Consumer Health Data Privacy Policy

This policy explains how DocBright Telehealth Inc. (“DocBright”, “we”, “us”) handles consumer health data on our website. It is written to meet the Washington My Health My Data Act (RCW 19.373), the Nevada consumer health data law (NRS Chapter 603A, as amended by SB 370), and similar state laws. It works alongside our Privacy Policy.

Medical information you give your DocBright clinician as part of a visit is protected health information under HIPAA. That information is covered by our Notice of Privacy Practices, not this policy.

What consumer health data we collect

“Consumer health data” means personal information that is linked or reasonably linkable to you and identifies your past, present, or future physical or mental health. On our website, this can include:

• Browsing information that may suggest a health interest, such as which condition, treatment, or blog pages you view (for example, a page about hair loss or acne).
• Online identifiers linked to that browsing, such as cookie IDs, device and browser information, IP address, and general location (city or state).
• Information about which ad or link brought you to our site.
• Anything you choose to include in a message to us through our contact form or by email.

Why we collect it

• To run and secure the website.
• To understand how people use the site so we can improve it.
• To measure whether our advertising works, such as counting how many people who clicked an ad later started a visit.
• To respond to you when you contact us.

We do not use website browsing to build advertising audiences about health conditions, and we do not use ad personalization or remarketing based on health topics.

Where we get it

• Directly from you, when you contact us.
• Automatically from your browser or device, through cookies, pixels, and similar tools when you use our website.
• From advertising platforms, which tell us when a visit came from one of our ads.

Who we share it with

We share consumer health data only with the following categories of companies, and only for the purposes above:

• Analytics providers (Google Analytics), to help us understand site use.
• Advertising platforms (Google Ads, TikTok, and Reddit), to measure the results of our ads.
• Service providers that host and operate our website and tools, such as Vercel (hosting), Google Tag Manager (tag management), and CookieYes (consent management).
• Government agencies or others when the law requires it.

We do not sell consumer health data. Clinicians who provide care through DocBright practice under their own medical licenses and receive patient information only to provide that care.

Some of these companies may collect information about your online activity over time and across different websites, including ours.

Your consent

If you are in Washington or Nevada, we ask for your consent before we collect consumer health data through analytics or advertising cookies, and we ask separately before we share it with advertising platforms. You can say no and still use the site. You can withdraw your consent at any time from Your Privacy Choices.

Everywhere, you can opt out of advertising cookies on Your Privacy Choices, and we treat a Global Privacy Control signal from your browser as an opt out.

Your rights

Depending on where you live, you have the right to:

• Confirm whether we collect, share, or sell your consumer health data, and get a copy of it.
• Get a list of the third parties and affiliates we have shared it with, and how to reach them.
• Withdraw your consent to collection or sharing.
• Have us delete your consumer health data. We will also tell the companies we shared it with to delete it.

To use any of these rights, email legal@docbright.com with the subject line “Consumer health data request”. We may need to verify your identity before acting on a request. We will respond within 45 days. If we need more time, we may extend that by another 45 days and will let you know why. Requests are free up to twice a year.

Because most website data is tied only to a cookie or device rather than your name, clearing your cookies and using Your Privacy Choices is often the fastest way to stop collection on a given browser.

Appeals

If we deny your request, you can appeal by replying to our decision or emailing legal@docbright.com with the subject line “Appeal”. We will respond in writing within 45 days and explain our decision. If your appeal is denied, you can contact the Washington State Attorney General at atg.wa.gov/file-complaint or the Nevada Attorney General at ag.nv.gov.

Changes to this policy

If we make a material change to how we collect, use, or share consumer health data, we will update this page and change the “Last updated” date. If a change means using your data in a new way, we will ask for your consent first where the law requires it.

Contact us

Email legal@docbright.com or write to us at: