LEGAL & COMPLIANCE
Consumer Health Data Privacy Policy — Washington
Document required by the State of Washington's My Health My Data Act (RCW 19.373) for health data not covered by HIPAA.
Clinical information about our patients is governed by HIPAA and is excluded from this policy under RCW 19.373.100. This document covers only health data a person provides BEFORE a clinical relationship exists — for example, when writing to us through the contact form.
1. What data we collect and why
We collect only what you voluntarily enter into our forms:
- Contact form: name, email, phone, and the message you write, which may mention symptoms, diagnoses or your health insurance.
- Professional referral form: the information a healthcare professional provides when referring a patient, with that patient's authorization.
- Optional subscription to informational communications, if you check that box.
- There is a single purpose: to respond to your request and coordinate care. We do not use this data for anything else.
2. Where the data comes from
Directly from you, when you complete a form or write to us. Or from a healthcare professional referring you, when you have authorized it. We do not purchase data or obtain it from brokers.
3. Who we share it with
With no one, except the two technical providers required for the message to reach us:
- Paubox, an encrypted email service under a Business Associate Agreement (BAA), which transmits the message.
- Cloudflare, which hosts the site and processes the form submission.
- We never sell consumer health data. We do not engage in targeted advertising. The site uses no analytics, tracking pixels or third-party trackers of any kind.
4. Your rights and how to exercise them
If you reside in Washington, you have the right to confirm whether we hold data about you and to access it, to know with whom it was shared, to withdraw your consent, and to request its deletion. To exercise these rights, write to [email protected] or call (352) 832-4652. We will respond within the timeframes set by RCW 19.373. If you believe your request was not honored, you may file a complaint with the Washington State Attorney General.
Last updated: August 2026 — Oasis Mental Care LLC