Consumer health data privacy policy
Last updated 31 October 2026
Washington’s My Health My Data Act asks companies to publish a policy about consumer health data on its own, separate from the main privacy policy. This is ours. Nevada asks for something similar, so this covers Nevada too.
It sits alongside our privacy policy, which covers everything else.
Most of what Fenna hears is protected health information held for a treatment facility under federal health privacy law. That information is outside this policy and outside the Washington act. This page is about the narrow set of health-related information we hold for ourselves, mainly from people who visit our website.
1. What consumer health data we collect
We do not set out to collect health data about anyone. We sell software to treatment centers, so a visitor reading our site may reveal an interest in addiction or mental health treatment simply by being here. We treat that as consumer health data and handle it carefully.
| What | Where it comes from | Why we have it |
|---|---|---|
| That you asked for pages on fennahealth.com about addiction or mental health treatment services, with your network address and browser | Our web server's logs, as with any website | To keep the site running and secure, and to look into abuse. The logs are kept for ninety days |
| What you tell us when you book a demo, write to us, try the demo chat on our home page or call the demo line, if you choose to mention health matters | You | To answer you |
| Which of our public pages you open, your device and browser, and your region | Google Analytics, on our public pages | To see how the website is used |
We use Google Analytics on our public pages to count visits. It receives which pages you open, your device and browser, and your region, and nothing you write in the demo chat on our home page or anywhere behind a sign-in. We do not collect precise location. We do not use location to work out whether anyone went to a treatment facility. We do not place a geofence around any health care facility, and we do not buy location data from anyone.
3. Your rights
If you live in Washington or Nevada, you can ask us to do any of the following.
- Confirm whether we hold consumer health data about you, and give you a copy
- Tell you the list of third parties we shared it with, and give you a way to contact each one
- Withdraw a consent you gave us, for collection or for sharing
- Delete it, including from our backups as they cycle
Write to privacy@fennahealth.com with the word health in the subject. We answer within forty-five days, and we will tell you if we need another forty-five and why. Deleting takes effect on our live systems straight away and on our backups within six months.
If we say no, we will tell you why and how to appeal. If you are still unhappy you can complain to the Washington Attorney General at atg.wa.gov, or to the Nevada Attorney General.
4. Consent
We collect what we need to run our website and answer you, and Google Analytics counts visits for us as described above. For anything beyond that we ask first, and we ask separately before we would share anything with anyone else.
You can withdraw consent at any time by writing to us. If your browser sends a Global Privacy Control or a Do Not Track signal, Google Analytics stays off for you and we treat the signal as a withdrawal of consent to share. We do not track you across other websites.
Withdrawing consent does not undo what we did while we had it, and it does not stop us keeping what the law says we must.
5. Contact
Fenna LLC. Our postal address is 30 N Gould St Ste N, Sheridan, WY 82801. Write to privacy@fennahealth.com. The date at the top of this page is the day this version took effect, and we will publish a new date whenever we change it.