This content is protected against AI scraping.
Effective date: October 28, 2026
Last updated: October 28, 2026
Hello! Glad you made it here! Due to some of our stickers being used and made for health related purposes, we have to have this ungodly long policy per WA law.
Seems a bit silly.
We make stickers for crying out loud! Anyways, Happy Reading!
-Made with Love,
little sigil
This Consumer Health Data Privacy Policy explains how Little Sigil collects, uses, retains, shares, and protects consumer health data in connection with our website, planner stickers, symptom sticker suggestion form, custom die-cut sticker orders, and related services.
This policy is intended to address the Washington My Health My Data Act. It supplements, and does not replace, Little Sigil’s general privacy policy, website terms, or any notices provided when you submit information or place an order. If there is a conflict concerning consumer health data, this policy governs to the extent required by applicable law.
1. Who this policy covers
This policy applies to Little Sigil LLC (email: info.little.sigil@gmail.com) (“Little Sigil,” “we,” “us,” or “our”), when we collect or process consumer health data in connection with our business.
The Washington My Health My Data Act applies to a “consumer” who is a Washington resident or whose consumer health data is collected in Washington. The Act excludes an individual acting in an employment context. Little Sigil may also apply this policy to similar information collected from people outside Washington as a matter of practice.
“Consumer health data” generally means personal information linked or reasonably linkable to a consumer that identifies the consumer’s past, present, or future physical or mental health status. It can include health conditions, symptoms, treatment, medication use, biometric or genetic data, precise location information indicating attempts to obtain health services or supplies, information identifying someone seeking health care, and certain inferences drawn from other information.
2. What consumer health data means
Because Little Sigil’s products relate to personal symptom and medication tracking, information submitted through a suggestion form or custom-order request may be consumer health data if it identifies or can reasonably be linked to a person. A sticker design or symbol, standing alone and not linked or reasonably linkable to a person, may not be consumer health data. But an identifiable order for a custom sticker referring to a particular symptom or medication may be. This is a fact-specific
assessment.
3. Consumer health data we collect
Depending on how you interact with Little Sigil, we may collect the following categories of consumer health data:
| Category | Examples and sources |
| Health-related suggestion information | Symptom or medication-related sticker ideas, descriptions, or other health-related content you choose to enter into our symptom sticker suggestion form. |
| Custom-order information | Health-related words, symbols, designs, or indications you ask us to include in a custom die-cut sticker. |
| Order-linked information | Information connecting a health-related custom sticker or product order to your name, email address, order number, or other identifying information. |
| Communications you choose to send | Health-related information included in an email, support message, or other communication you send to us. |
We also collect ordinary transaction and website information, such as contact, shipping, billing, payment, and purchase information. Such information is not necessarily consumer health data by itself. It may be consumer health data if it is linked or reasonably linkable to health-related information or otherwise identifies health status.
We do not ask customers to submit medical records, diagnoses, medication lists, or detailed health histories to order ordinary products. Please do not submit information about another person unless you have authority to do so and have provided them any notice required by law.
4. Sources of consumer health data
We collect consumer health data from:
• You, when you submit a suggestion, custom-order request, email, or other communication.
• Your order activity, when information about a health-related product or custom design is associated with your customer or transaction information.
• Service providers acting for us, to the extent they process information submitted through our website or used to complete an order.
We do not intentionally obtain consumer health data from data brokers or infer a customer’s health status from unrelated browsing or purchase activity. If that practice changes, we will update this policy and obtain any consent required by law before proceeding.
5. Why we collect and use consumer health data
We collect and use consumer health data only for the purposes disclosed here and, where required, with your consent or to the extent necessary to provide a product or service you requested. These purposes may include:
• Reviewing and considering a sticker suggestion you voluntarily submit.
• Communicating with you about a suggestion or custom-order request.
• Designing, producing, fulfilling, and delivering a custom sticker order you requested.
• Providing customer support and resolving order or product issues.
• Keeping the transaction and business records reasonably necessary for accounting, tax, fraud prevention, or other legal compliance.
• Protecting the security and integrity of our website, business, customers, and transactions.
• Establishing, exercising, or defending legal claims, to the extent permitted by applicable law.
We do not use consumer health data to diagnose, treat, or provide medical advice; to make healthcare decisions; or to determine whether you should start, stop, or change medication. Our products are personal journaling and organizational tools, not medical devices or substitutes for professional medical advice.
The Act generally requires consent for collection for a specified purpose unless collection is necessary to provide a product or service the consumer requested. Sharing generally requires a separate, distinct consent unless it is necessary to provide a requested product or service. Consent must be obtained before the relevant collection or sharing and must meet the Act’s requirements. Any consent request we use will identify the relevant data categories, purposes and uses, categories of recipients, and how to withdraw consent.
6. Suggestion form
The suggestion form is for product ideas, not medical intake. Before submission, the form must present any consent required for Little Sigil to collect or use consumer health data in connection with your suggestion. The form asks for your name and contact information so we can contact you if your idea is selected and send you a code to redeem one free sticker sheet. In the idea-description field, submit only the minimum information needed to describe a sticker idea. Do not include a diagnosis, detailed medical history, medication dose, provider information, or another person’s health information.
Information submitted through the form is sent to Little Sigil at info.little.sigil@gmail.com. We use your suggestion to evaluate the idea and administer the suggestion program. If your idea is selected within 30 days after submission, we use your name and contact information to notify you and send a code to redeem one free sticker sheet. Submission does not mean Little Sigil will make the suggested product, and it does not create a healthcare relationship.
Little Sigil may select a suggestion and use it to develop health-related stickers or sticker sheets that it adds to its collection and offers for sale to the public. Selection does not authorize public attribution or identification of the suggester. We will not identify or credit you, or use your name or contact information in marketing about a product developed from your suggestion. Where reasonably practicable, we will separate a selected product concept retained for product development from your name and contact information. Removing identifiers does not necessarily mean the retained concept is outside the definition of consumer health data. We will handle deletion requests for retained information in accordance with applicable law.
Retention: For an unselected idea, or if no redemption code is sent, we intend to delete the original submission and your name, contact information, and associated health-related information within 30 days after submission. If your idea is selected and we send you a redemption code, we intend to delete the original submission and your name and contact information within 7 days after the code is sent. Little Sigil may retain the product concept needed to develop a selected product, separated from your name and contact information where reasonably practicable, subject to applicable law and any deletion request. These periods do not apply to information we must retain to comply with law, resolve a dispute, or establish, exercise, or defend a legal claim.
Optional newsletter: Submission of a suggestion does not sign you up for Little Sigil’s newsletter. Newsletter signup is a separate choice. We will not use health information from a suggestion to target newsletter marketing.
The suggestion form emails submissions directly to Little Sigil at info.little.sigil@gmail.com only.
7. Custom orders
If you request a custom die-cut sticker with a health-related indication, we use the information you provide to communicate with you, create or approve the design, produce and fulfill the order, provide support, and maintain required transaction records.
Please submit only the wording or design direction needed to make the sticker. We recommend that custom-order fields ask for a design description, not a diagnosis or medical history. Little Sigil may decline or ask you to revise a request that includes information it does not need.
If a custom design contains sensitive health information, the design and the order details may be linkable to your identity. We will limit access and use to the purposes described in this policy and will not use the information in public marketing or product examples without your separate, affirmative permission.
8. Who receives consumer health data
We do not sell consumer health data.
We may disclose consumer health data to the following categories of recipients, only as described below and subject to applicable law:
| Recipient category | Why information may be disclosed |
| Website, form, email, and cloud-storage providers | To host the website, receive and store form submissions, and send or receive communications on Little Sigil’s behalf. |
| Payment, order-management, and fulfillment providers | To process payment, administer an order, produce a custom item, and ship a product you requested. We will provide health-related design information only where needed for that provider’s assigned task. |
| Professional advisers and service providers | To obtain accounting, legal, security, or other professional services, subject to appropriate confidentiality and use restrictions. |
| Government authorities or other parties | When required by law or valid legal process, or as reasonably necessary to protect rights, safety, and security or to establish, exercise, or defend legal claims. |
Little Sigil does not share consumer health data with any affiliates. The recipient categories listed above describe the third parties that may receive consumer health data.
9. Sale and advertising
Little Sigil does not sell consumer health data and does not offer it for sale. We do not use consumer health data for targeted advertising.
