Last Updated: 2025-12-01
This Consumer Health Data Notice (“Notice”) explains how [ LEGAL BUSINESS NAME ] (“we,” “us,” “our”) collects, uses, discloses, and processes Consumer Health Data in connection with our website, online services, marketing activities, and communications.
This Notice supplements (and does not replace) our Privacy Policy, Cookie Policy (Tracking Technologies Notice), and HIPAA Notice of Privacy Practices (linked in the Site footer).
1) Scope and Purpose
Some state privacy laws regulate “consumer health data” collected through websites and online services, particularly where the data is connected to an individual’s health status, health conditions, or interest in health-related services.
This Notice is intended to provide clear, state-agnostic transparency about:
- what Consumer Health Data we may collect,
- why we collect it,
- with whom we may share it, and
- how you may exercise applicable privacy rights.
2) What Is “Consumer Health Data” Under This Notice
For purposes of this Notice, “Consumer Health Data” includes personal information that identifies or is reasonably linkable to you and that relates to your:
- past, present, or future physical or mental health condition,
- health-related symptoms, diagnoses, or treatment interests,
- health services you seek or consider,
- communications about health-related services,
- information that could reasonably indicate health status or health-related interests.
Consumer Health Data may include data you provide directly, as well as data collected through cookies and similar tracking technologies when you interact with health-related pages or content.
3) Categories of Consumer Health Data We May Collect
Depending on how you use our website or services, we may collect the following categories of Consumer Health Data:
A) Information you provide directly
- Information you submit through forms, scheduling, chat, email, or SMS (for example: symptoms, areas of concern, goals, service interests, and appointment requests)
- Intake-style information you provide prior to a consultation (if applicable)
- Communications content you send to us relating to health services
B) Website and device data that may indicate health-related interest
- Pages you visit (including condition- or treatment-related pages)
- Interaction data (clicks, time on page, form starts/submissions)
- Device identifiers and online identifiers (IP address, cookie IDs, mobile ad IDs where applicable)
- General location data derived from IP address (approximate location)
C) Appointment and service interest data
- Scheduling activity and appointment request details
- Service selections, package interest, and related communications
4) Sources of Consumer Health Data
We may collect Consumer Health Data from:
- you directly (webforms, scheduling tools, chat, email, phone, SMS),
- your device/browser when you visit our website (cookies and similar technologies),
- service providers who support analytics, call tracking, marketing attribution, and scheduling (acting on our behalf),
- referral or affiliate partners (e.g., attribution data), where applicable.
5) How We Use Consumer Health Data
We may use Consumer Health Data for purposes including:
- responding to inquiries and providing requested information,
- scheduling, confirming, and managing appointments,
- customer service and communications,
- operating, maintaining, securing, and improving our website and services,
- marketing and advertising (where permitted and consistent with your choices),
- measuring marketing performance and attribution (including call tracking),
- compliance, fraud prevention, security, and legal obligations.
6) How We Disclose Consumer Health Data
We may disclose Consumer Health Data to the following categories of recipients, as necessary for the purposes above:
A) Service providers and vendors
Vendors who provide services such as:
- website hosting and IT support,
- scheduling and communications tools,
- analytics and performance measurement,
- call tracking,
- marketing and advertising technology services,
- security, fraud prevention, and compliance tools.
B) Referral / affiliate / marketing partners (limited)
If you arrive via a referral or partner link, we may share limited information for attribution and program administration (for example, whether a lead occurred). We do not intend to disclose sensitive health details to such partners.
C) Legal and compliance disclosures
We may disclose information as required by law or as necessary to protect rights, safety, and security, including responding to lawful requests.
7) “Sale” of Consumer Health Data
We do not intend to sell Consumer Health Data in the ordinary sense of exchanging it for money. However, some privacy laws define “sale” broadly to include certain disclosures for valuable consideration (including some advertising-related arrangements). Where required by law, we will provide applicable rights and choices regarding such disclosures.
8) Consent and Your Choices
Depending on your jurisdiction and applicable law, certain uses or disclosures of Consumer Health Data may require your consent. You may have the right to withdraw consent for certain processing where consent is the basis for processing.
You can also limit tracking and targeted advertising by adjusting cookie preferences and device settings, as described in our Cookie Policy (Tracking Technologies Notice).
9) Your Consumer Health Data Rights
Depending on where you live, you may have rights regarding Consumer Health Data, which may include:
- Right to Access: request confirmation of whether we process Consumer Health Data and access to that data
- Right to Delete: request deletion of Consumer Health Data (subject to exceptions under law)
- Right to Withdraw Consent: withdraw consent for certain processing where consent is required
- Right to Opt Out: opt out of certain processing, including certain targeted advertising or profiling, where applicable
- Right to Appeal: appeal our decision if we deny your request (where required by law)
We will respond to verifiable requests consistent with applicable law. We may request information to verify your identity and protect your data.
10) HIPAA Clarification
This Notice applies to Consumer Health Data collected through our website and related online services and marketing channels.
If you are a patient and we create or receive Protected Health Information (PHI) in connection with healthcare services in a covered-entity context, PHI is handled in accordance with our HIPAA Notice of Privacy Practices (linked in the Site footer).
11) Data Security and Retention
We implement reasonable administrative, technical, and organizational measures designed to protect information. No method of transmission or storage is completely secure.
We retain Consumer Health Data for as long as reasonably necessary for the purposes described in this Notice, unless a longer retention period is required or permitted by law.
12) Changes to This Notice
We may update this Notice from time to time. Updates are effective when posted with a revised “Last Updated” date.
13) Contact
Requests or questions about this Consumer Health Data Notice may be directed to:
Name : [ LEGAL BUSINESS NAME ]
Address : [ PRIMARY BUSINESS ADDRESS ]
Email : [ PUBLIC FACING EMAIL ]