Consumer Health Data Notice

This Consumer Health Data Privacy Notice (the “Notice”) describes how Who2See, operated by Who2See LLC (“Who2See,” “we,” “us”), collects, uses, and shares consumer health data as that term is defined by Washington’s My Health My Data Act (RCW 19.373) and comparable state laws. It supplements our general Privacy Policy; where the two address consumer health data, this Notice controls.

What “consumer health data” means here. Consumer health data is personal information linked or reasonably linkable to you that identifies your past, present, or future physical or mental health status. On Who2See, this is primarily the information you enter to find care — such as a condition, injury, body area, specialty need, or the fact that you are seeking physical therapy care, together with related location and insurance inputs when they reveal that you are seeking care.

1. Categories of consumer health data we collect, and how we use it

• Condition / specialty / care-seeking inputs — what you enter in the Care Finder, matching quiz, or search (e.g., “pelvic health,” “post-surgical knee,” “seeking a PT near me”). Purpose: to run the directory and ranking and show you relevant clinics and providers you requested.
• Location and insurance inputs tied to a care need — ZIP, distance, and accepted-insurance filters, to the extent they reveal you are seeking care. Purpose: to match and filter results you requested.
• Content you choose to submit — if you voluntarily include health details in a message to a clinic/provider or in a review. Purpose: to deliver your message or display content as you direct (we ask you not to include others’ health details in public reviews).

We collect and use consumer health data only as reasonably necessary to provide the service you have requested. We do not use it for advertising, and we do not require you to disclose more than is necessary to get matched.

2. Categories of sources we collect it from

• Directly from you — what you type into the Care Finder, quiz, search, messages, or reviews.
• Automatically from your use — limited technical data generated as you interact with these features (e.g., which search you ran), used to operate and secure the Service.

We do not purchase consumer health data from data brokers, and we do not collect it through third-party advertising trackers or by geofencing any healthcare facility.

3. Categories of consumer health data we share

We may share the categories in §1 only as follows. We do not sell consumer health data, and we do not share it for cross-context behavioral or targeted advertising.

• The care-seeking and related inputs — shared with the clinic or provider you choose to contact, be matched with, or submit a request to, in order to fulfill that request.
• The same inputs — shared with our service providers (processors) that host and operate the Service for us, under contracts requiring them to protect the data and use it only on our behalf.
• Any sharing beyond what is necessary to provide the service you requested will occur only with your separate, affirmative opt-in consent.

4. Categories of third parties and affiliates we share it with

• Clinics and providers you select on the Service (recipients of a request you initiate).
• Infrastructure and operations processors — cloud hosting, database, and transactional email providers that run the Service.
• Legal and safety recipients — courts, regulators, or law enforcement where required by law or to protect rights and safety.
• A successor entity — in a merger, acquisition, or asset sale, subject to this Notice.

We do not share consumer health data with advertising networks, data brokers, or any party for its own marketing.

5. Your rights, and how to exercise them

With respect to your consumer health data, you have the right to:

• Confirm and access whether we collect, share, or sell your consumer health data, and access it;
• Withdraw consent to our collection or sharing of your consumer health data;
• Delete your consumer health data — on a valid request, we will delete it from our records and notify our processors and any third parties who received it to do the same; and
• See recipients — obtain a list of the specific third parties and affiliates with whom we have shared your consumer health data.

To make a request, email privacy@who2seept.com (or use the request form in Account Settings). We will authenticate your request and respond without unreasonable delay, and no later than 45 days after receipt; we may extend once by an additional 45 days where reasonably necessary, with notice. There is no charge for your first request in a 12-month period. To appeal a denial, reply to our response; if we deny your appeal, you may contact the Washington State Attorney General at www.atg.wa.gov/file-complaint. We will not discriminate against you for exercising these rights.

6. Security and retention

We restrict access to consumer health data to the personnel and systems that need it to operate the Service, protect it with reasonable administrative and technical safeguards, and retain it only as long as needed to provide the service you requested or as required by law, after which we delete or de-identify it.

7. Changes and contact

We will update this Notice if our practices change, and we will revise the version and effective date above. Contact us at privacy@who2seept.com or through the Help Center.