TeleHealthNP Washington Consumer Health Data Privacy Policy
Effective date: Septemeber 1, 2026
This Policy describes how TeleHealthNP, LLC, doing business as TeleHealthNP (“we,” “us,” or “our”), handles consumer health data covered by Washington's My Health My Data Act (“the Act”). It applies to Washington residents and other covered consumers whose consumer health data is collected in Washington, when acting in an individual or household capacity.
Consumer health data means personal information linked or reasonably linkable to a consumer that identifies past, present, or future physical or mental health status. It may include information inferred from interactions with a healthcare website. Data protected by HIPAA or qualifying for other statutory exemptions is outside this Policy's scope to the extent the exemption applies. Exemptions are evaluated by information and activity; they do not automatically exempt all of our website data.
Categories, Purposes, and Sources
The categories below apply only to non-exempt consumer health data. Identifiers such as a name, email address, telephone number, IP address, or cookie identifier may be associated with these categories.
Requests for health-related services
We collect information you provide when asking about a consultation, treatment option, or health-related product or service. This can reveal your interest in weight management or another service, your health goals, and information voluntarily included in your inquiry. We use it to respond, determine the appropriate next step, and provide a service you request.
Sources: you, a representative acting at your direction, and the scheduling or communication services through which you contact us.
Appointment and service interactions
Scheduling requests, appointment type, appointment status, and service-related correspondence can reveal that you are seeking healthcare. We use non-exempt information in this category to schedule, confirm, or manage the requested interaction and provide related assistance. Clinical records that qualify for an exemption are governed by the applicable healthcare confidentiality rules instead.
Sources: you and providers supporting scheduling, clinical administration, or communications, including Acuity, SimplePractice, Gmail, and AT&T, to the extent they process non-exempt information in the particular workflow.
Purchases and billing support
A purchase, subscription description, or billing inquiry may reveal interest in or receipt of a health-related product or service. We use non-exempt information in this category to process the requested transaction, administer the subscription, and resolve billing questions.
Sources: you and payment or service-administration providers, including Stripe and any connected checkout system, to the extent the information is covered by the Act rather than a statutory exemption.
Website interactions and health-related inferences
Visits to health-related pages, referral information, form interactions, and device or online identifiers may reveal health interests when linked or reasonably linkable to you. The public website is hosted on Squarespace.
We use Squarespace to operate our website and Google Analytics to understand website traffic and improve our website. These services may collect information from your browser or device, including pages visited, referring webpages, website interactions, browser and device information, IP addresses, and online identifiers.
When linked or reasonably linkable to an individual, visits to pages describing healthcare services or particular treatments may reveal health-related interests. We use website analytics to understand how visitors find and use our website.
Information is processed by Squarespace and Google in connection with these services. Visitors can use our website’s cookie controls to accept, decline, or manage certain non-essential cookies.
How We Share Consumer Health Data
Where the Act requires consent for collection, we obtain it before collection. Consent to sharing is separate from consent to collection when required. We may collect or share without that consent only to the extent necessary to provide a product or service you requested or another applicable provision of the Act permits it. Merely using the website or accepting general terms does not supply the required consent.
The categories potentially involved in our disclosed workflows are inquiry and service-interest information; appointment and service-interaction information; purchase and billing-support information; and any website-interaction or derived information specifically disclosed above. We disclose only the categories applicable to the purpose and recipient described below.
Service providers
Scheduling and record-administration providers: Acuity and SimplePractice process relevant identifiers, inquiry, appointment, and service-interaction information for scheduling and administration.
Payment providers: Stripe processes relevant identifiers and purchase or billing information for payments and billing support.
Communication providers: Google/Gmail and AT&T process relevant contact information, message content, and communication metadata for the communication you initiate or request.
Website and analytics providers: Squarespace processes information submitted through enabled website features and relevant technical interactions to operate the website. Google processes website-interaction information through Google Analytics to provide website traffic analysis. To the extent these interactions reveal health-related interests and constitute non-exempt consumer health data, the relevant categories include website-interaction information, associated online identifiers, and health-related interests revealed by those interactions.
A disclosure to a processor acting on our behalf under the required instructions and contract may be excluded from the Act's definition of sharing. That exclusion does not automatically cover the provider's independent uses. The roles and actual information involved determine the applicable requirements.
Third parties and affiliates
Website analytics providers: We use Google Analytics to understand website traffic and improve our website’s content and usability. Google processes website-interaction information through this service, which may include page addresses and titles, referring webpages, browser and device information, interaction events, and online identifiers. When linked or reasonably linkable to an individual, visits to healthcare or treatment pages may reveal health-related interests. This disclosure applies to the extent that the information constitutes non-exempt consumer health data under Washington’s My Health My Data Act.
Specific affiliates receiving consumer health data: None
We may disclose information to recipients you specifically direct us to use, subject to the Act's requirements. This Policy is not itself a consent to an additional disclosure.
Sale of consumer health data
We do not sell consumer health data.
Your Rights and How to Exercise Them
You may ask whether we collect, share, or sell your covered data; access it and obtain recipient identities and contact methods; withdraw collection or sharing consent; or request deletion.
Submit requests to telehealthnp@telehealthnp.net. For assistance, call 602-810-0868. No new account is required. We may verify identity using reasonably necessary information or an existing account. Do not include medical records in an initial ordinary email.
We respond within 45 days of receipt. When permitted, we may extend once by 45 days after timely notice explaining why. Responses are free twice annually; legally permitted limits apply to abusive or excessive requests.
Deletion includes notice to relevant recipients and deletion from covered systems. Backup deletion may take up to six months after authentication as the Act allows. Statutory exemptions apply; they do not create a general business-retention exception.
To appeal a refusal, contact the same email or form and identify the denied request. We answer within 45 days. If denied, we explain how to complain to the Washington Attorney General: https://www.atg.wa.gov/file-complaint.
Withdrawing consent may prevent a service requiring that data. We will not unlawfully discriminate for exercising rights.