Privacy Policy

Scope of This Policy

This policy covers information collected through asymmetrichealth.com, our online forms and our marketing communications.

Two categories of information are governed by separate documents:

Protected health information. Once you become a patient, the health information we create and maintain about you is governed by our Notice of Privacy Practices under HIPAA, not by this policy.
Consumer health data. Health-related information collected through our website before a treatment relationship exists is governed by our Consumer Health Data Privacy Policy under the Washington My Health My Data Act.

Where those documents apply, they control.

Our online store at shop.asymmetrichealth.com operates on a separate platform and is governed by its own privacy policy, terms, shipping policy and returns policy. Our Consumer Health Data Privacy Policy covers consumer health data collected through both asymmetrichealth.com and shop.asymmetrichealth.com.

Who We Are

Asymmetric Health is a direct-pay functional and regenerative medicine practice located at 8282 28th Ct NE, Suite C, Lacey, WA 98516. We see patients in person in Lacey and provide telehealth to patients in Washington. You must be physically located in Washington at the time of each visit.

Information We Collect

Information you give us. Name, email address, telephone number, mailing address and any information you enter into a contact form, consultation request, intake questionnaire or guide download form.

Health information. Symptoms, medical history, medications, laboratory results and other clinical information you provide during evaluation and treatment. Once you are a patient, this is protected health information and is handled under our Notice of Privacy Practices.

Identity verification information. Before establishing care we collect a copy of your government-issued photo identification. Where a controlled substance is prescribed, we take additional steps to confirm your identity as federal and state law require, and we may collect your Social Security number for that purpose. This information is stored in your record in Hint Health under the same access controls that protect the rest of your chart. We use it only to verify who you are. We do not use it for marketing and we do not disclose it to advertising platforms. Where identity information must be provided to a pharmacy, we transmit only the last four digits of your Social Security number. We delete your Social Security number from your record when you leave the practice.

Payment information. Membership and clinical service fees are billed by Asymmetric Health and processed through Hint Health. Where a compounded prescription is routed through Refill, medication payments are processed by Refill. Where you use your own pharmacy or a manufacturer program, payment is handled by that company under its own privacy policy. We do not store full payment card numbers on our own systems. Payment terms are described in our Terms & Conditions.

Usage data. Pages viewed, referring site or search, device type and an approximate location derived from your IP address, collected through Google Analytics on the pages described below.

How We Use Information

To respond to inquiries and schedule consultations
To provide, coordinate and bill for care
To communicate with you about appointments, laboratory results and treatment plans
To send educational content and marketing communications you have asked to receive
To measure and improve the performance of our website
To meet legal, regulatory and professional obligations

Website Analytics and Cookies

We use Google Analytics 4 to understand how visitors find and use our website. It sets a cookie in your browser and reports the pages you view, the site or search that referred you, your device type and an approximate location derived from your IP address. It does not receive your name, email address, telephone number, or anything you type into a form.

Google Analytics is configured not to run on our health-related pages. It does not load on our symptom questionnaires, on our condition and treatment pages, on our city treatment pages, on the confirmation pages shown after you request a guide, or on the page shown after you purchase an evaluation. On those pages no analytics of any kind is loaded, so no record of your visiting them is shared with anyone outside our practice.

Analytics does run on our general pages, including our home page, our about and how-it-works pages, our blog and learning articles, our pricing page and our contact page. Two things are worth stating plainly about the last two.

On our contact page, we record that a consultation request was submitted. We do not send Google anything you typed. Your name, your contact details and whatever you wrote reach our patient relationship platform directly, and that company operates under a Business Associate Agreement.

On our pricing page, where you click through to purchase an evaluation, we record that the step happened. We deliberately do not record which evaluation you chose or what it cost, because either one would identify the care you are seeking.

Our symptom questionnaires are scored entirely within your browser. Your answers and your score are not transmitted to us or to anyone else.

We do not use session recording or screen replay tools. We do not use call tracking or dynamic phone number software.

You can block or delete cookies through your browser settings, or install Google’s opt-out add-on at tools.google.com/dlpage/gaoptout. Declining analytics has no effect on your ability to use this site, contact us or receive care.

We do not sell your personal information or your health information. We do not share it with third parties for their own advertising purposes.

Companies That Handle Health Information

Each of these operates under a written Business Associate Agreement.

Hint Health. Our patient portal, electronic health record, telehealth platform and billing system. Patient records, laboratory results, treatment plans, secure messages and membership and service payments are handled here. Portal access is at asymmetrichealth.hint.com.

Spruce Health. Our telephone and secure messaging system, used for calls, voicemail, text messages and clinical messaging, both inbound and outbound.

AmplifyDPC. Our patient relationship platform, used to manage inquiries from first contact through membership enrollment.

Refill. Our prescription routing and medication billing platform. Where a compounded prescription is routed through Refill, Refill also bills you for the medication.

