Privacy Policy

Last Updated: 2/16/2026

1. Introduction

Elevate Medical Center (“Elevate,” “we,” “us,” or “our”) is committed to protecting the privacy and security of your personal information and health information.

This Privacy Policy explains how we collect, use, disclose, and safeguard:

• Personal information
• Protected Health Information (PHI) under HIPAA
• Consumer health data under Washington’s My Health My Data Act (RCW 19.373)

This policy applies to information collected through:

• Our website (https://www.elevatemedcenter.com/)
• Our medical services
• Communications with our office

By using our website or services, you acknowledge that you have read and understand this Privacy Policy.

Our services are intended for individuals 18 years of age or older. We do not knowingly collect information from minors.

2. Categories of Information We Collect

2.1 Personal Information You Provide

We may collect:

• Name
• Date of birth
• Email address
• Phone number
• Mailing and billing address
• Insurance information (if applicable)
• Payment information (processed via secure third-party processors; full card numbers are not stored on our servers)

2.2 Health and Medical Information

As a healthcare provider, we collect medical information necessary to provide care, including:

• Medical history
• Current medications
• Allergies
• Treatment preferences
• Diagnostic information
• Photographs taken with your written consent
• Treatment notes and records

This information may constitute Protected Health Information (PHI) under HIPAA.

2.3 Consumer Health Data (Washington Law)

Under Washington’s My Health My Data Act (RCW 19.373), “consumer health data” includes personal information that is linked or reasonably linkable to a consumer and identifies past, present, or future physical or mental health status.

We may collect consumer health data when you:

• Submit appointment or consultation forms
• Inquire about medical services
• Provide health-related information via our website

We collect such data only as reasonably necessary to provide healthcare services or respond to your requests.

2.4 Automatically Collected Website Information

When you visit our website, we may collect:

• IP address
• Browser type
• Device type
• Pages visited
• Date and time of access
• Referral source

We may use analytics tools (such as Google Analytics) to understand website performance. Analytics data is aggregated and not used to identify individuals.

2.5 Location Data

We do not collect precise location data (such as GPS data).
We do not use geofencing technology.
We do not sell, share, or otherwise disclose precise location data to third parties.

Standard IP address information may be collected automatically for website functionality and security purposes only.

3. How We Use Your Information

We use collected information for the following purposes:

3.1 Treatment, Payment, and Healthcare Operations (HIPAA)

We use Protected Health Information for:

• Providing medical care
• Coordinating treatment
• Processing payments
• Insurance billing
• Healthcare operations (quality improvement, compliance)

These uses are permitted under HIPAA (45 C.F.R. § 164.506).

3.2 Communication

We collect personal information including phone numbers when voluntarily submitted through our website forms. This information may be used to send emails and SMS messages regarding promotions, updates, and appointment reminders. Email and mobile information will not be shared with third parties for marketing purposes.

3.3 Consumer Health Data (Washington MHMDA)

Under RCW 19.373, we may collect and process consumer health data only:

• With your consent when required
• When necessary to provide requested healthcare services
• As required by law

We do not sell consumer health data.

We do not share consumer health data with third parties for advertising purposes.

3.4 Website Functionality

We use technical data to:

• Maintain website security
• Improve website functionality
• Analyze usage trends

3.5 Legal Compliance

We may use or disclose information to:

• Comply with federal or state law
• Respond to lawful subpoenas or court orders
• Protect patient safety
• Prevent fraud or misuse

4. How We Share Information

We do not sell personal information or consumer health data.

We may share information only as follows:

4.1 Service Providers

We may share information with contracted vendors who assist in:

• Payment processing
• Electronic Health Record (EHR) systems
• Secure cloud storage
• Appointment scheduling systems
• IT support

These vendors are required to comply with HIPAA (where applicable) and maintain confidentiality agreements.

4.2 As Required by Law

We may disclose information if required by:

• HIPAA
• RCW 70.02 (Uniform Health Care Information Act)
• Court orders or legal process

4.3 With Your Authorization

We will obtain your written authorization before:

• Using photographs for marketing
• Sharing identifiable testimonials
• Disclosing PHI for non-treatment purposes

5. HIPAA Notice of Privacy Practices

Elevate Medical Center maintains a separate Notice of Privacy Practices (NPP) in compliance with 45 C.F.R. § 164.520.

The NPP explains in detail:

• Permitted uses and disclosures of PHI
• Your rights under HIPAA
• Our legal duties

If there is any conflict between this Privacy Policy and our HIPAA Notice of Privacy Practices, the NPP controls with respect to Protected Health Information.

You may request a copy of our Notice of Privacy Practices at any time.

6. Your Privacy Rights

6.1 Rights Under HIPAA

You have the right to:

• Access and obtain copies of your medical records
• Request corrections (amendments)
• Request restrictions on certain disclosures
• Receive an accounting of certain disclosures
• Request confidential communications

Requests are processed in accordance with federal and Washington law (RCW 70.02).

6.2 Rights Under Washington’s My Health My Data Act (RCW 19.373)

If applicable, you have the right to:

• Confirm whether we are collecting consumer health data
• Access your consumer health data
• Request deletion of consumer health data
• Withdraw consent for collection or sharing

We will respond to verified requests within the timeframe required by Washington law.

Certain medical records may be retained as required by state or federal law even if deletion is requested.

6.3 Marketing Opt-Out

You may opt out of promotional emails by:

• Clicking “unsubscribe” in email communications
• Contacting our office directly

Transactional or care-related communications will still be sent as necessary.

7. Cookies and Tracking

Our website may use essential cookies and analytics cookies.

We do not use:

• Geofencing
• Location tracking technologies
• Targeted health advertising cookies

You may control cookies through your browser settings.

8. Data Retention

We retain:

• Medical records in accordance with RCW 70.02 and applicable federal requirements
• Financial records in accordance with tax and accounting laws
• Opt-out records to ensure compliance

When data is no longer required, it is securely deleted or anonymized.

9. Data Security

We implement reasonable administrative, technical, and physical safeguards consistent with:

• HIPAA Security Rule (45 C.F.R. Part 164 Subpart C)
• Washington data security requirements

Security measures include:

• Encrypted data transmission (SSL/TLS)
• Role-based access controls
• Secure data storage systems
• Periodic security reviews

No method of electronic transmission is guaranteed to be 100% secure.

10. Third-Party Links

Our website may contain links to third-party platforms. We are not responsible for the privacy practices of external websites.

11. Contact Information

If you have questions about this Privacy Policy or wish to exercise your rights, contact:

Elevate Medical Center
Website: https://www.elevatemedcenter.com/
Phone: 206-829-0290
Email: elevatemedicalcenter@outlook.com
Address:
13210 SE 240th St, Suite C1
Kent, WA 98042

We may require identity verification before fulfilling certain requests.

You may also file a complaint:

• With the U.S. Department of Health & Human Services (for HIPAA matters)
• With the Washington State Attorney General (for My Health My Data Act matters)

12. Changes to This Policy

We may update this Privacy Policy as required by changes in law or operational practices.

The “Last Updated” date reflects the most recent revision. Continued use of our services constitutes acknowledgment of the revised policy.

‍