Your Washington privacy rights
Consumer health data policy · Last updated October 16, 2026
Washington’s My Health My Data Act gives Washington residents rights over consumer health data. This page explains what JoyWell collects through www.joywellcounseling.com, why, and how to exercise those rights. For everything else about the website, see the privacy policy.
Information protected by HIPAA instead
Clinical information about people Katie Hevesi treats — session notes, assessments, diagnoses, billing records — is protected health information under HIPAA. The My Health My Data Act does not apply to it. That information is governed by her Notice of Privacy Practices, which you receive with your intake paperwork.
What this website collects
The waitlist form collects your name, email address, phone number, the state you’ll be in during sessions, and whether the support is for yourself, your teen, or your family. Choosing to contact an eating disorder practice can itself suggest something about health, so JoyWell treats these submissions as consumer health data for Washington residents even though the form asks for no clinical detail and has no free-text field for one.
The website sets no cookies and runs no analytics, advertising, or tracking scripts. The web host records standard server request logs.
Where it comes from
Directly from you, when you submit the waitlist form. JoyWell does not buy or obtain it anywhere else.
Why it is collected
To reach you when a session spot opens, to arrange a free consultation call, and, if you decide to work together, to begin intake. It is not used for advertising or profiling.
Who it is shared with
JoyWell does not sell consumer health data and shares it only with:
- Vercel — website hosting, which processes standard server request logs.
- The practice’s secure intake system — receives and stores form submissions under a business associate agreement.
- Government agencies or others, only where the law requires it.
Your rights
As a Washington resident, you can:
- Confirm whether JoyWell holds consumer health data about you, and get a copy of it.
- Get a list of the third parties it has been shared with, along with contact information for each of them.
- Withdraw consent to its collection and sharing.
- Have it deleted.
To make a request, contact Katie through the waitlist form. You’ll get a response within 45 days, which can be extended once by another 45 days where the request is complex; you’ll be told if that happens. There is no charge, and you will not be treated differently for making a request.
Appeals
If a request is denied, you can appeal by replying to the response. If the appeal is denied, you may submit a complaint to the Washington State Attorney General at atg.wa.gov/file-complaint.