Mativa
CONSUMER HEALTH DATA PRIVACY POLICY
Effective Date: 8/1/2026
1. SCOPE AND APPLICABILITY
This Consumer Health Data Privacy Policy (“Policy”) supplements Company’s Privacy Policy and applies solely to the extent required by applicable Consumer Health Privacy Laws. Except as expressly provided in this Policy, Company’s Privacy Policy governs Company’s collection, use, disclosure, retention, and other processing of Personal Information. Capitalized terms not defined in this Policy have the meanings assigned to them in the Privacy Policy or Terms of Service.
This Policy describes how Himmelman Family, LLC d/b/a Mativa (“Company,” “we,” “us,” or “our”) collects, uses, discloses, and otherwise processes Consumer Health Data through Company’s website and all related website features and functionality (collectively, the “Site”).
The Site is an informational directory that allows consumers to search for and view public listings for independent therapists. Consumers may use the Directory without creating an account or providing their name, contact information, payment information, medical records, treatment history, or other detailed clinical information to Company. To use certain search functionality, however, Consumers may select conditions, specialties, service needs, locations, or other health-related criteria to identify potentially relevant Therapists. Those selections and related Site activity may constitute Consumer Health Data.
This Policy does not apply to information collected directly by independent therapists, Listing Providers, or other third-party websites, platforms, or services. Information you provide directly to a therapist or other third party is governed by that party’s privacy practices and not by this Policy.
Company collects, uses, and shares Consumer Health Data only as described in this Policy, as reasonably necessary to provide a product or service requested by the consumer, with any consent required by applicable law, or as otherwise permitted or required by applicable law. If a provision of this Policy conflicts with applicable Consumer Health Privacy Laws, applicable law will govern to the extent of the conflict.
2. DEFINITIONS
“Consumer Health Data” has the meaning assigned under applicable Consumer Health Privacy Laws and generally means Personal Information that is linked or reasonably linkable to a consumer and identifies, reveals, or can reasonably be used to infer the consumer’s past, present, or future physical or mental health status, including information identifying or indicating that a consumer is seeking health-related services.
“Consumer Health Privacy Laws” means applicable laws regulating Consumer Health Data, including but not limited to, the Washington My Health My Data Act and Nevada laws governing the privacy and security of consumer health data, as amended from time to time.
“Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to an identified or identifiable individual, as defined by applicable law. Personal Information may include persistent identifiers such as an IP address, cookie identifier, or device or browser identifier.
3. CONSUMER HEALTH DATA WE COLLECT
Because the Directory focuses on healthcare and related services, certain information generated through a consumer’s use of the Site may constitute Consumer Health Data even though the consumer does not create an account or provide medical records, diagnoses, treatment information, or other clinical information to Company. Depending on how you use the Site, Company may collect the following categories of Consumer Health Data:
Directory Search and Browsing Information. Conditions, specialties, service needs, search terms, search criteria, filters, categories, location searches, and other selections or interactions that may indicate that a consumer is seeking fertility, pregnancy, postpartum, early-parenthood, perinatal mental-health, counseling, therapy, or related services.
Therapist and Listing Interaction Information. Information about therapist profiles, specialties, categories, or Listings viewed or selected; links or contact methods clicked; and similar Directory interactions that may identify or permit an inference that a consumer is seeking particular health-related services.
Location Information. Approximate location information derived from an IP address or location entered by a consumer to search for therapists in a particular area. Company does not intend to collect precise geolocation information through the Site.
Technical and Usage Information. IP address, cookie or browser identifiers, device and browser information, referring pages, timestamps, session information, and Site interactions when such information is linked or reasonably linkable to health-related searches, profile views, or other Directory activity.
Health-Related Inferences. Inferences reasonably derived from the information described above, such as an inference that a consumer may be seeking a therapist with a particular specialty, practice focus, location, or service modality.
Company does not request or intend to collect medical records, narrative descriptions of diagnoses or symptoms, treatment histories, medications, insurance information, appointment or intake information, clinical communications, or payment information from consumers through the Directory. Consumers should not submit patient records, protected health information, or other confidential clinical information to Company.
4. SOURCES OF CONSUMER HEALTH DATA
Company may collect Consumer Health Data from the following categories of sources:
Automatically Through the Site. Through cookies, server logs, tags, analytics technologies, and similar tools used when a consumer searches, browses, or otherwise interacts with the Site.
Directly from Consumers. From search terms, locations, filters, selections, privacy requests, inquiries to Company, or other information a consumer chooses to provide through the Site or directly to Company.
