The Washington My Health, My Data Act ("MHMDA") provides consumers residing in Washington and consumers whose consumer health data is collected in Washington ("Washington Consumers", "you", or "your") with specific rights regarding their consumer health data. This Consumer Health Data Privacy Policy ("WA Policy") supplements the Navara Online Privacy Policy ("Policy") and applies solely to Washington Consumers.
This WA Policy also explains your rights regarding your consumer health data and how you can exercise those rights. This WA Policy describes the practices of Navara ("Navara", "we", "us" or "our") regarding the collection and use of consumer health data we collect from Washington Consumers.
At Navara, we strive to help consumers find the right insurance solutions by connecting them with licensed insurance providers. In doing so, we may collect and/or use the consumer health data of Washington Consumers. In this WA Policy, consumer health data has the meaning described below and excludes certain information subject to other laws.
Consumer health data is defined for purposes of this WA Policy and the MHMDA as personal information that is linked or reasonably linkable to a Washington Consumer and that identifies the Washington Consumer's past, present, or future physical or mental health status.
Consumer health data may include, for example, information collected directly from you if you use certain services available on our sites or information that you voluntarily provide, such as information you provide in response to a questionnaire or when requesting an insurance quote.
We may also collect or receive consumer health data about you through or from our business partners, insurance carriers and agents, and service providers that perform services for us or for you, or to offer insurance products and services to you. Please see the "Sources of consumer health data and business purposes for collection and use" section of this WA Policy to learn more about how we may collect and/or use your consumer health data.
Exclusions from Consumer Health Data Under MHMDA
Under the MHMDA and the unique consumer rights described below, consumer health data does not include:
Consumer Health Data We May Collect
We may collect and/or use the following types of consumer health data:
Individual Health Conditions, Treatments, Diseases, or Diagnosis
This may include physical characteristics or descriptions, medical conditions, health history, symptoms, and other medical information relevant to obtaining insurance quotes.
Social, Psychological, Behavioral, and Medical Interventions
This may include personal information relating to treatments, rehabilitation, equipment usage, and assistance with activities of daily living that may be relevant to insurance coverage needs.
Health-Related Surgeries or Procedures
This may include personal information relating to a current surgery, history of surgery that may affect insurance eligibility or pricing.
Use or Purchase of Prescribed Medication
This may include personal information relating to current or historical prescription drug use that may be relevant to insurance quotes.
Bodily Functions, Vital Signs, Symptoms, or Measurements of Other Types of Consumer Health Data
This may include personal information relating to health metrics that may be relevant to insurance coverage.
Diagnoses or Diagnostic Testing, Treatment, or Medication
This may include personal information relating to medical diagnoses and treatment history relevant to insurance needs.
Reproductive or Sexual Health Information
This may include personal information relating to pregnancy or reproductive health that may be relevant to insurance coverage.
Data That Identifies a Consumer Seeking Health Care Services
This may include personal information relating to your health insurance needs and coverage preferences.
We collect your consumer health data directly from you when you request insurance quotes or seek information about insurance products and services through our website or communications with us.
Business Purposes for Collection and Use
We may collect and/or use your consumer health data for the following business purposes:
A Purpose You Direct
You direct us to collect and/or use your consumer health data to:
Connecting You with Insurance Providers
We share your consumer health data with licensed insurance carriers and agents so they can provide you with accurate insurance quotes based on your health information and insurance needs.
Legal and Regulatory Compliance
For example, this may include preventing, detecting, or protecting against illegal activity, such as noncompliance with applicable laws and regulations.
Quality Assurance
For example, this may include customer service, training, and performance management activities to improve our services.
For purposes of the MHMDA, we share consumer health data with:
We do not share consumer health data with third parties for marketing purposes unrelated to facilitating your insurance quote requests.
We may collect and/or use the types of consumer health data described above for the business purposes identified, including:
When you submit your information through our website requesting insurance quotes, you consent to our collection and sharing of your consumer health data with licensed insurance carriers and agents for these purposes.
You may have the right to withdraw your consent for us to collect and/or use your data in the future, as described below.
Subject to certain legal limitations and exceptions, you may be able to exercise some or all of the following rights:
Right to Confirm and Access
You may have the right to request us to confirm whether we collect your consumer health data and to disclose the consumer health data we collect about you.
Right to Delete
You may have the right to request us to delete any of your consumer health data we collect and retain (and direct our processors and contractors to do the same).
Right to Withdraw Consent
You may have the right to withdraw your consent for us to collect and/or use any of your consumer health data in the future (and direct our processors and contractors to do the same).
Exceptions
We may deny your request if retaining the consumer health data is reasonably necessary for us to:
Other legal limitations and exceptions may also apply.
How to Submit A Request to Exercise Your Rights
To exercise any of the rights described above, you may submit a request either by:
We will consider only those requests submitted using these two options.
Exercising Your Right to Confirm and Access, Delete and Withdraw Consent
Only you or your authorized agent may make an authenticated consumer request to confirm and access, delete, or withdraw consent regarding your consumer health data. If you use an authorized agent to submit an authenticated consumer request on your behalf, we will require you to provide additional information as described below. You may make an authenticated consumer request on behalf of your minor child.
Authentication Process
In order to authenticate your identity to process your request, we will request your full name, street address, city, zip code, phone number, and email address. For us to treat your request as an authenticated consumer request, you must:
We cannot respond to your request or provide you with consumer health data if we are unable to: (a) authenticate your identity or authority to make the request, (b) confirm the personal information we have in our systems relates to you, or (c) locate your information in our systems. If the information you provided us does not match our records, in certain circumstances we may request additional information from you.
Authorized Agents
In certain circumstances, an authorized agent may submit a rights request for you. An authorized agent is a natural person or business entity to whom you have given permission to submit a request on your behalf. An authorized agent must submit a request using one of two designated methods described above. We must be able to authenticate the authorized agent has the authority to act on your behalf. In order to authenticate the authorized agent's authority, we generally require evidence of either:
Depending on the evidence provided, we may still need to separately reach out to you to confirm the authorized agent has permission to act on your behalf and to authenticate your identity in connection with the request.
We endeavor to respond to an authenticated consumer request to confirm and access, delete, or withdraw consent within forty-five (45) days of its receipt. If we require more time (up to 45 additional days), we will inform you of the reason and extension period in writing. We will deliver our written response by mail or electronically, at your option. The response we provide will also explain the reasons we cannot comply with a request, if applicable.
We do not charge a fee to process or respond to your authenticated consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
We reserve the right to amend this WA Policy at our discretion and at any time. When we make changes to this WA Policy, we will post the updated WA Policy on the website and update the WA Policy's effective date.
Changes to the WA Policy will not affect our use of previously provided consumer health data.
If you have any questions about this WA Policy, the ways in which we may collect and use your consumer health data described in this WA Policy, and your choices and rights regarding such use, please feel free to contact us by:
Email: [email protected]
US Mail: Navara [Your Business Address] [City, State ZIP] Attention: Privacy Officer
If we have denied your request to exercise your rights under the MHMDA, you may appeal our denial. Please submit your appeal request by:
Email: [email protected]
Last Updated: December 3, 2025