Consumer Health Data Privacy Policy

In short

Some states protect health-related information even before you become a patient. This page explains what we collect and your rights.
We collect it only when you choose to send the callback form, and only to call you back.
We never sell it, never use it for targeted ads, and never use location tracking around health care facilities.
You can ask to see, delete or withdraw consent for your data. We answer within 45 days.

What this policy covers

This policy explains how Nationwide IOP Center [VERIFY: full legal entity name and type, e.g. LLC or Inc.] handles "consumer health data" as defined by the Washington My Health My Data Act and Nevada law (SB 370): personal information that is linked or reasonably linkable to you and identifies your past, present or future physical or mental health. It applies to information collected through this website and our phone line before you become a patient.

Information that becomes part of your patient record is protected under HIPAA instead, as explained in our Notice of Privacy Practices. Our general Privacy Policy covers everything else.

Our ads are not targeted to Washington or Nevada, but anyone can visit this site, so these protections apply to everyone.

Health data we collect

Only if you choose to send the callback form at the end of the First Light guide:

what has been hardest lately (for example worry, low mood, trauma, burnout, grief or a big life change), and who the care is for;
the type of care that fits you (in person, online or traveling to Glendale) and the times you could attend;
your insurance carrier and plan type;
the fact that you are looking for mental health care, linked to your first name and phone number.

While you use the guide, your answers stay in your browser's memory and are not sent anywhere. If you leave without sending the form, we never receive them. Our page counts never include answers.

Where it comes from

Directly from you, through the form or when you speak with our care coordinator. We do not buy health data or collect it from other sources.

Why we collect and use it

To call you back, as you asked, and to help you understand your care options.
To check your insurance benefits, if you ask us to.
To keep our systems secure and meet our legal duties.

We collect and share consumer health data only with your consent or as needed to provide the service you asked for. Sending the form, with its consent checkbox, is how you give that consent. We do not use it for any other purpose without asking you first.

Only with processors that act on our instructions under written contracts:

Google Cloud: receives and stores callback requests and sends them to our care team.
Google Workspace: our email, where our care team reads requests.

We do not share consumer health data with advertising platforms. When an ad click leads to a request, Google Ads receives only the ad's click ID, the word "Lead" and the time: no health data, name or number. We share data with others only when the law requires it.

No sale, no geofencing

We do not sell consumer health data.
We do not use it for targeted advertising or to build profiles.
We do not use geofences around health care facilities, and we do not collect your precise location.

Your rights

Access: confirm whether we hold your consumer health data, and get a copy, with a list of the third parties and processors we shared it with.
Delete: ask us to delete it. We will also tell our processors to delete it. Requests on our server are deleted automatically after 90 days anyway.
Withdraw consent: ask us to stop collecting or sharing it at any time.
No discrimination: we will not treat you differently for using these rights.

How to make a request

Call (747) 599-0059 or email [VERIFY: privacy contact email]. Tell us the first name and phone number you used, so we can find your request. We will confirm it is you before we act, using only the information we need. We will answer within 45 days. If we need more time (up to 45 more days), we will tell you why. Requests are free, up to twice a year.

How to appeal

If we turn down your request, you can appeal by replying to our decision or emailing [VERIFY: privacy contact email] with "Appeal" in the subject. We will answer your appeal in writing within 45 days and explain our reasons. If you are not satisfied, Washington residents can contact the Washington State Attorney General at atg.wa.gov/file-complaint, and Nevada residents can contact the Nevada Attorney General at ag.nv.gov.

Contact us

[VERIFY: Privacy Officer name or title]
Nationwide IOP Center [VERIFY: full legal entity name and type, e.g. LLC or Inc.]
1544 Canada Blvd, Glendale, CA 91208
Phone: (747) 599-0059
Email: [VERIFY: privacy contact email]