Consumer Health Data Privacy Policy

Ingrid Johnston Therapy ingridjohnstontherapy.com

Last updated: February 10, 2026

This Consumer Health Data Privacy Policy is provided in accordance with the Washington My Health My Data Act (RCW 19.373). It applies to consumer health data collected through this website that is not Protected Health Information (PHI) governed by the Health Insurance Portability and Accountability Act (HIPAA). PHI collected in the course of providing therapy services is governed by HIPAA and our Notice of Privacy Practices, which is provided to all clients during the intake process.

What This Policy Covers

Ingrid Johnston Therapy is a HIPAA-covered entity. The vast majority of health-related information we handle is PHI collected during the course of providing therapy services, which is exempt from the My Health My Data Act.

This policy covers the limited consumer health data that may be collected through this website before a therapeutic relationship has been established, such as health-related information you voluntarily include in a contact form submission, scheduling request, or email inquiry. Once you become a client and complete the intake process, your health information is treated as PHI under HIPAA.

Categories of Consumer Health Data Collected

We may collect the following categories of consumer health data through this website:

Information about your mental or physical health status that you voluntarily provide when submitting a contact form, scheduling request, or email, such as a description of symptoms, concerns, or reasons for seeking therapy.

Sources of Consumer Health Data

Consumer health data is collected directly from you when you voluntarily submit it through the website's contact form, scheduling tool, or by sending an email to ingrid@ingridjohnstontherapy.com. We do not collect consumer health data from third-party sources through this website.

Purposes for Collecting Consumer Health Data

We collect consumer health data for the following purposes: to respond to your inquiry about therapy services, to assess whether our services may be a good fit for your needs, and to facilitate the scheduling and intake process if you choose to become a client.

Categories of Consumer Health Data Shared

We do not sell consumer health data. We do not share consumer health data for advertising or marketing purposes.

Consumer health data collected through this website may be shared with the following categories of third parties, solely to the extent necessary to operate the website and respond to your inquiry:

Website hosting provider (Squarespace), which may process data submitted through forms hosted on the Site. Scheduling software provider, if you use an online scheduling tool to request an appointment. Email service provider, if you contact us via email.

These third-party service providers process data on our behalf and are contractually required to handle your information in accordance with applicable privacy and security requirements.

Your Rights

Under the Washington My Health My Data Act, you have the right to:

Confirm and access whether we are collecting, sharing, or selling your consumer health data, and to access the specific consumer health data we have collected about you.

Delete your consumer health data. Upon receiving a verified request, we will delete consumer health data we have collected about you, and we will direct any processors or third parties that received your data on our behalf to delete it as well.

Withdraw consent to the collection and sharing of your consumer health data. If you withdraw consent, we will cease collecting your consumer health data going forward. Withdrawal of consent does not affect the lawfulness of any processing that occurred prior to withdrawal.

Appeal a denial of your request. If we deny your request, you may appeal the decision by contacting us using the information below.

We will not discriminate against you for exercising any of these rights.

How to Exercise Your Rights

To exercise any of the rights described above, please contact us at:

Email: ingrid@ingridjohnstontherapy.com Phone: (206) 658-7831

We will respond to your request within 45 days. If we need additional time to process your request, we will notify you of the reason and the expected timeframe. There is no charge for exercising your rights up to twice per year.

We may need to verify your identity before fulfilling your request. We will do so by confirming information you have previously provided to us, such as your name and email address.

We Do Not Sell Consumer Health Data

Ingrid Johnston Therapy does not sell and has not sold consumer health data, and we have no plans to do so. We will not sell consumer health data without first obtaining your valid authorization.

Data Security

We maintain administrative, technical, and physical safeguards to protect the confidentiality, integrity, and accessibility of consumer health data, appropriate to the volume and nature of the data we handle.

Changes to This Policy

We may update this Consumer Health Data Privacy Policy from time to time. The most current version will always be available on this page, with the "Last Updated" date at the top.

Contact

If you have questions about this Consumer Health Data Privacy Policy or wish to exercise your rights, please contact:

Ingrid Johnston Therapy Ingrid Johnston, MS, LMFT, MDFT
Email: ingrid@ingridjohnstontherapy.com
Phone: (206) 658-7831