Consumer Health Data Privacy Policy
Last updated: September 29, 2026.
Why this document exists, separately
Several states, including Washington (My Health My Data Act), Nevada, and Connecticut, protect “consumer health data” as its own category, separately from HIPAA. This can cover information that reveals interest in or facts about your physical or mental health, even before you are a patient and even where HIPAA does not apply to that specific piece of information, such as something you type into a contact form describing a health concern. We treat this as applying to every visitor to this site.
This document works alongside our Privacy Policy and our practice’s Notice of Privacy Practices. If information you give us is protected health information under HIPAA, the Notice of Privacy Practices controls. This document covers consumer health data you may give us that is not yet part of a HIPAA medical record, most commonly something you write in a contact or inquiry form before your first appointment.
What we mean by “consumer health data”
Personal information that identifies your past, present, or future physical or mental health status, and is not otherwise protected as your medical record under HIPAA. For Fleurish, the realistic example is something you tell us in a website contact form, such as mentioning a health condition, a medication, or a specific health goal, before you have become a patient.
What we collect and why
We only collect consumer health data that you choose to type into a form on this website. We do not infer it, buy it, or collect it passively. When you submit a contact or inquiry form, whatever you write is used only to respond to your specific question or request.
We do not sell your consumer health data. Ever.
We do not sell consumer health data, and we do not share it with any third party for that third party’s own advertising or marketing purposes. This is an absolute rule on this site.
How we share consumer health data
Only with staff at South Bay Primary Medical Group who need it to respond to your message; with a service provider that operates a form or email tool on our behalf, under terms requiring them to protect it; or if required by law or to protect someone’s immediate safety. We do not share it with advertisers, data brokers, or advertising analytics tools. This site does not run advertising or remarketing pixels of any kind.
No geofencing
We do not use geofencing around Fleurish’s Chula Vista office or any other health care facility.
Your rights over your consumer health data
You have the right to confirm whether we are collecting, sharing, or selling your consumer health data (we do not sell it); to access it; to withdraw your consent to our collection or sharing of it at any time; and to request its deletion, including from any service provider we shared it with. We will not require an account or a fee to exercise these rights, and we will not discriminate against you for exercising them. If we deny a request, we will tell you why and how to appeal.
How to exercise your rights
Contact us using the information below and describe what you are asking for (confirm, access, withdraw consent, or delete). We will respond within a reasonable time.
How long we keep it
Only as long as needed to respond to your request and for a reasonable period afterward for our own records, then we delete it, unless you ask us to delete it sooner or the law requires us to keep it longer.
Changes to this policy
We may update this policy as the website and applicable law develop. The “last updated” date at the top shows when it last changed.
Contact us
Ciecal RC, Inc., doing business as South Bay Primary Medical Group
769 Medical Center Ct, Suite 303, Chula Vista, CA 91911
Phone: (619) 591-9001