Skip Navigation

CONSUMER HEALTH DATA PRIVACY POLICY (Washington and Nevada)

Effective Date: May 15, 2026  

This Consumer Health Data Privacy Policy (this “Policy”) describes how Sage Hospitality Group and its management and operating affiliates (“Sage Corporate”) and the hotels, restaurants, spas or other properties that Sage operates or manages that link to this Policy on their websites (the “Sage Properties”)(Sage Corporate and the Sage Properties, together, “Sage,” “Company,” “we,” “or “us”) treat Health Data (as defined below) about or (1) Washington and Nevada residents; and (2) residents of other locations whose Health Data is collected in Washington in Nevada. Each of these covered individuals is referred to as “you.”  We are providing this policy pursuant to the Washington My Health My Data Act (“MHMDA”) and the Nevada Security and Privacy Of Consumer Health Data Law (“Nevada Law”) (together, the “Health Privacy Laws”)

 “You” or “you” also means anyone providing Health Data to us on your behalf, including travel agents, tour operators, online reservation/booking providers or other entities you provide Consumer Health Data to with the intent of their providing it to us.

This Policy applies only to Health Data and only to the individuals described in (1) and (2). It supplements our general privacy policy available here and if there is a conflict between this Policy and the general privacy policy as to Health Data, this Policy will govern.

By providing Health Data, you consent to our collection and use of the information for the purposes described in this policy, including providing accessible accommodations, safely providing Services you request, and/or to investigate or respond to lawsuits or investigations brought against us.

What is Consumer Health Data?

“Health Data” is data that can be used to identify you or relates or links (or could reasonably be related or linked) to you as an identified or identifiable individual and that identifies your past, present, or future physical or mental health status.

Categories of Health Data We Collect

 The categories of Health Data we collect will depend on your interactions with us, so we may not collect all of the following Health Data from you in each interaction:

  • Information about accessibility requests under the Americans With Disabilities Act (“ADA”);
  • Information about food allergies; and/or
  • Information about pregnancy, health conditions, treatments, diseases, diagnoses, and previous or future surgeries or medical procedures.

How and From Whom We Collect Health Data

We only collect Health Data from you (including, as mentioned above, third-parties whom you have authorized to provide us with it).  You may provide this Health Data to us via our website(s) or other electronic or online communications, including emails, and/or in-person when you stay, eat, or drink at a Sage Property.

 

How We Use Health Data

We will only use Health Data as reasonably necessary to:

  • Provide you with the services you’ve requested. For example, we may collect information about any relevant physical injuries when you request spa services, or information about your food allergies when you dine with us, so that we can deliver these services to you safely.
  • To operate, manage, and improve our business, including conducting internal investigations or audits, compliance with law, to maintain records, investigate or address injuries or other incidents involving you or others on-premises, to respond to lawsuits or other proceedings, and otherwise enforce our rights;
  • Explore, participate in, and/or conclude any corporate reorganization, financing transaction, merger, sale, joint venture, partnership, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings)

 

To Whom We Disclose Health Data

We do not “sell” Health Data, as that term is defined under the Health Privacy Laws (or other privacy laws). We may disclose it to the following third-parties:

  • Owners of Sage Properties. As is common in the hospitality industry, we do not own Sage Properties; rather, we operate or manage them under an agreement with the owner(s).
  • Third-party service providers (contractors) whom we retain to provide the services you’ve requested, such as caterers, spa services providers or activities providers on or at a Sage Property;
  • Government Authorities, Including Courts, if we believe that disclosure is reasonably necessary (1) to comply with applicable laws, (2) to enforce our rights, (3) to protect the property, rights, safety, and security of you, us, others, or the general public from harm or illegal activity
  • Emergency Services Providers, to respond to an emergency which we believe in good faith requires us to disclose Health Data to prevent, or assist in preventing, death or serious bodily harm, whether yours or others; and

  • Other Third Parties, in the context of the above-referenced corporate transactions (mergers, sales, joint ventures, bankruptcy, etc.).

YOUR RIGHTS IN CONNECTION WITH YOUR HEALTH DATA

If you and/or your Health Data are covered by this Policy, you have the right to make certain requests of us in connection with your Health Data under the Health Privacy Law, which we may authenticate before responding, without limiting our obligations under Health Privacy Law.

You may send us the following requests:

  • Request to Confirm. You may request that we confirm whether we are using, sharing, and/or selling Health Data
  • Request to Know. You may request a copy of the Health Data that we have about you.
  • Request for Information About Sharing. You may request that we provide you a list of the third-parties with whom we are sharing or to whom we are selling your Health Data, if any.
  • Request to Correct. You may request that we correct inaccurate Health Data about you.
  • Request to Delete. You may request that we delete your Health Data. If you make a Request to Delete, we may ask you to confirm your request before we delete your Consumer Health Data.
  • Request to Withdraw Consent/Stop Collection. You may request that we stop collecting or sharing your Health Data and specifically withdraw your consent as to same.
  • Request to Appeal. If we deny your request, you may appeal our decision within a reasonable period after receiving a denial notice as indicated below.

How You Can Exercise Your Rights

You may make all the above requests, including appealing our denial of a previous request, by emailing us at yourprivacy@sagehospitality.com or calling our toll-free privacy line at (883)-700-2444 for assistance. For your protection, and as indicated above, we may ask you for additional information to authenticate your request.

Further Appeals.

If you appeal our denial of a request and that appeal is not successful, you may contact the applicable state’s Attorney General and file a complaint.

WA Residents/Individuals Whose Health Data Was Collected in WA

Washington State Attorney General: https://www.atg.wa.gov/file-complaint

 

NV Residents/ Individuals Whose Health Data Was Collected in NV

Nevada State Attorney General: https://ag.nv.gov/Complaints/CSU_Complaints___FAQ/  

 

CHANGES TO THIS HEALTH DATA PRIVACY STATEMENT

 We may change or update this Policy from time to time and, if we do, we will post the revised Policy and the effective date of the new Policy on this web page. We encourage you to check back here periodically for changes or contact us at yourprivacy@sagehospitalitygroup.com.

 CONTACT US

If you have questions or concerns about this Policy, please contact us at yourprivacy@sagehospitalitygroup.com.