Consumer health data privacy policy
Last updated 13 September 2026
Washington’s My Health My Data Act asks companies to publish a policy about consumer health data on its own, separate from the main privacy policy. This is ours. Nevada asks for something similar, so this covers Nevada too.
It sits alongside our privacy policy, which covers everything else.
Most of what Fenna hears is protected health information held for a treatment facility under federal health privacy law. That information is outside this policy and outside the Washington act. This page is about the narrow set of health-related information we hold for ourselves, mainly from people who visit our website.
1. What consumer health data we collect
We do not set out to collect health data about anyone. We sell software to treatment centers, so a visitor reading our site may reveal an interest in addiction or mental health treatment simply by being here. We treat that as consumer health data and handle it carefully.
| What | Where it comes from | Why we have it |
|---|---|---|
| That you visited pages on fennahealth.com about addiction or mental health treatment services | Your browser, through our analytics | To count visits and see which pages are useful |
| Your rough location, at city level, worked out from your network address | Your browser, through our analytics | To know which parts of the country read our site |
| What you tell us when you book a demo or write to us, if you choose to mention health matters | You | To answer you |
We do not collect precise location. We do not use location to work out whether anyone went to a treatment facility. We do not place a geofence around any health care facility, and we do not buy location data from anyone.
3. Your rights
If you live in Washington or Nevada, you can ask us to do any of the following.
- Confirm whether we hold consumer health data about you, and give you a copy
- Tell you the list of third parties we shared it with, and give you a way to contact each one
- Withdraw a consent you gave us, for collection or for sharing
- Delete it, including from our backups as they cycle
Write to privacy@fennahealth.com with the word health in the subject. We answer within forty-five days, and we will tell you if we need another forty-five and why. Deleting takes effect on our live systems straight away and on our backups within six months.
If we say no, we will tell you why and how to appeal. If you are still unhappy you can complain to the Washington Attorney General at atg.wa.gov, or to the Nevada Attorney General.
4. Consent
We collect what we need to run our website and answer you. For anything beyond that we ask first, and we ask separately before we would share anything.
You can withdraw consent at any time by writing to us, or by turning off analytics with the Google Analytics opt-out add-on. If your browser sends a Global Privacy Control signal we treat it as a withdrawal of consent to share.
Withdrawing consent does not undo what we did while we had it, and it does not stop us keeping what the law says we must.
5. Contact
Fenna Health LLC. Write to privacy@fennahealth.com. The date at the top of this page is the day this version took effect, and we will publish a new date whenever we change it.