HEALTHCARE.PRO CONSUMER HEALTH DATA PRIVACY POLICY

Last Updated: September 27, 2024

This notice supplements our Privacy Policy and applies to personal data defined as “consumer health data” subject to the Washington State My Health My Data Act (“MHMDA”) and similar state laws.

This Consumer Health Data Privacy Policy does not apply to “protected health information” (“PHI”), which is regulated by the Health Insurance Portability and Accountability Act (“HIPAA”). HIPAA provides specific protections for the privacy and security of PHI. Please read the Notice of Privacy Practices of your health care provider to understand how your PHI can be used and disclosed.

Consumer Health Data We Collect

As described in the “Categories of Personal Data We Collect” section of our Privacy Policy, the data we collect depends on the context of your interactions with us, the choices you make, and the services and features you use. Because consumer health data is defined very broadly, many different types of data that we collect could also be considered consumer health data. Examples of consumer health data may include:

  • Information that could identify your attempt to seek health care services or information, such as appointment data, including the healthcare providers you have considered or booked with.
  • Information about your health-related conditions, symptoms, status, testing, or treatments (including surgeries, procedures, medications, or other interventions).
  • Information about your health insurance coverage, including relevant ID numbers, copay, and billing information.
  • Other information that may be used to infer or derive data related to the above or other health information.
Sources of Consumer Health Data

As described in the “Categories of Sources of Personal Data” section of our Privacy Policy, we collect personal data (which may include consumer health data) directly from you when you use our services. We also many collect your personal data from your healthcare providers on Healthcare.Pro, such as provider generated appointment confirmations in response to a booking request.

Why We Collect and Use Consumer Health Data

We collect and use consumer health data for the purposes described in the “Commercial or Business Purposes for Collecting Data” section of our Privacy Policy. Primarily, we collect and use consumer health data as reasonably necessary to provide you with the services you have requested or authorized. This may include delivering and operating the services and their features, personalization of certain features, ensuring the secure and reliable operation of the services and the systems that support them, troubleshooting and improving the products, and other essential business operations that support the provision of the services (such as analyzing our performance, meeting our legal obligations, and conducting research and development).

Our Sharing of Consumer Health Data

We may share the categories of consumer health data described above for the purposes described in the “How We Disclose Your Personal Data” section of our Privacy Policy. In particular, we may share personal data, including consumer health data, with your consent or as reasonably necessary to complete any transaction or provide any product you have requested or authorized, as described above.

Third Parties With Which We Share Consumer Health Data

As necessary for the purposes described above, we share consumer health data with the following categories of third parties:

  • Service Providers. We may share consumer health data with our third-party service providers who provide us with services including, but not limited to, web hosting and data storage, technology and communications, fulfillment, analytics, insurance verification, staff augmentation personnel, virtual care, and security and fraud prevention. These service providers may have access to consumer health data that is necessary to perform their functions, but they are only permitted to use such data in connection with performing services for us. They are not authorized by us to use the information for their own benefit.
  • Healthcare Providers. Depending on your use of the service, we may share consumer health data with healthcare providers to enable them to refer you to, and make appointments with, other healthcare providers on your behalf, or to perform analyses on potential health issues or treatments.
  • Insurance Clearinghouse. We may share consumer health data with insurance clearinghouses to determine your eligibility and cost-sharing obligations, and to otherwise obtain benefit plan information on your behalf.
  • Business Partners. We may share consumer health data with other companies, for example, if you choose to use a social media platform to log in to the services, or where you use the services to interact with another company.
  • Payment Processors. Our payment processing partner (currently Stripe) collects your voluntarily provided payment card information as necessary to process your payment.
  • Parties to a Corporate Transaction. We may disclose consumer health data as part of a corporate transaction or proceeding such as a merger, financing, acquisition, bankruptcy, dissolution, or a transfer, divestiture, or sale of all or a portion of our business or assets.
  • Government Agencies. We disclose consumer health data to law enforcement or other government agencies when we believe doing so is necessary to comply with applicable law or respond to a valid legal process.
  • Other Third Parties. In certain circumstances, it may be necessary to provide consumer health data to other third parties, for example, to comply with the law or to protect our rights or those of our users.
  • Other Users and Individuals. If you use the services to interact with other users of the service or other recipients of communications, we will share data, including consumer health data, as directed by you and your interactions.
  • The Public. If you provide any consumer health data in a review posting or online discussion, or forum that is intentionally open to the public, this information will not be kept private. We recommend that you carefully consider whether to disclose any consumer health data in any public posting or forum. Anything you have written may be seen and/or collected by third parties and may be used by others in ways we are unable to control or predict.
How to Exercise Your Rights

MHMDA and similar laws provide certain rights with respect to consumer health data, including rights to access, delete, or withdraw consent relating to such data, subject to certain exceptions.

To exercise any of your MHMDA or similar privacy rights, or if you have any questions about your privacy rights, please do not hesitate to contact us at: