Consumer Health Data Privacy Policy
Understory Therapy · Last updated August 2026
This policy is provided under Washington's My Health My Data Act, RCW 19.373. It describes how Understory Therapy handles “consumer health data” as that term is defined in the Act.
Most health information we hold is not covered by this policy. Information created in the course of providing treatment — your records, appointments, and clinical communications — is protected health information governed by HIPAA and RCW 70.02, and the My Health My Data Act expressly excludes it. That information is described in our Notice of Privacy Practices.
What consumer health data we collect
We do not collect consumer health data through this website. The site uses no analytics, cookies, trackers, pixels, advertising tools, or third-party scripts, and contains no forms.
If you contact us by phone or email to ask about services, we may hold the information you volunteer — typically your name, contact details, and a general description of what you are seeking help with — before any treatment relationship exists. To the extent that information qualifies as consumer health data, this policy covers it.
How we use it
Only to respond to you, to arrange a consultation, and to determine whether we are an appropriate fit. Nothing more.
Sources
Directly from you. We do not purchase consumer health data, and we do not obtain it from data brokers, advertising networks, or other third parties.
Sharing
We do not sell consumer health data. We have never sold it and we will not. We do not share it with advertisers, data brokers, or analytics providers.
We may share information with service providers who help us operate the practice — for example, our practice management and secure communication systems — who are bound by written agreements limiting their use of it. We may also disclose information where required by law.
Your rights
Under the My Health My Data Act you have the right to:
- Confirm whether we are collecting, sharing, or selling your consumer health data, and access that data
- Receive a list of any third parties with whom we have shared it, and contact information for each
- Withdraw consent to our collection and sharing of it
- Have it deleted
To make a request, email [email protected] or call (206) 627-0570. We will respond within the timeframes the Act requires. We may need to verify your identity before acting on a request.
If we deny a request, you may appeal by replying to our response. If your appeal is denied, you may submit a complaint to the Washington State Attorney General at atg.wa.gov/file-complaint.
Changes
If this policy changes materially, we will post the updated version here and revise the date above.