Privacy Policy

Last modified: 10/1/2025

This Privacy Policy ("Policy") describes the practices of Jayne DuBois ND PLLC ("Company" or "We") for collecting and using Washington residents' consumer health data. Consumer health data is any data that is linked or reasonably linkable to a specific individual and that identifies that individual's past, present, or future physical or mental health status that Company collects or controls the collection of. This Policy is consistent with both the Washington My Health My Data Act (“MHMDA”) and Health Insurance Portability and Accountability Act of 1996 (“HIPAA") privacy and security regulations.

This Policy applies to the sites, products, applications, platforms, or other services linking to this Policy and through which consumer health data is collected. This Policy does not apply to any sites, products, applications, platforms, or other services not directly linking to this Policy.

Please read this Policy carefully to understand our policies and practices regarding your consumer health data and how we will treat it. If you do not agree with our policies and practices, you should not use the sites, products, applications, platforms, or other services linking to this Policy.

Other privacy policies may apply to your personal information that is more specific to the receipt of naturopathic treatment, personal information that is not consumer health data, and if you are not a Washington resident. You can view our privacy notice describing how we treat other personal information in your patient intake paperwork.

General

At Jayne DuBois ND PLLC, protecting your privacy and healthcare information is fundamental in the course of our relationship. We respect your need for privacy and protect any Personally Identifiable Information, Protected Health Information, and other consumer health data that you may share with us, in an appropriate manner. Personally Identifiable Information is personal data that generally includes information that can be used to distinguish or trace an individual’s identity including names, physical and email addresses, date or place of birth, phone numbers, social security number, social media accounts, biometric information, employment information, and protected-class information relating to things like race and gender. Protected Health Information is data that is (1) specifically related to health and (2) maintained or transmitted by entities covered under HIPAA regulations. More specifically, it includes information related to the past, present, or future physical or mental health or condition of an individual; the provision of health care to an individual; or the past, present, or future payment for the provision of said health care services. Consumer health data is defined in the first paragraph of this Policy.

Consumer Health Data We May Collect About You

We collect and use different types of consumer health data from and about you, including information about any of the following:

individual health conditions, treatment, diseases, or diagnoses;
diagnostic testing, treatment, or medication;
social, psychological, behavioral, or medical interventions;
health-related surgeries and procedures;
use or purchase of prescribed medication;
bodily functions, vital signs, symptoms, or measurements of physical or mental health status; and
reproductive or sexual health information.

In addition to the abovementioned categories of data, we may collect and use information from and about you regarding any of the following:

Reproductive or sexual health information, which is personal information related to seeking or obtaining past, present, or future reproductive or sexual health services, including:
individual health conditions, status, diseases, or diagnoses;
social, psychological, behavioral, and medical interventions;
health-related surgeries or procedures, including abortions;
use or purchase of medication, including abortion medications;
bodily functions, vital signs, symptoms, or measurements of the information described in this subsection;
diagnoses or diagnostic testing, treatment, or medication; and
medical or nonmedical services related to and provided in conjunction with an abortion, such as associated diagnostics, counseling, supplies, and follow-up services.
Biometric data, meaning data that is generated from the measurement or technological processing of an individual's physiological, biological, or behavioral characteristics and that identifies a consumer, whether individually or in combination with other data. Biometric data includes, but is not limited to:
imagery of the iris, retina, fingerprint, face, hand, palm, vein patterns, and voice recordings, from which an identifier template can be extracted; and
keystroke patterns or rhythms and gait patterns or rhythms that contain identifying information.
Genetic data, meaning any data, regardless of its format, that concerns a consumer's genetic characteristics. Genetic data includes, but is not limited to:
raw sequence data that results from the sequencing of a consumer's complete extracted deoxyribonucleic acid (DNA) or a portion of the extracted DNA;
genotypic and phenotypic information that results from analyzing the raw sequence data; and
self-reported health data that a consumer submits to a regulated entity or a small business and that is analyzed in connection with consumer's raw sequence data.
Other data identifying a consumer seeking health care services. Health care services means any service provided to a person to assess, measure, improve, or learn about a person's mental or physical health, including but not limited to:
prescription, provision, purchase, or use of certain nutritional, herbal, and homeopathic substances and botanical or herbal medicines;
reproductive health care services; and
other naturopathic medicine and mental health services such as dietary advice and therapeutic nutrition, bioidentical hormone replacement therapy, craniosacral therapy, hypnotherapy, and lifestyle counseling.
Precise location information that reasonably indicates a consumer's attempt to receive or acquire health services or supplies.
Any identifying information and inferences of the above data categories derived, extrapolated, or inferred from non-health information or non-prescription data.

