Consumer Health Data Privacy Policy
Last updated: 2026-10-26
AltZ.energy is run by AltZ LLC, a Washington company, and I'm Aaron Rueth, the person behind it. Washington's My Health My Data Act asks for a policy that says what consumer health data I collect, where it comes from, who sees it, and what you can ask me to do with it. This is that policy. It covers altz.energy only. The privacy page covers everything else this site collects.
What I collect, and why
Consumer health data is information linked to you that says something about your physical or mental health, past, present or future. On this site, 3 things can.
- Your application to Return to Baseline. Applying to a 12-week program built around a microdosing protocol says something about you, even though the form asks nothing about your health. The application holds your name, your email address, your time zone, when calls suit you, whether the 12 weeks and the cost work for you, how you found the program if you chose to say, and the time you sent it. I use it to decide whether a discovery call makes sense, to reply to you, and to arrange the call. If you said how you found the program, I also use that to see which channels bring people here. If you checked the future-openings box on the form, I also use your email address to tell you about future openings and other AltZ.energy work, and for nothing else. It's deleted within 30 days of arriving whether or not we talk.
- What you write to me. A contact message or an email can describe your health, your medication or what you take, whether or not I asked. I use it to reply to you, and keep it as a record of what we said. A message sent through the contact form holds your name, your email address, a phone number if you gave one, and the message.
- Server logs. When your browser loads a page, Google's hosting records the page, the page you came from, the time, your IP address and your browser type, and keeps that for 30 days. On the application page that record says you were there. No code of mine reads these logs, and I open them only when something breaks.
I collect no precise location, no biometric or genetic data, and nothing about your health from anywhere other than you. This site runs no analytics and no advertising pixels.
Where it comes from
From you: the application form and anything you write to me. From your browser, when it loads a page: the server log above, and Google's reCAPTCHA check, which runs on every page to tell a person from a script. I don't buy data, I don't infer health information from anything you do here, and I don't combine what you send me with data from anywhere else.
Who else sees it
I don't sell consumer health data. I don't share it with any third party or affiliate, so there is no list of them to give you.
These companies process it on my behalf, under their own data processing terms, to run the site and nothing more:
- Google. Hosting, the database your application is stored in, in the United States, reCAPTCHA, and Google Workspace, which carries my email. If you delete your account with the button on your account page, a log of that request, holding your email address and account ID and none of the content, is kept on Google Cloud for 30 days.
- Stripe, if you go ahead and pay. Your name, email address and billing details, for the payment. Stripe never sees your application.
One more holds older data. Before this site stopped running analytics, Google Analytics recorded the pages visited, the application page among them, and a rough location, for visitors who allowed it. Nothing has reached it since, it isn't linked to any application or account, and it's scheduled to be deleted, with everything in it, on November 27, 2026.
If this list changes, the date at the top changes with it.
Your rights
You can ask me to:
- confirm whether I hold consumer health data about you, and see it, with the list of anyone I've shared it with, which today is nobody;
- withdraw any permission you gave me, such as the box on the application or your answer about how you found it;
- delete it.
Email support@altz.biz with “data request” in the subject, from the address you applied or wrote from. No account, no form, and no charge. If I can't tell the request is yours, I'll ask for something that shows it is before I act on it.
I answer within 45 days. If I need longer, I'll tell you why inside those 45 days and take at most 45 more. Deleting means deleting from my records, from any backup within six months, and asking every company above that holds it to delete it too. If you paid, the record of the payment is kept for seven years, because tax law requires it.
I keep a note of each request, with your email address and none of the content, for 180 days after I carry it out, so a restored backup can't bring anything back.
If I refuse a request, reply with “appeal” in the subject. I answer in writing within 45 days with my reasons. If that answer doesn't satisfy you, you can file a complaint with the Washington Attorney General at atg.wa.gov/file-complaint.
Asking changes nothing about how I treat you.