Consumer Health Data Privacy Policy — Washington

1. What data we collect and why

We collect only what you voluntarily enter into our forms:

• Contact form: name, email, phone, and the message you write, which may mention symptoms, diagnoses or your health insurance.
• Professional referral form: the information a healthcare professional provides when referring a patient, with that patient's authorization.
• Optional subscription to informational communications, if you check that box.
• There is a single purpose: to respond to your request and coordinate care. We do not use this data for anything else.

2. Where the data comes from

Directly from you, when you complete a form or write to us. Or from a healthcare professional referring you, when you have authorized it. We do not purchase data or obtain it from brokers.

3. Who we share it with

With no one, except the two technical providers required for the message to reach us:

• Paubox, an encrypted email service under a Business Associate Agreement (BAA), which transmits the message.
• Cloudflare, which hosts the site and processes the form submission.
• We never sell consumer health data. We do not engage in targeted advertising. The site uses no analytics, tracking pixels or third-party trackers of any kind.

4. Your rights and how to exercise them

If you reside in Washington, you have the right to confirm whether we hold data about you and to access it, to know with whom it was shared, to withdraw your consent, and to request its deletion. To exercise these rights, write to mentalhealth@oasismentalcare.info or call (352) 832-4652. We will respond within the timeframes set by RCW 19.373. If you believe your request was not honored, you may file a complaint with the Washington State Attorney General.