Last updated: 09/16/2026
This Consumer Health Data Privacy Policy ("CHD Policy") is published by Sapia Medical, PLLC ("SAPIA," "we," "us," or "our") in compliance with the Washington My Health My Data Act, RCW Chapter 19.373 ("MHMDA").
This CHD Policy is a standalone document, separate from our general Website Privacy Policy, as required under RCW 19.373.020. It describes how we handle "consumer health data" as defined by the MHMDA, which is distinct from, and broader than, protected health information (PHI) regulated under HIPAA. Consumer health data collected through your patient relationship with SAPIA Medical, PLLC (e.g., through our EHR platform) is handled under our HIPAA Notice of Privacy Practices, not this Policy.
This CHD Policy applies to:
– Any Washington State resident who visits our website; and
– Any individual whose consumer health data is collected through our website, regardless of residency.
It covers consumer health data collected through our website, including through contact forms, waitlist and Founding Member signup forms, newsletter subscriptions, and digital marketing and analytics technologies (e.g., Meta Pixel, Google Ads, Google Analytics, Google Tag Manager, or similar tools, to the extent deployed on our site).
"Consumer health data" under the MHMDA means personal information that is linked, or reasonably linkable, to a consumer and that identifies past, present, or future physical or mental health status. Depending on how you interact with our site, this may include:
– Information you voluntarily submit indicating interest in specific health topics or services (e.g., perimenopause, menopause, hormone therapy, weight management) through forms, waitlist signups, or email inquiries
– Inferences about your health interests or status derived from pages you visit, content you engage with, or search terms that led you to our site
– Precise location data, to the extent collected, that could reveal an attempt to seek health care services
– Any other information you choose to share with us that relates to your health status, symptoms, or interest in our services
We do not collect clinical information, diagnoses, medical records, or treatment data through our website. That information is collected exclusively through our HIPAA-compliant patient intake and EHR systems once you become a patient.
We collect consumer health data from:
– You directly — through forms, email, chat, or other voluntary submissions
– Automatically, through your use of our website — via cookies, pixels, and similar tracking technologies
– Third-party analytics and advertising partners, to the extent they provide us with data about your interaction with our content or ads
We collect and use consumer health data to:
– Respond to your inquiries and provide requested information
– Operate our waitlist and Founding Member programs
– Send educational content and marketing communications you've requested or consented to receive
– Measure and improve the performance of our website and advertising campaigns
– Understand aggregate interest in our service areas to inform content and outreach
We do not use consumer health data for any purpose beyond what is disclosed in this Policy without first providing notice and obtaining your affirmative consent, as required under RCW 19.373.020.
We may share consumer health data with the following categories of recipients:
– Service providers ("processors") who perform functions on our behalf under a binding contract limiting their use of the data — e.g., email marketing platforms, website hosting, form/CRM tools, and scheduling software
– Analytics and advertising partners (e.g., Meta, Google), where applicable, solely to measure and improve marketing performance, and only where consistent with the consent described in the section below
We do not sell consumer health data, as "sale" is defined under the MHMDA. We do not share consumer health data with third parties for those parties' own independent purposes.
The MHMDA requires affirmative, opt-in consent — separate and unbundled from other consents — before we collect or share consumer health data in certain circumstances.
Collection: Where our website uses cookies, pixels, or similar technologies capable of collecting consumer health data, we present a consent mechanism before those technologies are activated. You may decline or later withdraw consent through our cookie preference tool.
Sharing: Where we share consumer health data with a third party for a purpose requiring separate consent, we request that consent independently — not bundled with consent to collect, and not bundled with general marketing opt-ins.
Sale: We do not sell consumer health data. If this ever changes, we will obtain a signed authorization meeting all requirements of RCW 19.373.070 before any such sale.
If you are a Washington resident, or your consumer health data was collected in Washington, you have the right to:
– Confirm and access whether we are collecting, sharing, or selling your consumer health data, and obtain a list of third parties or affiliates with whom it has been shared
– Withdraw consent for our collection or sharing of your consumer health data
– Request deletion of your consumer health data
– Appeal a refusal of your request within a reasonable time
To make a request, contact us at:
Sapia Medical, PLLC
522 West Riverside Avenue ste n, Spokane, WA, USA
hello@sapiamedical.com
+1 303-902-8165
We will respond within the timeframe required under RCW 19.373.040. If we decline your request, you may appeal by contacting us at the same address, and we will respond to your appeal in writing with our reasoning.
We maintain reasonable administrative, technical, and physical safeguards designed to protect consumer health data from unauthorized access, use, or disclosure, consistent with the MHMDA's reasonable standard of care.
Consistent with RCW 19.373.080, we do not implement geofencing technology around any location that provides in-person health care services for the purpose of identifying or tracking individuals seeking health care, collecting their consumer health data, or sending them related notifications or advertisements.
We will not collect, use, or share additional categories of consumer health data, or use it for additional purposes, beyond what is disclosed here without first providing notice and obtaining your affirmative consent, as required by RCW 19.373.020. The "Last updated" date above reflects the most recent revision.
Questions about this Policy or your rights under the MHMDA can be directed to:
Sapia Medical, PLLC
522 West Riverside Avenue Suite N, Spokane, WA, USA
hello@sapiamedical.com
+1 303-902-8165
.svg)
.svg)
.svg)
.svg)