Privacy Policy

Terms Effective Date: [January 1, 2025]

Welcome to Nourish Within®, a health and wellness website operated by Kaileigh Bautista Owner of CBK LLC ("Company", "we", "us", or "our").

Consumer Health Data Privacy Policy

Effective Date: December 1, 2024

Last Updated: January 1, 2026

1. Introduction

At CBK LLC (Nourish Within®) (“we,” “us,” “our”), we respect your privacy and are committed to protecting your personal health data. This Privacy Policy explains how we collect, use, store, share, and allow you to access or delete your health-related data in compliance with the Washington State My Health My Data Act (MHMD).

2. Scope & Definitions

  • “Consumer health data” means individually-identifiable information (including inferences) about your health status, health conditions, bodily functions, or the purchase or use of a health-related product or service.

  • We are a “small business” (as defined by the MHMD) that collects and processes consumer health data from clients residing in Washington state. We publish this policy in a separate, prominent link on our homepage in compliance with MHMD Section 4(1)(b). 

3. Data We Collect

We collect the following types of consumer health data when you engage our services:

  • Personal identifiers: name, date of birth, address, phone, email

  • Health and lifestyle information: medical history, dietary patterns, biomarker/lab results, symptoms, supplements, medications

  • Session and coaching information: intake form responses, progress notes, client-reported outcomes

  • Payment and business data: invoices, payments, bookkeeping

  • Technology metadata: timestamps, device type, IP address (when using our telehealth portal)

4. How We Use Your Data

We use your data for:

  • Providing nutrition coaching and related services

  • Scheduling and administering sessions

  • Communicating with you (appointment reminders, follow-up)

  • Invoicing and payment processing

  • Improving our services (aggregated, de-identified form only)

  • Compliance with legal and regulatory obligations

5. How We Share Your Data

We do not sell your consumer health data. If we ever propose to sell or share your data in a way that constitutes a “sale” under MHMD, we will first obtain your valid written authorization. 

We may share your data in the following limited circumstances:

  • With our service providers (processors) who help us deliver services (e.g., secure telehealth platform, bookkeeping software). These processors act only on our behalf and are contractually bound to protect your data.

  • With your explicit authorization (e.g., if you want us to provide a summary to your physician or other provider).

  • When required by law (e.g., subpoena, court order) or to protect against fraud.

6. Your Rights Regarding Your Data

Under MHMD you have the following rights:

  • Access: You may request a copy of your consumer health data in a portable, usable format.

  • Correction: You may request correction of inaccurate or incomplete data.

  • Deletion: You may request deletion of your data (including from backups/archive) subject to certain legal or business obligations. 

  • Withdrawal of Consent for Sale: If you provided authorization for the sale of your data, you may later withdraw that consent; we will delete your data from sale-related uses and retain only a minimal record. 

To exercise your rights, contact us at:

[Hello@kaileighlauren.com / 360.836.0909]

We will respond to your request within [30] days and may require identity verification.

7. Data Security & Retention

We maintain “reasonable security” practices to protect your data against unauthorized access, disclosure, alteration or destruction, consistent with MHMD. (Examples: encrypted storage, strong passwords, restricted access, secure portals). 

We retain your consumer health data for [insert retention period, e.g., 7 years from last contact] unless you request deletion or longer retention is required by law.

8. Kids & Minors

Our services are intended for adults. We do not knowingly collect consumer health data from minors under the age of [insert age, e.g., 18] without consent from a parent or guardian.

9. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. When we make changes, we will update the “Effective Date” above and provide notice on our website.

10. Contact Information & Complaints

If you have any questions about this policy or our practices, or wish to file a complaint, you may contact us at:

CBK LLC

650 SW MEADOW DR. #111, BEAVERTON, OR 97006

HELLO@KAILEIGHLAUREN.COM

360.836.0909

If you believe your rights under the MHMD have been violated, you may file a complaint with the Washington Office of the Attorney General. 

11. Consent & Acknowledgment

By using our services and providing us your health data, you acknowledge that you have read and agree to this policy and provide consent for us to collect, use, store, and process your data as described.