Consumer Health Data Sources

We collect consumer health data from the following sources:

You, including when you request certain health-related products and services, sign up for email lists or programs, and use our secure online patient portal and electronic medical records system.
Your device when you visit or interact with our sites, applications, or services, including through cookies, web beacons, and similar technologies that automatically send us information when you browse, use, visit, or otherwise interact with our sites, applications, or services.
Authorized/legal representatives, family members, and caregivers.
Health care providers.
Health insurance companies and other payors.
Payment processors and other financial institutions.
Our business and marketing partners, who provide us with information about consumers who are viewing our content across other websites or applications, purchasing our products, or interacting with our promotions, benefits, or programs.

Consumer Health Data Uses and Disclosures

We use the abovementioned categories of consumer health data for the following purposes:

Fulfilling the purposes for which you provided the data or that were described when it was collected, including:
appointment reminders, treatment alternatives, and notification of other health related benefits and services.
Performing the services or providing the goods that you request from us, such as health treatment and relevant medications and interventions, and responding to your questions or requests for information.
Billing for services you have received from the Company.
Notifying you about changes to our sites, applications, products, or services.
Facilitating services and operations performance, security, and integrity, including:
running our practice, improving your care, and contacting you when necessary
undertaking activities to prevent, detect, and investigate security incidents that compromise the availability, authenticity, integrity, or confidentiality of stored or transmitted consumer health data or that otherwise threaten to compromise the performance, security, or integrity of our business; and
performance analytics, identity verification and authorization, site and application optimization, and quality control.
Recordkeeping and auditing.
Complying with our legal obligations and risk management, audit, investigations and reporting, and other legal and compliance reasons.
Administering customer accounts and preferences.
Measuring or understanding the effectiveness of non-personalized advertising and delivering non-personalized advertising served as part of your current interaction with the Company.
Our internal research and product or service design and development.

We do not sell your consumer health data. We may disclose any of the consumer health data categories listed above to processors, service providers, and contractors that help us provide products and services to you. We may also disclose your consumer health data to other third parties, including other healthcare providers or facilities, law enforcement and certain government agencies, medical examiners or funeral directors, in response to lawsuits and legal actions, and to address workers’ compensation claims.

We instruct these processors, service providers, contractors, and third parties to only use consumer health data as permitted by our contracts with them and consistent with applicable law.

We may also disclose consumer health data as permitted, or otherwise required, by applicable law, including:

With your consent.
To treat you.
To bill and secure payment for your treatment services.
To do research.
To prevent, detect, protect from, or respond to security incidents, identity theft, fraud, harassment, or malicious or deceptive activities.
To a third party acquiring our assets if Company sells its business or otherwise is part of a merger, acquisition, bankruptcy, or other transaction involving a third party taking control of our assets or business.
To investigate, report, or take legal action to protect our rights, property, and safety and the rights, property, and safety of others.
To protect your or others' vital interests, including health and safety for the prevention of disease; product recalls; reporting adverse reactions to medications; reporting suspected abuse, neglect or domestic violence; preventing or reducing a serious threat to anyone’s health or safety.

Your personal information will not be shared with other entities without your explicit consent.

Your Privacy Rights

You have specific rights with respect to your consumer health data. You have the right to:

Request confirmation that we collect, share, or sell your consumer health data.
Request that we limit what health information we use or share.
Request access to your consumer health data that we have collected or control, including:
a list of all third parties and affiliates that we have shared your consumer health data to; and
the email addresses or other online method to contact those third parties and affiliates.
Request confidential communications, including specific requests that we contact you in a specific way or to send mail to a different address.
Obtain electronic or paper copies of your medical record.
Request that we correct your medical record.
Withdraw your consent for our collection and sharing of your consumer health data.
Request that we delete your consumer health data.
Request a copy of this Privacy Policy.
Choose someone to act for you in relation to your consumer health data and the rights and choices regarding your health information.
File a complaint if you feel your rights have been violated.

If you are concerned that we have violated your privacy rights, disagree with a decision we made about access to your records, obtain a copy of this Policy, or to otherwise exercise any of your rights set out above under Washington and federal consumer health privacy law, please contact us at (206) 705-9508 or the physical address listed below.

Our Responsibilities

We are required by law to maintain the privacy and security of your protected health information.
We will let you know promptly if a breach occurs that may have compromised the privacy or security of your information.
We must follow the duties and privacy practices described in this Policy and give you a copy of it, on request.
We will not use or share your information other than as described here unless you tell us we can in writing. If you tell us we can, you may change your mind at any time. Let us know in writing if you change your mind.

Changes to the Terms of this Policy

We can change the terms of this Policy, and the changes will apply to all information we have about you. The new Policy will be available upon request, in our office, and on our website.

Contact Information

To make an inquiry or comment about this Policy or our privacy practices, contact our clinic at: 5470 Shilshole Ave NW, Suite 405, Seattle, WA 98107; by sending us an email at admin@drjaynedubois.com; or via phone at (206) 705-9508.