Privacy Policy
Last updated: May 5, 2026 · Elia is operated by Avenor Health, Inc.
This Privacy Policy explains what information Elia collects, how we use it, and the rights you have. We do not sell personal health information to data brokers or advertisers.
Information we collect
Information you provide during the symptom-pattern review (age band, symptom selections, state of residence) and any optional contact details you submit (email, phone). If you book a clinician visit, we collect the clinical history and answers required for that visit.
Technical information (browser, device, approximate location, anonymized session events) is collected to operate the site and detect abuse.
How we use information
To deliver the review and any clinician care you request; to keep the service safe and operational; to comply with healthcare and consumer-protection law; and, only with your separate opt-in, to send you informational updates.
Sharing
We share your information only with: licensed clinicians providing your care; partner laboratories you choose to use; partner pharmacies where a clinician has prescribed; payment processors strictly to process your transactions; and service providers bound by contracts that limit use to running this service.
We never sell, lease, or rent personal health information to third-party data brokers, advertisers, or marketing networks.
HIPAA
Where Elia provides clinical services, we operate under HIPAA-aligned safeguards: enterprise-grade encryption in transit and at rest, audited access controls, and Business Associate Agreements with subprocessors that handle Protected Health Information. Information collected on the public marketing site (including pre-account symptom-pattern reviews) is not HIPAA-protected by default unless you have established a clinician relationship.
Data retention
We retain clinical records for the period required by state and federal medical-records law, typically seven years from the last visit. Marketing-only contact information is retained until you opt out.
Your rights
You can request a copy of your information, ask us to correct it, or request deletion (subject to clinical-record retention obligations). Contact privacy@elia.health.
Washington Consumer Health Data Privacy notice (WA MHMD Act)
If you are a Washington resident, you have additional rights under the Washington My Health My Data Act:
- The right to know what consumer health data we collect, share, and sell. Elia does not sell consumer health data.
- The right to withdraw consent for collection of consumer health data.
- The right to have your consumer health data deleted.
- The right to appeal a denial of any of these requests.
To exercise these rights, email privacy@elia.health with the subject line “WA MHMD Request.”
California privacy addendum (CCPA / CPRA)
California residents have the right to know what personal information we collect, the right to delete personal information, the right to correct inaccurate personal information, and the right to opt out of any sale or sharing. Elia does not sell or share personal information for cross-context behavioral advertising.
To exercise these rights, email privacy@elia.health with the subject line “California Privacy Request.”
Changes to this policy
If we update this policy materially, we will notify you in advance by email (if you have an account) and post the change on this page with a new “Last updated” date.
Contact
Avenor Health, Inc. · Attn: Privacy · privacy@elia.health