Consumer Health Data Privacy Policy

Effective Date: 10/05/2026

Purpose

This policy describes how Ashley Wilson Medical Aesthetics LLC collects, uses, shares, and protects consumer health data subject to the Washington My Health My Data Act (chapter 19.373 RCW). Health information governed by HIPAA or otherwise exempt from that Act is handled under the practice's applicable medical-record and privacy procedures.

Consumer Health Data We May Collect

Depending on how a consumer interacts with the practice, consumer health data may include information identifying or relating to requested or received aesthetic or health services; treatment or procedure interests; appointment or service-request information; information voluntarily provided through website forms, electronic communications, or other inquiries; and other information that may identify a consumer as seeking health care services.

Sources of Consumer Health Data

We may collect consumer health data directly from consumers, including through appointment requests, website forms, telephone calls, email, text or other communications, and interactions with the practice. We may also receive information through service providers used to support scheduling, communications, website operations, or other practice functions.

Purposes for Collection and Use

Consumer health data may be collected and used to respond to inquiries; schedule and manage appointments; provide services requested by the consumer; communicate regarding requested services; maintain appropriate practice and privacy records; protect the security and integrity of practice systems; and comply with applicable legal obligations.

Sharing of Consumer Health Data

We do not sell consumer health data. Consumer health data may be shared only as permitted by applicable law, with the consumer's consent when required, or to the extent necessary to provide a product or service requested by the consumer. Depending on the interaction, categories of recipients may include service providers that support scheduling, electronic records, communications, payment processing, website or technology functions, and professional or legal services where appropriate.

Third Parties and Affiliates

The practice may use third-party vendors or processors to support its operations. These may include electronic medical record and scheduling platforms, payment processors, website or communications providers, and other technology or professional service providers. The practice does not currently identify any separate affiliate with which it routinely shares consumer health data. Vendor relationships and this policy should be updated if practice systems or data-sharing practices materially change.

Consumer Rights

To the extent provided by Washington law, a consumer may request confirmation of whether the practice is collecting, sharing, or selling consumer health data; access to such data; information concerning third parties or affiliates with whom such data has been shared or sold; withdrawal of consent for future collection or sharing when consent is the basis for processing; or deletion of covered consumer health data. Requests may be submitted directly to Ashley Wilson Medical Aesthetics LLC using the practice's published contact information. The practice may take reasonable steps to authenticate a request before acting on it.

Security

The practice restricts access to consumer health data to persons and service providers for whom access is necessary and maintains reasonable administrative, technical, and physical safeguards appropriate to the nature of the information.

Changes to This Policy

The practice will review this policy at least annually and when its data practices materially change. Consumer health data will not be collected, used, or shared for additional categories or purposes requiring prior disclosure or consent without taking the steps required by applicable Washington law.