Legal — Health Data Privacy
Consumer Health Data Privacy Notice
This standalone notice governs consumer health data collected by OrthoLive, Inc., d/b/a HealthcareLive, Inc. and OrthoLive Medical Group, Prof Corp d/b/a HealthcareLive Medical Group, Prof Corp that is not regulated by HIPAA.
Effective Date: July 1, 2026
Applies to: Washington & Nevada Residents
Questions: privacy@healthcarelive.com
Washington My Health My Data Act · Nevada SB 370 — This notice is required by Washington State law and satisfies the standalone consumer health data notice requirement. Nevada residents may also rely on this notice.
Contents
Washington MHMDA
This notice contains only the disclosures required by the Washington My Health My Data Act. It does not constitute our general Privacy Policy, which is available at www.healthcarelive.com/privacy-policy/
Opt Out or Request Access
Email privacy@healthcarelive.com with subject line
“Health Data Rights Request”
Who this notice covers. This notice applies to Washington State residents and Nevada residents, and addresses personal information that identifies or is reasonably linkable to your past, present, or future physical or mental health status — where that information is not regulated as Protected Health Information (PHI) under HIPAA. Examples include health-related information collected through our public website, web forms, cookies, and marketing technologies, and inferences we may derive about your health from your use of the Services.
This notice supplements, and does not replace, our general Privacy Policy and our HIPAA Notice of Privacy Practices. Where a conflict exists between this notice and our HIPAA Notice regarding PHI, the HIPAA Notice controls.
Overview
Scope & Purpose of This Notice
The Washington My Health My Data Act (MHMDA) and Nevada SB 370 regulate personal information about a consumer’s health that falls outside the scope of HIPAA. These laws were designed to close the gap between what HIPAA covers (health data held by covered entities) and what it does not cover (health-related data collected through websites, marketing platforms, and digital interactions).
HealthcareLive operates as both a health technology platform and a multi-specialty health service provider. Some data we hold is PHI governed by HIPAA. Other data — including information submitted through our public website, web forms, and interactions with our marketing technologies — is consumer health data subject to this notice.
This notice contains only what the Washington MHMDA requires. It does not address data practices covered by our general Privacy Policy or HIPAA Notice.
Section 1
What Consumer Health Data We Collect & Why
Categories of consumer health data we may collect:
- Health-related information you voluntarily submit through web forms, demo requests, or contact inquiries — for example, information about an occupational health need, injury concern, or wellness interest
- Information about health conditions, symptoms, or treatment interests inferred from the pages you visit on our website (for example, visiting pages about injury care, drug screens, or specific specialty care services)
- Inferences reasonably linkable to your physical or mental health status derived from your use of the Services, including from device identifiers, IP address, and browsing behavior on health-related pages
- Location data, if shared with us, that could indicate a visit to or proximity to a health care facility
Why we collect it: to provide and improve the Services, to respond to your requests for information or care, to connect you with appropriate clinical resources, and to operate and administer the HealthcareLive platform. We do not use consumer health data for advertising or marketing purposes without your separate opt-in consent.
Data Minimization
We collect only consumer health data that is reasonably necessary and proportionate to the purpose for which it is collected. If we intend to use consumer health data for a materially new purpose, we will provide notice and obtain your opt-in consent before doing so.
Section 2
How We Share Consumer Health Data
We share consumer health data only in the following circumstances:
- Service providers under contract that process consumer health data on our behalf to support the delivery of the Services, under agreements that prohibit them from using the data for their own purposes or disclosing it further
- Corporate affiliates within our group, including OrthoLive Medical Group, Prof Corp d/b/a HealthcareLive Medical Group, Prof Corp, subject to this notice
- Healthcare providers, laboratories, and related entities directly involved in treating you or coordinating your episode of care — for example, a specialist receiving a referral or an imaging center fulfilling a diagnostic order — through a formal service contract, a clinical referral arrangement, a treatment relationship, or at your direction
- Advertising or analytics partners — only with your separate, express opt-in consent. We do not currently share consumer health data with advertising partners. If this changes, we will update this notice and obtain your consent before sharing.
- Legal and regulatory recipients — where required by applicable law, court order, or regulatory process, in which case we will notify you to the extent permitted by law
We do not share consumer health data with your employer except as permitted by the Universal Terms of Service, your written consent or patient release, a legal obligation, or applicable law. The existence of a workers’ compensation claim does not, by itself, authorize disclosure of consumer health data to your employer.
