Privacy Policy

A legal disclaimer

2) Privacy Policy

2.1 Overview

This Privacy Policy explains what personal information we collect, how we use it, and your choices. This Policy applies to the Site, bookings, and communications.

2.2 Are We a HIPAA Covered Entity?

We generally operate as a coaching/advocacy business, not a HIPAA-covered entity. If we sign a Business Associate Agreement (BAA) with a covered entity (e.g., your clinic, a health plan), HIPAA obligations may apply only to that contracted activity. Otherwise, HIPAA does not apply to our routine coaching Services. We still treat your information confidentially and with care.

2.3 Information We Collect

You provide: contact details, demographics, intake forms, goals, appointment notes you choose to share, payment information (processed by our payment processor), and communications with us.
Automatically collected: device/browser data, IP address, pages viewed, time on page, referring URLs, and basic analytics via cookies or pixels.
From third parties: calendar platforms, video tools (e.g., Zoom), payment processors, or referral sources as needed to deliver Services.

2.4 How We Use Information

Provide, schedule, and improve the Services
Communicate with you (confirmations, reminders, updates)
Process payments and manage accounts
Send educational content or marketing emails (you can opt out)
Maintain security, prevent fraud, comply with law

2.5 Legal Bases (if in the EEA/UK)

When applicable: consent, contract performance, legitimate interests (service delivery, security), legal obligations, or vital interests.

2.6 Sharing

We share information with service providers (e.g., Wix, Wix Bookings, payment processors, email/CRM, video platforms) under contracts that require them to protect your data. We may share as required by law or to protect rights and safety. We do not sell your personal information.

2.7 Retention

We keep information only as long as necessary for the purposes above and to meet legal/recordkeeping requirements. We then delete or anonymize it.

2.8 Your Choices

Email: unsubscribe links in marketing emails.
Cookies: manage preferences via your browser and any cookie banner.
Access/Correct/Delete: email us at inrhythm.healthadvocate@gmail.com. We’ll respond as required by applicable law.

2.9 Security

We use reasonable administrative, technical, and physical safeguards. No system is 100% secure.

2.10 Children’s Privacy

Our Services are for adults. If you believe a minor provided information without guardian consent, contact us to remove it.

2.11 International Transfers

If you access the Site from outside the U.S., your data may be processed in the U.S. and subject to U.S. law.

2.12 Changes

We may update this Policy; see the Effective Date above.

2.13 Contact

Privacy questions: inrhythm.healthadvocate@gmail.com.