Consumer Health Data Privacy Policy

Introduction

This notice supplements our general Privacy Policy and specifically applies to personal information categorized as "consumer health data" under the Washington State My Health My Data Act (MHMDA) and similar state privacy laws.

This Consumer Health Data Privacy Policy does not apply to "protected health information" (PHI) regulated by the Health Insurance Portability and Accountability Act (HIPAA). HIPAA provides distinct privacy and security protections for PHI. For information on how your health care provider handles PHI, please review their Notice of Privacy Practices.

Consumer Health Data We Collect

As outlined in our Privacy Policy, the type of data we collect depends on how you interact with Navia Therapy, the features you use, and the choices you make. Because "consumer health data" is defined broadly, many types of information may fall under this category. Examples include:

Information reflecting your efforts to seek health care services or information, such as appointment details and providers you have viewed or booked with.
Information regarding health-related conditions, symptoms, status, testing, or treatments (including surgeries, medications, or other interventions).
Information about your health insurance, including policy identifiers, copays, and billing details.
Other data that could be used to infer or derive health-related insights.

Sources of Consumer Health Data

We collect consumer health data from a variety of sources, including:

Directly from you, when you use our services.
From health care providers on the Navia Therapy platform, such as when a provider confirms an appointment request.
From other third-party sources, as described in our Privacy Policy.

Why We Collect and Use Consumer Health Data

We collect and use consumer health data for the purposes set out in our Privacy Policy, including:

Delivering and operating the services you request or authorize.
Personalizing features to improve your experience.
Ensuring secure, reliable, and efficient operation of our platform.
Troubleshooting, improving, and analyzing service performance.
Conducting essential business operations, including legal compliance and research.

Sharing of Consumer Health Data

We may share consumer health data for the purposes described in our Privacy Policy. Examples include:

To complete transactions and provide the services you request.
With your consent.
As reasonably necessary to operate and improve our services.

Third Parties With Which We Share Consumer Health Data

Depending on your use of the services, we may share consumer health data with:

Service Providers – Vendors providing hosting, data storage, communications, analytics, insurance verification, security, and related support.
Healthcare Providers – To enable referrals, appointments, or treatment-related analyses.
Insurance Clearinghouses – To confirm eligibility, benefits, and cost-sharing.
Business Partners – For integrations with other platforms you choose to use.
Payment Processors – To securely process your payment (e.g., Stripe).
Corporate Transactions – In the event of a merger, acquisition, sale, or similar transaction.
Government Agencies – To comply with legal obligations or valid legal processes.
Other Third Parties – When necessary to comply with laws, protect our rights, or safeguard users.
Other Users – If you choose to share information through interactions with other individuals on the platform.
The Public – If you post consumer health data in publicly accessible forums, reviews, or discussions. Please be cautious when sharing personal or sensitive information publicly, as it may be viewed or used by others outside of our control.

How to Exercise Your Rights

The MHMDA and other state laws provide you with rights related to consumer health data, including the right to access, delete, or withdraw consent to its use, subject to applicable exceptions.

To exercise your rights or to ask questions about your consumer health data, please contact us at info@naviatherapy.com.