Consumer Health Data Privacy Policy

This policy applies to Washington State residents and supplements the HIPAA disclosures in our HIPAA Notice of Privacy Practices. The Washington My Health My Data Act (RCW 19.373, effective March 31, 2024) protects “consumer health data” — information that identifies a person's past, present, or future physical or mental health status, including data that indicates an interest in seeking health care services. The Act applies to data collected through our website even when we are otherwise a HIPAA-covered entity.

What we collect through this website:

• Page views of condition-specific pages (e.g. our chronic-pain or PTSD telehealth landing pages), which may indicate interest in a particular health condition.
• Search queries you enter on the site (e.g. asking the chat widget about a specific qualifying condition).
• Information you provide in our intake forms, chat widget, email replies, SMS messages, and voice calls — including the reason you are contacting us.
• Standard technical data your browser sends (IP address, device type, referring page, session timestamp) — collected only for essential operation, fraud prevention, and security monitoring.

Why we collect it: to operate the booking flow, provide care, respond to patient questions, comply with our medical-record obligations, and improve the patient experience. We never sell consumer health data, and we never share it with advertisers.

Who processes it on our behalf:only the Business Associates listed in the “Third-Party Service Providers” section of our HIPAA Notice of Privacy Practices — all under signed Business Associate Agreements or equivalent data-processing terms. Google Analytics is NOT a Business Associate of Green Wellness and is loaded ONLY when you have explicitly opted in via the cookie banner; it is permanently suppressed on condition-specific telehealth pages regardless of your consent choice, as an additional safeguard.

Retention:Patient messages, intake records, and authorization documents are retained for at least six years to satisfy HIPAA medical-record obligations. Chat-widget transcripts are pruned after 90 days unless escalated to a patient record. Cookie-consent choices stored in your browser persist until you clear them via your browser settings or change them via the “Cookie preferences” link in our footer.

Your rights as a Washington consumer under MHMDA:

• Access: request confirmation of, and a copy of, the consumer health data we have collected about you.
• Deletion: request deletion of consumer health data we have collected, subject to the records we are legally required to retain (medical records, authorization documents, tax records).
• Withdraw consent: revoke any consent you previously gave for collection, sharing, or sale of consumer health data — at any time, by the same means you gave it.
• Appeal: appeal our decision if we deny one of the above requests; we will respond to an appeal within 45 days and, if we uphold the denial, will tell you how to contact the Washington State Attorney General to submit a complaint.

How to exercise these rights: email admin@greenwellness.org with the subject line “MHMDA Request” or call 1-888-885-9949. We will verify your identity before processing access or deletion requests, and we will respond within 45 days (extendable by another 45 days for complex requests, with notice). There is no fee for the first request in any 12-month period.

No sale of consumer health data. Green Wellness does not sell consumer health data, has never sold consumer health data, and will not sell consumer health data in the future. We do not exchange your data for advertising consideration of any kind.