Service Providers. From vendors that provide hosting, security, analytics, content delivery, technical support, or other services on Company’s behalf, to the extent their services involve Consumer Health Data.
Advertising and Analytics Partners. From analytics, social media, advertising, and similar partners regarding referrals, campaign attribution, Site interactions, audience measurement, or conversion measurement, but only to the extent permitted by applicable law and subject to the limitations described in this Policy.
5. HOW WE USE CONSUMER HEALTH DATA
Company may collect, use, and otherwise process Consumer Health Data for the following purposes, to the extent permitted by applicable Consumer Health Privacy Laws:
Provide Requested Directory Functionality. To process search criteria and filters, display potentially relevant therapist Listings, support location-based searches using approximate location, and otherwise provide the Site functionality requested by the consumer.
Operate and Improve the Site. To operate, maintain, troubleshoot, test, evaluate, improve, and enhance the Site, Directory, search functionality, Listings, navigation, accessibility, and user experience.
Security and Fraud Prevention. To protect the Site, consumers, therapists, and Company; detect, investigate, prevent, and respond to fraud, abuse, malicious activity, unauthorized access, security incidents, and violations of Company’s agreements or policies.
Analytics and Measurement. To understand general Site usage, evaluate performance, identify trends, measure the effectiveness of Site features and communications, and create aggregated or deidentified analytics, provided that Company does not use identifiable Consumer Health Data for interest-based advertising or cross-context behavioral advertising.
Customer Support and Requests. To respond to questions, complaints, privacy requests, and other communications directed to Company.
Legal and Compliance. To comply with applicable law, respond to legal process or governmental requests, enforce Company’s agreements, protect rights and safety, and establish, exercise, or defend legal claims.
Aggregated and Deidentified Information. To create and use aggregated or deidentified information for analytics, benchmarking, Site improvement, research, and other lawful business purposes, provided that Company maintains such information in deidentified form and does not attempt to reidentify it except as permitted by law.
Company does not use identifiable Consumer Health Data to build advertising profiles, personalize advertisements based on a consumer’s health-related interests, or support cross-site targeted advertising. Company does not use a consumer’s Directory searches, search filters, or specific therapist-profile views for interest-based advertising.
6. HOW WE SHARE CONSUMER HEALTH DATA
Company may share Consumer Health Data only as reasonably necessary to provide a product or service requested by the consumer, with any separate consent required by applicable law, at the consumer’s direction, or as otherwise permitted or required by law. Depending on the circumstances, Company may share Consumer Health Data with the following categories of recipients:
Processors and Service Providers. Vendors that provide cloud hosting, content delivery, cybersecurity, analytics, technical support, communications, auditing, and other business functions on Company’s behalf. Such providers may process Consumer Health Data only as necessary to perform services for Company and consistent with applicable contractual obligations.
Professional Advisors. Attorneys, accountants, auditors, insurers, consultants, and other professional advisors where reasonably necessary to obtain advice, protect rights, or comply with legal obligations.
Government Authorities and Legal Recipients. Courts, regulators, law enforcement agencies, governmental authorities, or other recipients where disclosure is required or permitted by applicable law, legal process, or a valid governmental request, or is reasonably necessary to protect rights, property, or safety.
Corporate Transaction Participants. Actual or prospective purchasers, investors, lenders, merger partners, successors, or other participants in a proposed or completed financing, investment, merger, acquisition, asset sale, reorganization, bankruptcy, or similar transaction, subject to applicable law and appropriate confidentiality protections.
Company does not disclose a consumer’s identity, Directory search history, search filters, or specific therapist-profile views to Listing Providers or listed therapists merely because the consumer searched the Directory or viewed or selected a Listing. If a consumer independently contacts a therapist using contact information or an external link displayed in a Listing, the resulting interaction occurs directly with the therapist or third party and is governed by that recipient’s privacy practices.
Company does not share identifiable Consumer Health Data with advertising networks, social media platforms, data brokers, or other third parties for interest-based advertising, cross-context behavioral advertising, or the creation of health-related advertising profiles. Company may disclose non-health-related device or campaign information for advertising and measurement purposes as described in the Privacy Policy, but Company does not authorize advertising partners to receive or use Consumer Health Data for those purposes.
Specific Affiliates. Company does not currently share Consumer Health Data with any affiliate. If Company begins sharing Consumer Health Data with an affiliate, Company will update this Policy to identify the specific affiliate and, where required, obtain appropriate consent before the sharing begins.
7. THIRD-PARTY COLLECTION ACROSS WEBSITES
Company does not authorize any third party to collect Consumer Health Data over time and across different websites or online services when a consumer uses the Site for purposes of targeted advertising, interest-based advertising, data brokerage, or the creation of a health-related profile. Company may use service providers to collect limited information through the Site solely to provide analytics, security, hosting, or other services on Company’s behalf and consistent with this Policy.
8. SALE OF CONSUMER HEALTH DATA
Company does not sell Consumer Health Data and does not offer Consumer Health Data for sale. Company will not sell Consumer Health Data without first obtaining a valid written authorization that is separate and distinct from any consent to collect or share Consumer Health Data and that satisfies all requirements of applicable law. Company does not condition access to the Directory on authorization to sell Consumer Health Data.
9. GEOFENCING
Company does not use geofencing technology around medical facilities, mental health practices, reproductive or sexual health facilities, or other locations providing in-person healthcare services for the purpose of identifying or tracking consumers seeking healthcare services, collecting Consumer Health Data, or sending health-related notifications, messages, or advertisements.
10. YOUR CONSUMER HEALTH PRIVACY RIGHTS
Subject to applicable Consumer Health Privacy Laws, you may have the right to:
confirm whether Company is collecting, using, sharing, or selling Consumer Health Data concerning you;
access Consumer Health Data concerning you that Company maintains;
obtain a list of the third parties and affiliates with whom Company has shared or sold Consumer Health Data concerning you, including available contact information where required by law;
withdraw consent to future collection or sharing of Consumer Health Data where Company relies on your consent;
request that Company cease collecting or sharing Consumer Health Data concerning you;
request deletion of Consumer Health Data concerning you, subject to applicable exceptions and permitted backup-retention periods;
appeal Company’s denial of a request where applicable law provides an appeal right; and
exercise your rights without unlawful discrimination.
These rights are subject to applicable legal limitations and exceptions. Because consumers generally use the Directory without creating an account, Company may not be able to identify or locate information that is not reasonably linkable to the requesting consumer. Company may request information reasonably necessary to authenticate a request, such as information about the browser, device, cookie identifier, approximate date of use, or Site interactions associated with the request.
11. HOW TO EXERCISE YOUR RIGHTS
You or your authorized representative may submit a Consumer Health Data request through the following secure and reliable method(s):
Email. [PRIVACY EMAIL ADDRESS]
Mail. Mativa, Attn: Privacy Officer, [101 W 87TH St. Apt. 907, New York, NY 10024]
Company may take reasonable steps to authenticate your identity and, where applicable, the authority of an authorized representative. Company will not require you to create a new account to exercise your rights. If Company cannot authenticate a request using commercially reasonable efforts, Company may request additional information or decline to act as permitted by law.
Company will respond within the time required by applicable law. Information provided in response to a request will be provided free of charge at least as often as required by applicable law. Company may charge a reasonable fee for requests that are manifestly unfounded, excessive, or repetitive and, where permitted by applicable law, may decline to act on such requests. Company will provide any explanation, notice, or appeal rights required by applicable law.
If Company denies a request and applicable law provides a right to appeal, Company will provide instructions for submitting an appeal. Appeals may be submitted using the contact methods above with the subject line “Consumer Health Data Appeal.”
You may also limit future collection of browser-based information by adjusting your cookie preferences, deleting or blocking cookies, or using the privacy controls described in Company’s Privacy Policy. Those actions may not delete information already maintained by Company; a deletion request may be submitted using the methods above.
12. DATA SECURITY
Company maintains administrative, technical, and organizational safeguards designed to protect the confidentiality, integrity, and availability of Consumer Health Data and to restrict access to personnel, processors, and contractors with a need to process the information for purposes consistent with this Policy. No method of transmission, network, or electronic storage is completely secure, and Company cannot guarantee absolute security.
13. CHANGES TO THIS POLICY
Company may revise this Policy from time to time to reflect changes in the Site, Company’s information practices, applicable law, or other operational, legal, or regulatory requirements. Company will update the Effective Date above and provide any additional notice or obtain any additional consent required by applicable law before materially expanding the categories of Consumer Health Data collected, the purposes for processing, or the third parties or affiliates with whom Consumer Health Data is shared.
14. CONTACT US
Questions about this Policy or Company’s Consumer Health Data practices may be directed to:
Mativa Attn: Privacy 101 W 87th St. Apt. 907
New York, NY, 10024
Privacy@mativa.co
Mativa.co