Privacy Policy

Effective date: September 30, 2026

Who we are

Holistic Health Remedy LLC operates https://holistichealthremedy.com and provides nurse-created education and private-pay recovery support for people preparing for surgery and recovering afterward. This policy explains how we collect, use, protect, and share personal information through our website, communications, and services.

Questions or requests about privacy may be directed to Holistic Health Remedy at support@holistichealthremedy.com. Please use this address for general privacy questions only. To discuss personal health information or request records, ask us for a secure contact form or secure message link.

This policy covers online and offline interactions, including intake, visits, telephone conversations, and authorized caregiver communications.

Information we collect and how we use it

We collect information you choose to provide and information needed to operate our website and services. Depending on how you interact with us, this may include:

• Contact information, such as your name, email address, telephone number, and service address.
• Inquiry and scheduling information, such as the support you are seeking, appointment preferences, and communications with us.
• Client information relevant to recovery support, such as procedure details, health history, allergies, medications, discharge instructions, recovery concerns, and caregiver or emergency-contact information.
• Preferences you voluntarily share to support the agreed service, such as communication, accessibility, cultural, religious, or spiritual preferences. We ask only for relevant information; you can decline optional preference questions.
• Service records, such as intake forms, consent documents, communications, and notes about support provided.
• Billing information, such as invoices, payments, and transaction records.
• Subscription preferences and information submitted when requesting educational resources or email updates.
• Technical information, such as IP address, browser and device information, pages viewed, and security or error logs.

We use this information to respond to requests, evaluate whether our services are appropriate, organize and provide agreed support, communicate with clients, maintain necessary records, process billing, deliver requested resources, and protect and improve our website and services. We request health information relevant to the support being considered or provided rather than unrelated medical records.

We do not submit electronic insurance claims on your behalf. Our recovery services are private pay.

Information may come from you, an authorized caregiver or representative, or a healthcare provider you authorize, as well as website and payment providers performing their functions.

We limit collection, use, and sharing to what is needed for disclosed purposes. We explain materially different uses before beginning them and obtain permission where required.

Some information, particularly health records, private message contents, payment-related information, and religious or spiritual preferences, is sensitive. We use relevant sensitive information to provide the support you request, communicate privately, administer payments and records, protect information, and meet applicable obligations. We do not treat optional personal preferences as permission for publicity or marketing.

You may decline optional information or withdraw an optional permission. When information is necessary to assess or provide a requested service safely, verify a records request, or meet a legal obligation, we will explain why it is needed and how declining may affect that particular request. A request for general educational resources does not require a medical history.

Health information and secure communication

Personal health information can include information about your procedure, diagnoses, symptoms, medications, allergies, discharge instructions, recovery progress, or medical photographs when linked to you. We treat this information as confidential and limit access to people who need it for authorized service, administrative, or legal purposes.

We use a third-party partner to provide designated secure forms and encrypted client communications and maintain a signed Business Associate Agreement with that partner. Information submitted through these channels is processed and stored by our provider as part of the secure service. Use the secure form or secure message link we provide when sending health information or documents. Ordinary email sent from your own account is not necessarily encrypted simply because we use a secure service.

Do not submit medical information through public comments, newsletter or waitlist forms, social-media messages, or website forms that are not specifically identified as secure client forms. A general inquiry can simply request information about availability or ask for a secure intake link.

If sensitive information reaches us through an unintended channel, we will address it using our privacy procedures and, where appropriate, move the conversation to a designated secure channel. Sending information through an ordinary form does not waive your privacy interests.

Our website, forms, and email are not emergency services or continuously monitored clinical channels. Contact your surgical team for urgent recovery concerns. Call 911 for a medical emergency.

You can withdraw optional sharing permission by contacting us. Withdrawal applies going forward; it does not undo permitted disclosures or required retention. We will explain any effect on services.

HIPAA and client confidentiality

We protect client health information through our confidentiality practices, safeguards, and applicable legal obligations. Whether HIPAA applies to a particular organization or activity depends on its legal status and operations. Use of a healthcare communication platform or a BAA does not, by itself, make every activity or system HIPAA compliant.

This website Privacy Policy is not a HIPAA Notice of Privacy Practices. If a service or activity requires a separate notice or authorization, we will provide it as required. Nothing in this policy limits rights or protections available under applicable law.

Comments

Where comments are enabled, we collect the information entered in the comment form, along with technical information such as IP address and browser details, to manage comments and help detect spam. Approved comments and any displayed name or profile image may be visible publicly.

