Consumer Health Data Privacy Policy
Effective date: September 16, 2026
Last updated: September 16, 2026
This Consumer Health Data Privacy Policy is separate from our general Privacy Policy, as required by the Washington My Health My Data Act (RCW 19.373) and comparable laws in Nevada and Connecticut. It explains how Joy Massage Chair collects, uses, shares, and protects consumer health data.
1. Who we are
Joy Massage Chair operates joymassagechair.com and a showroom in Bellevue, Washington. We are an authorized dealer of massage chairs. We are not a health care provider. We do not diagnose, treat, or give medical advice, and our products are not medical devices.
15600 NE 8th St Ste K-12, Bellevue, WA 98008
hello@joymassagechair.com · (425) 760-1773
2. What we mean by consumer health data
Consumer health data means information that is linked or reasonably linkable to you and that identifies your past, present, or future physical or mental health status.
In our case this is limited to information you choose to tell us yourself. Our AI assistant asks what you are looking for in a chair — it does not ask about pain, symptoms, injuries, medical conditions, or medications. Please do not send us a diagnosis, a medical history, or a medication list.
3. What we collect, and where it comes from
We do not keep a transcript of your chat. The conversation is used to answer you and is then discarded. Of the conversation itself, we keep only your most recent message, so that we can pick up where we left off if you asked us to follow up.
| Category | Examples | Source |
|---|---|---|
| Your most recent message | The last thing you typed to the AI assistant, which may include a comfort or wellness concern you chose to mention | Directly from you |
| Contact details | Email address, and a phone number if you choose to give one | Directly from you |
| Commercial information | The product you asked about, quote codes issued to you, orders placed | Our website and order records |
| Technical information | Country of connection, date and time of the conversation | Automatically, from your connection |
We keep a record only if you tick the consent box in the chat window. If you decline, nothing is stored and no discount code is issued. We do not collect precise location data, we do not buy consumer health data from data brokers, and we do not use tracking technologies to infer health status from your browsing.
4. Why we use it
- To answer your questions and suggest products that may suit what you described
- To prepare and send a quote or discount code you asked for
- To follow up about that inquiry, if you gave us your contact details
- To keep a record of the inquiry for customer service and order support
We do not use consumer health data for advertising or profiling, and we do not make automated decisions with it that produce legal or similarly significant effects.
5. Who we share it with
We do not sell consumer health data. We have never sold it, and we will not do so without first obtaining your separate, signed authorization as the law requires.
We share it only with service providers that process it on our behalf, under contract, and only as needed to run the service:
| Service provider | What it does for us |
|---|---|
| Cloudflare, Inc. | Hosts the AI assistant and stores our records |
| Anthropic PBC | Provides the AI model that generates replies |
| Shopify Inc. | Operates our online store and customer records |
| Google LLC | Provides our business email |
| Resend, Inc. | Delivers email we send to you |
We may also disclose information where the law requires it, or in connection with a merger or sale of the business, in which case we will notify you as required.
6. How long we keep it
We keep these records for up to 24 months from your last interaction, after which they are deleted. Order records are kept longer where tax and warranty law require it. You can ask us to delete your records sooner at any time.
7. Your rights
You have the right to:
- Know and access the consumer health data we hold about you, and a list of the third parties we have shared it with
- Withdraw consent to our collection and sharing of your consumer health data
- Delete your consumer health data. When you ask, we delete it from our active systems and our backups, and we tell our service providers to do the same
Exercising these rights is free, and we will not treat you differently for doing so.
8. How to exercise your rights
Email hello@joymassagechair.com with the subject line Health Data Request, or call (425) 760-1773. Tell us which right you want to exercise, and give us the email address or phone number you used so we can find your record.
We will respond within 45 days. If we need more time we will tell you why, and we may extend once by another 45 days.
If we deny your request, you may appeal by replying to our decision or by emailing hello@joymassagechair.com with the subject line Health Data Appeal. We will respond to the appeal within 45 days and explain our reasoning. If we deny the appeal, you may contact the Washington State Attorney General's Office at atg.wa.gov/file-complaint.
9. How we protect it
Records are stored in an access-controlled database. Access is limited to the owner of the business and protected by a password. Data is encrypted in transit.
10. Changes to this policy
If we make material changes we will post the updated policy here and update the effective date above. Where the law requires it, we will ask for your consent again before applying the change to data we already hold.