Washington and Arizona
Last Updated: July 21, 2026
This Policy explains how Vineyard Park Senior Living handles consumer health data protected by Washington’s My Health My Data Act and health-related information that may be protected under Arizona privacy and data-security law. It supplements our Website Privacy Policy.
Our general website forms are not intended for medical records or detailed clinical information. Information submitted through a general website inquiry may not be protected by the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”). Even so, health or care-related information you choose to provide will be handled as described in this Policy.
This Policy does not apply to protected health information governed by HIPAA or information exempt under other applicable health privacy laws.
1. Who This Policy Covers
Washington. This Policy applies when Washington’s My Health My Data Act covers consumer health data we collect. Consumer health data generally means personal information linked or reasonably linkable to a person that identifies past, present or future physical or mental health status, including information showing that a person is seeking health-related services.
Arizona. Arizona law may treat certain medical or mental health treatment or diagnosis information as protected personal information when combined with identifying information. Arizona’s law focuses on security incidents and required breach notices. The Washington-specific rights in Section 6 apply only when Washington law applies.
2. Consumer Health Data We May Collect
We may collect the following information when you choose to provide it or when it is necessary to respond to your request:
- The type of senior living or care service being considered, including assisted living, memory care, respite care or related support.
- General information about memory loss, cognitive changes, mobility, assistance needs, health conditions, diagnoses or medication support included in an inquiry.
- Health or care information about another person when submitted by an authorized family member, representative or referral source.
- Website activity or other information that may indicate interest in a health-related service when it is linked or reasonably linkable to an individual.
Please do not submit medical records, insurance identification numbers, Social Security numbers or detailed clinical information through a general website form.
3. Sources of Consumer Health Data
We may receive consumer health data:
- Directly from you or from a person acting on your behalf.
- From a family member, authorized representative, referral or placement partner or healthcare provider acting at your direction.
- From your interaction with our website, communications and service providers.
4. How We Use Consumer Health Data
We use consumer health data only to:
- Respond to your inquiry and provide the information or service you requested.
- Help identify a community, service or level of support that may meet the needs described.
- Schedule a tour, assessment or follow-up communication.
- Maintain security, prevent fraud and protect people and our Services.
- Comply with law and protect legal rights.
We do not use consumer health data for targeted advertising, unrelated marketing, audience building or unrelated research without the consent required by law.
When Washington law requires consent, we obtain it before collecting or sharing consumer health data. Otherwise, we collect or share the data only to the extent necessary to provide a service the consumer requested. Consent to collect and consent to share are requested separately when required.
5. Consumer Health Data We Share
We may share the categories of consumer health data listed in Section 2 only as needed for the purposes described in this Policy. We may share it with:
- CarePartners Management Group, LLC dba Vineyard Park Senior Living.
- The legal operating entity for the Vineyard Park community identified in your inquiry.
- Other specific affiliated or managed entities when needed to respond to your request.
- Contracted service providers that support our website, customer relationship management, communications, hosting, security and data storage.
- A representative, referral partner, healthcare provider or other party when you direct us to share it.
- Government agencies, regulators, law enforcement, courts or professional advisers when required by law or reasonably necessary to protect rights and safety.
We do not sell consumer health data.
6. Your Rights
Washington rights. When Washington’s My Health My Data Act applies, you may:
- Confirm whether we collect, share or sell your consumer health data and access that data.
- Receive a list of third parties and affiliates with whom we shared or sold your consumer health data and available contact information for those parties.
- Withdraw consent to future collection or sharing.
- Request deletion of your consumer health data.
A deletion request will be sent to applicable affiliates, processors, contractors and other third parties. Deletion from archived or backup systems may take up to six months where permitted by law. We will not discriminate against you for exercising a right.
Arizona residents. Arizona law does not provide the same consumer health data request rights. You may still contact us about your information and we will respond as required by applicable law. If a security breach affects personal information covered by Arizona law, we will provide notice as required.
7. How to Submit a Washington Request or Appeal
Submit a request by email [privacyrequest@vineyardparkliving.com]. We may request information reasonably necessary to verify your identity or authority.
We will respond without undue delay and generally within 45 days. When reasonably necessary, we may extend the response period once for up to 45 additional days and will explain the extension. Requests are free up to twice each year unless a request is manifestly unfounded, excessive or repetitive.
If we deny a request, you may appeal through the same form or email address. We will respond to the appeal within 45 days. If the appeal is denied, you may submit a complaint through the Washington Attorney General’s website.
8. Retention and Security
We retain consumer health data only as long as reasonably necessary for the purposes described in this Policy and as permitted or required by law. We restrict access to people and service providers who need it for those purposes and use reasonable administrative, technical and physical safeguards. We investigate suspected security incidents and provide notices to affected Washington or Arizona residents when required by applicable law.
9. Changes and Contact
We may update this Policy as our practices or legal requirements change. We will post the updated Policy and revise the Last Updated date.
Questions, requests or appeals may be submitted by email at privacyrequest@vineyardparkliving.com or by mail to:
Attn: Privacy Request
Vineyard Park Senior Living
7900 SE 28th Street, Suite 412
Mercer Island, WA 98040