Consumer Health Data Privacy Policy
Updated and Effective as of September 9, 2026
1. About this policy
This Consumer Health Data Privacy Policy explains how Aarista LLC, operating the primary care clinics known as Altea Medical (“we,” “us,” “our”), handles consumer health data collected through alteamedical.com (the “Site”). We publish it to meet the requirements of the Washington My Health My Data Act, RCW 19.373 (“MHMDA”).
This policy sits alongside our Privacy Policy, which covers all information collected through the Site. Where the two describe the same practice, this policy governs consumer health data specifically.
This policy does not cover protected health information. Care is not delivered on this Site. When you schedule an appointment or complete a new patient form, you leave alteamedical.com and enter our patient portal, operated by AdvancedMD as our business associate. Information you provide there is protected health information governed by HIPAA and by our Notice of Privacy Practices, and it is exempt from the MHMDA.
2. What consumer health data means
The MHMDA defines consumer health data as personal information linked or reasonably linkable to a consumer that identifies that consumer’s past, present, or future physical or mental health status. That definition is broad. It includes information suggesting that someone is seeking or has sought health care services, even when no condition, symptom, or diagnosis is named.
We take a deliberately cautious view. We treat information as consumer health data whenever it could reasonably suggest that you are looking for care, whether or not we believe the law strictly requires it.
3. What we collect, and why
We do not ask you to tell us about your health through this Site, and you should not. We collect three categories of consumer health data.
Pages you view that relate to care. When you visit pages about our services, our clinic locations, or a specific health topic on our blog, our analytics records the page address, the date and time, the page that referred you, and your browser and device type. Your IP address is anonymized by Google Analytics before it is stored. We use this to understand which pages people find useful and where they leave.
Actions that suggest you are becoming a patient. With your consent, we record when you select a link to our online scheduling system, select a link to our new patient form, or select one of our clinic telephone numbers. For each we record the page you were on and which clinic the action related to. We do not record who you are, and we do not record anything you type. We use this to understand which pages help people reach us.
Anything you choose to tell us. If you email or telephone us and mention a symptom, condition, or reason for seeking care, we collect what you have said. We ask you not to do this, and we use anything you do share only to route and answer your enquiry.
We do not use any of this to build a profile of you, to target advertising to you, or to make decisions about you.
4. Where we collect it from
We collect consumer health data from two sources only:
- Directly from your browser or device, through cookies and analytics tags that operate on the Site after you consent
- Directly from you, when you contact us by email or telephone
We do not buy consumer health data, receive it from data brokers, obtain it from other websites, or combine it with information from any outside source.
5. What we share, and with whom
Categories of third parties. We share consumer health data with one category of third party: our website analytics provider, which processes it on our behalf under contract and may not use it for its own purposes.
The specific recipient. That provider is Google LLC, which operates Google Analytics 4 and Google Tag Manager for us. You can contact Google about your data at https://support.google.com/policies. We do not enable Google signals, we do not use Google Analytics for advertising or remarketing, and we do not permit Google to use this data to build advertising audiences.
Our affiliates. Our affiliates are Aarista LLC and Altea Healthcare. We do not share consumer health data collected through this Site with them.
Meta. We advertise on Facebook and Instagram, and the Meta Pixel runs on three pages of this Site only: the home page, the About page, and the Insights blog index. It does not run on any page about our services, our clinics, our contact details, a specific health topic, or the patient portal. We do not share consumer health data with Meta Platforms, Inc.
Google Ads. We advertise on Google Search. We do not install Google Ads conversion tracking on this Site, we do not use remarketing, and we do not upload any list of patients or visitors to Google or to any other platform.
6. What we do not do
- We do not sell consumer health data. The MHMDA permits a sale only under a signed valid authorization, and we do not seek one.
- We do not share consumer health data for advertising, audience building, or targeting.
- We do not use geofences. We do not create a virtual boundary around any health care facility, our own or anyone else’s, to identify, track, or send messages to people near it.
- We do not use session recording, heatmaps, or any technology that captures what you type or view.
- We do not collect consumer health data from anyone we know to be under sixteen for advertising purposes, and our advertising is directed only to adults aged eighteen and over.
7. Your rights
Under RCW 19.373.040, if you are a Washington resident, or if your consumer health data was collected in Washington, you have the right to:
- Confirm and access. Ask whether we are collecting, sharing, or selling your consumer health data, and obtain a copy of it, together with a list of every third party and affiliate we have shared it with and a way to contact each of them.
- Withdraw consent. Withdraw your consent to our collection of your consumer health data, to our sharing of it, or to both.
- Delete. Ask us to delete your consumer health data. We will delete it from our records and from all parts of our systems, including archived and backup systems, and we will tell every processor, contractor, affiliate, and third party that received it to do the same. Where data sits on a backup system, deletion may be delayed until that system is next restored, and in no case longer than six months.
Exercising any of these rights costs nothing, and we will not deny you service, change what you pay, or reduce the quality of your care because you exercised them.
8. How to exercise your rights
Email info@alteahealthcare.com with the subject line Washington Health Data Request. Tell us which right you wish to exercise and give us enough information to find your records. We verify identity by matching what you give us against records we already hold, and we do not ask for more information than that requires. An authorized agent may make a request for you with written authorization we can verify.
We respond without undue delay and within forty five days. Where reasonably necessary we may extend that once by a further forty five days, and we will tell you within the first forty five days if we do.
If we decline your request, we will tell you why, and you may appeal by replying to our decision with the subject line Washington Health Data Appeal. We will respond to an appeal within forty five days. If we deny your appeal, you may complain to the Washington State Attorney General at https://www.atg.wa.gov/file-complaint.
The MHMDA gives Washington consumers a private right of action under the Consumer Protection Act. Nothing in this policy limits that right.
9. Consent, and how to withdraw it
We collect no consumer health data through cookies or analytics until you give consent through the banner shown on your first visit. Nothing is pre-ticked and declining is as easy as accepting.
Our banner asks separately about statistics and about marketing. Accepting statistics permits our own collection and its processing by our analytics provider. Accepting marketing permits the advertising technologies described in Section 5, which do not receive consumer health data.
You may change or withdraw either choice at any time using the cookie preferences control in the lower left corner of every page. If your browser sends a Global Privacy Control signal, we honor it automatically as a withdrawal of consent, and you do not need to do anything else.
10. How long we keep it
We keep consumer health data only as long as needed for the purpose described in Section 3, and we delete it on request as described in Section 7. Analytics data is subject to the retention period configured in Google Analytics, after which Google deletes it automatically.
11. Changes to this policy
We will not collect, use, or share any category of consumer health data beyond what this policy describes without first updating this policy and obtaining your consent. When we make a material change we will revise the date at the top of this page.
12. Contact us
If you have questions about this Policy or our privacy practices, or wish to exercise any right described in this Policy, please contact:
Aarista LLC (Altea Medical)
Attn: Privacy
Email: info@alteahealthcare.com
For questions concerning Protected Health Information or to request a copy of our HIPAA Notice of Privacy Practices, please contact our Privacy Officer at the address above or ask at any clinic location.
