Effective Date: October 13, 2026 · Version 1.1
This Consumer Health Data Privacy Policy explains how AlloBiome LLC ("AlloBiome," "we," "us," or "our") handles consumer health data in connection with our eight-week personalized bloating support program, and related inquiries. It supplements our general Privacy Policy and applies to U.S. consumers. Where applicable law provides additional rights, we will honor those rights as required by law.
1. Consumer Health Data We Collect
Depending on what you provide, we may collect digestive symptoms and concerns, relevant health history, previous approaches, dietary and lifestyle information, goals, progress updates, intake responses, session notes, and health-related messages. Optional laboratory reports may include findings, organisms, markers, measurements, scores, and reference ranges. Health-related inquiries, quiz answers and results, and observations or inferences linked to you are also consumer health data. Technical website information is treated as consumer health data when it identifies or reasonably reveals health status or an attempt to obtain health-related support. Existing reports and testing are not required to enroll.
Sources include information you submit through inquiries, any available quiz, intake, private sessions, the designated messaging channel, optional documents, and feedback; a person or organization you authorize; and permitted website or embedded-tool interactions that create identifiable health information. Any such collection must follow the consent and requested-service rules below. We do not require public posting of personal health information or detailed health information in payment or scheduling notes.
2. How We Use Consumer Health Data and Your Consent
We use consumer health data to provide and administer the educational support requested; understand concerns and questions; prepare for and deliver sessions; explain relevant research and optional existing reports; obtain multidisciplinary scientific input when useful; respond to messages; and maintain service quality and security. We support customers through their experience and may do so alongside their licensed healthcare provider. We do not use these materials to make individualized clinical, dietary, supplement, or treatment recommendations. Secondary scientific, educational, or public uses follow the separate optional permission described below.
Before health-data intake, report upload, or substantive discussion or review, we require affirmative health-data consent separate from Program Agreement acceptance. It covers collection and use for requested support and necessary access by authorized AlloBiome personnel, approved providers, and N.E. Microbiome Institute scientific personnel acting on AlloBiome’s behalf. Payment alone is not consent. Additional collection or sharing that requires separate consent is disclosed and authorized before it occurs. Optional permission to create and use de-identified information is separate from service consent; permission to publish a testimonial or story is a further separate choice. Declining either optional choice does not affect enrollment or support. Consent to future processing may be withdrawn at info@allobiome.com.
3. Who May Receive Consumer Health Data
The categories described in Section 1 may be made available only as reasonably necessary for an authorized purpose. Recipients may include authorized AlloBiome personnel; authorized scientific personnel associated with the N.E. Microbiome Institute acting on behalf of AlloBiome on your program; providers supporting designated forms and file submission, storage, scheduling, communications, video sessions, or information security; and recipients required by law or necessary to protect legal rights or safety. Institute personnel do not receive permission to independently reuse identifiable information. Where additional sharing consent is required, it is obtained separately from collection consent.
4. Sale and Advertising
AlloBiome does not sell identifiable consumer health data or use it for targeted or cross-context behavioral advertising. We do not give creators or referral partners identifiable health information. We do not authorize third parties to collect consumer health data through our website or services for their own tracking over time or across websites or services. Providers may process only information needed for the authorized service under appropriate restrictions. These rules cover identifiable health inferences from browsing or quizzes, not only uploaded reports. A public testimonial or story requires a separate optional publication permission, even when identifying details are withheld.
5. De-Identified and Aggregated Information
With separate optional permission and a validated process meeting applicable legal standards, AlloBiome may create properly de-identified or aggregated information from program materials and feedback from the first enrolled customer onward. Intended uses include research and scientific or statistical analysis; quality and service improvement; scientific resources and educational content; communications, presentations, or publications; business analysis; and non-identifiable marketing or public communications. These uses are not required for support. We do not create or use the retained secondary-use dataset before the required permission and technical review are complete. A small number of customers requires particular care; a single customer is not described as an aggregate.
Properly de-identified information cannot reasonably be used to identify you or be linked to your identity or device. Our documented process removes or generalizes direct and indirect identifiers, including names, contacts, account and report identifiers, precise dates and locations, distinctive narrative details, and identifying combinations of findings. The retained dataset has no customer identifier, booking link, identity key, or code that can be matched to an identifiable customer archive. Removing a name alone or substituting a client code does not establish de-identification. Aggregated information combines observations without reasonably identifying an individual. Material that fails the applicable standard is not released or retained as de-identified information.
