Refine, MD Northwest Consumer Health Data Privacy Policy

Washington My Health My Data Act

Last Updated: September 23, 2026

This Consumer Health Data Privacy Policy explains how Puget Sound Plastic Surgical Group, PLLC, doing business as Refine, MD Northwest (“Refine,” “we,” “us,” or “our”), collects, uses, and discloses consumer health data subject to the Washington My Health My Data Act, Chapter 19.373 RCW.

This policy applies only to consumer health data to the extent it is covered by the Act. The Act does not apply to protected health information governed by HIPAA, health care information collected, used, or disclosed in accordance with Chapter 70.02 RCW, and certain other information identified in RCW 19.373.100. Those records are handled under the laws that govern them. Website, advertising, analytics, or other data outside those exemptions may remain subject to the Act.

1. Categories of Consumer Health Data We Collect

Depending on how you interact with Refine, we may collect consumer health data such as:

• Information about medical, surgical, aesthetic, wellness, prescription, skincare, or other health-related services you request or express interest in receiving.
• Information identifying or reasonably linking you to an effort to seek health care services, including a plastic surgery consultation, aesthetic treatment, wellness service, or medical weight management service.
• Consultation, appointment, and scheduling information associated with a health-related service.
• Health concerns, symptoms, treatment history, medications, goals, body areas, photographs, or other health information you voluntarily provide through a covered website interaction.
• Communications regarding procedures, consultations, treatment options, recovery, or healthcare services.
• Transaction information associated with health-related services or products.
• Website activity or online information that identifies or reasonably links a person to an interest in obtaining a particular health-related service, when such information is collected outside an applicable health-data exemption.
• General or precise location information when collected and reasonably linked to an attempt to obtain health-related services.
• Health-related inferences created from information you provide or from permitted interactions with our website or services.

2. Purposes for Collecting and Using Consumer Health Data

We collect and use consumer health data for purposes including:

• Responding to consultation, procedure, treatment, and wellness inquiries.
• Scheduling and managing consultations and appointments.
• Providing products or services you request.
• Evaluating treatment or service interests and routing requests to appropriate personnel.
• Communicating with you regarding requested services.
• Maintaining records associated with your requests.
• Processing transactions connected with requested services.
• Protecting our website and systems and preventing fraud, abuse, or misuse.
• Complying with legal, licensing, professional, and regulatory obligations.
• Measuring website or marketing performance when permitted by law and consistent with your consent choices.

3. Categories of Sources

We may collect consumer health data from:

• You directly.
• Website forms and consultation request forms you submit.
• Appointment or scheduling systems you choose to use.
• Email, telephone, text message, and other communications with us.
• Transactions and service requests you initiate.
• Service providers processing information on our behalf.
• Your interactions with our website or online services when collection is permitted under applicable law.

4. Categories of Consumer Health Data We Share

Depending on the service you request and the systems used to fulfill that request, shared consumer health data may include:

• Contact information associated with a consultation or health-related request.
• Consultation or appointment information.
• Procedure, treatment, product, or service interests.
• Health information voluntarily submitted in connection with a requested service.
• Communications related to requested healthcare services.
• Transaction information associated with requested services.

5. Categories of Recipients and Specific Affiliates

Consumer health data may be processed or disclosed, as permitted by law, to the following categories of recipients when reasonably necessary for the purposes described above:

• Appointment scheduling, practice management, patient portal, and patient communication providers.
• Physicians, nurses, medical assistants, aesthetic professionals, and personnel involved in providing or coordinating requested services.
• Website hosting, information technology, cybersecurity, and data storage providers acting on our behalf.
• Email, telephone, and text communication providers acting on our behalf.
• Payment or financing providers involved in transactions you request.
• Professional advisers when disclosure is necessary for legal, accounting, insurance, compliance, accreditation, or similar services.
• Government agencies, courts, regulators, or other recipients when disclosure is required or permitted by law.
• Analytics or marketing providers only to the extent permitted by applicable law and the consent choices presented to you.

We do not sell consumer health data. We do not authorize consumer health data to be provided to third-party advertising networks for their independent targeted advertising purposes without the authorization or consent required by applicable law.

Specific affiliates: As of the Last Updated date, Refine does not identify a separately branded corporate affiliate with which it shares consumer health data for that affiliate’s independent purposes. If this changes, we will update this policy before newly covered collection, use, or sharing that requires prior disclosure or consent.

6. Your Washington Consumer Health Data Rights

Subject to applicable law, Washington consumers have the right to:

• Confirm whether we are collecting, sharing, or selling consumer health data concerning you.
• Access consumer health data concerning you.
• Receive a list of third parties and affiliates with whom consumer health data has been shared or sold, together with an active email address or other online contact mechanism when required by law.
• Withdraw consent for future collection or sharing when processing is based on consent.
• Request deletion of consumer health data concerning you.
• Appeal a refusal to take action on a consumer health data request.

7. How to Submit a Request

Submit a Washington consumer health data request by email, telephone, or mail using the contact information below. For email requests, use the subject line “Washington Consumer Health Data Request.” We may take commercially reasonable steps to authenticate a request before acting on it. You are not required to create a new account to exercise rights under the Washington My Health My Data Act.

8. Response Timing and Appeals

We respond to authenticated consumer health data requests without undue delay and within 45 days after receipt. Where reasonably necessary because of the complexity or number of requests, the response period may be extended once for up to 45 additional days. If an extension is needed, we will provide notice during the initial response period and explain the reason for the extension.

Information provided in response to a request is provided without charge up to twice annually per consumer, subject to the exceptions permitted by law for manifestly unfounded, excessive, or repetitive requests. Deletion from archived or backup systems may be delayed as permitted by Washington law.

If we decline to act on a request, you may appeal by emailing info@refinemdnw.com with the subject line “Appeal of Washington Consumer Health Data Request.” We will respond to an appeal within 45 days. If an appeal is denied, we will provide information about contacting the Washington State Attorney General to submit a complaint.

9. Consent and Changes in Collection or Use

When consent is required by Washington law, the consent request will identify the categories of consumer health data involved, the purpose of collection or sharing, the categories of entities involved, and how consent may be withdrawn. Consent for sharing, when required, will be separate and distinct from consent for collection.

If we intend to collect additional categories of consumer health data or use existing consumer health data for additional purposes not disclosed in this policy, we will make the required disclosure and obtain affirmative consent before beginning that activity when Washington law requires it.

10. Data Security and Access Controls

We restrict access to consumer health data to personnel, contractors, and processors whose access is reasonably necessary for the purpose for which the information was collected or to provide a product or service you requested. We maintain administrative, technical, and physical safeguards appropriate to the nature and volume of the consumer health data we handle.

11. Contact Information