Privacy Policy

Functional Feminine

Effective Date: January 28, 2026

Last Updated: January 28, 2026

Introduction

Functional Feminine ("we," "us," or "our") is committed to protecting your privacy and safeguarding your personal information. This Privacy Policy explains how we collect, use, disclose, and protect your information when you visit our website (functionalfeminine.com) or use our services.

As a functional nutrition practice specializing in postnatal depletion recovery, we handle sensitive health information and are committed to compliance with the Health Insurance Portability and Accountability Act (HIPAA), the General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA).

By using our website or services, you agree to the terms of this Privacy Policy. If you do not agree, please do not use our website or services.

Information We Collect

We collect several types of information to provide and improve our services.

Personal Information

Personal information is data that can identify you as an individual. We collect personal information when you voluntarily provide it to us, including:

• Contact Information: Your name, email address, phone number, mailing address, and other contact details you provide when you fill out forms, book consultations, or communicate with us.
• Account Information: If you create an account on our website, we collect your username, password, and account preferences.
• Payment Information: When you purchase services, we collect payment card information through our secure payment processor. We do not store complete payment card information on our servers.
• Communication Information: Records of your communications with us, including emails, text messages, phone calls, and consultation notes.

Protected Health Information (PHI)

As a healthcare provider, we collect Protected Health Information as defined by HIPAA. This includes:

• Health History: Information about your medical history, symptoms, diagnoses, medications, allergies, and previous treatments.
• Lab Results: Functional lab test results, including Hair Tissue Mineral Analysis (HTMA), hormone panels, thyroid tests, gut health tests, and other diagnostic information.
• Treatment Information: Details about your nutrition protocols, supplement recommendations, meal plans, and progress notes.
• Demographic Information: Date of birth, gender, pregnancy history, number of children, and other demographic data relevant to your care.

We collect PHI only with your explicit consent and use it solely for the purpose of providing healthcare services to you.

Automatically Collected Information

When you visit our website, we automatically collect certain information about your device and browsing behavior:

• Device Information: IP address, browser type, operating system, device type, and unique device identifiers.
• Usage Information: Pages you visit, time spent on pages, links clicked, referring website, search terms used, and other browsing behavior.
• Location Information: General geographic location based on your IP address (city, state, country).
• Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to collect information about your website usage.

How We Use Your Information

Providing Healthcare Services

We use your personal information and PHI to provide functional nutrition services, including conducting consultations, analyzing lab results, creating personalized supplement protocols, developing customized meal plans, monitoring your progress, and communicating with you about your care.

Business Operations

We use your information to process payments, send appointment reminders, respond to your inquiries, manage your account, and improve our services.

Marketing and Communications

With your consent, we may use your contact information to send newsletters, educational content, promotional offers, and updates about our services. You can opt out of marketing communications at any time.

Legal Compliance

We may use your information to comply with legal obligations, respond to legal requests, enforce our Terms of Service, protect our rights and property, and prevent fraud or illegal activities.

How We Share Your Information

We do not sell your personal information or PHI to third parties. We may share your information in the following circumstances:

Service Providers

We share information with trusted third-party service providers who assist us in operating our business, including payment processors (Stripe), email service providers, appointment scheduling platforms, website hosting providers, and analytics providers. These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

Healthcare Providers

With your explicit consent, we may share your PHI with other healthcare providers involved in your care. We will only share information necessary for coordinated care.

Legal Requirements

We may disclose your information if required by law, including in response to court orders, subpoenas, or government requests.

Your Rights and Choices

You have certain rights regarding your personal information and PHI:

• Access and Correction: You have the right to access your personal information and PHI. You may request a copy by contacting us.
• Deletion: You have the right to request deletion of your personal information, subject to certain exceptions.
• Opt-Out of Marketing: You may opt out of receiving marketing communications by clicking "unsubscribe" in our emails.
• Data Portability: You have the right to request a copy of your personal information in a portable format.

HIPAA Compliance

As a covered entity under HIPAA, we are committed to protecting your Protected Health Information (PHI). This Privacy Policy serves as our Notice of Privacy Practices as required by HIPAA.

Under HIPAA, you have the right to access your PHI, request corrections, receive an accounting of disclosures, request restrictions on uses and disclosures, and file a complaint if you believe your privacy rights have been violated.

Data Security

We implement appropriate technical, administrative, and physical safeguards to protect your personal information and PHI from unauthorized access, use, disclosure, alteration, or destruction.

• We use encryption (SSL/TLS) to protect data transmitted between your browser and our servers.
• We store data on secure servers with restricted access.
• We limit access to personal information and PHI to employees and service providers who need it to perform their job functions.
• We train our staff on privacy and security practices.

Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child without parental consent, we will delete that information promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated Privacy Policy on our website with a new "Last Updated" date. If we make material changes, we will notify you by email or through a prominent notice on our website.