Privacy Policy

Align Integrative Wellness, LLC (“Align,” “we,” “us,” or “our”) provides this Privacy Policy to explain how we collect, use, share, and protect information about you when you visit our website, schedule a consultation, become a patient, or otherwise interact with our services.

About protected health information: Information collected during the provider-patient relationship is “protected health information” (PHI) and is governed by our HIPAA Notice of Privacy Practices, which controls over this policy where they conflict. See our HIPAA Notice of Privacy Practices for the full description of how we use and disclose PHI.

1. Information we collect

Information you give us directly

When you fill out a consultation form, intake form, or otherwise contact us, we collect:

• Identifying information (name, email, phone, mailing address)
• State of residence (we treat patients physically located in Utah)
• Reason for inquiry (free-text field on intake forms)
• Health and clinical information you provide during intake or visits (becomes PHI)
• Payment information (processed by our payment processor; we do not store full card numbers)

Information collected automatically

• Device and browser information (user agent, screen size, language)
• Approximate location (derived from IP, not GPS)
• Pages viewed, links clicked, time on page (privacy-respecting analytics, we do not use cookies that track you across other sites)
• Referrer URL (the site you came from)

Information from third parties

• Lab results from LabCorp, Quest, and specialty labs you authorize us to order
• Pharmacy fulfillment status from compounding pharmacies we partner with
• Information from health-data integrations you specifically authorize

2. How we use your information

• To provide and improve our healthcare services
• To schedule, conduct, and follow up on consultations and visits
• To order labs and prescriptions on your behalf
• To communicate with you about appointments, results, and care
• To process payments
• To comply with legal and regulatory obligations
• To improve our website and service quality (in aggregate, non-identifying form)

3. How we share your information

We do not sell your personal information or PHI, ever. We share information only in the following circumstances:

• Treatment, payment, and healthcare operations. We share PHI with our providers, our scheduling and EHR platform, our compounding pharmacy partners, and labs (LabCorp, Quest, specialty labs) as necessary to provide your care.
• HIPAA business associates. Vendors who handle PHI on our behalf are bound by HIPAA business associate agreements.
• Service providers. Payment processors, email/SMS providers, hosting providers. They may only use your information to perform services for us.
• Legal requirements. If required by law, court order, or to protect our rights and safety or yours.
• With your authorization. For any sharing not described above, we will ask for your specific written authorization.

4. Cookies and analytics

Our website uses minimal first-party analytics (e.g., Cloudflare Web Analytics) that do not require cookies and do not track you across other websites. We do not use third-party advertising trackers or social media pixels for behavioral retargeting on this site.

Some forms use Cloudflare Turnstile (a privacy-respecting alternative to CAPTCHA) to prevent spam. Turnstile does not track users across sites.

5. Your rights

HIPAA rights (for patients)

As a patient, you have specific rights under HIPAA regarding your PHI. See our HIPAA Notice of Privacy Practices for the full list, including your right to access, amend, restrict use, and obtain an accounting of disclosures.

California rights (CCPA/CPRA)

If you are a California resident, you have the following rights regarding your personal information (other than PHI, which is governed by HIPAA):

• Right to know what personal information we collect, use, disclose, and sell (we do not sell)
• Right to delete personal information (subject to legal exceptions, including healthcare records retention)
• Right to correct inaccurate personal information
• Right to limit use and disclosure of sensitive personal information
• Right to non-discrimination for exercising your rights

To exercise California rights, contact us at care@alignintegrative.com. We will verify your identity before processing requests.

Other state rights

Residents of other states with comprehensive privacy laws (Colorado, Connecticut, Virginia, Utah, others) may have similar rights. Contact us at care@alignintegrative.com to exercise any rights provided by your state.

6. Data retention

We retain healthcare records as required by Utah law (typically a minimum of 7 years from the last patient encounter, longer for certain records). Non-clinical website data (analytics, contact form submissions) is retained for no longer than necessary for the purpose collected.

7. Children

Our services are intended for adults 18 and older. We do not knowingly collect information from children under 18. If you believe a child has provided us information, please contact us and we will delete it.

8. Security

We use administrative, physical, and technical safeguards to protect your information, including encryption in transit (HTTPS), access controls on PHI, and HIPAA-compliant infrastructure for clinical systems. No system is perfectly secure, but we work to protect your information appropriate to its sensitivity.

9. Updates to this policy

We may update this policy from time to time. The effective date at the top of this page reflects the most recent version. Material changes will be communicated via the contact information you have provided.

10. Contact

Questions about this policy or your information:
Align Integrative Wellness, LLC
Mailing address available on request
care@alignintegrative.com
(385) 316-1345

For HIPAA-specific complaints or to exercise HIPAA rights, see our HIPAA Notice of Privacy Practices.