Last Updated: November 5, 2026
This notice applies whenever the consumer health data laws of Washington (My Health My Data Act), Nevada (SB 370), Connecticut (Connecticut Data Privacy Act) or another state protect your data. In Washington this includes residents and people whose consumer health data is collected in Washington. It describes how AI Coaching Inc., d/b/a Gala GLP-1 (“Gala,” “we,” or “us”) handles “consumer health data” as those laws define it, and it supplements our Privacy Policy. An exemption for HIPAA-protected information applies only when its conditions are met for the particular data. HIPAA-protected information is subject to HIPAA and to the responsible provider’s Notice of Privacy Practices; our HIPAA Authorization describes specific authorized disclosures.
AI Coaching Inc., d/b/a Gala GLP-1, operates the services branded as Gala, Gala GLP-1 and Gala Health at galaglp1.com and galahealth.co. References to Gala, we, us or our mean AI Coaching Inc. This document applies to those services on both domains.
You, when you complete an intake, checkout or support conversation (by web, text or call); our affiliated medical providers and pharmacy partners; and the devices and browsers you use with the Services. Sources also include vendors that help provide the services you request.
To provide the services you request, including matching you with a licensed provider, processing prescriptions and orders, scheduling, billing and customer support; to communicate with you as described in our SMS & Call Terms; to keep the Services secure and prevent fraud; to improve the Services; and to comply with the law. We use treatment-page visits, interactions and linked identifiers to measure advertising, build audiences and personalize ads. This information may be consumer health data. This notice does not provide consent or sale authorization. We use communications containing consumer health data to provide support, follow up on requested services, review communication quality and improve the Services, including through AI analysis. This notice is disclosure, not consent.
Affiliated medical providers and pharmacy partners who deliver your care; service providers (processors) that host, support and analyze the Services, process payments and send messages and calls on our behalf, under contracts that limit their use of the data; advertising and analytics partners (such as Meta, TikTok and Google), which receive information about your visits to our web pages, including pages about specific treatments, through cookies, pixels and similar tools, and may receive a one-way hashed version of details such as your email address or phone number; and government authorities or others when required by law. Our communications and AI processing providers receive the message content, call audio, transcripts and related identifiers needed to perform these functions for us, including any consumer health data contained in them. The information disclosed to advertising and analytics partners includes treatment-page visits, related interactions and associated identifiers described in Section 1. These partners may collect consumer health data over time and across different websites or online services when you use our Services. Whether a disclosure to an advertising partner is a “sale” depends on the law of your state. Medical recipients include GMG Medical Group, P.A., the applicable OpenLoop practices identified in your telehealth consent, and your dispensing pharmacy. References in these policies to affiliated medical providers mean independent care partners, not Gala corporate affiliates. Recipients also include laboratories involved in requested care, and security processors. We do not characterize advertising disclosures as categorically outside the definition of sale. Any sale authorization must be handled separately from ordinary collection and sharing consent.
Subject to the law of your state, you have the right to:
For a valid deletion request, we delete the covered data and notify all recipients required by applicable law, including affiliates, processors, contractors and other third parties. Our notice directs them to delete the data as legally required. Backup deletion follows the applicable statutory deadline. You may withdraw consent through a method at least as easy as the method used to give it, or by emailing team@galaglp1.com. Where Connecticut law applies, we cease processing based on withdrawn consent as soon as practicable and within 15 days after receiving the request. Withdrawal does not prevent processing independently permitted or required by law. Withdrawal affects future processing that depends on consent. We maintain appropriate request records.
Where Connecticut law applies, you may also correct inaccurate personal data, obtain a portable copy, and opt out of targeted advertising, sales of personal data and profiling covered by that law. You may also access inferences about you and request the legally required list of third parties to which personal data was sold. Where feasible, you may question qualifying automated profiling decisions, receive their reasons and review the data used. For qualifying housing decisions, you may correct inaccurate data and request reevaluation. Email team@galaglp1.com to exercise these rights. Unsubscribing from texts or emails is a separate choice.
Email team@galaglp1.com with enough information to identify the data, such as your name, state, email and phone number (a subject line like “Consumer Health Data Request” helps but is not required). You do not need an account. Do not send medical records or identity documents unless we ask for them through a secure method. We authenticate requests promptly and respond without undue delay, generally within 45 days after receipt. Where permitted, we may extend that period once by 45 days and explain why within the initial period. Nevada deletion requests are subject to a separate deadline of 30 days after authentication. Any shorter applicable deadline controls. An authorized agent may submit a request for you where the law allows. We authenticate requests using proportionate methods and provide secure alternatives for sensitive documentation.
If we decline your request, appeal by replying to our decision or emailing team@galaglp1.com. No particular subject line is required. We will provide a written decision explaining our reasons within 45 days after receiving your appeal. If you are not satisfied, you may contact the Attorney General of your state (in Washington, at atg.wa.gov/file-complaint). We will provide required appeal decisions and regulatory complaint information within applicable deadlines.
We post updated notices with a new Last Updated date. Posting alone does not satisfy any additional notice or consent requirements. Where Connecticut law applies, retroactive material changes require reasonable electronic notice to affected consumers and a reasonable opportunity to withdraw consent to materially different collection, processing or transfer of previously collected data.
Email: team@galaglp1.com
Address: 1007 N Orange St. 4th Floor Suite #2920, Wilmington, Delaware 19801, United States
