This Washington Consumer Health Data Privacy Policy describes Wellness Pointe’s practices concerning consumer health data that may be subject to the Washington My Health My Data Act.
This policy does not replace our **HIPAA Notice of Privacy Practices**. Information that qualifies as protected health information under HIPAA, healthcare information governed by Washington healthcare law, and certain other information may be exempt from the Washington My Health My Data Act. Wellness Pointe handles protected health information according to its HIPAA Notice of Privacy Practices and applicable healthcare privacy laws.
Consumer Health Data We May Collect
Depending on how you interact with our website, we may collect:
- Contact information connected to an inquiry about healthcare services.
- Information showing that a person is seeking or considering a healthcare service.
- Information voluntarily provided about healthcare interests, symptoms, concerns, treatment or requested services.
- Appointment-request information.
- Communications with Wellness Pointe.
- Device, browser, cookie, Internet Protocol address, general location, browsing or advertising information that is linked or reasonably linkable to a person seeking healthcare services.
- Inferences about healthcare interests created from website activity.
Sources of Consumer Health Data
We may receive consumer health data:
- Directly from you.
- From a parent, guardian, caregiver or authorized representative.
- From your device or browser when you use our website.
- From website, form, analytics, security, communications, scheduling or advertising service providers.
Why We Collect and Use Consumer Health Data
To the extent permitted by applicable law, Wellness Pointe may collect and use consumer health data to:
- Provide a product or service you request.
- Respond to an inquiry or appointment request.
- Communicate with you as directed.
- Operate, secure, troubleshoot and improve the website.
- Prevent fraud, misuse or security incidents.
- Comply with the law and protect legal rights.
- Carry out another purpose disclosed to you with any consent required by law.
We will not collect additional categories of consumer health data or use covered data for additional purposes without providing notice and obtaining any consent required by law.
Consumer Health Data We May Share
We may share consumer health data only as permitted by applicable law, including:
- When necessary to provide a product or service you requested.
- With service providers that perform services for Wellness Pointe under appropriate contractual restrictions.
- When you provide the consent required for a specific disclosure.
- When required or permitted for security, fraud prevention, legal compliance or protection of legal rights.
Wellness Pointe does not sell consumer health data.
Wellness Pointe does not use geofences around healthcare facilities to identify or track people seeking healthcare services, collect consumer health data or deliver advertisements related to a person’s health or healthcare services.
Categories of Recipients
Depending on the service used and how a visitor interacts with the website, recipients may include:
- **Showit**, which supports the public website and hosting functions.
- **WordPress**, which supports blog content.
- **POWR**, which supports website form functions.
- **CleanTalk**, which supports spam prevention and website security.
- **Google**, which may support website analytics, search or advertising measurement.
- **Meta**, which may support advertising and general campaign measurement.
- Professional advisers, technology consultants and security providers that assist Wellness Pointe under appropriate confidentiality obligations.
- Government agencies, courts or other recipients when disclosure is required or permitted by law.
These providers may receive contact information, form information, device information, Internet Protocol addresses, cookie or advertising identifiers, pages viewed, referral information, general geographic information or healthcare-service interests, depending on how their services are configured and used.
Wellness Pointe does not authorize these recipients to use consumer health data for their own independent purposes except as permitted by law and disclosed in this policy.
Wellness Pointe does not share consumer health data with an affiliated company for that affiliate’s independent use.
Your Washington Privacy Rights
To the extent the Washington My Health My Data Act applies to your information, you may have the right to:
- Confirm whether Wellness Pointe is collecting, sharing or selling your consumer health data.
- Access covered consumer health data.
- Receive information about third parties and affiliates with whom covered data has been shared or sold.
- Withdraw consent for future collection or sharing.
- Request deletion of covered consumer health data, subject to legal exceptions.
- Appeal a refusal to act on a request.
Wellness Pointe will not unlawfully discriminate against you for exercising an applicable privacy right.
How to Exercise Your Rights
You may submit a request using one of the following methods:
**Email:** info@wellnesspointedirectcare.com
**Telephone:** 360-529-0319
**Mail:**
Privacy Officer
Wellness Pointe
2530 NE Kresky Avenue, Suite B
Chehalis, WA 98532
We may take reasonable steps to verify your identity before completing a request. An authorized agent may submit a request when permitted by law, but we may require proof of the agent’s authority and appropriate identity verification.
We will respond within the timeframe required by applicable law. If we deny a request, we will provide the information required by law and explain how to appeal the decision.
Appeals
To appeal a decision, email **info@wellnesspointedirectcare.com** or send a written appeal to:
Privacy Officer
Wellness Pointe
2530 NE Kresky Avenue, Suite B
Chehalis, WA 98532
Write **“Consumer Health Data Appeal”** in the email subject line or on the envelope.
We will review and respond within the period required by law. If an appeal is denied, we will explain how to contact the Washington State Attorney General when required.
Data Security
Wellness Pointe uses administrative, technical and physical safeguards designed to protect the confidentiality, integrity and availability of consumer health data, taking into account the nature and volume of the information.
Access is limited to workforce members, contractors and service providers who need the information for an authorized purpose.
No website, electronic transmission or storage system can be guaranteed to be completely secure.
Changes to This Policy
We may update this policy when our practices, vendors, services or legal obligations change. The revised policy will include a new “Last updated” date.
We will provide any additional notice or obtain any consent required before collecting, using or sharing additional categories of consumer health data or using covered data for new purposes.
Contact Us
Questions about this policy may be directed to:
**Privacy Officer**
**Wellness Pointe**
2530 NE Kresky Avenue, Suite B
Chehalis, WA 98532
**Telephone:** 360-529-0319
**Email:** info@wellnesspointedirectcare.com
