Consumer Health Data Privacy Policy

Last updated: 26 September 2026

This Consumer Health Data Privacy Policy applies to https://brainstormsdeepsleep.com (the "Site"), operated by X Enterprises, LLC ("X Enterprises," "we," "us," or "our"). Brainstorms Deep Sleep is a DBA of X Enterprises, LLC, 18122 3rd Dr SE, Bothell, WA 98012.

It supplements our Privacy Policy (/legal/privacy-policy) and describes how we collect, use, and share "consumer health data" as defined by the Washington My Health My Data Act (RCW 19.373) and similar laws (including Nevada's consumer health data law). It also addresses applicable California consumer-health privacy themes that can arise when sleep, wellness, or supplement-related browsing is linkable to you (including inferences about health interests). This page is the Site CHD policy. We do not publish a separate "California Health Disclosure" filename.

To the extent of any conflict with our Privacy Policy regarding consumer health data, this policy controls.

What consumer health data means

"Consumer health data" is personal information that is linked or reasonably linkable to you and that identifies your past, present, or future physical or mental health status. This can include, among other things: information about health conditions, symptoms, treatments, medications, or diagnoses; bodily functions and vital signs; sleep, fitness, nutrition, or wellness measurements; and inferences about your health drawn from other information, including your interactions with health-related or sleep-related content.

Consumer health data we collect

We do not ask you to submit medical records, and the Site does not require accounts to read content. However, the following information we collect may constitute consumer health data:

Content interaction data. If you browse sleep, wellness, breathwork, supplement, or related content on the Site, your page-visit and interaction data (collected through cookies and similar technologies described in our Cookie Policy (/legal/cookie-policy)) may be linkable to you (for example, through your IP address or device identifier) and could support inferences about your health or sleep interests.
Communications. If you email us or use the contact form about a sleep or health-related topic, we receive the information you choose to include.
Product interest. If you interact with Coming Soon product merchandising (supplements, eye masks) or later purchase when checkout exists, that commercial interaction may support health-interest inferences.

We collect this information directly from you and through the cookies and tracking technologies described in our Cookie Policy. We do not purchase consumer health data from third parties.

Why we collect it, and consent

We collect and use consumer health data only: (a) to provide the content and Site features you request; (b) for security, fraud prevention, and legal compliance; and (c) with your consent obtained through our cookie consent tool, for the analytics purposes described in our Cookie Policy (including Google Analytics 4 id G-HW4XPQJ702 only after Analytics consent).

Where the Washington My Health My Data Act or a similar law requires consent to collect or share consumer health data beyond what is necessary to provide something you requested, we obtain that consent before collection or sharing.

California note: to the extent sleep or wellness browsing data or inferences are treated as sensitive personal information or consumer health-related data under California privacy law, we use and disclose that information only for the purposes stated here and in the Privacy Policy, and you may exercise California rights described in the Privacy Policy (including limit-sensitive-PI requests where applicable).

How we share it

We may share consumer health data with the following categories of third parties, for the purposes described above: data storage and hosting providers; data analytics providers (only where you have consented through our cookie consent tool); application monitoring or feedback tools gated behind Analytics consent (such as Marker.io if enabled); and customer management and support systems that process messages you send us.

We do not sell consumer health data. We will not sell or offer to sell consumer health data without first obtaining the separate, signed valid authorization required by applicable law.

Geofencing

We do not use geofencing around any facility that provides in-person health care services, and we do not use geofencing to identify, track, or collect data from, or send notifications to, consumers regarding their health data.

Your rights

If you are a Washington or Nevada resident (or a resident of another state with a similar consumer-health law), you have the right to:

Access: confirm whether we collect, share, or sell consumer health data about you, and access it, including a list of the third parties and affiliates with whom we have shared it and an email address or other means to contact them;
Withdraw consent: withdraw any consent you previously gave for the collection or sharing of your consumer health data (for cookie-based collection, you can do this at any time through the cookie consent tool on the Site);
Delete: request that we delete your consumer health data, including from our archives and backups in the ordinary course, and that we instruct our processors to do the same; and
Not be discriminated against for exercising any of these rights.

California residents may also use the privacy rights paths in the Privacy Policy (/legal/privacy-policy) for personal information that overlaps with health-related inferences from Site use.

Exercising your rights and appeals

To exercise any of these rights, contact us at hello@brainstormsdeepsleep.com with the subject line "Consumer Health Data Request," or write to us at X Enterprises, LLC, 18122 3rd Dr SE, Bothell, WA 98012, USA. We will need to verify your identity before acting on your request, and we will respond within the time required by applicable law (generally 45 days, extendable once by 45 days where reasonably necessary).

If we decline your request in whole or in part, we will explain why and how to appeal. You may appeal by replying to our response with "Appeal" in the subject line; we will respond to appeals within the time required by applicable law. If your appeal is unsuccessful, you may contact the Washington State Attorney General at www.atg.wa.gov/file-complaint (Washington residents) or your state's attorney general.

Honesty note until CMP ship is verified

This policy assumes analytics use of consumer health data inferences happens only with cookie-consent-tool consent. Until Nuxi verifies that G-HW4XPQJ702 does not load pre-consent, keep non-essential analytics off in production.

Changes

We may update this Consumer Health Data Privacy Policy by posting a revised version on this page with a new "Last updated" date.

Contact

hello@brainstormsdeepsleep.com Brainstorms Deep Sleep is a DBA of X Enterprises, LLC, 18122 3rd Dr SE, Bothell, WA 98012.