Hold Fast Functional Medicine, PLLC (hereinafter “Practice”, “we,” “our,” “us”) respects your privacy. The terms “you” or “yours” refer to the user of our Website. This Privacy Policy explains how we collect, use, and protect your information when you use our website and services. By using the Website, you consent to the data practices described in this Privacy Policy. If you do not agree to these terms, please do not access or use the Website.

Practice is committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified when using this Website, you can be assured that it will only be used in accordance with this Privacy Policy.

Changes to Privacy Policy

We may change this Privacy Policy from time to time without notice to you. You acknowledge and agree that it is your responsibility to review this Website and Privacy Policy periodically and to be aware of any modifications.  Your continued use of the Website after such modifications will constitute your: 1) acknowledgement of the modified Privacy Policy and 2) agreement to abide and be bound by the modified Policy.

Passwords

To use certain features of our Website, you may be issued a unique or group username and password, which you will receive through your registration and/or purchase process. You are responsible for maintaining the confidentiality of the password and account, and are responsible for all activities (whether by you or by others) that occur under your password or account.

You are not permitted to share your username and/or password with anyone. If you share your username and/or password with another person, Practice reserves the right to immediately terminate your access to the Website, program, product or service. Practice cannot and will not be liable for any loss or damage arising from your failure to protect your password or account information. You are responsible for activities that take place using your password(s) and within your account. If you share your password(s) with anyone, they may be able to obtain access to your personal information at your own risk.

You agree to notify Practice immediately of any unauthorized use of your password or account or any other breach of security, and to ensure that you exit from your account at the end of each session. 

By using this Website, you agree to enter true and accurate information as part of the registration, purchase process and otherwise. If you enter a false email address, or other false or inaccurate information, we have the right to immediately inactivate your account or block your participation in any feature delivered on or through this Website.

We will use our best efforts to keep your password(s) private and will not otherwise share your password(s) without your consent, except as necessary when the law requires it or in the good faith belief that such action is necessary, particularly when disclosure is necessary to identify, contact or bring legal action against someone who may be causing injury to others or interfering with our rights or property.
 

Information We Collect
- Personal Information: Name, email, phone number, address, and other information you voluntarily provide (e.g., via scheduling forms or newsletters).
- Health Information: If you complete intake forms or schedule visits, we may collect health-related information. This is considered Protected Health Information (PHI) under HIPAA.
- Automatically Collected Information: Browser type, IP address, and cookies for analytics purposes.
 

How We Use Your Information
- To provide telehealth and functional medicine services.
- To schedule visits, respond to inquiries, and send reminders.
- To send educational updates, newsletters, or promotions (with your consent).
- To comply with legal and regulatory requirements.
 

HIPAA & Protected Health Information
If you submit health information through our EMR or patient portal, that data is protected under HIPAA. We have policies, procedures, and security measures in place to safeguard your PHI.

Your Rights:
You have the right to:
- Request a copy of your medical record.
- Request corrections to your medical record.
- Request confidential communications.
- Request restrictions on how your PHI is used or disclosed.
- Receive an accounting of disclosures.
- File a complaint if you believe your rights are violated.
 

Our Responsibilities:
- We are required by law to maintain the privacy and security of your PHI.
- We will let you know promptly if a breach occurs.
- We will not use or share your information other than as described here unless you give written permission.
 

How We May Use & Share Information:
We may use and disclose PHI for purposes of:
- Treatment (sharing with other providers involved in your care).
- Payment (billing or insurance purposes, if applicable).
- Healthcare Operations (practice management, quality improvement).
- When required by law (public health, legal proceedings, safety).
 

Sharing of Information
We do not sell your information. We may share data only with:
- Service providers (e.g., EMR platforms, supplement dispensaries like Fullscript) under Business Associate Agreements.
- Legal authorities if required by law.
 

Your Rights
- Request access to or correction of your personal data.
- Request deletion (where legally permissible).
- Opt-out of non-essential communications.
 

Use of Cookies

A cookie is a piece of data stored on a site visitor’s hard drive by a web page server to help Practice improve customers’ access to our Website and identify repeat visitors to our Website.  Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences. Like most companies, this Website may use cookies to identify which pages are being used. This helps us analyze data about webpage traffic and improve our Website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system. Overall, cookies help us provide you with a better Website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us. You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of our Website, programs, products, or services.

Use by Children

This Website is not designed for, nor do we believe it is appealing to, children under the age of 13.  We do not knowingly collect Personal Information from children under the age of 13.  We encourage children to consult with their parents before providing Personal Information.

Contact

If you have any questions about any of the terms of this Privacy Policy, please contact Practice at contact@holdfastfunctional.com