Consumer Health Data Privacy Policy
Effective Date: 10/16/26
Who This Policy Covers
This Consumer Health Data Privacy Policy is published by revolution health alliance PLLC, doing business as Midlife Metabolic Medicine (“MMM,” “we,” “our,” or “us”), under Washington’s My Health My Data Act (chapter 19.373 RCW). It applies to consumer health data of Washington consumers: Washington residents, and anyone whose consumer health data is collected in Washington, acting in an individual or household capacity.
Consumer health data is personal information that is linked or reasonably linkable to you and identifies your past, present or future physical or mental health status. At MMM, this is the information we collect before a provider-patient relationship exists: through our website, forms, educational emails, course registration, resource downloads, pre-visit paperwork and the Discovery Visit.
This policy does not cover your clinical records. Once you begin care with the evaluation intake visit, your health information is protected health information under HIPAA and, for Washington patients, health care information under Washington’s health care information law (chapter 70.02 RCW); both are exempt from the My Health My Data Act. Our Privacy Policy and our Notice of Privacy Practices describe how clinical records are handled. The Discovery Visit and its pre-visit paperwork do not establish a patient relationship, so their content is consumer health data under this policy.
Consumer Health Data We Collect and Why
We collect consumer health data only as needed to provide what you have asked for, unless you give opt-in consent for a stated purpose. For each category, we state the purpose and whether consent is required.
Contact details linked to your interest in metabolic and hormonal care (name, email address, phone number, and the course, resource or service you requested). Purpose: to deliver the course or resource you requested, book and confirm your Discovery Visit, and answer your inquiry. Collected because it is necessary to provide what you asked for.
Pre-visit paperwork answers: why you are seeking care now, your health and function goals, your training history and willingness to strength train, your willingness to weigh in, log food and use monitoring devices, and your acknowledgment of the all-in monthly cost of care. Washington paperwork also includes your telehealth consent, consent to direct billing and your location attestation. Purpose: only to prepare for and conduct your Discovery Visit. Collected because it is necessary to provide the visit you booked.
Discovery Visit information: what you share during the 15-minute visit and the provider’s notes from it. Purpose: only to confirm clinical fit and explain the evaluation. Collected because it is necessary to provide the visit you booked. It is never used in marketing in any form, including aggregated, anonymized or composite forms.
Website activity that may reveal a health interest (pages and articles viewed, time on site, referring page, device and browser information). Purpose: to understand how the website is used and improve it. Collected only with your opt-in consent through the website’s cookie consent control.
Email engagement (whether you open or click our educational emails). Purpose: to send you our educational emails and understand which of them are useful. Collected only with your separate opt-in consent through the unchecked box on our resource forms.
Sources of Consumer Health Data
We collect consumer health data from these sources only:
Directly from you, when you complete a form, book a Discovery Visit, complete pre-visit paperwork, take part in a Discovery Visit, or contact us.
From your browser or device, when you visit our website, only after you opt in through the cookie consent control.
From your interactions with our educational emails, only after you opt in to receive them.
We do not buy consumer health data and do not obtain it from data brokers or other third parties.
Consumer Health Data We Share and Who Receives It
We do not sell consumer health data, and MMM has no affiliates. We share consumer health data with processors that handle it on our behalf, under written contracts that set out the processing instructions and limit their use of it to providing services to us, and with no other third party except where the law compels disclosure. Categories of consumer health data shared and the categories of recipients:
Website hosting and website analytics: with your consent, website activity (Squarespace).
Website forms, contact management and educational email: contact details, the course or resource requested and, with your consent, email engagement (HubSpot).
Scheduling, pre-visit paperwork and telehealth visits: contact details, pre-visit paperwork answers and Discovery Visit information (Practice Better and Zoom for Healthcare).
Practice email: contact details and inquiries (Google Workspace, with Paubox encryption).
Government authorities, courts and parties to legal proceedings: only the specific consumer health data that a law, court order, subpoena or other legally binding demand compels us to disclose, and only after we confirm that the demand is valid and enforceable against us. Where the law allows, we tell you before we disclose.
Nothing from your pre-visit paperwork or Discovery Visit enters HubSpot or any marketing list without your separate opt-in consent. We share consumer health data with no other third party; any other sharing would require a second, separate consent from you, and we do not seek it.
Your Consent
Where consent is required, we ask for it through an unchecked box or control that is separate from any other agreement, including our Terms of Use. Each consent request states the categories of consumer health data involved, the specific purpose, the categories of recipients, and how to withdraw. Declining never prevents you from receiving the course, resource or visit you requested. Closing the cookie banner or continuing to browse is not consent.
You may withdraw consent at any time: through the Cookie Settings link on our website, through the unsubscribe link in any educational email, or by contacting our privacy officer at denise@midlifemetabolicmedicine.com or 208.575.6100. A new category of consumer health data, or a new purpose for it, is added to this policy and consented to before it is collected or used.
Your Rights
As a Washington consumer, you have the right to:
Confirm whether we collect, share or sell your consumer health data, and access that data, including a list of all third parties and affiliates with whom we have shared it, with an active email address or other online contact for each.
Withdraw your consent to our collection and sharing of your consumer health data.
Have your consumer health data deleted. We delete it from our records and notify every processor that holds it, and they delete it too. Data held in archived or backup systems is deleted within six months of authenticating your request.
How to make a request
Email denise@midlifemetabolicmedicine.com with the subject line “Washington consumer health data request,” call 208.575.6100, or write to Midlife Metabolic Medicine, 1350 S Five Mile Road, Unit 190544, Boise, ID 83719. Tell us which right you are exercising. We verify your identity with commercially reasonable steps, usually by confirming the email address or phone number we hold for you; we never require you to create an account.
Our response
We respond without undue delay and within 45 days of receiving your request. If we need more time, we may extend this once by 45 days, and we will tell you within the first 45 days, with the reason. Requests are handled at no charge up to twice in any 12-month period.
Appeals
If we decline to act on your request, you may appeal by replying to our decision or by emailing denise@midlifemetabolicmedicine.com with the subject line “Appeal.” We decide appeals in writing within 45 days of receiving them and explain the reasons for our decision. If your appeal is denied, you may contact the Washington State Attorney General to submit a complaint at https://www.atg.wa.gov/file-complaint or by calling 1-800-551-4636 (in Washington) or 206-464-6684.
How We Protect and Retain Consumer Health Data
Access to consumer health data is limited to the people and processors who need it to provide what you asked for, and it is protected by reasonable administrative, technical and physical safeguards. Consumer health data is kept on a written retention schedule and deleted at the end of it, or sooner when you ask us to delete it.
Geofencing
We do not use geofencing. We never set a virtual boundary around any place that provides in-person health care to identify or track people, collect their data, or send them notifications, messages or ads.
Changes to This Policy
When we make material changes to this policy, we publish the revised policy on this page with its new effective date. A new category of consumer health data, or a new purpose for it, is disclosed here and consented to before it is collected or used.
Contact
Questions about this policy or your consumer health data go to our privacy officer:
Denise Erland, FNP-C
Midlife Metabolic Medicine, 1350 S Five Mile Road, Unit 190544, Boise, ID 83719
denise@midlifemetabolicmedicine.com · 208.575.6100
https://www.midlifemetabolicmedicine.com