HIPAA Compliant Privacy Policy

1. Introduction

Salix Compass™ ("we," "us," "our") operates as a social advocacy project fiscally sponsored by Evergreen Social Impact. This HIPAA compliant privacy policy for Washington State outlines how we protect your information at salixcompass.org.

We are committed to ensuring HIPAA compliant privacy practices for all healthcare data, adhering to both federal regulations and Washington State privacy laws, including the My Health My Data Act (MHMDA).

2. Washington My Health My Data Act (MHMDA) Notice

In accordance with Washington State law, we take extra precautions regarding "Consumer Health Data." While our public website is informational, any data collected that relates to your past, present, or future physical or mental health status is treated with the highest level of security and is never sold or shared for commercial purposes without your explicit consent.

3. HIPAA Compliant Privacy Framework and Weaver Crest Data Separation

Website vs. Hub

This general website Privacy Policy applies to non-patient interactions (partnerships, volunteer inquiries, general browsing).

Future HIPAA Compliant Patient Data

When Salix Compass begins providing direct navigation services, Protected Health Information (PHI) will be processed only through our secure, HIPAA-aligned Weaver Crest Hub. That PHI will be governed by HIPAA Business Associate Agreements (BAAs) with partner clinics and by a dedicated Weaver Crest/PHI privacy notice, which will supersede this general policy for those interactions.

Note: Weaver Crest is currently in development and uses synthetic (non-real) data only.

4. Information We Collect

• Direct Contact: Name, email, and professional affiliation when you contact us via privacy@salixcompass.org or other listed contact methods.
• Usage Data: IP addresses and browsing behavior collected via analytics tools to improve site performance and understand engagement with our content.
• Cookie Policy: We use essential cookies to ensure site functionality and limited analytics cookies to understand our advocacy impact.

5. Data Security & Retention

We utilize SSL encryption for all data in transit. We retain personal information only as long as necessary to fulfill the purposes outlined in our fiscal sponsorship agreement and applicable legal requirements in the State of Washington.

6. Your Rights

Under Washington law and GDPR-influenced best practices, you have the right to:

• Confirm if we are processing your data
• Request a copy of your data
• Request deletion of your personal information, subject to legal and contractual obligations

To exercise your rights: Contact our Privacy Lead at privacy@salixcompass.org