Effective: 10-19-2026
Last updated: October 19, 2026
COLE ALEXANDER DAOM, PLLC, doing business as Marysville Acupuncture Services
1. WHAT THIS POLICY COVERS
This policy explains how COLE ALEXANDER DAOM, PLLC (“we,” “us”) handles consumer health data, as that term is defined in the Washington My Health My Data Act, chapter 19.373 RCW.
It does not cover your medical record. Information about the care we provide to our patients is health care information under chapter 70.02 RCW. That information is excluded from the My Health My Data Act by RCW 19.373.100, and it is governed by our Notice of Privacy Practices instead.
In practice, this policy applies to people who contact us or use our website, whether or not they become patients.
2. THE CONSUMER HEALTH DATA WE COLLECT, AND WHY
| What we collect | Why we collect it |
|---|---|
| Your name, email address, and mobile number, when you submit a form on our website | To respond to your inquiry and to contact you about the appointment or information you asked for |
| The content of the message you write us, which may describe a symptom, an injury, a condition, or a treatment you are seeking | To understand what you are asking for and to answer it |
| Whether you have agreed to receive text messages from us | To know whether we may text you |
| Appointment request information you enter into our online scheduling tool, including the service requested and the times you choose | To schedule, confirm, change, or cancel an appointment |
| Technical information created automatically when you visit our website, including your IP address and the pages you view | To operate and secure the website |
We do not use any of this information for advertising, and we do not run advertising or analytics trackers on our website.
3. WHERE THIS INFORMATION COMES FROM
All of it comes from you, either because you entered it into a form or a scheduling tool on our website, or because your browser created it automatically when you visited. We do not buy consumer health data, and we do not obtain it from data brokers, advertising networks, or any other outside source.
4. WHAT WE SHARE, AND WITH WHOM
We share consumer health data only with service providers who operate parts of our practice on our behalf, and only as far as they need it to perform that service for us. Some of these providers may also use the information for their own purposes, such as keeping their services secure, preventing fraud, and improving their services, as their own privacy policies describe. We do not share consumer health data for advertising.
The consumer health data we share with them falls within the categories listed in section 2: your name, email address, and mobile number; the content of your messages; whether you have agreed to receive text messages; your appointment request information; and the technical information created when you visit our website.
| Category of third party | Provider |
|---|---|
| Website hosting | WPX Hosting |
| Online appointment scheduling | TimeTap, and the providers its booking pages load, which are listed in our Cookie Policy |
| Video hosting on our website | Wistia |
| Images displayed on our web pages | WordPress.org |
| Payment processing | Stripe |
| Secure email | Paubox |
| Phone calls, text messages, and voicemail | Verizon and Google |
| Email, document, and file storage | Google Workspace; Microsoft 365, including OneDrive and SharePoint |
| Practice and records system | Salesforce |
| Backup of our practice and records system, and of our OneDrive and SharePoint files | SysCloud |
We have no affiliates. COLE ALEXANDER DAOM, PLLC has no parent company, no subsidiaries, and no affiliated entities, so no consumer health data is shared with any.
5. WE DO NOT SELL CONSUMER HEALTH DATA
We have never sold consumer health data, and we do not sell it. If that ever changes, we will first obtain your signed authorization, separate from any consent you have given us to collect or share it, as RCW 19.373.070 requires.
6. YOUR RIGHTS, AND HOW TO USE THEM
Under RCW 19.373.040 you have the right to:
- confirm whether we are collecting, sharing, or selling your consumer health data, and access it;
- receive a list of every third party and affiliate with whom we have shared or to whom we have sold it, with a way to contact each of them;
- withdraw your consent to our collecting and sharing it;
- have it deleted, including from our archived and backup systems.
To exercise any of these rights, contact us at contact@marysvilleacupuncture.services, or at COLE ALEXANDER DAOM, PLLC, Marysville, Washington, (425) 419-7033.
We will respond without undue delay and in every case within 45 days of receiving your request. Where reasonably necessary, we may extend that once by a further 45 days, and we will tell you why before the first period ends. We may ask you to verify your identity before we act, and we will never require you to create an account in order to make a request.
If you ask us to delete your consumer health data, we will delete it from our records, including from archived and backup systems, and we will notify every service provider listed above so that they do the same. Where the data is held only on a backup, deletion may be delayed until that backup is restored on its normal cycle, for no more than six months from the date we verify your request.
One limit applies. If you are or have been our patient, your medical record is not consumer health data, and we cannot delete it on request. Washington law requires us to keep each patient record for six years after your last treatment.
7. IF WE SAY NO
If we decline to act on your request, we will tell you why in writing, and you may appeal. To appeal, write to the same address and say that you are appealing. Within 45 days of receiving your appeal, we will tell you in writing what action we have or have not taken and explain why.
If we deny your appeal, we will tell you how to submit a complaint to the Washington State Attorney General. You may also contact that office directly at any time.
8. CHANGES TO THIS POLICY
If we begin collecting a new category of consumer health data, or begin using it for a new purpose, we will update this policy and obtain your consent before doing either.