Thrive Health DPC (“Thrive Health DPC,” “Thrive,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal information and consumer health data.

This Washington Consumer Health Data Privacy Policy explains how Thrive Health DPC may collect, use, share, and protect consumer health data as defined by Washington's My Health My Data Act, Chapter 19.373 RCW.

This Policy applies to consumer health data collected through our website, thrivehealthdpc.com, online forms, appointment requests, electronic communications, and other interactions with Thrive Health DPC that are subject to the Washington My Health My Data Act.

This Policy is separate from our general Website Privacy Policy and our HIPAA Notice of Privacy Practices.

Certain information protected by HIPAA or Washington healthcare privacy laws is exempt from the My Health My Data Act and may instead be governed by those laws.



1. WHAT IS CONSUMER HEALTH DATA?

Consumer health data generally means personal information that is linked or reasonably linkable to a consumer and identifies the consumer's past, present, or future physical or mental health status.



Depending on the circumstances, consumer health data may include:

• Health conditions
• Symptoms
• Diagnoses
• Medical treatment
• Medications
• Medical procedures
• Reproductive or sexual health
• Vital signs
• Bodily functions
• Weight or weight-related information
• Health measurements
• Biometric information
• Genetic information
• Information identifying an individual seeking healthcare services
• Information indicating an individual's attempt to obtain healthcare services
• Other information that may reveal an individual's physical or mental health status

2. CATEGORIES OF CONSUMER HEALTH DATA WE MAY COLLECT

Depending on how you interact with Thrive Health DPC, we may collect:

Health and Wellness Information

• Health concerns
• Symptoms
• Health goals
• Lifestyle information
• Exercise information
• Nutrition information
• Weight and body-composition information
• Blood pressure
• Other health measurements

Medical Information

• Medical history
• Diagnoses
• Medications
• Supplements
• Allergies
• Laboratory information
• Treatment history
• Procedures

Reproductive and Sexual Health Information

Depending on the services requested:

• Reproductive health
• Sexual health
• Hormonal health
• Fertility
• Contraception
• Sexually transmitted infections
• PrEP-related services
• Hormone therapy
• Other reproductive or sexual health services

Medication Information

• Prescription medications
• Over-the-counter medications
• Supplements
• Medications you report taking
• Medications requested or prescribed through Thrive Health DPC

Appointment and Service Information

This may include information indicating that you are seeking or have requested:

• Primary care
• Lifestyle medicine
• Weight management
• IV infusion services
• Hormone-related services
• PrEP services
• Other healthcare services offered by Thrive Health DPC

Communications

Health-related information contained in:



• Website forms
• Appointment requests
• Emails
• Telephone calls
• Text messages
• Patient portal communications
• Other electronic communications

3. SOURCES OF CONSUMER HEALTH DATA

We may collect consumer health data from:

Directly From You

Information you voluntarily provide through:



• Website forms
• Appointment requests
• Membership enrollment
• Patient registration
• Health questionnaires
• Telephone calls
• Emails
• Text messages
• Patient portal communications
• In-person visits
• Telehealth visits

Healthcare Providers and Other Healthcare Sources

When appropriate and authorized, we may receive information from:

• Healthcare providers
• Laboratories
• Pharmacies
• Specialists
• Imaging providers
• Hospitals
• Other healthcare organizations

Service Providers

We may receive information through vendors and service providers that support our website, healthcare operations, scheduling, communications, payment processing, or electronic health record systems.

5. WHEN WE MAY COLLECT CONSUMER HEALTH DATA

When applicable under Washington law, Thrive Health DPC may collect consumer health data when:

1. You provide consent for the specified collection purpose; or
2. Collection is necessary to provide a product or service that you requested.



Information protected by HIPAA or other healthcare privacy laws may instead be governed by those laws.

6. CATEGORIES OF CONSUMER HEALTH DATA WE MAY SHARE

Depending on the service requested, Thrive Health DPC may share consumer health data with:

• Healthcare providers involved in your care
• Laboratories
• Pharmacies
• Specialists
• Imaging providers
• Hospitals
• Electronic health record providers
• Patient communication providers
• Telehealth providers
• Appointment scheduling providers
• Payment processors
• Information technology providers
• Website technology providers
• Communication providers
• Other service providers necessary to provide a requested product or service



We share only information reasonably necessary for the applicable purpose and as permitted by law.

