Consumer health data privacy
Washington consumer health data notice.
This notice explains how Washington's My Health My Data Act can apply to DoulaPaid public pages, account access, billing tools, and future private billing features.
Current status
DoulaPaid is live for public Medicaid doula billing guides, saved tools, and account use. Because the site is about doula billing and perinatal care, ordinary website or account data may count as consumer health data for Washington residents when it can be linked to a person.
Categories and purposes
Public website connection data
IP address, browser and device information, requested URL, referrer, timestamps, and security events may be processed by hosting, security, and logging systems.
Account and support data
Account email, login/session records, verification/reset events, and support messages may be processed when a visitor creates or uses an account or contacts DoulaPaid.
Public billing-tool choices
State, rate, code, checklist, search, or worksheet selections may reveal interest in Medicaid doula billing, pregnancy, birth, postpartum, reproductive health, or health care services.
Private client and claim data
Client identifiers, visit notes, Medicaid IDs, claim packets, payment follow-up, and denial work stay closed until private client-data approval is complete.
DoulaPaid uses this data to provide requested pages and tools, maintain account access, protect the service, answer support or legal requests, improve public content, and prepare future billing features after the needed reviews are complete.
Sources and sharing
Sources include you, your browser or device, account login systems, hosting and security systems, and service providers working for DoulaPaid. DoulaPaid may share limited data with providers that run hosting, security, database, login, email, payment, legal, compliance, or support services.
DoulaPaid does not sell consumer health data. DoulaPaid does not use targeted advertising, retargeting pixels, or geofencing around in-person health care entities to identify or track consumers seeking health care services.
Categories shared and third parties
DoulaPaid does not share consumer health data with third parties for advertising, retargeting, or data sales. Consumer health data may be processed by service providers under contracts only to operate, secure, support, or legally maintain DoulaPaid.
Cloud infrastructure provider
Hosts the application and database; processes account data and, after private-data approval, protected health information under required controls.
CDN, DNS, and security provider
Serves public pages and protects traffic; processes IP addresses, URLs, referrers, security events, and connection data.
Payment provider
Processes subscription billing; receives account email, plan, payment, and transaction metadata, not Medicaid claim data.
Email delivery provider
Delivers account verification, password reset, and account emails; processes account email and delivery metadata.
Legal, compliance, and support providers
May process limited account, request, audit, or support information when needed to answer a request, defend legal rights, meet compliance duties, or support the requested service.
DoulaPaid does not share consumer health data with affiliates, advertising networks, retargeting platforms, data brokers, or public analytics providers.
Choices and requests
DoulaPaid responds to authenticated Washington consumer health data requests without undue delay and no later than 45 days after receipt, unless one additional 45-day extension is reasonably necessary and explained within the first 45-day period.
Washington consumers may request access, confirmation, withdrawal of consent, deletion, or an appeal by emailing [email protected] with the subject "Consumer Health Data Request" or by using the request instructions on the consumer health data request page. DoulaPaid will authenticate the request using information already available for the account or interaction and will not require a consumer to create a new account just to make a request.
DoulaPaid responds to authenticated requests without undue delay and no later than 45 days after receipt, with one additional 45-day extension when reasonably necessary after notice and reason within the first 45-day period. Requested records are provided free of charge up to two times per year per consumer; manifestly unfounded, excessive, or repetitive requests may be subject to a reasonable fee or refusal with an explanation.
- If DoulaPaid denies a request, you may appeal by replying to the decision email or emailing [email protected] with the subject "Appeal - Consumer Health Data Request."
- DoulaPaid reviews the appeal and responds within 45 days with a written explanation of the decision.
- If the appeal is denied, DoulaPaid provides the reason and the Washington Attorney General complaint path. Washington consumers may file a complaint at atg.wa.gov/file-complaint.
Some data may be kept when required for security, fraud prevention, legal, tax, contract, audit, payer, health privacy, or records obligations. Data on archived or backup systems may be deleted on the backup lifecycle after authentication of a deletion request, up to the six-month limit allowed by RCW 19.373.040(3)(c)(iii).