Privacy Policy

Holistique Medical Center (“Holistique,” “we,” “us,” or “our”) operates holistique.com and the related online services we provide, including the IV Lounge booking pages and our supplement shop at shop.holistique.com (collectively, the “Service”).

This Privacy Policy explains how we collect, use, share, and protect information when you visit the Service, request an appointment, book an IV, communicate with us, or purchase a product from our shop. It does not, by itself, govern protected health information (“PHI”) we create or receive as your healthcare provider — see HIPAA & Your Health Information below.

Information We Collect

Information you provide

When you contact us, request an appointment, fill out our New Patient intake form, book an IV, register for an event, sign up for our newsletter, or purchase a product from our shop, we may collect your name, email address, mailing and billing address, phone number(s), date of birth, the reason you’re reaching out, and any other information you choose to share with us.

Health-related information

Some of our forms (for example, the New Patient intake) ask about your health status, medications, symptoms, history, or goals so we can prepare for your visit and determine whether we’re a good fit. We treat this information as sensitive consumer health data and, once you become a patient, as PHI under HIPAA.

Mobile phone numbers and SMS

If you voluntarily provide a mobile phone number and check the SMS consent checkbox on a form, we will send you transactional text messages (appointment scheduling, confirmations, reminders, rescheduling, follow-up, and patient onboarding). SMS consent is opt-in, separate from any other consent, and is never a condition of receiving care or making a purchase. Message frequency varies. Message and data rates may apply. Reply STOP at any time to opt out, or HELP for help.

Mobile information — including your phone number and your SMS opt-in — is never sold, rented, or shared with third parties or affiliates for marketing or promotional purposes. We share it only with service providers (such as our messaging platform) strictly to deliver the transactional messages you’ve asked for, or where required by law or for healthcare operations.

Payment information

When you buy a product or pay for a service, payment is processed by a PCI-compliant third-party payment processor. We do not store full card numbers on our servers.

Automatically collected information

When you visit the Service, our servers and our analytics providers may automatically log technical information — for example, IP address, device and browser type, referring URL, pages viewed, and time spent on each page — using cookies and similar technologies. You can control cookies through your browser settings. Disabling cookies may limit some features of the Service.

How We Use Information

• Respond to inquiries and schedule appointments, IV bookings, and events.
• Provide, document, and follow up on the care you request.
• Fulfill and ship orders placed through our shop and process returns and refunds.
• Send transactional communications (appointment, order, and care-related).
• Send newsletters and updates — only if you have opted in — which you can unsubscribe from at any time.
• Operate, secure, and improve the Service, including measuring traffic and diagnosing technical problems.
• Comply with legal, tax, accounting, and regulatory obligations.

HIPAA & Your Health Information

Holistique Medical Center is a covered entity under the Health Insurance Portability and Accountability Act (“HIPAA”). PHI we collect, create, or maintain as your healthcare provider is governed by our separate Notice of Privacy Practices, which describes how we may use and disclose PHI and the rights you have over that information. To request a copy of our Notice of Privacy Practices, please contact us at [email protected].

Washington Residents — My Health My Data Act

If you are a Washington consumer, the Washington My Health My Data Act gives you additional rights with respect to “consumer health data” — personal information that is linked or reasonably linkable to you and identifies your past, present, or future physical or mental health status. This includes information such as health conditions, treatments, diagnoses, symptoms, the use of healthcare services, and biometric data.

You have the right to:

• Confirm whether we are collecting, sharing, or selling your consumer health data, and access that data.
• Withdraw consent to our collection and sharing of your consumer health data.
• Delete your consumer health data, subject to our obligations to retain certain records (for example, medical records required by law).
• Appeal a denial of a request.

We do not sell consumer health data, and we do not share it with third parties except service providers acting on our behalf, in connection with your care, or where required by law. To exercise any of these rights, email us at [email protected] with the subject line “Washington Privacy Request.” We will verify your identity before responding and will respond within the timeframes required by law. If we deny your request, you may appeal by replying to our response; if your appeal is denied, you may file a complaint with the Washington Attorney General at atg.wa.gov/file-complaint.

How We Share Information

• Service providers. Vendors who host our website, process payments, deliver SMS, send email, ship orders, run our patient portal, and provide analytics. Where they handle PHI, they sign a HIPAA business associate agreement.
• Healthcare operations. Other providers, laboratories, and pharmacies involved in your care, consistent with our Notice of Privacy Practices and applicable law.
• Legal & safety. When required by law, subpoena, court order, or to protect the rights, property, or safety of Holistique, our patients, or others.
• Business transfers. In connection with a merger, acquisition, or sale of assets, subject to applicable law.

We do not sell personal information, and we never share mobile or SMS opt-in data for third-party marketing.

Your Choices

• Marketing emails. Use the unsubscribe link in any marketing email, or email us.
• SMS. Reply STOP to opt out, HELP for help.
• Cookies. Control or block cookies through your browser settings.
• Access, correction, or deletion. Contact us to request access to, correction of, or deletion of personal information we hold about you, subject to legal record-keeping requirements.

Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, or destruction. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Data Retention

We retain personal information for as long as needed to provide the Service, comply with our legal obligations (including medical record-retention laws), resolve disputes, and enforce our agreements.

Children’s Privacy

The Service is intended for adults. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, please contact us so we can delete it.

Third-Party Links

The Service may link to third-party websites, including our patient portal, supplement shop, lab kit providers, and social media. Those sites have their own privacy practices. We encourage you to review them.

Changes to This Policy

We may update this Privacy Policy from time to time. We will revise the “Last updated” date at the top and, for material changes, may notify you by email or through the Service. Continued use of the Service after the changes take effect means you accept the updated policy.

Contact Us