Fullscript. Our supplement dispensary. If you order supplements, your order and payment are handled by Fullscript. Our financial interest in dispensary sales is disclosed in our Terms & Conditions.

Empathia AI. Our AI clinical documentation tool, used during visits to assist with note-taking, with your consent.

Independently Licensed Health Care Entities

Clinical laboratories. Diagnostic testing, primarily through Labcorp and Quest Diagnostics. Some specialty panels and specialty tests are performed by other laboratories, and your provider will tell you where a specialty specimen is being sent or which laboratory performs a specialty test.

Pharmacies. You decide where your prescriptions are filled. Your provider will present the fulfillment options available for your medication, and your prescription is transmitted electronically to the pharmacy you choose. Pharmacies operate independently and are responsible for preparation, dispensing, shipping and compliance with pharmacy regulations. The fulfillment options available to you are described in our Terms & Conditions.

Laboratories and pharmacies are independently licensed and have their own obligations under HIPAA. Disclosures to them are made for treatment purposes rather than under a business associate relationship.

Companies That Do Not Receive Health Information

Google Analytics. Website traffic measurement, as described above. Receives page and device information only, never your contact details or health information.

Savo Group. Our website and marketing agency. The reporting system they use to measure campaign performance receives only aggregate totals, for example the number of inquiries received on a given day and which channel they came from. That reporting system holds no individual records, no names and no contact details.

Professional Advisors and Authorities

Attorneys, accountants, auditors and regulators, and any disclosure required by law.

Each of these companies maintains its own privacy policy and handles your data in accordance with applicable regulations.

Data Security

All connections to asymmetrichealth.com are encrypted using TLS. Information you submit through our contact forms, consultation requests, intake questionnaires and identity verification uploads is transmitted over an encrypted connection.

Patient health data is stored and managed in Hint Health, our HIPAA-compliant patient portal and electronic health record platform. As of August 21, 2026, Hint Health reports SOC 2 Type 2 attestation, ISO 27001 certification and PCI DSS Level 1 certification, with encryption at rest and in transit, role-based access controls with access logging, and annual independent security audits. Current details are published by Hint Health at hint.com.

All Asymmetric Health workforce members complete HIPAA privacy and security training. No system can guarantee absolute security, and we make no such guarantee.

Your Choices and Rights

Access. You may request a copy of the personal information we hold about you. Patients can access their health records directly through the patient portal, and may also exercise the access rights described in our Notice of Privacy Practices. Washington law requires us to respond to a written request for health care information no later than fifteen working days after we receive it. Requests concerning consumer health data are answered within the timeframe set out in our Consumer Health Data Privacy Policy.

Correction. You may ask us to correct inaccurate information. For health records, see the amendment right in our Notice of Privacy Practices.

Deletion. You may ask us to delete personal information collected through the website, such as marketing contact details. We cannot delete medical records. We retain adult patient health records for at least ten years from the date of last contact, and those records remain subject to HIPAA rather than to deletion requests. Your Social Security number, where we have collected one, is deleted when you leave the practice.

Marketing opt-out. Every marketing email includes an unsubscribe link. You may also reply STOP to any text message, or contact us directly. Opting out of marketing does not stop clinical and administrative messages about your care.

Analytics opt-out. Use either method described under Website Analytics and Cookies.

Consumer health data rights. Washington residents have additional rights over consumer health data, including the right to withdraw consent and the right to have that data deleted. Those rights are described in our Consumer Health Data Privacy Policy.

To exercise any of these, contact our Privacy Officer using the information below.

Most of our communication with patients happens by email and through the patient portal.

By giving us your email address, you agree that we may contact you there about your care, your appointments, your results and administrative matters, and about services you have inquired about. Clinical information is sent through the patient portal or through our secure messaging system rather than by ordinary email whenever practical. Ordinary email is not a secure channel, and you may ask us to communicate with you only through the portal at any time.

By giving us your telephone number, you agree that we may call or text you at that number about the same matters. Message and data rates may apply.

Consent to marketing messages is not a condition of receiving care. Reply STOP to opt out of text messages and HELP for assistance. Opting out of marketing does not stop clinical and administrative messages about your care.

Children’s Privacy

Our services are intended for individuals 18 years of age and older. We do not knowingly collect personal information from anyone under 18 through this website. If you believe a minor has provided us information through the site, contact us and we will delete it.

Third-Party Links

Our website may link to sites we do not operate, including our patient portal, our online store, our supplement dispensary and educational resources. We are not responsible for the privacy practices of those sites. Review their policies before providing information.

Changes to This Policy

We may update this policy. The effective date above reflects the version currently in force, and the review date reflects the last time we checked it against our practices. Material changes will be announced on this page, and where the change affects consumer health data, we will obtain consent before applying it to data already collected.

Contact Us

Asymmetric Health, PLLC
Attn: Privacy Officer
8282 28th Ct NE, Suite C
Lacey, WA 98516
Telephone: 360-706-1808
Email: support@asymmetrichealth.com
Schedule: /contact/