10. Retention, including order and tax records
We retain consumer health data only as long as reasonably necessary for the purposes stated in this policy, subject to applicable legal obligations and the consumer deletion rights described below.
Order-history records. Little Sigil may retain ordinary order and accounting records for the period reasonably necessary to administer its business, comply with applicable tax, accounting, and legal requirements, resolve disputes, and document transactions. Those records may include the customer’s name and contact details, transaction date, products purchased, payment and shipping records, and order amount.
Where an order record includes or is linked to consumer health data, Little Sigil will, where reasonably practicable:
• Keep the legally or operationally necessary transaction record separate from the detailed health-related design or suggestion content.
• Retain only the minimum information needed for the recordkeeping purpose.
• Restrict access to personnel and service providers who need access for that purpose.
• Avoid retaining detailed symptom or medication descriptions in the order-history record unless necessary to fulfill the order or meet a specific legal obligation.
• Delete or de-identify health-related design details when they are no longer needed, subject to applicable law and a valid deletion request.
A consumer’s deletion request does not automatically require Little Sigil to erase every accounting or transaction record if a specific record must be retained under applicable law or is reasonably needed for a permitted legal purpose. Little Sigil will assess each request and delete the consumer health data that is not subject to a lawful retention need. We will not treat a general preference to keep customer histories as a reason to retain unnecessary symptom or medication details.
11. Your Washington privacy rights
Subject to the Act’s terms and applicable exceptions, a consumer may:
• Ask whether Little Sigil is collecting, sharing, or selling consumer health data about them and request access to that data.
• Request information about third parties and affiliates with whom Little Sigil shared or sold the data, including a contact mechanism where required.
• Withdraw consent to future collection or sharing where processing depends on consent.
• Request deletion of consumer health data.
• Appeal Little Sigil’s refusal to act on a request.
How to make a request
Submit a request using either of the following methods:
• Email: info.little.sigil@gmail.com
• Mail: 522 W RIVERSIDE AVE STE N, SPOKANE WA 99201-0581
Please include enough information for us to understand and authenticate your request. We may ask for additional information reasonably necessary to authenticate you and your request. You do not need an account to exercise your rights.
We will respond without undue delay and generally within 45 days. When reasonably necessary, we may extend the response period once by an additional 45 days, if we notify you within the initial period and explain the reason. Requests are generally free up to twice annually per consumer. The Act permits a reasonable administrative fee or refusal for manifestly unfounded, excessive, or repetitive requests, and Little Sigil bears the burden of demonstrating that basis.
Appeals
If we refuse to act on your request, you may appeal by replying to our decision or emailing info.little.sigil@gmail.com with “Privacy Request Appeal” in the subject line. We will provide a written response to the appeal within the time required by law and explain the reasons for our decision. If we deny your appeal, we will provide a method for contacting the Washington Attorney General to submit a complaint.
12. Consent withdrawal
Where Little Sigil relies on your consent for future collection or sharing of consumer health data, you may withdraw that consent by emailing info.little.sigil@gmail.com. Withdrawal does not undo processing that occurred before the withdrawal, and it does not require Little Sigil to delete records it is legally permitted or required to retain. We will stop the relevant future collection or sharing unless another lawful basis applies.
13. Security
Little Sigil restricts access to consumer health data to employees, processors, and contractors who need access to carry out the purposes described in this policy or provide a product or service you requested. Little Sigil will establish, implement, and maintain administrative, technical, and physical security practices appropriate to the nature and volume of consumer health data and the reasonable standard of care in its industry.
No method of electronic storage or transmission is completely secure. Little Sigil cannot guarantee absolute security.
14. Policy changes
We may update this policy to reflect changes in our practices, products, service providers, or legal obligations. We will post the revised policy on our website, update the “Last updated” date, and provide any additional notice or obtain any consent required by law before collecting or using additional categories of consumer health data or using data for an additional purpose.
15. Contact Little Sigil
Questions, requests, or appeals concerning this policy may be sent to:
Little Sigil
Legal business name: Little Sigil LLC
Privacy email: info.little.sigil@gmail.com
Mailing address: 522 W RIVERSIDE AVE STE N, SPOKANE WA 99201-0581
Website: littlesigil.com