Consumer Health Data Privacy Notice

Scope & Purpose of This Notice

The Washington My Health My Data Act (MHMDA) and Nevada SB 370 regulate personal information about a consumer’s health that falls outside the scope of HIPAA. These laws were designed to close the gap between what HIPAA covers (health data held by covered entities) and what it does not cover (health-related data collected through websites, marketing platforms, and digital interactions).

HealthcareLive operates as both a health technology platform and a multi-specialty health service provider. Some data we hold is PHI governed by HIPAA. Other data — including information submitted through our public website, web forms, and interactions with our marketing technologies — is consumer health data subject to this notice.

This notice contains only what the Washington MHMDA requires. It does not address data practices covered by our general Privacy Policy or HIPAA Notice.

What Consumer Health Data We Collect & Why

Categories of consumer health data we may collect:

• Health-related information you voluntarily submit through web forms, demo requests, or contact inquiries — for example, information about an occupational health need, injury concern, or wellness interest
• Information about health conditions, symptoms, or treatment interests inferred from the pages you visit on our website (for example, visiting pages about injury care, drug screens, or specific specialty care services)
• Inferences reasonably linkable to your physical or mental health status derived from your use of the Services, including from device identifiers, IP address, and browsing behavior on health-related pages
• Location data, if shared with us, that could indicate a visit to or proximity to a health care facility

Why we collect it: to provide and improve the Services, to respond to your requests for information or care, to connect you with appropriate clinical resources, and to operate and administer the HealthcareLive platform. We do not use consumer health data for advertising or marketing purposes without your separate opt-in consent.

How We Share Consumer Health Data

We share consumer health data only in the following circumstances:

• Service providers under contract that process consumer health data on our behalf to support the delivery of the Services, under agreements that prohibit them from using the data for their own purposes or disclosing it further
• Corporate affiliates within our group, including OrthoLive Medical Group, Prof Corp d/b/a HealthcareLive Medical Group, Prof Corp, subject to this notice
• Healthcare providers, laboratories, and related entities directly involved in treating you or coordinating your episode of care — for example, a specialist receiving a referral or an imaging center fulfilling a diagnostic order — through a formal service contract, a clinical referral arrangement, a treatment relationship, or at your direction
• Advertising or analytics partners — only with your separate, express opt-in consent. We do not currently share consumer health data with advertising partners. If this changes, we will update this notice and obtain your consent before sharing.
• Legal and regulatory recipients — where required by applicable law, court order, or regulatory process, in which case we will notify you to the extent permitted by law

We do not share consumer health data with your employer except as permitted by the Universal Terms of Service, your written consent or patient release, a legal obligation, or applicable law. The existence of a workers’ compensation claim does not, by itself, authorize disclosure of consumer health data to your employer.

Sale of Consumer Health Data

Under the Washington MHMDA, “sell” means exchanging consumer health data for monetary or other valuable consideration. We do not engage in this practice.

Consent & Withdrawal

Where required by the Washington MHMDA or Nevada SB 370, we obtain your opt-in consent before collecting consumer health data, and a separate opt-in consent before sharing consumer health data with any party other than those described in Section 2 (service providers, affiliates, and care-related entities).

What consent means: Consent is a freely given, specific, informed, and unambiguous affirmative act. Your mere use of the Services does not constitute consent to the collection or sharing of consumer health data. We will present a clear consent request at the point of collection where required.

Withdrawing consent: You may withdraw any consent you have given at any time by contacting us using the methods in Section 7. Withdrawal of consent will be honored promptly. It does not affect the lawfulness of processing that occurred before you withdrew consent, and it does not affect processing based on an independent legal basis (such as a legal obligation or treatment relationship).

Geofencing

Your Rights

Washington State residents and Nevada residents have the following rights with respect to their consumer health data, subject to verification and applicable exceptions:

How to Exercise Your Rights

To submit any request under this notice — including to confirm, access, delete, or withdraw consent for your consumer health data, or to obtain a list of third parties — please contact us using the information below.

Response timeline: We will acknowledge receipt promptly and respond within 45 days. If we need additional time, we may extend by an additional 45 days and will notify you of the reason and the new expected response date.

Verification: To protect your information, we may need to verify your identity before processing a request. We may ask for your name, contact details, and information about your prior interactions with us. We will not require you to create an account solely to submit a request.

Authorized agents: You may designate an authorized agent to submit a request on your behalf. We may require written proof of the agent’s authority and verification of your identity before processing.

Appeals: If we decline your request in whole or in part, you may appeal by replying to our response email or by emailing privacy@healthcarelive.com with the subject line “Health Data Rights Appeal.” We will respond within the time required by applicable law and, where applicable, will provide information on how to contact the Washington Attorney General or Nevada Attorney General.

Contact Us

Questions about this notice or our consumer health data practices may be directed to:

This notice was last revised July 1, 2026. We may update it from time to time. Material changes will be communicated as required by the Washington My Health My Data Act and Nevada SB 370. The current version will always be available at this URL. This notice applies only to consumer health data as defined by the MHMDA and Nevada SB 370; all other data practices are described in our general Privacy Policy.