Patient resources

Patient information and policies

Consumer health data privacy policy

Effective date: October 20, 2026
Last updated: October 20, 2026

This Washington Consumer Health Data Privacy Policy describes Wellness Pointe’s practices concerning consumer health data that may be subject to the Washington My Health My Data Act.

This policy does not replace our HIPAA Notice of Privacy Practices. Information that qualifies as protected health information under HIPAA, healthcare information governed by Washington healthcare law, and certain other information may be exempt from the Washington My Health My Data Act. Wellness Pointe handles protected health information according to its HIPAA Notice of Privacy Practices and applicable healthcare privacy laws.

 Consumer Health Data We May Collect

Depending on how you interact with our website, we may collect:

  • Contact information connected to an inquiry about healthcare services.
  • Information showing that a person is seeking or considering a healthcare service.
  • Information voluntarily provided about healthcare interests, symptoms, concerns, treatment or requested services.
  • Appointment-request information.
  • Communications with Wellness Pointe.
  • Device, browser, cookie, Internet Protocol address, general location, browsing or advertising information that is linked or reasonably linkable to a person seeking healthcare services.
  • Inferences about healthcare interests created from website activity.

Sources of Consumer Health Data

We may receive consumer health data:

  • Directly from you.
  • From a parent, guardian, caregiver or authorized representative.
  • From your device or browser when you use our website.
  • From website, form, analytics, security, communications, scheduling or advertising service providers.

Why We Collect and Use Consumer Health Data

To the extent permitted by applicable law, Wellness Pointe may collect and use consumer health data to:

  • Provide a product or service you request.
  • Respond to an inquiry or appointment request.
  • Communicate with you as directed.
  • Operate, secure, troubleshoot and improve the website.
  • Prevent fraud, misuse or security incidents.
  • Comply with the law and protect legal rights.
  • Carry out another purpose disclosed to you with any consent required by law.

We will not collect additional categories of consumer health data or use covered data for additional purposes without providing notice and obtaining any consent required by law.

 Consumer Health Data We May Share

We may share consumer health data only as permitted by applicable law, including:

  • When necessary to provide a product or service you requested.
  • With service providers that perform services for Wellness Pointe under appropriate contractual restrictions.
  • When you provide the consent required for a specific disclosure.
  • When required or permitted for security, fraud prevention, legal compliance or protection of legal rights.

Wellness Pointe does not sell patient medical records or provide patient medical records to advertisers. The public website uses Google Analytics and a homepage Meta Pixel. Those services receive website visitor information for analytics and advertising measurement; on a healthcare website, that information may reveal healthcare interests and may qualify as consumer health data.

Wellness Pointe does not use geofences around healthcare facilities to identify or track people seeking healthcare services, collect consumer health data or deliver advertisements related to a person’s health or healthcare services.

Categories of data disclosed through website services

  • Contact details, appointment requests, communications and information you submit through a website form are processed by the website or form service involved in your request.
  • Google Analytics receives website usage information, including device and browser information, online identifiers, page views, referring pages and interactions.
  • The homepage Meta Pixel sends advertising measurement information, including online identifiers, homepage visits and interactions.
  • Website hosting and security services process technical information, including Internet Protocol addresses, request information and activity needed to operate and protect the site.

These disclosures concern website use and information you provide to website services. They do not mean that the clinic supplies patient medical records to advertising platforms.

Categories of recipients

Depending on the service used and how a visitor interacts with the website, recipients may include:

  • Showit, which supports the public website and hosting functions.
  • WordPress, which supports blog content.
  • POWR, which supports website form functions.
  • CleanTalk, which supports spam prevention and website security.
  • Google, which provides Google Analytics for website usage measurement.
  • Meta, which provides the homepage Meta Pixel for advertising measurement.
  • Professional advisers, technology consultants and security providers that assist Wellness Pointe under appropriate confidentiality obligations.
  • Government agencies, courts or other recipients when disclosure is required or permitted by law.

These providers may receive contact information, form information, device information, Internet Protocol addresses, cookie or advertising identifiers, pages viewed, referral information, general geographic information or healthcare-service interests, depending on how their services are configured and used.

Wellness Pointe does not authorize these recipients to use consumer health data for their own independent purposes except as permitted by law and disclosed in this policy.

Wellness Pointe does not share consumer health data with an affiliated company for that affiliate’s independent use.

Clinic care systems

Wellness Pointe uses Jane for medical massage and Elation Health for Direct Primary Care. Information handled through the clinic’s care systems is used to support the applicable service and practice administration. Patient health information is handled as described in our HIPAA notice of privacy practices.

Online booking is not available for either service. Website forms let you request an appointment. An appointment is confirmed only after the clinic contacts you directly with confirmation.

Your Washington Privacy Rights

To the extent the Washington My Health My Data Act applies to your information, you may have the right to:

  • Confirm whether Wellness Pointe is collecting, sharing or selling your consumer health data.
  • Access covered consumer health data.
  • Receive information about third parties and affiliates with whom covered data has been shared or sold.
  • Withdraw consent for future collection or sharing.
  • Request deletion of covered consumer health data, subject to legal exceptions.
  • Appeal a refusal to act on a request.

Wellness Pointe will not unlawfully discriminate against you for exercising an applicable privacy right.

How to Exercise Your Rights

The front desk receives privacy requests and coordinates their handling. You may submit a request using one of the following methods:

Email: info@wellnesspointedirectcare.com  
Telephone: 360-529-0319

Mail:  
Front desk privacy contact  
Wellness Pointe  
2530 NE Kresky Avenue, Suite B  
Chehalis, WA 98532

We may take reasonable steps to verify your identity before completing a request. An authorized agent may submit a request when permitted by law, but we may require proof of the agent’s authority and appropriate identity verification.

We will respond to a covered request within 45 days. When reasonably necessary, we may extend that period once by up to 45 additional days and will explain the reason within the initial period. If we deny a request, we will provide the information required by law and explain how to appeal the decision.

Appeals

To appeal a decision, email info@wellnesspointedirectcare.com or send a written appeal to:

Front desk privacy contact  
Wellness Pointe  
2530 NE Kresky Avenue, Suite B  
Chehalis, WA 98532

Write “Consumer Health Data Appeal” in the email subject line or on the envelope.

We will respond to your appeal in writing within 45 days and explain our decision. If your appeal is denied, you may submit a complaint to the Washington State Attorney General.

Data Security

Wellness Pointe uses administrative, technical and physical safeguards designed to protect the confidentiality, integrity and availability of consumer health data, taking into account the nature and volume of the information.

Access is limited to workforce members, contractors and service providers who need the information for an authorized purpose.

No website, electronic transmission or storage system can be guaranteed to be completely secure.

Changes to This Policy

We may update this policy when our practices, vendors, services or legal obligations change. The revised policy will include a new “Last updated” date.

We will provide any additional notice or obtain any consent required before collecting, using or sharing additional categories of consumer health data or using covered data for new purposes.

Contact Us

Questions about this policy may be directed to:

Front desk privacy contact  
Wellness Pointe  
2530 NE Kresky Avenue, Suite B  
Chehalis, WA 98532

Telephone: 360-529-0319  
Email: info@wellnesspointedirectcare.com