Section 3
Sale of Consumer Health Data
We Do Not Sell Consumer Health Data
HealthcareLive does not sell consumer health data. Any future sale of consumer health data would require a separate, specific, signed written authorization from you. This notice does not constitute that authorization, and your general use of the Services does not constitute consent to the sale of your consumer health data.
Under the Washington MHMDA, “sell” means exchanging consumer health data for monetary or other valuable consideration. We do not engage in this practice.
Section 4
Consent & Withdrawal
Where required by the Washington MHMDA or Nevada SB 370, we obtain your opt-in consent before collecting consumer health data, and a separate opt-in consent before sharing consumer health data with any party other than those described in Section 2 (service providers, affiliates, and care-related entities).
What consent means: Consent is a freely given, specific, informed, and unambiguous affirmative act. Your mere use of the Services does not constitute consent to the collection or sharing of consumer health data. We will present a clear consent request at the point of collection where required.
Withdrawing consent: You may withdraw any consent you have given at any time by contacting us using the methods in Section 7. Withdrawal of consent will be honored promptly. It does not affect the lawfulness of processing that occurred before you withdrew consent, and it does not affect processing based on an independent legal basis (such as a legal obligation or treatment relationship).
Section 5
Geofencing
No Geofencing Around Health Care Facilities
HealthcareLive does not establish a geofence around any facility that provides in-person health care services — including any clinic, hospital, urgent care center, pharmacy, or similar location — for the purpose of identifying or tracking consumers, collecting consumer health data, or sending health-related notifications, alerts, or advertisements to individuals based on their proximity to such a facility. This commitment applies nationwide.
Section 6
Your Rights
Washington State residents and Nevada residents have the following rights with respect to their consumer health data, subject to verification and applicable exceptions:
Right to Confirm & Access
Confirm whether we collect, share, or sell your consumer health data, and access the specific data we hold about you.
Right to Withdraw Consent
Withdraw consent to collection or sharing of consumer health data at any time, prospectively.
Right to Delete
Request deletion of consumer health data we hold about you, subject to exceptions for legal obligations, active treatment relationships, and similar purposes.
Right to a List of Third Parties
Obtain a list of the third parties to whom we have disclosed your consumer health data.
Right to Non-Discrimination
Exercise any of these rights without being denied services, charged different prices, or receiving a different level of service.
Right to Appeal
Appeal our decision if we decline a rights request. See Section 7 for the appeal process.
Washington Private Right of Action
The Washington My Health My Data Act includes a private right of action. Washington residents may bring a civil action for violations of their rights under this notice. We take these rights seriously and are committed to responding to all requests promptly and in good faith.
Section 7
How to Exercise Your Rights
To submit any request under this notice — including to confirm, access, delete, or withdraw consent for your consumer health data, or to obtain a list of third parties — please contact us using the information below.
Submit a Health Data Rights Request
Email privacy@healthcarelive.com with the subject line
“Health Data Rights Request”
and include your name, email address, state of residence, and a description of the right you wish to exercise.
Response timeline: We will acknowledge receipt promptly and respond within 45 days. If we need additional time, we may extend by an additional 45 days and will notify you of the reason and the new expected response date.
Verification: To protect your information, we may need to verify your identity before processing a request. We may ask for your name, contact details, and information about your prior interactions with us. We will not require you to create an account solely to submit a request.
Authorized agents: You may designate an authorized agent to submit a request on your behalf. We may require written proof of the agent’s authority and verification of your identity before processing.
Appeals: If we decline your request in whole or in part, you may appeal by replying to our response email or by emailing privacy@healthcarelive.com with the subject line “Health Data Rights Appeal.” We will respond within the time required by applicable law and, where applicable, will provide information on how to contact the Washington Attorney General or Nevada Attorney General.
Section 8
Contact Us
Questions about this notice or our consumer health data practices may be directed to:
| privacy@healthcarelive.com | |
| Legal / Data Requests | legal@healthcarelive.com |
| Address | OrthoLive, Inc., d/b/a HealthcareLive, Inc. 1311 Vine Street, Cincinnati, OH 45202 |
| Phone | 833-573-6683 |
| General Privacy Policy | www.healthcarelive.com/privacy-policy/ |
| HIPAA Notice | www.healthcarelive.com/terms-of-use/ |
