The health details you share.
Where they go. Where they never go.

Why this policy exists.

Washington's My Health My Data Act requires businesses that collect health-related data from Washington residents to publish a separate policy explaining what they collect and what they do with it. This is that policy. We apply it to every visitor, wherever you live, because the questions it answers are the ones every prospective patient should ask.

Health information you share here is sensitive, but most of it is not covered by HIPAA, because no clinical relationship exists yet when you submit a form. Our medical disclaimer explains that boundary. This policy covers the gap: how we handle your health details during that pre-clinical stage.

The health-related information we handle.

We collect consumer health data only in these categories:

• Contact details tied to a health inquiry, your name, email, and phone number when you submit them with a consultation request or a question about your condition.
• Condition information you choose to share, the area that hurts, how long it has hurt, prior treatments, and anything else you type into a form or message field.
• Self-assessment answers, the responses you give the fit quiz, including condition area and health history questions.
• Records you send us, imaging, physician notes, or lab work, only if you choose to send them.
• Website usage signals that can relate to health, such as which condition pages you visit, collected through the cookies described in the cookies section of our privacy policy.

We do not collect biometric data. We do not use geofencing around health facilities.

Two sources. Both are you.

Directly from you, when you submit a form, take the self-assessment, email us, or call. And from your browser, which shares technical signals like the pages you visit, as described in our privacy policy. We do not buy health data about you from data brokers or anyone else.

Four purposes. No others.

1. Respond to your inquiry.
2. Evaluate whether you may be a candidate for physician review.
3. Coordinate care, scheduling, and travel logistics if you move forward.
4. Improve the website and our educational content based on aggregate usage patterns.

If we ever want to use your consumer health data for a purpose not on this list, we will ask for your consent first.

A short list.

• Our care coordination team, the people who respond to inquiries and organize logistics.
• The physician team at Hospital Angeles, Tijuana, when you ask for a case review or consultation. This is the core function of submitting a request.
• Service providers under contract, the platforms that run our forms, CRM (including HubSpot), email delivery, analytics (including Google Analytics), and hosting. They may use your information only to provide services to us and are prohibited from using it for their own purposes.
• Authorities, if disclosure is required by law, court order, or governmental authority.

We never sell consumer health data. The information you submit through forms is never shared with advertising platforms or used to build third-party ad audiences. Advertising cookies on the site are a separate topic, covered in the cookies section of our privacy policy, and you can decline them in the cookie banner.

What you can ask us to do.

• Access, ask what consumer health data we hold about you and who we have shared it with.
• Withdraw consent, tell us to stop collecting or sharing your health data.
• Deletion, ask us to delete your health data, including copies held by our service providers.

To exercise any of these, email [email protected] with the subject line "Health data request." Tell us which right you're exercising and the email address you used with us, so we can find your records and confirm it's you. We respond within 45 days. If a request is unusually complex, we may take up to 45 more days, and we will tell you before the first 45 are up.

If we say no.

If we decline a request, we will explain why in writing. You can appeal by replying to that decision and telling us you want a review. Someone other than the person who made the original decision will look at it and respond within 45 days. If the appeal is denied, our response will include a way to contact the Washington State Attorney General, who accepts complaints under the My Health My Data Act.

When this page changes.

This policy took effect on July 17, 2026. When we make material changes, we will update the effective and last-updated dates at the top of this page and, where appropriate, notify you by email. The current version always lives at this address.

Questions about this policy.

Questions about this policy, or a request you'd rather make in your own words, go to the same place as everything else.