Consumer Health Data Privacy Notice
Adventure Therapy Foundation, Inc.
Effective date: 7/28/2026 | Last updated: 7/28/2026
This notice is provided under the Washington My Health My Data Act and the Nevada consumer health data law (SB 370). It describes how Adventure Therapy Foundation, Inc. (“we,” “us,” “our”) collects, uses, and shares consumer health data, and the rights you have regarding it. It supplements, and does not replace, our general Privacy Policy.
We are not a HIPAA covered entity or business associate, and the information described here is not protected health information under HIPAA.
1. Categories of consumer health data we collect
- Information you voluntarily provide about how cancer has affected your life, including your response to the question “How has cancer intersected with your life?”
- Whether you identify as a person diagnosed with cancer, a caregiver, a family member, a friend, or someone who has experienced a loss
- Information indicating your interest in or need for our peer support, coaching, retreat, and wellness programs, including which program you apply to or attend
- Any other health-related information you choose to share with us in an application, form, message, or program
2. Purposes for which we collect and use it
- To review your application and determine whether our programs are a fit for you
- To place you in a peer support group or program alongside people with a similar experience
- To prepare facilitators and coaches to support you and your group
- To communicate with you about the program you applied to or are enrolled in
- To evaluate and improve our programs, and to report to funders — in aggregate or de-identified form only
We do not use consumer health data for advertising, ad targeting, audience building, or profiling, and we do not sell it.
3. Categories of sources from which it is collected
- Directly from you, through applications, registration and intake forms, surveys, emails, and conversations with our staff, facilitators, or coaches
- From a person who refers you to a program, where they provide it to us
4. Categories of consumer health data that are shared
We share consumer health data only with the categories of recipients listed in Section 5, and only as necessary to provide our programs to you, to comply with law, or where you have directed us to. We do not share consumer health data with advertising networks, analytics providers, data brokers, or social media platforms.
5. Categories of third parties and specific affiliates with whom we share it
- Our constituent relationship management (CRM) provider, GoHighLevel (HighLevel, Inc.), which stores the data on our behalf under a contract that limits its use to providing services to us
- Our program contractors — facilitators, coaches, and retreat staff engaged by us, subject to confidentiality obligations
- Virtual meeting and program delivery providers, to the extent health-related content is shared during a session
- Professional advisors — auditors, insurers, and attorneys, under obligations of confidentiality
- Legal and safety recipients — law enforcement, courts, or others, where required by law or where we believe in good faith that disclosure is necessary to prevent serious harm to any person
We have no affiliates with whom we share consumer health data.
6. We do not sell consumer health data
We have not sold, and do not sell, consumer health data. If that ever changes, we will obtain your valid, written authorization first, as the law requires.
7. Your rights
You have the right to:
- Confirm whether we are collecting, sharing, or selling your consumer health data, and to access that data
- Know the list of all third parties and affiliates with whom we have shared or to whom we have sold your consumer health data, and contact information for each
- Withdraw your consent to our collection and sharing of your consumer health data
- Delete your consumer health data
To exercise any of these rights, email info@adventurefound.org with the subject line “Consumer Health Data Request,” or write to us at the address below. We will verify your identity using information we already hold, and we will respond within 45 days. If we need more time, we will tell you within that period and may take up to 45 additional days.
When you request deletion, we will delete your consumer health data from our records and notify our service providers, contractors, and other third parties with whom we have shared it to delete it as well. In limited cases, we may keep a record needed to comply with a legal obligation or to establish or defend a legal claim; we will tell you if that applies.
You may use an authorized agent to make a request on your behalf. We may ask for proof of authority and may confirm the request with you directly.
If we deny your request, you may appeal by replying to our response or emailing info@adventurefound.org with the subject line “Consumer Health Data Appeal.” We will respond within 45 days with a written explanation. If we deny your appeal, you may submit a complaint to the Washington State Attorney General at atg.wa.gov/file-complaint or to the Nevada Attorney General at ag.nv.gov.
8. Changes to this notice
We will not collect, use, or share consumer health data for any purpose not described in this notice without first obtaining your affirmative consent. If we materially change this notice, we will notify affected consumers and obtain consent where the law requires it.
9. Contact us
Adventure Therapy Foundation, Inc.
1156 Lake Park Dr, Oakley, CA 94561
Email: 7/28/2026
Phone: (925) 724-9319
