Your privacy
Ripple Wellness cares for you one-on-one, and that includes your information. This page explains what we collect, why, who helps us handle it, and the choices and rights you have, including under Washington's My Health My Data Act.
Consumer health data privacy policy
Washington's My Health My Data Act gives you rights over your consumer health data: information that identifies you and relates to your past, present or future physical or mental health.
What we collect
- Your name, date of birth, phone, email and address.
- Health information you share with us at intake and during visits, such as goals, health history, medications and allergies, measurements and body-composition (InBody) results, notes from your visits, treatments you receive, and lab orders and results.
- Consent forms you sign, appointment history, and payment records (amount, date and method, not your full card number).
- If you call our clinic line: your phone number, the time of the call and the menu option you choose. We do not record calls.
How we collect it
Directly from you, in person, on our intake tablet, in your patient portal and by phone. If you choose lab testing, from the laboratory that runs your tests. Our website does not collect health information: it has no forms, no advertising trackers and no analytics cookies.
Why we use it
- To provide the care and services you ask for, and to keep your record accurate and safe.
- To schedule appointments, remind you of them, and follow up when you ask us to.
- To take payment and give you receipts and superbills.
- To meet legal and professional duties, such as keeping medical records and responding to lawful requests.
We collect and use your consumer health data only with your consent or as needed to provide what you asked for. We do not sell your consumer health data, and we do not use it for advertising.
Who we share it with
We share only what each one needs to do its job for us, under written agreements that require them to protect it:
- Pelleum Corp (Magesta Health), our health records and clinic software provider. Your records are stored encrypted on Google Cloud.
- Square, for card payments. Square receives the amount and a reference number, not the reason for your visit.
- Twilio, which carries our phone line and appointment reminders. It handles phone numbers and appointment times, never health details.
- Your laboratory (for example, Labcorp), only when you choose lab testing.
- Our medical director and clinical staff, and others when the law requires it.
Your rights
- Confirm whether we collect, share or sell your consumer health data, and get a copy of it.
- See a list of the third parties and affiliates we have shared it with, and how to reach them.
- Withdraw your consent to our collecting or sharing it.
- Ask us to delete it. We will delete it unless the law requires us to keep it, for example as part of your medical record, and we will tell you if that applies.
To use any of these rights, call us at (509) 355-7771, email [email protected], or ask us in person. We will confirm who you are, answer within 45 days, and will not treat you differently for asking. If we turn down a request, you can appeal by replying to our answer; we will respond to an appeal within 45 days, and if you are not satisfied you may contact the Washington State Attorney General.
Text messages
If you agree to texts, Ripple Wellness sends appointment reminders and confirmations, and replies when you ask us to call or text you back, from (509) 355-7771. Texts never include health details. We ask for your agreement on our signed intake form, or when our front desk books an appointment for you; pressing 2 on our phone line lets us reply to that one call by text. Our text messaging terms give the exact words. Agreeing is never a condition of care.
- Message frequency varies. Message and data rates may apply.
- Reply STOP at any time to stop texts. Reply HELP for help, or call us at (509) 355-7771.
- We do not share your mobile number or your texting consent with third parties or affiliates for marketing or promotional purposes. Text consent data is shared only with the carriers and messaging provider (Twilio) that deliver our messages.
Our text messaging terms explain the program in full.
General privacy
- Website: our site is hosted by Cloudflare, which keeps standard technical logs (such as IP address and pages requested) to run and secure the site. We use no advertising trackers.
- Email: please don't send health details by email. Call us, use your patient portal, or speak with us in person.
- Security: your records are encrypted, every access is logged, and staff each have their own sign-in with two-step verification.
- Children: we don't knowingly collect information from children under 13 without a parent or guardian.
- Changes: if we change this policy, we will post the new version here with its effective date.
For emergencies call 911.