AlloBiome publicly commits not to identify individuals from information maintained in de-identified form or attempt re-identification. Public or external uses must pass an identification-risk review and must not contain identifying details or reasonably identifying combinations. Recipients of de-identified information must contractually maintain that status and not attempt re-identification. Customer feedback may be collected during the program. Any quotation or story selected for publication requires your approval of its final wording, identifying details to be withheld, permitted channels, and publication period. Permission is optional and separate from data-reuse permission. We do not publish your name, photograph, voice, contact information, report, or identifying health details under this process. A quote published without identifying details can still be linked internally to its permission record; it is kept in a restricted testimonial archive and is not represented as an irreversibly anonymous research dataset. We review distinctive details and small-sample risks before publication. Withdrawal stops future publication and triggers reasonable removal from channels we control, subject to applicable law; we cannot guarantee removal of independent third-party copies already made.
6. Retention and Deletion
Identifiable service health materials, including original reports, sensitive intake, session notes, health messages, and customer-linked educational materials, are retained while support is active and deleted from active support systems within 30 days after the eight-week period ends or participation is terminated earlier. Program closure is the end of contracted support or effective termination date; administrative status and unfinished refunds do not extend retention. Limited legal, legal-hold, and unresolved privacy or security exceptions may apply. Valid earlier deletion requests are handled under applicable law. A separately authorized testimonial archive is distinct: only the approved public material and necessary permission evidence are retained for the publication period specified in that permission. On expiry or withdrawal, controlled public copies are removed and archived quote or story content and related health details are deleted within 30 days, or sooner if required, subject to the same limited legal exceptions. Original reports and unnecessary service notes are never kept merely to support a testimonial.
Deletion includes approved working copies and permanent removal from a platform’s trash where available. Third-party backups may follow their infrastructure schedules, subject to applicable legal deletion deadlines. Where required, we notify processors and other recipients of a verified deletion request and require them to act on it. These technical schedules do not limit your legal rights.
AlloBiome may retain minimal enrollment, booking, payment, contractual, financial, compliance, and consent records for legitimate recordkeeping. These may include name, contact information, program dates, payment status, exact permission and Agreement versions, timestamps, withdrawal records, and deletion dates. Administrative records do not contain detailed health findings or linked service summaries. The separately authorized testimonial archive may link an approved quotation to its permission while publication is authorized; it is restricted, disclosed separately, and does not provide an identity key for the retained de-identified dataset. Once publication ends, only minimal permission, withdrawal, and legal evidence may remain as necessary, without routinely preserving the health story.
Properly de-identified scientific observations, test measurements, feedback insights, and aggregated information may be retained as reasonably needed for the permitted purposes in Section 5. These are kept separately from service materials, administrative records, and testimonial archives, with no link back to an identified customer. They are not subject to the ordinary 30-day service-material deletion period. Publication of a customer quotation follows the separate permission and archive rules, not merely the dataset rules. Deletion of our copy of educational material does not remove the copy you received.
7. Your Consumer Health Data Rights
Depending on applicable law, you may have rights to confirm processing; access, correct, delete, or obtain a copy of certain consumer health data; receive a list of certain recipients and their contact methods; withdraw consent to future collection or sharing; or appeal a privacy decision. We do not require you to create a new account to submit a request or unlawfully discriminate against you for exercising applicable rights.
Withdrawal does not undo processing already lawfully completed. Where permitted by applicable law, we may continue to retain and use information already properly de-identified before withdrawal. Because the retained dataset has no link to your identity, we may be unable to locate or remove your contribution from it. This does not limit rights that applicable law requires us to honor.
Email info@allobiome.com with the subject Consumer Health Data Privacy Request. To appeal a decision, use the same address with the subject Privacy Appeal. We may take reasonable steps to verify your identity using only necessary information. We respond to requests and appeals within applicable legal deadlines and provide any required explanation or complaint route. Please do not attach medical reports or payment credentials to an ordinary privacy-request email.
8. Security
Access to identifiable consumer health data is limited to authorized personnel, scientific reviewers, and service providers who reasonably require access for an authorized purpose. We use reasonable administrative, technical, and organizational safeguards designed to protect consumer health data.
9. Changes and Contact
We may update this Policy from time to time. If a material change requires additional notice or consent under applicable law, we will provide it before the new processing occurs.
Questions or requests relating to consumer health data may be directed to:
AlloBiome LLC
Email: info@allobiome.com