Do not include personal health information about yourself or anyone else in a comment. We may moderate or remove comments containing sensitive information, but cannot guarantee that information posted publicly has not already been viewed or copied.

If Gravatar is used to display profile images, an email-derived identifier may be sent to that service. Its processing is described in the Automattic privacy policy at https://automattic.com/privacy/.

Media and documents

Send client photographs or health documents only through a designated secure channel and only when requested or relevant to the agreed service. Do not upload them to public website areas. Obtain permission before providing information or images belonging to another person, or confirm that you have authority to act for that person.

Images can contain location and other embedded metadata. Publicly posted images may be downloaded and their metadata extracted by others. Avoid including unnecessary identifying or location information in material intended for public use.

We obtain separate permission before using identifiable client photographs, testimonials, or recovery stories in public materials. Receiving a service does not automatically authorize promotional use of your information.

Cookies and similar technologies

Cookie settings

Our website and its service providers may use cookies or similar technologies for website functionality, login sessions, saved preferences, spam prevention, security, and usage measurement. The information collected may include browser or device identifiers, IP address, page activity, and interactions with website features.

Where WordPress comment cookies are available, you may choose to save your name, email address, and website for future comments. These cookies generally last one year. For authorized website users, WordPress also uses session and preference cookies: standard login cookies generally last two days, “Remember Me” login cookies generally last two weeks, display preference cookies generally last one year, and an article-editing cookie generally lasts one day. Logging out removes login cookies.

You can manage cookies through your browser settings and any cookie controls offered on this website. Blocking cookies may affect some functions. Clearing website cookies does not delete information already held in client or subscription records.

We do not use client intake answers, health documents, or private recovery communications for advertising audiences or promotional targeting. Details about any nonessential website analytics or advertising technologies and the choices available will be included in our cookie information where those technologies are used.

Embedded content and external websites

Our pages may contain third-party videos, images, articles, or links. Embedded content may allow the provider to receive technical information, place cookies, and measure your interaction, including when you are logged into an account with that provider.

External websites and services have their own privacy practices. Review their policies before submitting information. A link to another website does not mean that it is an approved channel for sharing client health information with us.

This policy covers information we receive through our social accounts; platforms also process information under their own policies.

Email subscriptions and educational resources

If you subscribe or join a waitlist, we use the information you provide to deliver the updates or resources you requested. Our partners providing email subscription services process subscription information and may record delivery, opens, clicks, and unsubscribe activity according to the service settings.

Do not include medical details in newsletter or waitlist forms. We keep subscription activities separate from confidential client communications and do not add client health information to our marketing email system. Receiving recovery services does not automatically enroll you in promotional emails.

You may unsubscribe using the link in a promotional email or contact us for assistance. Unsubscribing does not stop communications necessary for an ongoing service, billing, or a privacy request.

Marketing emails identify our business, use accurate subject lines, and include a valid postal address and a clear unsubscribe method. We honor marketing-email opt-outs within 10 business days, without a fee or a requirement to provide information beyond your email address and preferences. Necessary service messages remain separate from promotional messages; an existing client relationship does not remove your right to stop marketing emails.

Who we share information with

We share information only for identified service, administrative, security, or legal purposes, or with your permission where appropriate. Recipients may include:

• Our partners supporting website hosting, security, backups, and ordinary website functions.
• A third-party partner providing secure client forms, encrypted communications, and associated information storage.
• Our partners managing voluntary email subscriptions and related delivery records.
• Payment and billing providers handling transactions and associated billing information, if used.
• Authorized personnel or professional advisers who need information to support services, accounting, legal obligations, or privacy and security matters.
• A caregiver, authorized representative, or healthcare professional when you direct or authorize the sharing, or when sharing is otherwise permitted or required by applicable law.
• Authorities or other recipients when disclosure is legally required or permitted, including applicable emergency or safety circumstances.

Providers receive information relevant to their function. Ordinary website and newsletter providers are not designated destinations for client health records. We do not sell client health information or disclose it for third-party advertising. We do not publish identifiable client information merely because someone has contacted us or received services.

For partners handling confidential client information on our behalf, we require appropriate confidentiality and security terms, limits on permitted use and further disclosure, and incident-reporting obligations. A Business Associate Agreement is used when appropriate to the relationship. These requirements do not authorize a partner to use client health information for its own advertising. A provider acting independently, such as a payment processor for its own legal obligations, may also have its own privacy notice.

