Privacy Policy

1. Scope & relationship to HIPAA

This policy covers personal information the public marketing site collects. It is not the HIPAA Notice of Privacy Practices (NPP). Protected health information (PHI) is handled only inside our secure patient portal; the patient NPP is provided there. We ask that you do not submit health details through this website. See our Medical Disclaimer. [Link to patient portal NPP — counsel to confirm URL.]

2. Information we collect

• Contact-form fields you choose to submit (name, email, phone, message).
• Email and phone if you reach out to us directly.
• Analytics identifiers, cookies, IP, and device/browser data on public pages.
• We explicitly ask you not to submit health details, conditions, or medication names through this site.

3. How we use information

To respond to inquiries, improve the site, and operate our services. [Counsel: confirm "we do not sell or share your personal information" accuracy before publishing.]

4. Cookies & tracking

We use essential cookies and, with consent, analytics cookies. Trackers are stripped from the intake funnel (/get-started), contact, and thank-you pages, and no form field values are transmitted to analytics. [Link to a Cookie Policy if a stand-alone page is adopted.]

5. Sharing & service providers

We share data with service providers under contract (and a Business Associate Agreement where applicable). [Counsel: supply confirmed processor/BAA list.]

6. California privacy rights (CCPA/CPRA)

California residents may have rights to know, delete, and correct personal information, to opt out of sale/share, and to limit use of Sensitive Personal Information, without discrimination. HIPAA-covered PHI is exempt; non-PHI website data is covered. [Counsel: confirm CCPA thresholds and request mechanism.]

7. Other state privacy rights

Residents of other states (e.g., VA, CO, CT, TX, OR) may have similar rights. Consumer health data may be subject to a separate Consumer Health Data Privacy Policy (e.g., WA My Health My Data Act). [Counsel: confirm applicability and add pointer/page.]

8. Retention & security

We retain personal information only as long as needed and apply reasonable safeguards. [Counsel: align retention periods.]

9. Children

Our services are for adults (18+) and this site is not directed to children under 18.

10. Changes & contact

We may update this policy; the "Last updated" date reflects the latest revision. Questions? Email hello@rez-wellness.com.