Washington Consumer Health Data Privacy Notice

Last updated: April 23, 2026

This Washington Consumer Health Data Privacy Notice explains how B4 Fitness LLC, doing business as bStrong Personal Training (“bStrong,” “we,” “us,” or “our”), collects, uses, and shares consumer health data as defined by Washington’s My Health My Data Act (RCW 19.373).

We provide a prominent link to this notice on our website homepage as required by Washington law.

This notice applies to consumer health data we collect from Washington consumers or that we collect in Washington in connection with consultation inquiries, intake, onboarding, coaching, training services, body composition assessments, and related service delivery.

1) Categories of consumer health data we collect

We may collect the following categories of consumer health data:

  • Injury history, physical limitations, exercise restrictions, pain areas, and similar health and fitness-related information you choose to share

  • Health and fitness intake information you choose to share for coaching and safety

  • Coaching notes created by staff based on information you provide for service delivery, safety, and programming

  • Body composition scan results collected in-studio, including InBody results

  • Information that identifies you as seeking or receiving coaching or training services intended to improve physical health or fitness

  • Information reasonably linkable to the health-related information above, for example your name and contact information, when connected to your health and fitness-related information

2) Why we collect and use consumer health data

We collect and use consumer health data for:

  • Coaching and safety

  • Modifying workouts and reducing injury risk

  • Service delivery, including providing the training services you request and communicating with you about those services

  • Progress tracking, including body composition tracking when you choose to use those services

  • Internal recordkeeping related to coaching, programming, safety, and service delivery

We do not use consumer health data for advertising or targeted advertising.

3) Categories of sources from which consumer health data is collected

We collect consumer health data from:

  • You directly, including what you share during intake, consultation calls, coaching conversations, and ongoing service-related communications

  • Staff or coaches, when they document information you provide for coaching, safety, programming, or service delivery

  • In-studio body composition scanning performed through InBody

4) Categories of consumer health data that is shared

We share consumer health data only with processors and service providers as needed to provide the services you request and operate our business consistent with this notice.

For example:

  • InBody scan results are processed and stored through InBody so you can view results in the InBody app and so bStrong managers can view results for coaching and progress tracking.

  • Certain coaching and safety notes may be stored and managed internally using Google Workspace tools used by bStrong staff.

We do not share consumer health data for advertising or targeted advertising purposes.

We do not sell consumer health data.

5) Categories of third parties and specific affiliates with whom we share consumer health data

Affiliates

  • We do not share consumer health data with affiliates.

  • We currently have no affiliates that receive consumer health data.

  • If this changes, we will update this notice.

Processors and service providers

We may share consumer health data with the following processors and service providers only as needed for service delivery and internal operations consistent with this notice:

  • Google Workspace / Google, for internal business communications and internal coaching records in Google Sheets, Google Docs, and email

  • InBody, for body composition scanning and access to scan results through the InBody system and app

We do not share consumer health data with advertising platforms for advertising or targeted advertising purposes.

6) How we handle coaching notes and InBody data

Coaching notes

Health and fitness-related notes, including injury history, limitations, and training considerations, may be documented internally in Google Sheets, Google Docs, and related internal communications within our Google Workspace environment. We do not store injury or limitations notes in Zen Planner as part of our current process.

InBody data

InBody scans are completed in-studio. Results are processed and stored through the InBody system so you can view your results in the InBody app and so bStrong managers can view results for coaching and progress tracking. We do not export InBody results to other systems.

7) Consent for collection and sharing

Under Washington law, we may collect consumer health data only with your consent for a specified purpose or to the extent necessary to provide a product or service you requested.

We may share consumer health data only with your separate consent for sharing, separate from collection consent, or to the extent necessary to provide a product or service you requested.

When we request consent, we will clearly describe:

  • The categories of consumer health data collected or shared

  • The purpose of the collection or sharing, including the specific ways the data will be used

  • The categories of entities with whom the data is shared

  • How you can withdraw consent from future collection or sharing

8) Your rights under Washington law

Subject to applicable law, you have the right to:

  • Confirm whether we collect, share, or sell consumer health data concerning you

  • Access your consumer health data

  • Receive a list of all third parties and affiliates with whom we have shared or sold your consumer health data, if any, along with an active email address or other online mechanism to contact them, if applicable

  • Withdraw consent from our collection or sharing of your consumer health data

  • Request deletion of your consumer health data

9) How to exercise your rights

To submit a request to access data, withdraw consent, or request deletion, contact us at:

Email: train@bstrong.com
Subject line: Health Data Request

We will use commercially reasonable efforts to authenticate your request. If we cannot authenticate your request, we may ask for additional information reasonably necessary to verify your identity and request.

You do not need to create a new account to submit a request.

Timing

We will respond to verified requests without undue delay and, in all cases, within 45 days of receipt. We may extend the response period once by an additional 45 days when reasonably necessary. If we extend, we will notify you within the initial 45-day period and explain why.

Appeals

If we deny your request, you may appeal by emailing train@bstrong.com with the subject line: Health Data Request Appeal.

We will respond to your appeal within 45 days. If we deny your appeal, we will provide a method for contacting the Washington Attorney General to submit a complaint.

10) Deletion requests

If you request deletion of your consumer health data, we will delete the data from our records and notify processors, contractors, affiliates, or other third parties with whom we shared the data, as required by law. If consumer health data is stored on archived or backup systems, deletion may be delayed to enable restoration cycles, but the delay may not exceed six months after authentication of the deletion request.

11) Data security practices

We restrict access to consumer health data to employees, contractors, and service providers who need access to provide the services you requested or to support the purposes described in this notice.

Access controls used by bStrong include:

  • Health and fitness-related notes stored in Google Workspace tools are accessible only to staff who need the information for coaching, programming, and safety.

  • InBody results are accessible only to a limited set of bStrong managers who need the information for coaching and progress tracking.

We maintain administrative, technical, and physical security practices appropriate to the volume and nature of the consumer health data we handle.

12) Processors

We require service providers that process consumer health data on our behalf to do so only as needed to operate our business and provide services to you, and in a manner consistent with applicable law and this notice.

Our processors may not process consumer health data in a manner inconsistent with this notice.

13) Updates to this notice

If we collect, use, or share additional categories of consumer health data not disclosed in this notice, or for additional purposes not disclosed here, we will update this notice and obtain affirmative consent before collection, use, or sharing when required by law.

14) Contact

Questions about this notice or your consumer health data rights may be sent to:

Email: train@bstrong.com

Mail:
B4 Fitness LLC
PO Box 1963
Bellevue, WA 98009
United States