Google, Meta, TikTok, Triple Whale, and Klaviyo as described in our general Privacy Policy and Cookie Policy & Privacy Choices. Those integrations must not be interpreted as authorization for us to provide those platforms with unrestricted consumer health data.
9. Sale of Consumer Health Data
Pure Forge Labs does not sell consumer health data for monetary or other valuable consideration as that term is defined under the Washington My Health My Data Act.
If this practice changes, we will update this Policy and obtain any valid authorization required by applicable law before a sale occurs.
10. Your Washington Consumer Health Data Rights
Subject to applicable law, you may have the right to:
- confirm whether we collect, share, or sell consumer health data concerning you;
- access such consumer health data;
- obtain information about third parties and affiliates with whom such data has been shared or sold;
- withdraw consent for future collection;
- withdraw consent for future sharing;
- request deletion of consumer health data; and
- appeal a refusal to act on a consumer health data request.
11. Deletion Requests
If we approve a valid consumer health data deletion request, we will process the deletion in accordance with applicable law and communicate the request to processors, contractors, affiliates, or other recipients where legally required.
Deletion from archived or backup systems may take longer where permitted by law.
Certain information may remain where retention is permitted or required by applicable law.
12. How to Exercise Your Rights
Send requests to:
support@pureforgelabs.com
Subject: Consumer Health Data Request
Please describe the request and provide enough information for us to authenticate your identity and locate relevant information.
You do not need to create a new customer account to exercise these rights.
We will respond without undue delay and within the time required by applicable law.
13. Appeals
If we decline to take action on a consumer health data request, you may appeal our decision.
Send the appeal to:
support@pureforgelabs.com
Subject: Appeal — Consumer Health Data Request
Identify the request being appealed and explain why you believe the decision should be reconsidered.
We will respond to the appeal within the time required by applicable law.
If an appeal is denied, we will provide information concerning any further complaint mechanism required by applicable law.
14. Consent Withdrawal
Where processing is based on your consent, you may withdraw consent for future collection or sharing by contacting:
Withdrawal does not affect processing that was lawful before the withdrawal.
Some information may still be processed where necessary to provide a product or service you request or where another lawful exception applies.
15. Security
We limit access to consumer health data to persons and service providers that reasonably require access for authorized purposes and maintain administrative, technical, and organizational safeguards designed to protect the confidentiality, integrity, and availability of the information.
16. Changes to Consumer Health Data Practices
We will not materially expand the categories of consumer health data collected, used, or shared or materially change the purposes described in this Policy without providing disclosures and obtaining affirmative consent where applicable law requires it.
17. Contact
Pure Forge Labs / NORTHGATE WELLNESS LLC
521 Stadium Pl S, Apt 2412
Seattle, WA 98104
United States
Email: support@pureforgelabs.com