Consumer Health Data
This section may also be published as a standalone Consumer Health Data Privacy Policy.
Our regulatory position, stated plainly
Lōkahi Holistic Healing operates as a direct-to-consumer practice. We do not bill insurance and we do not conduct electronic transactions with health plans. As a result, we are generally not a HIPAA covered entity, and the information we hold is not “Protected Health Information” as HIPAA defines it.
That does not mean your health information is unprotected. Health information held outside HIPAA is governed by consumer health data laws, the FTC Health Breach Notification Rule, and state privacy laws. We handle your information in accordance with those requirements, and the practices below apply regardless of which framework governs.
What we consider consumer health data
Information that identifies your past, present, or future physical or mental health status, including laboratory results, symptoms, health conditions, treatments, and any inference we could draw about your health from your interactions with us.
Where it lives, and where it does not
- Clinical information lives in our clinical systems, which are purpose-built for that use and access-controlled.
- Our website and customer relationship management system hold only your name, contact details, which program you are interested in, how soon you would like to begin, and how you heard about us.
- We do not collect date of birth on our website form. We ask for an age range instead. Exact date of birth is collected later, in our clinical intake, where it is required for laboratory requisitions.
- Laboratory results are never sent by email or text message. We will tell you that results are ready and invite you to schedule a review. The results themselves are discussed with you directly.
Consent
We collect consumer health data only with your consent, and only for the purposes you have consented to. Consent is requested separately and specifically — it is not bundled into acceptance of these terms or into any other agreement.
We do not sell your health data
We do not sell consumer health data. We do not share it for targeted advertising, and we do not use it for advertising purposes of any kind.
Your rights regarding health data
You may request to:
- Confirm whether we are collecting, sharing, or selling your consumer health data
- Access the consumer health data we hold about you
- Receive a list of third parties with whom we have shared it
- Have your consumer health data deleted
- Withdraw your consent at any time
To make a request, contact us at info@lokahi.co. We will respond within the timeframes required by applicable law. We may need to verify your identity before responding.
Who we share it with
Health information is shared only with those who need it to deliver your care:
- The CLIA-certified laboratory that performs your testing
- Our clinical records system, which stores your intake and results
- Practitioners directly involved in your care
Each is bound by contractual confidentiality obligations. We do not share health information with advertising platforms, data brokers, or analytics providers.