Consumer Health Data Privacy Policy
For residents of Washington, Nevada, Connecticut, and any other US state whose law treats health information separately.
This policy explains how we handle consumer health data. It sits alongside our Website Privacy Notice and our Notice of Privacy Practices, and it is deliberately a separate page so that you can find it without reading anything else.
The short version
We are a concierge medical practice, not an advertising business. We collect very little health information through this website, we collect it only because you chose to tell us, we do not sell it, we do not share it with advertisers, and we run no advertising or tracking technology on this site.
What counts as consumer health data here
Information that identifies your past, present or future physical or mental health status. In practice, through this website, that means whatever you choose to write to us about your health when you get in touch: a condition you mention, a symptom, a treatment you are on, or the reason you are considering membership.
If you are already a patient of our US medical practice, the clinical information we hold about you is protected health information under HIPAA and is governed by that practice's Notice of Privacy Practices, not by this policy.
What we collect, and where it comes from
From you, and only from you. Consumer health data reaches us because you typed it into an inquiry form, wrote it in an email, or told us on a call and we noted it. We do not buy health information, we do not obtain it from data brokers, and we do not infer it from your behaviour on this website.
We ask you not to send medical details through the website, because our forms and email are ordinary business channels rather than a medical record. People understandably do anyway, and this policy covers what happens when they do.
Not from tracking. We do not use advertising pixels, retargeting tags, or any technology that infers something about your health from the pages you read. Nothing about which pages you visit is passed to an advertising platform.
Why we use it
For one purpose: to answer you, and to route your inquiry to the right person on our team so that the answer is a useful one.
If you go on to become a member, what you told us becomes part of your clinical record and is governed from that point by the Notice of Privacy Practices of the practice treating you. If you do not, we delete it along with the rest of the inquiry.
How long we keep it
If your inquiry does not lead to membership, we delete it, and anything you told us with it, within 12 months. If it does, your information moves into your clinical record and is kept under the retention rules described in the applicable notice.
Your rights
You have the right to:
- Know whether we hold consumer health data about you, and to see it, along with a list of anyone we have shared it with.
- Delete it. Tell us and we will delete it from our records, and tell our service providers to do the same. Where the law requires us to keep something, we will tell you what and why.
- Withdraw consent to our collection or sharing of it, at any time.
To exercise any of these, email us at jeff@curia.health or write to Curia Health LLP, Units 3-4, 42 Orchard Road, London N6 5TR. We may need to check who you are before we act. We will respond within 45 days, and we will tell you if we need a further 45, which is rare.
If we turn a request down we will tell you why, and you can appeal by replying to that decision. We will review it and answer you in writing. If you remain unhappy, you can complain to your state attorney general.
Asking us to do any of this costs nothing, and we will not treat you differently, refuse you service, or change what we charge you because you asked.
Changes
If we change how we handle consumer health data, we will update this policy before the change takes effect. We will not collect, use or share consumer health data in any way this policy does not describe.