Consumer Health Data Privacy Policy ABA Navigator

1. About This Policy

ABA Navigator ("we," "our," or "us") runs abanavigator.com, a directory of Applied Behavior Analysis (ABA) therapy providers. ABA therapy is most often used for autism, so some of what you do on our site can say something about your family's health. The law calls that consumer health data.

This policy explains how we collect, use, share and protect consumer health data, and how you can use your rights over it. It is written to meet the Washington My Health My Data Act (RCW 19.373) and Nevada's consumer health data law (SB 370, NRS Chapter 603A), and we apply it to everyone who uses our site. It adds to our Privacy Policy, which covers all other information.

2. Consumer Health Data We Collect

• Searches and browsing: the searches you run and the pages you view, such as searches for autism or ABA therapy providers, provider pages, and articles about diagnosis and treatment.
• Information about your child: your child's name and age, and a diagnosis if you choose to share one (for example, autism, suspected autism, or developmental delay).
• Insurance: the health insurance or payment type you select, such as Medicaid or a private insurer.
• Location: the ZIP code, city or address you enter to find care nearby. We do not collect precise location from your device.
• Inquiries to providers: your name, email address, phone number, and the message you send to a provider through our site.
• Matching quiz answers: the kind of care, setting and schedule you are looking for.
• Reviews and messages: anything about your family's care that you write in a review or a message to us.

3. Where It Comes From

• From you, when you search, fill in a form, take the matching quiz, write a review, or email us.
• From your browser, when you visit pages on our site.
• From providers, who may tell us about the status of an inquiry you sent them.

4. Why We Collect and Use It

• To show you providers that fit your location, insurance and needs.
• To deliver your inquiry to the provider you chose, and to send you the results or confirmations you asked for.
• To answer your messages and publish reviews you submit.
• To prevent spam, fraud, and fake reviews, and to keep the site secure.
• With your consent only: to measure how the site is used, through analytics (section 6).

We collect and use consumer health data only as needed to provide the service you ask for, or with your consent. We do not use it for advertising.

5. Who We Share It With

We share consumer health data only to provide the service you asked for, with your consent, or when the law requires it. The categories of consumer health data we share are the ones in section 2, and only the part each recipient needs:

• The provider you choose. When you send an inquiry, we send it to that provider so they can contact you. If the provider has not yet claimed its listing, your inquiry comes to the ABA Navigator team, and we may pass it on to that provider for you. We never send it to providers you did not choose.
• Our email service providers, which deliver inquiries, confirmations and messages.
• Our hosting company and Cloudflare, which store and deliver the site, and see the pages you request. Cloudflare Turnstile also checks some forms for bots.
• PostHog (analytics), only after you turn on analytics. It receives the pages you view.
• Google Analytics, only with your consent. It receives the pages you view.
• Google Maps, which shows provider locations on provider pages and sees which provider page you are on.
• Sentry (error monitoring), set up so that it does not receive personal information.
• AI service providers that help our team sort, moderate, and draft replies to messages and submissions.
• Government authorities, when the law requires it.

Affiliates: we do not share consumer health data with any affiliated company.

We do not sell consumer health data. We do not share it for advertising, and we do not use geofencing around places where health care is provided.

6. Your Consent and Analytics

Collecting or sharing consumer health data beyond what is needed for the service you asked for requires your consent. On our site, that means analytics. For visitors in Washington and Nevada, analytics stays off unless you turn it on in the cookie banner. If your browser sends a Global Privacy Control signal, we keep analytics off.

You can withdraw your consent at any time with the "Cookie preferences" button or the "Your privacy choices" link at the bottom of every page, or by emailing us. With your consent, Google Analytics may collect information about your use of our site over time. We do not allow other companies to collect information about your activity across different websites through our site.

7. Your Rights

You have the right to:

• Know and access: confirm whether we collect, share or sell your consumer health data, get a copy of it, and get a list of every third party and affiliate we have shared it with, with a way to contact each of them.
• Delete: have your consumer health data deleted. We also tell every service provider and third party we shared it with to delete it. Copies in our backups are deleted within six months.
• Withdraw consent: stop any collection or sharing that is based on your consent.
• Appeal: ask us to reconsider if we decline your request.

We will not treat you differently for using these rights.

8. How to Use Your Rights

Email [email protected] with "Health data request" in the subject line. Tell us which right you want to use, and give us the email address or phone number you used on our site so we can find your information.

• We confirm your identity, usually by writing to that email address. We only ask for what we need to do that.
• We respond within 45 days of receiving your request. If we need more time, we will tell you why within those 45 days, and we may take up to 45 more days.
• Requests are free, up to twice in any 12 months.

Appeals: if we decline your request, reply with "Appeal" in the subject line within a reasonable time. We will give you a written answer, with our reasons, within 45 days of receiving your appeal. If we deny your appeal, you can complain to the Washington State Office of the Attorney General or the Nevada Office of the Attorney General.

9. Changes to This Policy

When this policy changes, we update the date at the top. If we want to collect, use or share consumer health data in a new way that needs your consent, we will ask for it first.

10. Contact Us