Privacy Policy

Rooted Health Wellness Clinic

Effective Date: October 19, 2026

At Rooted Health Wellness Clinic ("Rooted Health," "we," "our," or "us"), we respect your privacy and are committed to protecting the personal information you share with us.

This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website, https://www.rooted.health, communicate with our team, or interact with our online services.

As a healthcare provider, Rooted Health recognizes the importance of patient confidentiality and follows applicable federal and state privacy laws, including the Health Insurance Portability and Accountability Act of 1996 (HIPAA), where applicable.

1. Information We Collect

We may collect information in the following categories:

Personal Information

When you contact us, submit an inquiry, or request information about our services, we may collect:

First and last name
Email address
Telephone number
Information voluntarily submitted through website contact forms
Appointment requests and general inquiries

Health-Related Information

When you communicate with Rooted Health regarding medical services, treatment, or appointments, certain information may qualify as protected health information (PHI) under HIPAA.

PHI is subject to our HIPAA Notice of Privacy Practices and applicable healthcare privacy laws.

Website Usage Information

When you visit our website, certain technical information may be collected automatically, including:

IP address
Browser and device information
Pages visited and website interactions
Referring websites
Cookies and similar technologies, where implemented

2. How We Use Your Information

We may use information collected through our website to:

Respond to questions and inquiries
Assist with appointment scheduling
Provide information about our healthcare and wellness services
Communicate regarding requested services
Maintain website functionality and security
Improve website performance and user experience
Comply with applicable legal and regulatory requirements

When information constitutes PHI, its use and disclosure are governed by applicable healthcare privacy requirements and our HIPAA Notice of Privacy Practices.

3. HIPAA and Patient Privacy

Rooted Health is committed to maintaining the confidentiality, integrity, and appropriate security of patient health information.

Where HIPAA applies, we maintain administrative, physical, and technical safeguards designed to protect PHI.

Patient health information may be used or disclosed as permitted or required by law, including for treatment, payment, and healthcare operations.

Other uses and disclosures may require written patient authorization.

Our official Notice of Privacy Practices explains in greater detail how medical information may be used or disclosed and describes patients' rights regarding their health information.

Patients may request a copy of this notice by contacting Rooted Health.

4. Website Contact Forms and Electronic Communication

Our website may allow visitors to submit questions, appointment requests, or general messages.

We encourage visitors not to include sensitive medical information, diagnoses, medical histories, Social Security numbers, or other confidential health details in general website contact forms unless the form is specifically designated as a secure method for submitting such information.

Standard email and general website communications may not provide the same privacy protections as an authorized secure patient communication system.

Website contact forms should not be used for medical emergencies or urgent medical concerns.

If you are experiencing a medical emergency, call 911 or seek immediate medical attention.

5. Cookies and Website Analytics

Our website may use cookies or similar technologies to support website functionality, understand visitor activity, and improve the user experience.

Depending on the technologies implemented, these tools may collect information such as browser type, device characteristics, and website interactions.

You may be able to manage cookie preferences through your browser settings or available website privacy controls.

We do not authorize the use of tracking technologies to disclose protected health information in violation of HIPAA or other applicable laws.

6. Sharing and Disclosure of Information

Rooted Health does not sell patient protected health information.

We may share information with authorized third-party service providers that support website hosting, scheduling, communications, and business operations, subject to applicable legal requirements.

When a service provider handles PHI on our behalf and qualifies as a HIPAA business associate, appropriate contractual protections, including a Business Associate Agreement where required, must be in place.

Information may also be disclosed when required by law, permitted for healthcare operations, or otherwise authorized by the individual.

7. Data Security

We recognize the importance of safeguarding personal and medical information.

Rooted Health uses administrative, technical, and organizational safeguards appropriate to the information and applicable legal requirements.

However, no method of electronic transmission or online storage can be guaranteed to be completely secure.

We encourage website visitors to avoid transmitting sensitive medical information through unsecured communication channels.

8. Third-Party Websites

Our website may contain links to third-party websites, scheduling platforms, social media services, or other external resources.

These websites may operate under their own privacy policies and security practices.

Rooted Health is not responsible for the privacy practices or content of independently operated third-party websites.

We encourage visitors to review the privacy policies of external services before providing personal information.

9. Your Privacy Rights

Depending on the information involved and applicable law, you may have rights concerning your personal and medical information.

Under HIPAA, eligible individuals generally have rights to:

Request access to their medical records
Request corrections to certain health information
Request certain restrictions on uses or disclosures
Request confidential communications
Obtain an accounting of certain disclosures
Receive a copy of our Notice of Privacy Practices
File a privacy complaint without retaliation

These rights may be subject to legal exceptions and specific request procedures.

To exercise applicable privacy rights, please contact Rooted Health using the information provided below.

10. Children's Privacy

Our website is not intended to collect personal information directly from children under 13 without appropriate parental or legal guardian involvement.

Any medical information relating to minors is handled in accordance with applicable federal and state healthcare privacy laws.

11. Changes to This Privacy Policy

Rooted Health may update this Privacy Policy to reflect changes in our services, website operations, privacy practices, or applicable laws.

Any updates will be posted on this page with a revised effective date.

We encourage visitors to review this policy periodically.

12. Contact Information

If you have questions regarding this Privacy Policy, the handling of personal information, or your privacy rights, please contact: