Privacy & legal
Consumer Health Data Privacy Policy
Your rights over health-related data under Washington’s My Health My Data Act.
DRAFT — PENDING LEGAL REVIEW
This document is a working draft. It has not been reviewed or approved by an attorney, and highlighted items are still to be confirmed. It does not constitute legal advice and no claim of legal compliance is made. Last updated October 23, 2026.
This policy describes how we collect, use and share consumer health data covered by Washington’s My Health My Data Act, Chapter 19.373 RCW. It supplements our Privacy Policy and does not replace our HIPAA Notice of Privacy Practices.
Some information is exempt from the Act, including protected health information already covered by HIPAA. Which exemptions apply depends on the data and the context. [LEGAL REVIEW REQUIRED: scope and exemptions]
Effective date: [INSERT EFFECTIVE DATE] · Last updated: October 23, 2026.
What we may collect
- Care-seeking information — that you asked about an appointment, and the times you preferred.
- Dental concerns you choose to tell us in a message or a form.
- Contact details attached to a request for dental services.
- Website interaction data on service and appointment pages, to the extent it qualifies as consumer health data.
We do not operate a chatbot, so no health information is collected that way.
Where it comes from
- You, when you contact us or request an appointment.
- Your interactions with this website.
- Service providers acting on our behalf, named in our Privacy Policy.
Why we collect it
- To respond to requests for appointments and information.
- To arrange scheduling and communications you have asked for.
- To operate and secure this website.
- To understand site performance, where the law allows.
- To meet legal obligations.
We will not use consumer health data for a new purpose that requires your consent without first asking for it.
Who it may be shared with
Categories of recipients are the providers named in our Privacy Policy: website hosting (Cloudflare), analytics (Google), patient financing (Cherry, on the Financial Info page), and our scheduling provider.
We do not sell consumer health data. [CONFIRM AGAINST ACTUAL PRACTICES AND CONTRACTS BEFORE RELYING ON THIS]
Your Washington rights
- Confirm whether we collect, share or sell consumer health data about you.
- Access that data.
- Withdraw consent you previously gave.
- Request deletion, including by our processors, subject to legal exceptions.
We may need to verify your identity, or your authority to act for someone else, before we act on a request. If we deny a request you may appeal; if the appeal is denied you may contact the Washington State Attorney General.
[LEGAL REVIEW REQUIRED: statutory response timelines, verification, authorised-agent process and appeal route]
Security and retention
We keep reasonable safeguards and retain consumer health data only as long as needed for the purposes above and as the law requires. [INSERT RETENTION PERIOD]
How to make a request
Madison Street Dental Clinic, 2121 E Madison St Suite A, Everett, WA 98203. Telephone 425-353-5854. Privacy contact: [INSERT DESIGNATED CONTACT OR OFFICE MANAGER]. Privacy email: [INSERT PRIVACY CONTACT EMAIL].
Please write “Consumer Health Data Privacy Request” in your message, and do not send dental records through an unsecured channel.
Questions about your privacy?
Call the office and ask for the person handling privacy requests.