Washington Consumer Health Data Privacy Policy

Effective Date: July 5, 2026

BeFitRx PLLC (“BeFitRx,” “we,” “us,” or “our”) issues this Consumer Health Data Privacy Policy to comply with the Washington My Health My Data Act (MHMDA). This Policy applies strictly to "Consumer Health Data" collected from individuals within the State of Washington or individuals whose data is processed in Washington, to the extent such data is collected outside the scope of information covered by the Health Insurance Portability and Accountability Act (HIPAA). For information regarding how we handle information protected under HIPAA, please refer to our HIPAA Notice of Privacy Practices.

1. Consumer Health Data We Collect

We collect only the minimum necessary categories of data required to evaluate your initial interest in our direct-pay clinical exercise medicine services, manage inquiries, and facilitate onboarding. This may include:

  • Information Inputted into Webforms: Name, contact information, and initial self-reported health interests, goals, or symptoms submitted via our contact, inquiry, or appointment request forms before a formal patient-provider relationship is established.

  • Inferred Health Data: Data derived from your interactions with our website, such as indicating an interest in clinical exercise services for metabolic health, cancer survivorship recovery, cardiovascular fitness, or bone health.

2. Purpose of Collection and Processing

We collect and process Consumer Health Data for the following necessary business purposes:

  • Providing and Communicating Services: To respond to your inquiries, schedule appointments, and provide information about our clinical programs.

  • Onboarding & Digital Intake Access: To securely direct you to our HIPAA-compliant onboarding platforms and EHR systems if you choose to become a patient.

  • Operations and Security: To secure, maintain, and optimize our website performance, troubleshoot technical issues, and detect fraudulent or malicious activity.

3. Categories of Sources from Which Data is Collected

We collect Consumer Health Data directly from you when you interact with our website, fill out digital forms, text or email our practice inquiries, or interact with our digital marketing channels.

4. Sharing and Disclosure of Consumer Health Data

BeFitRx does not sell, lease, or commercially trade your Consumer Health Data. We do not share your Consumer Health Data with third-party advertisers. We disclose Consumer Health Data only with your explicit consent or as strictly necessary to complete a transaction or provide a service you have requested. We may share data with:

  • Processors / Service Providers: Trusted vendor entities acting on our behalf (such as secure website hosting providers, form processors, and communication vendors) who are legally and contractually obligated to process your data only according to our strict instructions and privacy requirements.

  • Legal Authorities: When required by law, to respond to valid legal processes, or to protect the safety, rights, or property of BeFitRx, our staff, or the public.

5. Your Consumer Rights Under MHMDA

If you are a Washington resident, or if your data is processed within Washington state, you possess specific rights regarding your Consumer Health Data under the My Health My Data Act:

  • Right to Confirm and Access: You have the right to confirm whether we are collecting or processing your Consumer Health Data and to access a copy of that data.

  • Right to Delete: You have the right to request that we permanently delete your Consumer Health Data from our systems and direct our service providers to do the same.

  • Right to Withdraw Consent: If we process any data based on your consent, you have the right to withdraw that consent at any time.

6. How to Exercise Your Rights

To exercise your right to access or delete your data under the Washington My Health My Data Act, please submit a clear written request to our Privacy Team at: contact@befitrx.health.

We will verify your identity before fulfilling your request as required by law. We will respond to valid, verified requests within forty-five (45) days. If your request is denied, you have the right to appeal our decision by contacting us at the same email address. If your appeal is denied, you may raise a complaint with the Washington State Attorney General.

7. Updates to This Policy

We may update this Consumer Health Data Privacy Policy from time to time to reflect modifications in our digital practices or legal obligations. We will notify you of material changes by updating the effective date at the top of this page.