top of page
Homepage

(509) 706-1310

Consumer Health Data Privacy Policy

Privacy Policy Last Updated September 15, 2026

This Consumer Health Data Privacy Policy describes how RefPoint collects, uses, and shares consumer health data and how consumers may exercise their rights under the Washington My Health My Data Act.

Consumer Health Data We Collect

RefPoint may collect consumer health data that is reasonably necessary to provide services requested by you, including:

​

  • Information identifying you as seeking thermography or blood collection services;

  • Information necessary to schedule and provide requested services;

  • Information relating to requested laboratory testing, specimen collection, or thermography services;

  • Thermography images, reports, and information necessary to coordinate interpretation;

  • Laboratory orders, collection information, and other information necessary to complete requested blood collection services; and

  • Contact and communication information associated with your requested services.

​

RefPoint does not use its website as a patient portal and does not intentionally request that visitors submit medical histories, laboratory results, diagnoses, or other sensitive health information through the website.

Sources of Consumer Health Data

Consumer health data may be collected directly from:

  • You;

  • A healthcare provider acting at your request or on your behalf;

  • A laboratory or testing service involved in a service you have requested;

  • Thermography imaging or interpretation services involved in your requested service; or

  • Another person or organization you authorize to provide information necessary for your requested service.

Why We Collect and Use Consumer Health Data

RefPoint collects and uses consumer health data only as reasonably necessary to provide and administer services requested by you, including to:

​

  • Schedule and coordinate appointments;

  • Perform thermography imaging or blood collection services;

  • Coordinate laboratory testing, specimen handling, or requested test kits;

  • Coordinate thermography interpretation and reporting;

  • Communicate with you and, when necessary, authorized providers, laboratories, interpreting services, or other parties involved in your requested service; and

  • Maintain records as required or permitted by applicable law.

​

Consumer Health Data We Share

RefPoint may share consumer health data only as necessary to provide a service you request or as otherwise permitted or required by law.

Depending on the service requested, the categories of consumer health data shared may include identifying and contact information, laboratory orders and collection information, thermography images and related information, and information necessary to coordinate the requested service.

Categories of Third Parties

Depending on the service requested, RefPoint may share consumer health data as necessary with:

​

  • Healthcare providers involved in your requested service;

  • Laboratories and specialty testing services, including Boston Heart Diagnostics when applicable;

  • Thermography interpretation services, including Electronic Medical Interpretation (EMI);

  • Phlebotomy service networks involved in a requested collection, including My One Medical Source, when applicable;

  • Service providers supporting scheduling, communications, records, or other operational functions necessary to provide the requested service; and

  • Other parties you authorize or direct RefPoint to communicate with.

​

RefPoint does not sell consumer health data.

Protecting Consumer Health Data

RefPoint limits access to consumer health data to personnel and service providers who need the information to provide requested services or perform necessary operational functions. We maintain reasonable administrative, technical, and physical safeguards appropriate to the nature of the information we maintain.

Your Washington Privacy Rights

Under the Washington My Health My Data Act, consumers have the right to:

​

  • Confirm whether RefPoint is collecting, sharing, or selling consumer health data concerning you;

  • Access covered consumer health data;

  • Obtain information about third parties and affiliates with whom covered data has been shared or sold;

  • Withdraw consent from future collection or sharing when processing is based on consent; and

  • Request deletion of covered consumer health data.

​

Washington law generally requires covered requests to be addressed within 45 days, subject to the Act's provisions regarding authentication, extensions, exceptions, and appeals.

Exercising Your Rights

To submit a consumer health data privacy request, contact:

​

RefPoint
5651 W. 36th Place, Suite J110
Kennewick, WA 99338
Phone: (509) 706-1310
Email: info@refpointdirect.com

​

Please state that your request concerns Consumer Health Data Privacy.

​

RefPoint may request information reasonably necessary to verify your identity and authenticate your request. You are not required to create a new account to exercise your rights.

​

If RefPoint denies your request, you may appeal the decision by contacting RefPoint through the same contact information and identifying your communication as a Consumer Health Data Privacy Appeal.

bottom of page