Washington Consumer Health Data Notice
Washington Consumer Health Data Privacy Notice
Provider and contact
ReadyForMRI is operated by FOTOOL LTD, company no. 11046581, in the United Kingdom. Contact [email protected] for requests about your information. Messages sent to privacy@ are received in our support mailbox; replies may come from [email protected].
Information collected and its sources
If you choose personalized MRI preparation, information you enter may include the approximate timing of your scan, body area, concern selections, previous MRI experience, selected preparation techniques, strategies and post-MRI outcomes. These may be consumer health data under Washington law. We receive these details directly from your choices. Even without optional personalization, account registration, a purchase, or a request for an MRI launch notification may indicate an interest in an MRI preparation service and could constitute consumer health data depending on context. These service-use records are processed for the service or notification you request, subject to applicable consent and other requirements.
How and why it is used
We use selected details to support the optional personalized preparation plan and, where enabled, synchronize a limited projection across your signed-in devices. We are not a medical treatment service. Your personal MRI fears and plan answers are not sold or used for targeted advertising. You can use the paid general audio recordings without providing personalized health details.
Recipients and sharing
Cloudflare hosts and stores the protected program's synchronized plan; Clerk handles authentication identifiers. Payment and transactional email providers receive information needed for purchase, gift and access, not your private MRI plan answers as part of normal operation. If you choose to describe a health concern in a support message, our email provider processes that message. Our core providers are Cloudflare (protected program storage/hosting), Clerk (sign-in), Stripe (payment services), Brevo (transactional emails) and Microsoft 365 (support email). We do not provide private MRI plan answers to Stripe, Brevo or Clerk as part of normal use. Any additional disclosure of consumer health information must be identified in the final notice.
Where Washington's collection or sharing consent is required, we will request the relevant affirmative consent before the action. Collection and non-exempt sharing require distinct consent except where the statute permits processing necessary to supply the consumer-requested service.
Your rights and requests
If applicable to you, you may request confirmation, access and information about recipients, withdraw health data consent, and request deletion. Contact [email protected]. We may verify identity proportionately. Washington law generally requires a response within 45 days, with a single allowed extension when the statutory conditions are met. To appeal a refusal, email [email protected] with “Appeal” in the subject. Our privacy team will respond as required by law and provide information about contacting the Washington Attorney General if an appeal is denied.
Deletion, devices and backups
Withdrawing consent stops the relevant personal-plan processing. Synchronized data will be deleted in accordance with the implemented rights process. A disconnected device may still hold local entries until it reconnects and handles the deletion. Backups and processors are subject to applicable statutory deletion rules. When a deletion request is valid, we will apply the applicable deletion requirements to our records and communicate relevant instructions to recipients and processors, including the rules for archived and backup copies.
More information
See the companion ReadyForMRI Privacy Policy. We do not sell consumer health data.
FOTOOL LTD · Company number 11046581