Scope

This policy applies to consumer health data controlled by Matthew Brown ND, LLC, doing business as Ignite HRT, that is subject to the Washington My Health My Data Act. It supplements our general Privacy Policy. It does not apply to information that is exempt from the Act, such as health care information collected, used, or disclosed in accordance with Washington's health care information law. Our Health Information Privacy page describes how we handle the health information in patient records.

“Consumer health data” means personal information that identifies or can reasonably be linked to a consumer and identifies the consumer's past, present, or future physical or mental health status. Under Washington law, this can include information inferred from non-health information. The descriptions below apply only to the extent the information is consumer health data and is not exempt from the Act.

Consumer health data we may collect and why

Health-related interests and inferences: the treatment or service pages a visitor requests may indicate or permit an inference about an interest in hormone therapy, medical weight management, sexual health care, or another health service. We use this information to deliver the requested page and maintain website security and reliability.
Website and device information: an IP address, browser and device type, requested page, referring page, date and time, and diagnostic or security log data may be linked to a health-related page request. We use it to operate, secure, troubleshoot, and protect the website.
Contact and communication information: if you call, text, or email us, we receive your contact details and the content you choose to provide, which may reveal a health condition, symptom, service interest, or care request. We use it to respond, route your message, and provide a service you request.
Appointment-request form information:if you use the optional appointment-request form on this website, we receive the name, phone number, email address, the service you are interested in, location and scheduling preferences, and any optional message you choose to submit. The service selected and any message content may indicate an interest in hormone therapy, medical weight management, sexual health care, or another health service. Submissions are delivered to us by email through Resend, an email delivery provider acting as a processor; if that delivery path is unavailable, submissions are instead processed by Netlify, the website's hosting provider, and delivered to us by email. We use this information only to respond to your request, and we ask that you not include medical or other health details in the form.
Scheduling information: if you use the CharmHealth scheduler or patient portal linked or embedded on this website, CharmHealth receives the information you submit. Ignite HRT may receive contact details, appointment preferences, selected service information, and other information you provide to arrange care. We use it to process your request and manage scheduling. Information that becomes part of a patient record is generally handled as described on our Health Information Privacy page rather than under this policy.
General location information: an IP address may indicate an approximate location, and a map provider may receive device or network information when a page containing an embedded map loads. We use location-related information to display clinic locations and directions and to operate the site. Ignite HRT does not directly ask you to submit precise GPS location, genetic data, or biometric data through this public website; external mapping services may offer their own location features when you use them.

We also may use information described above to prevent fraud or misuse, protect our rights or the safety of others, and comply with applicable law. Under the current website configuration, we do not use consumer health data for targeted advertising.

Sources of consumer health data

We may collect consumer health data from:

you, when you communicate with us, submit the appointment-request form, or request a service;
your browser or device and the hosting and security systems that generate technical logs;
CharmHealth, when you use its scheduling or patient-portal services and information is made available to Ignite HRT;
telephone, SMS, and email providers used to deliver your communication; and
inferences from the website pages or health-related services with which you interact.

Categories disclosed and recipient categories

The categories of consumer health data that may be disclosed are health-related interests and inferences; website, device, requested-page, and security-log information; contact and communication information; scheduling information; and approximate location information. Under the current website practices, these categories are disclosed to processors acting under instructions, at the consumer's direction, when necessary to provide a product or service the consumer requested, or as permitted or required by law. If a disclosure is “sharing” under the Act, it occurs only with separate consent or to the extent necessary to provide a requested product or service, subject to applicable exceptions.

The Act excludes some processor and consumer-directed disclosures from its definition of “sharing.” For transparency, current website-related recipient categories and the data categories they may receive are:

Website hosting and security providers may process network, device, requested-page, and diagnostic or security-log information to deliver and protect the website.
Resend delivers appointment-request form submissions to us by email as a processor. When you submit the form, Resend may process the contact details, selected service information, scheduling preferences, and any message content you provide in order to deliver the submission to us.
Netlify hosts this website and serves as the backup processor for appointment-request form submissions. If the primary delivery path is unavailable, Netlify may process the contact details, selected service information, scheduling preferences, and any message content you provide in order to deliver the submission to us by email.
CharmHealth provides scheduling and patient-portal services and may process contact details, appointment preferences, selected service information, and any other information you submit through its service.
Google Maps provides the embedded location maps and directions shown on this site. When a page displays a map, Google may receive network and device information, and it may receive information you provide directly to its service.
Telephone, SMS, and email providers process contact details and message content to transmit communications you initiate or request.
Government authorities or professional advisers may receive the contact, communication, scheduling, log, or health-related information relevant to a legal request or reasonably necessary to establish, exercise, or defend legal rights.

Ignite HRT has no affiliate with which it shares consumer health data under the website practices described here. We do not sell consumer health data. We will not sell it without a separate valid authorization that satisfies RCW 19.373.070.

Your Washington rights

Subject to applicable exceptions, you may:

confirm whether we collect, share, or sell consumer health data about you and access that data, including a list of third parties and affiliates with whom it was shared or sold and an active email address or other online mechanism for contacting each recipient;
withdraw consent to future collection or sharing of your consumer health data;
request deletion of your consumer health data, including notice of the request to applicable processors and other recipients; and
appeal a refusal to act on your request.

We will not unlawfully discriminate against you for exercising a right. Withdrawing consent or deleting information may prevent us from completing a service you requested when that information is necessary to provide it.

How to submit a request

Email info@ignitehrt.comwith the subject “Consumer Health Data Request,” or call 503-925-6605. Please identify the right you wish to exercise and provide your name and a way to contact you. Do not include medical details or other sensitive information in ordinary email or SMS. We may ask for information reasonably necessary to authenticate your identity and will provide a more secure communication method when needed. Existing patients may also send a message through the patient portal, but you do not need to create an account to make a request.

We will respond without undue delay and within 45 days after receiving a request. When reasonably necessary, we may extend the response period once by another 45 days and will explain the extension during the initial period. Information provided in response to a request is free up to twice annually per consumer; the law allows a reasonable fee or refusal for requests that are manifestly unfounded, excessive, or repetitive. Deletion from an archived or backup system may be delayed until that system is restored, for no longer than six months after authentication.

Appeals

If we refuse to act on a request, you may appeal by using the same email address or phone number above and stating that you are appealing a consumer health data decision. We will respond to the appeal in writing within 45 days. If we deny the appeal, you may submit a complaint to the Washington State Attorney General.

Security and changes to this policy

We restrict access to consumer health data to people and service providers that need it for the purposes described and use administrative, technical, and physical safeguards appropriate to the nature of the information. No transmission or storage system can be guaranteed completely secure.

We may update this policy when our practices or legal obligations change. Before collecting, using, or sharing an additional category of consumer health data, or using data for an additional purpose not disclosed here, we will update the disclosure and obtain affirmative consent when Washington law requires it.

Contact

Matthew Brown ND, LLC, dba Ignite HRT
1300 NE Linden Ave, Suite 5
Gresham, OR 97030
503-925-6605 · info@ignitehrt.com

Consumer Health Data Privacy Policy