Consumer Health Data Privacy Policy

This policy covers "consumer health data": information that relates to your health or your child's. It meets laws such as Washington's My Health My Data Act. Our general Privacy Policy covers everything else.

The health data we collect

• What you're noticing, chosen on the discovery-call form: breathing through the mouth, a tongue or lip tie, snoring or restless sleep, orthodontic concerns, or something else.
• How long it's been going on.
• What you'd like to feel different, such as easier breathing or better sleep.
• Anything health-related you tell Joria by phone, email, text, or on the discovery call.

These answers are collected only if you tick the health-information consent box on the form. If you leave it unticked, the answers stay in your browser and are never sent to us. The rest of the form (your name, contact details, and call times) still reaches Joria.

Where it comes from

Directly from you, or from a parent or guardian filling in the form for a child. We don't buy health data or collect it from other sources.

Why we collect it

To respond to your request, to prepare for your discovery call, and, if you become a client, to provide orofacial myofunctional therapy services. We don't use it for advertising, and we don't sell it.

Who it's shared with

We share consumer health data only with service providers (processors) who store or handle it on our behalf, under contract, for the purposes above:

• ProspectifAI, which operates the system that receives the form and stores contact records.
• Amazon Web Services, which hosts that system in the United States.

We have no affiliates that receive it. We don't sell consumer health data, and we don't share it with anyone else unless you ask us to, for example with a dentist or doctor you want Joria to coordinate with, or the law requires it.

Your rights

• Know and access: confirm whether we hold your health data, get a copy, and get a list of everyone we've shared it with.
• Withdraw consent at any time. We'll stop using your health data from then on.
• Delete: we'll delete your health data from our records and have our service providers delete it too.

We won't treat you differently for using any of these rights.

How to use your rights

Email Joria@JoriaOMT.com and say what you'd like. A parent or guardian can ask on a child's behalf. We'll confirm your identity, then respond within 45 days. If we need more time, up to 45 more days, we'll tell you why. There's no charge.

If we deny your request, reply to our answer to appeal, and we'll respond within 45 days. If you're still not satisfied, you can contact your state attorney general. In Washington, that's the Washington State Attorney General.

Keeping it safe

Health data is encrypted in transit and at rest. Only the people who need it can see it, and those records are marked sensitive: notification emails about a new request never include your answers.

Changes

We'll update the date at the top when this policy changes, and ask for your consent again before using your health data in a new way.

Contact

Joria OMT, Portland, Oregon
Joria@JoriaOMT.com