Consumer Health Data Privacy Policy

When you plan a meal with us, you may tell us about allergies, intolerances, dietary needs and restrictions, and related health conditions, such as celiac disease or a pregnancy, for yourself and for your guests. That is the only health data we collect. We never ask for medical records.

• From you, when you write to us through the contact form on our website, by email, by phone or text, or while we plan your menu together.
• From the person who books, about the guests at their table.

We do not buy it, we do not receive it from anyone else, and we do not collect it automatically from your device.

We use it only to plan, source and cook your meal safely, and to answer your questions about it. We never use it for marketing, advertising or profiling.

We collect and use your health data only as far as it is necessary to provide the meal you asked us for. If you would like us to remember it for future meals, we ask for your consent first, separately from anything else you agree to with us.

• We never sell your health data, and we do not share it with third parties or affiliates.
• The people who cook your meal see only what they need to cook it safely. We are responsible for everyone we bring.
• Our email, file and records provider (Microsoft 365) stores it on our behalf, under contract. It cannot use it for its own purposes.

We keep it while we plan and cook your event, and we delete it within 90 days after the event, unless you have asked us to keep it for future meals. You can ask us to delete it at any time.

Only the members of our team who need it to cook your meal can see it. It is kept in password-protected business accounts with restricted access.

You have the right to:

• confirm whether we collect or share your health data, and see it, together with a list of any third parties or affiliates we have shared it with (today: none);
• withdraw any consent you have given;
• ask us to delete it. We delete it from our records, including archives and backups, and tell our provider to do the same.

Guests can make these requests directly; they do not need to go through the person who booked.

To make a request, email Nicholas@NicosDining.com with the subject "Health data request". We may need to confirm your identity. We answer within 45 days. If we need more time, we tell you why, and we take at most another 45 days. Requests are free, up to twice in any 12 months.

Appeals. If we decline your request, you can appeal by replying to our answer with the word "Appeal". We answer within 45 days and explain our decision. If we deny your appeal, you can contact the Washington State Attorney General at atg.wa.gov/file-complaint.

If we change this policy, we post the new version here with its date. We ask for your consent again before using or sharing your health data in a new way.

Nico's Dining LLC, a Washington limited liability company
522 W Riverside Ave Ste N, Spokane, WA 99201-0581, United States
Nicholas@NicosDining.com · nicosdining.com