CONSUMER HEALTH DATA PRIVACY POLICY

Belmar Cardiopulmonary Diagnostics PLLC, 520 112th Ave NE #110, Bellevue, WA 98004

hello@belmarcardio.org · (253) 256-2809

Effective date: November 4, 2026

Washington's My Health My Data Act protects "consumer health data": personal information that is linked or reasonably linkable to you and identifies your past, present or future physical or mental health status. This policy explains what consumer health data we collect, why, who receives it, and your rights.

Once you become a Belmar patient, your health information is protected under HIPAA and handled as described in our Notice of Privacy Practices (www.bcdctesting.com/notice-of-privacy-practices). This policy covers health-related information that falls outside that, such as what you tell us before you book.

 

Categories of consumer health data we collect

• That you visited pages about our tests (DEXA body composition, VO2 max, metabolism/RMR, bone density).

• That you started or asked about booking a test, and which test.

• Questions you send us through our contact form, email or phone before you become a patient, and anything health-related you include in them.

• Which of our ads brought you to our site, when that is linked to a booking or enquiry.

 

Sources

• Directly from you, when you use our website, app, forms, email or phone.

• From the link you used to reach our site (a label naming the ad).

 

Why we collect it

• To answer your questions and help you book the test you asked about.

• To run, secure and fix our website and app.

• To see which of our ads lead to bookings.

We do not use consumer health data for advertising, we do not sell it, and we do not share it with advertising companies.

 

Who receives it

We share consumer health data only with service providers that process it for us under contract and only for the purposes above:

• Wix (our website host, including its contact forms) and AudioEye (the website's accessibility tools)

• Amazon Web Services (hosts our booking app, including the record of which ad you came from; file storage, emails and text messages)

• Google Workspace (runs the hello@belmarcardio.org inbox that receives the emails you send us)

We have no affiliates that receive consumer health data. We do not share it with third parties for their own purposes.

 

Geofencing

We do not use geofencing to identify or track people around health care facilities, or to send them ads or messages.

 

Your rights

If you are a Washington resident (or your consumer health data was collected in Washington), you can:

• Confirm and access: ask whether we collect, share or sell your consumer health data, get a copy, and get a list of the third parties and affiliates we shared it with, with their contact information.

• Withdraw consent: withdraw any consent you gave us to collect or share it.

• Delete: ask us to delete it. We will also tell our service providers to delete it.

To make a request, email hello@belmarcardio.org with the subject "Consumer health data request", or call (253) 256-2809. We may need to confirm who you are. We will answer within 45 days; if we need more time (up to 45 more days), we will tell you why.

Appeals: if we decline your request, you can appeal by replying to our answer within 45 days. We will reply to your appeal in writing within 45 days, explaining what we did and why. If we deny the appeal, you can contact the Washington State Attorney General at www.atg.wa.gov/file-complaint.

 

Changes

We will update this policy and its effective date if our practices change, and we will ask for your consent before using or sharing consumer health data in a new way that needs it.