Consumer Health Data Privacy Policy

Under Washington’s My Health My Data Act and comparable laws in other states, data that could indicate you are seeking a health service is treated as its own category, with its own rules. A search on this site for a facilitator who works with a particular substance, in a particular place, is exactly that kind of data.

We would rather over-disclose than argue later about whether a psychedelic directory counts. It does.

• We do not log your searches. Search queries are not stored, not attached to you, and not retained after the request that answers them.
• There are no third-party trackers on search or profile pages. No ad pixels, no session recording, no external analytics, no fonts loaded from someone else’s server.
• We do not sell health data. Not to anyone, at any price, for any purpose.
• We count events, never people. Listing statistics are daily counters — how many times a listing appeared, was opened, was contacted. Nothing in them identifies a visitor.

The categories of consumer health data we collect are:

• Messages you send to a facilitator. Your name, email address, optional phone number, and whatever you write. Collected so the facilitator you chose can read and answer it. This is the only place where health information about you and your identity are stored together.
• Your account, if you create one. Email address and, if you set one, a password hash. Accounts exist so facilitators can manage their own listings; you do not need one to search or to contact anyone.
• Aggregate counts of listing activity. Per listing, per day: how many times it appeared in results, was opened, had its contact details revealed, and was messaged. These are counters. They contain no identifier of any kind.
• Ordinary server logs. IP address and user agent, as any web server records, retained briefly for security and abuse handling. We do not join these to searches or to listings.

We do not collect precise location data. Location searches run against place names and postcodes that you type, and we do not ask for, receive, or store your device’s GPS position. We do not operate any geofence around any clinic, pharmacy, or health facility.

• Directly from you, when you send a message, create an account, or claim a listing.
• From your browser, in the ordinary course of serving a page.
• From public records — state licence registers and ClinicalTrials.gov — for the professional listings themselves. That data is about facilitators, not about people searching.

The facilitator you contact. When you send an inquiry, its contents are shown to the person you sent it to. That is the entire point of sending it. We do not include the message body in the notification email we send them, because email is not a private channel — they read it after signing in.

Service providers who run the infrastructure. We use a database host, an application host, an email delivery service, and a map tile provider. They process data on our instructions to keep the site running and are not permitted to use it for their own purposes. Map tiles are requested only on the interactive map, and carry no information about what you searched for.

Nobody else. We do not share consumer health data with advertisers, data brokers, analytics companies, or affiliates. We have no affiliates.

We would disclose data if legally compelled to. If that ever happens and we are permitted to tell you, we will.

We have never sold consumer health data and have no plans to. Selling it would require your separate written authorization under Washington law, which we do not seek and would not act on.

Inquiries stay in the recipient facilitator’s inbox until they delete them or their account is closed. Account records are kept while the account exists. Aggregate counters are kept indefinitely, because they identify nobody.

We do not currently delete old inquiries automatically. If you want a message you sent removed, ask us and we will remove it — see below.

You can ask us to:

• Confirm whether we hold consumer health data about you, and tell you what it is.
• Give you the list of third parties it has been shared with.
• Delete it. We will delete it from our systems, and we will pass the request on to any facilitator who received it.
• Withdraw consent to any further collection or sharing.

Email privacy@findfacilitators.com from the address involved, or write to Trujillo Marketing, LLC, PO Box 31013, Portland, OR 97231. We will respond within 45 days, and will tell you if we need longer.

These requests are handled by a person reading email, not by an automated system. That is slower than a self-service button, and it is what we actually have today.

If we refuse a request you can appeal it by replying, and we will explain the decision in writing. If you remain unsatisfied, Washington residents may complain to the Washington Attorney General.

Your listing is professional information, not consumer health data — but you have your own rights over it, and they are simpler: you can take it down yourself at any time, and if you never claimed it you can have it removed without an account.

How we compile and verify listings →

One cookie, set only if you sign in: a session token, first-party, HTTP-only, and not readable by other sites. There is no advertising cookie, no analytics cookie, and no consent banner, because there is nothing to consent to.

If we change what we collect or who we share it with, we will change this document before the change takes effect, not after. Material changes will be announced on the site.

Trujillo Marketing, LLC
PO Box 31013, Portland, OR 97231
privacy@findfacilitators.com