Health Data Policy

Overview

Althea Artists facilitates cosmetic and paramedical tattoo services that may involve the collection of sensitive health information. This Health Data Policy explains what health data we collect, why we collect it, how it is stored, and your rights regarding this information. This policy supplements our Privacy Policy.

What Health Data We Collect

Through intake and consent forms, we may collect:

• Medical History: Relevant conditions such as allergies, skin conditions, autoimmune disorders, diabetes, or bleeding disorders that may affect procedure safety.
• Medications: Current medications, including blood thinners and immunosuppressants, that could impact healing or procedure outcomes.
• Pregnancy Status: As certain procedures are contraindicated during pregnancy.
• Previous Procedures: History of prior cosmetic or paramedical tattoo work, surgical history relevant to the treatment area.
• Photos: Before and after photos of treatment areas, which may reveal medical conditions or surgical history.

Why We Collect Health Data

Health information is collected solely to:

• Ensure client safety during cosmetic and paramedical procedures
• Enable artists to assess suitability for requested services
• Document informed consent as required by regulation
• Provide appropriate aftercare instructions
• Maintain records for legal compliance and professional standards

Consent Forms

All clients must complete digital consent forms before their appointment. These forms include:

• Informed Consent: Acknowledgment of procedure risks, expected outcomes, and aftercare requirements.
• Health Disclosure: Relevant medical information that may affect the procedure.
• Photo Consent: A three-tier system where clients choose how their photos may be used (private only, portfolio use, or marketing use).

All consent forms use legally binding digital e-signatures with a full audit trail including timestamp, IP address, and document version.

Photo Consent Tiers

Clients select one of three photo consent levels:

Clients may change their photo consent tier or withdraw consent entirely at any time by contacting us or through their account settings.

Data Storage and Security

• Health data is stored in encrypted PostgreSQL databases with row-level security policies enforced at the database layer.
• Access to health data is restricted to the client and their booked artist.
• Platform administrators cannot view individual health form content.
• All data transmission is encrypted via TLS.
• We conduct regular security reviews and follow industry best practices for data protection.

Data Retention

Health data and consent forms are retained for a minimum of 7 years from the date of the procedure, in accordance with professional record-keeping requirements for cosmetic procedures. After this period, data may be securely deleted unless a longer retention period is required by law.

Your Rights

Regarding your health data, you have the right to:

• Access all health data we hold about you
• Request correction of inaccurate health information
• Withdraw photo consent at any time
• Request a copy of your consent forms and health records
• Request deletion of health data (subject to legal retention requirements)

To exercise these rights, contact us at hello@altheaartists.com.

Changes to This Policy

We may update this Health Data Policy as regulations evolve or our practices change. Material changes will be communicated to registered users via email. The "Last updated" date at the top reflects the most recent revision.