Legal
Privacy Policy
Effective date: [ADD PUBLICATION DATE]
Owner review required: Draft policy — must be reconciled with actual technology and data flows before publishing. Never publish claims about data selling, retention, encryption, HIPAA status, cookies, or third-party sharing until independently verified.
1. Information we may collect
Contact and account information such as name, email, telephone number, login identifier, and membership preferences. Transaction and subscription information such as the purchased tier and term, amounts, payment status and PayPal transaction references; PayPal handles payment credentials under its own privacy policies. Information provided in wellness coaching messages, inquiry forms, feedback, course interactions, or support requests — please do not place medical records in unprotected website contact forms. Technical usage data such as device type, IP address, approximate location, browser information, pages viewed, security logs, and cookie identifiers where enabled. Sensitive or health-related information only if actually requested and collected. [SPECIFY ALL HEALTH DATA CATEGORIES, WHERE COLLECTED, AND WHICH ENTITY CONTROLS THEM.]
2. Purposes for processing
We may use information to create accounts, deliver purchased coaching and education, administer memberships and customer support, process and reconcile payments, protect site security, maintain records, satisfy legal obligations, and communicate important service changes. With any required consent, we may send optional marketing messages or use analytics and advertising technologies as accurately described in our Cookie Notice.
3. Independent clinical portals
Clinical intake, telehealth encounters, prescribing, medical documentation and pharmacy fulfillment occur under the policies of the responsible clinical and pharmacy entities. If BioCoach CJ receives protected health information as a service provider or business associate, its obligations depend on actual contractual roles and applicable law. We do not state that the entire website is HIPAA-compliant unless this has been verified.
4. Categories of recipients
Where necessary and legally permitted, information may be disclosed to website and hosting vendors, login and email providers, CRM and scheduling providers, PayPal, security and analytics tools, independent clinical coordinators, providers or pharmacies when a lawful and authorized data transfer is needed, and professional advisers or authorities. [LIST ACTUAL VENDORS, PURPOSES, AND REQUIRED CONSENTS / AGREEMENTS.]
5. Cookies and online advertising
Cookies and similar tools may support website operations, security, preferences, analytics, and — if activated — advertising. Certain types of tracking may require prior opt-in, an opt-out, or heightened restrictions for sensitive health-related pages under applicable law. See our Cookie Notice and [COOKIE PREFERENCE CENTER LINK].
6. Data retention and safeguards
We retain information for the time reasonably necessary to fulfill the relevant purpose, meet legal and accounting obligations, respond to disputes, and maintain system security, then delete or de-identify it where appropriate. [INSERT ACTUAL RETENTION SCHEDULE AND DELETION WORKFLOW.] We use reasonable administrative, technical, and organizational safeguards appropriate to the data processed, but no system can guarantee absolute security.
7. Your choices and privacy requests
Depending on residence and applicable law, you may have rights to access, correct, delete, obtain a copy of, or limit certain uses of personal or consumer health data; you may also have rights concerning targeted advertising or certain sharing. Submit requests to [PRIVACY EMAIL]. We may verify your identity and respond under the deadlines and exceptions set by applicable law. Marketing emails include an unsubscribe method.
8. Minors, updates and contact
Our services are directed to adults aged 18 and older. We do not knowingly solicit membership applications from children. We may update this policy when practices change, and will post the current effective date and provide further notice where legally required. Privacy questions may be sent to [PRIVACY EMAIL] or [POSTAL ADDRESS].
Privacy questions?
[PRIVACY EMAIL]