Balance Protocol Consumer Health Data Privacy Notice
Effective date: September 15, 2026
Last updated: September 15, 2026
1. Purpose and Scope
This Consumer Health Data Privacy Notice supplements the Balance Protocol Institute Privacy Policy and describes how Balance Protocol Institute, referred to as "Balance Protocol," "we," "us," or "our," handles consumer health data.
This notice applies when consumer health data laws cover an individual's interaction with BalanceProtocol.com, BalanceProtocolGPS.com, BalanceProtocol.me, their related subdomains, or a checkout, account, membership, course, community, laboratory support, Review of Findings, or other health-related service operated by Balance Protocol.
"Consumer health data" means personal information that identifies or can reasonably be linked to a consumer and that identifies the consumer's past, present, or future physical or mental health status, as defined by applicable law. Depending on the jurisdiction, inferences drawn from other information may also be consumer health data.
This notice does not apply to information that applicable law exempts, which may include protected health information handled by a HIPAA-covered entity or information maintained in certain regulated health records.
2. Consumer Health Data We May Collect
Depending on the Balance Protocol website, program, membership, or service you use, we may collect or process the following categories:
- Information about symptoms, health goals, health history, nutrition, lifestyle, mindset, environmental exposures, medications, supplements, peptides, or other interventions that you choose to provide;
- Age and date of birth;
- Information about body function, metabolism, nutritional status, fatty acids, organic acids, elements, biochemical pathways, or related wellness characteristics;
- Specimen and collection-kit information;
- Laboratory orders and reports;
- Functional biomarker measurements;
- Targeted genetic information;
- Information revealing that you sought, purchased, or received a health-related product or service;
- Questions, notes, communications, or interpretive materials connected with GPS or a Review of Findings;
- Account and program information that can reveal participation in a health-related service;
- Information voluntarily posted in Balance Nation, the GPS Group, a member message, or another community area; and
- Inferences derived from the information above for the purpose of providing a requested Balance Protocol service.
3. Sources of Consumer Health Data
We may collect consumer health data:
- Directly from you;
- From forms, questionnaires, communications, or account activity;
- From Genova Diagnostics and other laboratory or fulfillment providers involved in a service you request;
- From an authorized Balance Protocol practitioner when you request a Review of Findings;
- From a person you authorize to act for you; and
- From service providers operating on our behalf.
We do not obtain consumer health data from data brokers for advertising purposes.
4. Why We Collect and Use Consumer Health Data
We may collect and use consumer health data as reasonably necessary to:
- Enroll you in a requested program, membership, or health-related service;
- Prepare, ship, track, and support a collection kit;
- Coordinate specimen processing and laboratory reporting;
- Deliver laboratory results, reports, interpretation guides, and educational materials;
- Provide the GPS Educational Course and GPS Group;
- Provide Balance Nation membership, courses, community features, live sessions, and requested support;
- Provide a Review of Findings when requested and purchased;
- Respond to your questions and provide support;
- Authenticate an account and preserve access to purchased or included services;
- Maintain service quality, security, fraud prevention, and legal compliance;
- Investigate or defend legal claims; and
- Carry out another purpose disclosed to you and authorized by you.
We do not use laboratory results, genetic results, symptoms, or health questionnaire responses to create advertising audiences or deliver targeted advertising.
We do not use a geofence around a health-care facility to identify or track a consumer, collect consumer health data, or send health-related messages or advertisements.
If we seek to collect a new category of consumer health data or use consumer health data for a materially different purpose not described in this notice, we will provide any additional disclosure and obtain any consent required by law before doing so.
5. Consumer Health Data We May Share
We may share the following categories of consumer health data when reasonably necessary to provide a service you request:
| Recipient | Data that may be shared | Purpose |
|---|---|---|
| Genova Diagnostics | Identifiers, date of birth, specimen information, laboratory order information, biomarker data, and targeted genetic data | Laboratory processing, quality, reporting, and compliance |
| Authorized Balance Protocol practitioners | Identifiers, laboratory reports, health context, questions, and related materials | Providing an optional Review of Findings or requested support |
| Authorized Balance Protocol team members | Identifiers, enrollment status, account information, support communications, and limited health information when necessary | Program administration, support, access management, security, and service delivery |
| Hosting, cloud, account, course, community, communications, and security providers | Information reasonably necessary for the function performed | Operating, securing, and supporting requested services |
| Fulfillment and shipping providers | Identifiers, address, contact information, order and kit information | Shipping, tracking, return, and fulfillment |
| Payment and checkout providers | Identifiers, transaction information, and payment information | Processing payment, preventing fraud, and maintaining transaction records |
| Legal and regulatory recipients | Information responsive to a lawful requirement or necessary to protect legal rights and safety | Legal compliance, claims, safety, and enforcement |
| A recipient you authorize | Information covered by your direction or authorization | Carrying out your request |
Payment and shipping providers do not need laboratory reports or genetic results to perform their ordinary functions, and we do not intentionally provide those results to them.
6. Affiliates and Third Parties
Balance Protocol does not share consumer health data with separately branded affiliates for their independent advertising or product-sales purposes.
We do not sell supplements, peptides, medications, pharmacy services, or other therapeutic products based on GPS findings, and we do not receive referral commissions from preferred brands or sources based on an individual's results.
Service providers process consumer health data only for contracted or legally permitted purposes. They may have separate legal obligations and privacy notices.
7. Sale of Consumer Health Data
Balance Protocol does not sell consumer health data.
If this practice changes, we will provide any notice and obtain any written authorization required by applicable law before a sale occurs.
8. Advertising and Analytics
We do not intentionally disclose laboratory results, genetic results, symptoms, questionnaire responses, or medical details to advertising or analytics platforms.
The fact that a person visited a health-related website can itself be treated as consumer health data under some laws when it can be linked to an individual and used to infer health interests. We therefore limit analytics and advertising data and do not authorize service providers to use Balance Protocol consumer health data for their own targeted advertising.
Website analytics may process device and usage information as described in the general Privacy Policy. Where required by law, nonessential tracking is subject to consent or an applicable opt-out mechanism.
9. Consumer Rights
Subject to applicable law and relevant exceptions, you may have the right to:
- Confirm whether we collect, share, or sell consumer health data about you;
- Access consumer health data;
- Obtain a list of third parties or affiliates with whom consumer health data was shared or sold, where required;
- Withdraw consent to collection or sharing;
- Request deletion of consumer health data; and
- Appeal our refusal to act on a request.
You do not need to create a new account to exercise these rights.
Submit a request by emailing support@balanceprotocol.com with the subject line "Consumer Health Data Request." Describe the request and identify the email address associated with your account or transaction.
We will take commercially reasonable steps to authenticate the request. If we cannot authenticate it, we may request additional information reasonably necessary to verify identity and protect the data from unauthorized disclosure or deletion.
We will respond without undue delay and within the period required by applicable law. Where Washington law applies, we generally respond within 45 days, subject to a permitted 45-day extension when reasonably necessary. Information is provided free of charge up to the frequency required by law, unless a request is manifestly unfounded, excessive, or repetitive and applicable law permits a fee or refusal.
10. Deletion Requests
When required by law, a verified deletion request may require us to:
- Delete covered consumer health data from active records;
- Notify covered processors, contractors, affiliates, or third parties to which we disclosed the data; and
- Delete data from archived or backup systems according to the timetable permitted by law.
Under Washington law, deletion from archived or backup systems may be delayed for up to six months where necessary to restore and delete the data safely.
Deletion rights are subject to applicable exemptions and legal obligations. A regulated laboratory or other provider may be required to retain certain records. We cannot require another entity to delete a record that it is legally required to retain.
Deleting an account may terminate permanent access to the GPS Educational Course or GPS Group, or may terminate access to Balance Nation and other membership services. Lost access may not be restorable.
11. Withdrawing Consent
Where processing depends on consent, you may withdraw consent by emailing support@balanceprotocol.com with the subject line "Withdraw Health Data Consent."
Withdrawal does not affect processing completed before withdrawal. Withdrawal may prevent us from completing laboratory processing, providing results, maintaining program access, or delivering another requested service.
12. Appeals
If we deny a consumer health data request, you may appeal by emailing support@balanceprotocol.com with the subject line "Consumer Health Data Appeal." Include the original request and explain why you believe the decision should be reconsidered.
We will respond within the period required by applicable law and will provide information about any further complaint mechanism available to you.
13. Security
We use administrative, technical, and physical safeguards designed to protect consumer health data. We restrict access according to operational need and use service providers reasonably suited to the sensitivity of the information they process.
No transmission or storage system can be guaranteed to be completely secure. Protect your account credentials and do not transmit laboratory reports, genetic results, or medical records through public community posts or ordinary social-media messages.
14. Retention
We retain consumer health data only for as long as reasonably necessary to provide requested services, maintain security, address legal or support matters, and meet applicable laboratory, professional, accounting, and regulatory obligations.
Balance Protocol does not maintain an indefinite advertising or product-sales database of laboratory or genetic results. The performing laboratory may retain reports and related records for periods required by applicable law and its own policies.
15. Changes to This Notice
We may update this notice to reflect changes in our practices, services, or legal obligations. We will post the revised notice and update the date above. If required by law, we will provide additional notice or obtain consent before collecting a new category of consumer health data or using it for a new purpose.
16. Contact
Balance Protocol Institute
Attn: Privacy
1317 Edgewater Drive
Orlando, FL 32804
United States
Email: support@balanceprotocol.com