CONSUMER HEALTH DATA PRIVACY POLICY

Effective Date: 09/20/2026 • Last Updated: 09/20/2026

This Consumer Health Data Privacy Policy is provided by River and Sea Psychiatry and Mental Health Services, PLLC ("we," "us") in accordance with Washington's My Health My Data Act, chapter 19.373 RCW ("MHMDA"). This Policy describes our practices for consumer health data ("CHD") as defined by MHMDA, and applies to riverandseapsychiatry.com and any other sites, applications, or services linking to this Policy. This Policy does not apply to protected health information governed by HIPAA or to health care information governed by chapter 70.02 RCW, which are addressed in our HIPAA Notice of Privacy Practices, available here or upon request, and does not apply to sites, applications, or services that do not link to this Policy. This Policy applies to Washington residents and to other individuals whose consumer health data is collected in Washington. Other individuals should refer to our general Website Privacy Policy, available here. This Policy is a stand-alone notice required by MHMDA and is separate from our general Website Privacy Policy.

1. Consumer Health Data We Collect and Why

MHMDA defines "consumer health data" broadly. The categories below reflect the statutory definition; we have indicated which categories are, and are not, applicable to River and Sea Psychiatry and Mental Health Services, PLLC's collection through the Site.

Data identifying you as seeking health care services, including information about individual health conditions, status, diseases, or diagnoses; social, psychological, behavioral, or medical interventions; health-related surgeries or procedures; use or purchase of medication; diagnostic testing, treatment, or medication; and bodily functions, vital signs, symptoms, or measurements of physical or mental health status — collected, for example, through an appointment request or contact form that references a condition, concern, or type of care.
Precise or approximate location information that could reasonably indicate an attempt to receive or acquire health care services, if you enable location sharing or if collected through your device or browser when visiting the Site.
Data collected from scheduling tools and pre-screening questionnaires to determine suitability of treatment, including questions regarding reasons for seeking treatment, medication and/or substance use, disability and workman’s compensation claims, and recent hospitalizations.
Any inferences derived, extrapolated, or inferred from non-health information (such as device, browser, or online activity data associated with pages of the Site that describe specific health conditions or services) that identify or could reasonably identify your interest in a health condition or service.
Gender-affirming care information: River and Sea Psychiatry and Mental Health Services, PLLC does not knowingly collect gender-affirming care information as defined by MHMDA through the Site.
Reproductive or sexual health information: River and Sea Psychiatry and Mental Health Services, PLLC does not knowingly collect reproductive or sexual health information as defined by MHMDA through the Site.
Biometric data: River and Sea Psychiatry and Mental Health Services, PLLC does not collect biometric data as defined by MHMDA (e.g., imagery of the iris, retina, fingerprint, face, or voice recordings from which an identifying template can be extracted) through the Site.
Genetic data: River and Sea Psychiatry and Mental Health Services, PLLC does not collect genetic data as defined by MHMDA through the Site.

We use these categories of consumer health data to: respond to your inquiry and schedule services; fulfill the purpose for which you provided the data or that was described when it was collected; notify you about changes to the Site; facilitate Site security, performance, and integrity, including preventing and investigating security incidents; maintain records and comply with legal obligations; and, only with your separate consent as described in Section 5, for marketing or advertising purposes. We do not collect consumer health data beyond what is described in this Policy or what is necessary to provide a product or service you have requested, except with your consent.

2. Sources of Consumer Health Data

Directly from you, through forms, emails, or other communications you submit through the Site.
Automatically, through cookies, pixels, and similar technologies when you visit the Site. The Site does not make use of trackers, cookies, or advertising pixels.
Authorized or legal representatives, family members, or caregivers, if they contact us on your behalf.
Health care providers, if you or another provider send us records or a referral in connection with your care.
Health insurance companies or other payors, in connection with billing or coverage verification.
Payment processors or other financial institutions, in connection with processing payment for services.

We do not collect consumer health data from third-party sources beyond those described above.

3. Consumer Health Data We Share

We share the following categories of consumer health data, only as described in Section 5 (Consent) below:

Information necessary for service providers to operate the Site and provide requested services (for example, appointment scheduling and email communication vendors).

We do not share consumer health data beyond what is necessary to operate the Site and respond to your requests. We do not sell consumer health data. Apart from the sharing described above, MHMDA permits us to disclose consumer health data without additional consent only in limited circumstances, including:

With your consent;
To prevent, detect, protect from, or respond to security incidents, identity theft, fraud, harassment, or malicious or deceptive activities;
To a third party acquiring our assets, if River and Sea Psychiatry and Mental Health Services, PLLC is part of a merger, acquisition, bankruptcy, or other transaction involving a third party taking control of our assets or business;
To investigate, report, or take legal action to protect our rights, property, and safety, or the rights, property, and safety of others; and
To protect your or others' vital interests, including health and safety, or where otherwise required by law (such as mandatory reporting).

4. Categories of Third Parties and Affiliates

We share consumer health data with the following categories of third parties:

Website hosting and IT service providers.
Scheduling and client communication platform providers.
Email and newsletter service providers (only for consumer health data you consent to share for this purpose).
Analytics service providers (e.g., [Google Analytics or other named tool]).
Payment processors, if applicable to Site-collected consumer health data.

River and Sea Psychiatry and Mental Health Services, PLLC does not share consumer health data with any affiliated entities.

5. Consent

We obtain your affirmative, opt-in consent before collecting consumer health data for a purpose not necessary to provide a product or service you have requested. We obtain your separate, affirmative, opt-in consent — distinct from any consent to collect — before sharing consumer health data with a third party for a purpose not necessary to provide a requested product or service. You may withdraw consent at any time as described in Section 7.

6. Geofencing

Consistent with MHMDA, we do not implement or permit any geofence around any location that provides in-person health care services, including our office location(s), for the purpose of identifying or tracking individuals seeking health care services, collecting consumer health data, or sending location-triggered notifications, messages, or advertisements related to consumer health data or health care services.

7. Your Rights

You have the right to:

Confirm whether we are collecting, sharing, or selling your consumer health data, and to access that data, including a list of all third parties and affiliates with whom we have shared or sold it and contact information you may use to reach them.
Withdraw your consent to our collection and sharing of your consumer health data.
Request deletion of your consumer health data.

To exercise any of these rights, contact us at Lauren@riverandseapsychiatry.com or 986-206-0525. We will respond within 45 days of receiving a verifiable request, with one 45-day extension where reasonably necessary, and we will notify you if an extension applies.

8. Data Security

We maintain administrative, technical, and physical safeguards designed to protect consumer health data from unauthorized access, use, or disclosure, and we restrict internal access to consumer health data to those who need it to perform their job duties or provide the applicable product or service.

9. Changes to This Policy

We will update this Policy if our practices change, and we will provide notice and, where required, obtain renewed consent before collecting additional categories of consumer health data or using consumer health data for additional purposes not disclosed here.

10. Contact Us

For questions about this Policy or to exercise your rights, contact us at Lauren@riverandseapsychiatry.com or 986-206-0525.