CONSUMER HEALTH DATA PRIVACY POLICY
This policy is provided under Washington’s My Health My Data Act, chapter 19.373 RCW. It applies only to “consumer health data” as that law defines it.
WHAT THIS POLICY DOES AND DOES NOT COVER
This policy covers information we collect through our website, our online forms, and our marketing activities from people who are not yet our patients.
This policy does not cover your patient records. Once you become a patient of Proof Medical Spa LLC, the information we create and keep about your care is “health care information” governed by Washington’s Uniform Health Care Information Act, chapter 70.02 RCW, and is exempt from the My Health My Data Act. How we handle that information is described in our Notice of Privacy Practices at proofmedspa.com/privacy-practices.
1. CATEGORIES OF CONSUMER HEALTH DATA WE COLLECT, AND WHY
Information you give us:
- Your name, email address, and phone number when you submit a contact or consultation request form
- The treatment or service you tell us you are interested in
- Any information you choose to include in a free-text message to us
- Your email address if you subscribe to our newsletter or promotional list
- Information you enter when booking an appointment through our website, including the service you select, your contact information, and your appointment time
We use this information to respond to your inquiry, to schedule your appointment, to answer questions about our services, and, if you have opted in, to send you marketing messages.
Information collected automatically when you visit proofmedspa.com:
- Pages you viewed, including pages describing specific treatments, and the date and time
- Approximate location derived from your IP address, at the city or region level
- Device and browser type, and the site or search that referred you
- Actions you take on our site, such as clicking a link, starting a booking, or submitting a form
Because some of our pages describe specific treatments, the fact that you visited one of them can suggest an interest in a health-related service. We treat that as consumer health data.
We use this information to keep the website working, to understand which pages people find useful, to measure whether our advertising is effective, and to show our advertising to people who have visited our site.
Advertising and analytics technologies. We use cookies, pixels, tags, and similar technologies from advertising and analytics providers, including Meta and Google. These technologies record the pages you visit on our site, including treatment pages, and the actions you take, and report that activity back to those providers. Those providers may use that information to measure our advertising, to show you our ads on their platforms and elsewhere, and for their own purposes as described in their own privacy policies.
We may also use features offered by these providers that transmit a scrambled, non-readable version of information you have given us, such as your email address or phone number, so those providers can more accurately match your activity to our advertising. These features are commonly called advanced matching or enhanced conversions. We do not send your name, email address, or phone number to these providers in readable form.
We do not collect precise location data. We do not use a geofence around any health care facility.
How to limit this. You can limit or block these technologies through your browser settings, through your device’s advertising controls, and through the ad preference settings offered by Meta and Google. You may also contact us using the information in Section 5 to withdraw consent or request deletion.
2. WHERE THE DATA COMES FROM
- Directly from you, through forms you submit, messages you send us, or appointments you book
- Automatically from your device and browser when you visit our website
- From our website hosting, analytics, and advertising providers
We do not buy consumer health data, and we do not obtain it from data brokers.
3. WHAT WE SHARE, AND WITH WHOM
We share consumer health data with the following categories of third parties:
- Website hosting and infrastructure providers
- Web analytics providers
- Advertising platforms and advertising service providers, including Meta and Google
- Email and communications providers
- Scheduling and practice management software providers
Service providers acting on our behalf are bound by contract to use the data only to provide services to us and to protect it. Advertising platforms may also use data they receive for their own purposes under their own privacy policies.
Specific affiliates: Proof Medical Spa LLC has one affiliate, The Better Face Place LLC, which owns the building we occupy. We do not share consumer health data with it.
We may also disclose consumer health data if required by law, in response to lawful legal process, or to protect against fraud, security incidents, or illegal activity.
4. WE DO NOT SELL YOUR CONSUMER HEALTH DATA
We do not sell consumer health data in exchange for money, and we will not sell it without first obtaining your signed valid authorization as required by chapter 19.373 RCW.
5. YOUR RIGHTS
You have the right to:
- Confirm whether we collect, share, or sell your consumer health data, and to access that data
- Receive a list of all third parties and affiliates with whom we have shared or sold your consumer health data, including a way to contact each of them
- Withdraw your consent to our collection and sharing of your consumer health data
- Have your consumer health data deleted, including from our backup and archived systems, and to have us direct our service providers to delete it
To make a request, contact us:
Email: privacy@proofmedspa.com
Mail: Privacy Officer, Proof Medical Spa LLC, 9725 N Division St, Spokane, WA 99218
Phone: 509-357-2357
We will verify your identity before acting on a request. We will respond within 45 days. If we need more time we will tell you within that period, explain why, and take no more than an additional 45 days. There is no charge for up to two requests in any 12-month period.
If we deny your request, you may appeal by replying to our decision or writing to the address above. We will respond to your appeal in writing within 45 days and explain our reasoning. If we deny your appeal, we will give you a link and instructions to submit a complaint to the Washington State Attorney General at atg.wa.gov/file-complaint.
6. HOW WE PROTECT CONSUMER HEALTH DATA
We limit access to consumer health data to the people at Proof who need it to do their jobs. We maintain administrative, technical, and physical safeguards designed to meet a reasonable standard of care for the volume and nature of the data we hold.
7. CHANGES TO THIS POLICY
If we change how we collect, use, or share consumer health data, we will update this policy before making the change. The current version and its effective date are always posted here.
Effective August 2026