7. CURRENT THIRD-PARTY PLATFORMS

Hint Health All-in-One

Thrive Health DPC uses Hint Health All-in-One for certain practice-management and healthcare functions, which may include:

• Membership management
• Billing
• Scheduling
• Patient communication
• Clinical documentation
• Electronic health records
• Related practice operations

Information processed through Hint may include personal information and, where applicable, protected health information.



Google Business Profile and Google Reviews

Thrive Health DPC uses Google Business Profile and Google Reviews for public information about our practice and voluntary public reviews.

Google reviews are public.

Please do not include medical information or other sensitive health information in a public review.

Thrive Health DPC will not disclose PHI in response to a public review.

Facebook/Meta

Thrive Health DPC maintains a Facebook business presence for public education, communication, and information about our practice.

Please do not submit medical information or other sensitive health information through public Facebook comments or Facebook Messenger.

Established patients should use Thrive Health DPC's secure patient communication system for healthcare-related communications.

8. SALE OF CONSUMER HEALTH DATA

Thrive Health DPC does not sell consumer health data.

We do not sell consumer health data to data brokers, advertisers, marketers, or other third parties in exchange for monetary or other valuable consideration.

9. TARGETED ADVERTISING

Thrive Health DPC does not use consumer health data for targeted advertising.



Thrive Health DPC does not use consumer health data to create targeted advertising audiences or sell consumer health data for advertising purposes.

10. GEOLOCATION AND HEALTHCARE LOCATION INFORMATION

Thrive Health DPC does not use geofencing technology around our healthcare location for the purpose of collecting or processing consumer health data.



We do not sell precise location information that identifies or could reasonably indicate that an individual is seeking healthcare services from Thrive Health DPC.

11. CONSUMER HEALTH DATA SECURITY

Thrive Health DPC maintains administrative, technical, and physical safeguards designed to protect consumer health data.

We restrict access to consumer health data to individuals and service providers who need access for authorized purposes.



No electronic system or method of transmitting information over the internet can be guaranteed to be completely secure.

13. HOW TO EXERCISE YOUR RIGHTS

To submit a request concerning your consumer health data, contact:

Thrive Health DPC
501 S 336th St, Suite 100
Federal Way, WA 98003

Phone: (253) 235-5314
Email: hello@thrivehealthdpc.com

We may need to verify your identity before completing a request.



We will process requests in accordance with applicable Washington law.

14. WITHDRAWING CONSENT

If Thrive Health DPC collected or shared consumer health data based on your consent, you may withdraw that consent for future collection or sharing where permitted by law.

Withdrawal of consent does not affect:



• Processing that occurred before consent was withdrawn
• Information that we are otherwise permitted or required by law to collect or retain
• Information necessary to provide a service you have requested when processing is otherwise permitted by law

15. DELETION REQUESTS

You may request deletion of consumer health data concerning you, subject to exceptions provided by applicable law.

If you are also a patient of Thrive Health DPC, deletion of medical records may be subject to federal and Washington healthcare-record requirements.



A request to delete consumer health data does not necessarily require Thrive Health DPC to delete a medical record that we are legally required to maintain.

16. PROTECTED HEALTH INFORMATION AND HIPAA

If information is protected health information under HIPAA, the HIPAA Privacy Rule and Thrive Health DPC's Notice of Privacy Practices may apply instead of this Policy.



Nothing in this Policy is intended to reduce or replace protections provided by HIPAA, Washington healthcare privacy laws, or other applicable privacy laws.

17. THIRD-PARTY WEBSITES

Our website may contain links to third-party websites, applications, scheduling systems, social media platforms, or other resources.

Thrive Health DPC does not control the privacy practices of third-party websites.



Information submitted directly to third-party platforms is subject to those companies' applicable privacy policies and terms.

18. CHANGES TO THIS POLICY

We may update this Consumer Health Data Privacy Policy when our practices, services, technology, or legal requirements change.

If we intend to collect, use, or share additional categories of consumer health data or for additional purposes not previously disclosed, we will provide additional notice and obtain consent when required by Washington law.



The effective date at the top of this Policy will be updated whenever the Policy is materially revised.

19. CONTACT US

Thrive Health DPC
501 S 336th St, Suite 100
Federal Way, WA 98003

Phone: (253) 235-5314
Email: hello@thrivehealthdpc.com
Website: thrivehealthdpc.com

Effective Date: October 2, 2026
Last Updated: October 2, 2026