If ownership changes or the business closes, necessary record transfers remain subject to applicable confidentiality duties, safeguards, and notice requirements. Where required, we notify clients about record custody, how to obtain copies, and their transfer or other available choices, and provide required notices to the appropriate licensing authority. We do not abandon client medical records.

How long we retain information

We retain information for the period needed for its purpose and for applicable recordkeeping, legal, professional, tax, security, and dispute-resolution obligations. Different categories have different retention requirements.

Client service records and health-related communications are retained according to the requirements applicable to the services provided and our record-retention schedule. General inquiries are retained as needed to respond and maintain relevant business records. Subscription information is retained while a subscription is active and as needed to honor unsubscribe requests; a limited suppression record may remain to prevent unwanted future emails.

Medical records subject to Michigan’s professional record-retention requirements are generally retained for at least seven years from the relevant service date, and longer when required by law or applicable professional standards. A deletion request does not override mandatory retention.

Published comments may remain available unless removed. Authorized website-account information is retained as needed to administer the account. Logs, backups, and provider archives may have separate retention periods, and information removed from an active system may remain in restricted backups until their scheduled expiration.

Contact us for information about the retention period relevant to your records. We will explain any applicable reason information cannot yet be deleted.

When information is eligible for disposal, we use methods appropriate to its format and sensitivity, such as secure destruction of paper records and appropriate deletion of electronic records. Required retention, legal holds, and restricted backup expiration can affect when disposal is completed.

Your privacy choices and requests

You may contact us to ask what personal information we hold about you, request a copy where available, correct inaccurate information, request deletion where permitted, update communication preferences, or raise a privacy concern. We may need to verify your identity or authority before releasing information or acting on a request.

Some records cannot be deleted immediately because they must be retained for legal, professional, accounting, security, or service-related reasons. Corrections to service records may be documented as amendments rather than removal of the original entry. Available rights, response requirements, and exceptions depend on applicable law and the type of record.

Representatives must establish authority. Verification information is used to process your request. We explain refusals and applicable review or appeal options.

You may also ask about the categories and sources of information we hold, the purposes for using it, and the types of recipients to whom it is disclosed. Where applicable law requires an electronic or portable copy, we provide it in the required form. We protect information belonging to other people and do not release passwords or unnecessary sensitive identifiers as part of a response. If you disagree with a decision, contact us for reconsideration; we provide any appeal process required by applicable law. We do not unlawfully discriminate against you for exercising a privacy right.

For medical-record requests, we provide access, copies, or a response within the time required by applicable law. If a lawful extension or denial applies, we provide the required explanation or written notice, including available review options. Any permitted copying charges are disclosed and limited by applicable law. Contact us to arrange a written request through a secure channel.

Please begin with a general request and ask for a secure method before sending identifying documents or medical details. You may also raise a concern with an appropriate regulator where applicable. We will not retaliate against you for making a privacy complaint.

Michigan medical-record and privacy protections

The following Michigan laws address particular records and circumstances; they do not create identical rights to California’s consumer privacy laws:

• Medical-record retention and custody — MCL 333.16213. For records subject to this provision, we follow the applicable retention requirements, protect confidentiality, and follow required custody, transfer, notice, and disposal procedures if the practice closes or changes ownership. The general seven-year retention period described above is subject to longer requirements and statutory exceptions.
• Medical-record access — Michigan Medical Records Access Act, MCL 333.26261–333.26271. Access requests from a patient or an authorized representative are handled under the applicable provisions, including MCL 333.26265 for written requests and responses and MCL 333.26269 for permitted charges. Any applicable extension, access limitation, denial notice, or fee limitation is handled as required by law. Contact us to arrange a secure written request.
• Security-breach notification — Michigan Identity Theft Protection Act, particularly MCL 445.63 and MCL 445.72. We assess covered incidents under the Act’s definitions and notification requirements and provide required notices without unreasonable delay, subject to lawful exceptions. This Act’s definition of covered personal information is not a substitute for our broader confidentiality commitments concerning client health information.
• Social Security number protections — Michigan Social Security Number Privacy Act, MCL 445.81–445.87. If we obtain Social Security numbers in the ordinary course of business, the Act’s applicable confidentiality, access, disclosure, and disposal requirements apply, including the policy requirements of MCL 445.84. Please do not send a full Social Security number through ordinary email, a newsletter form, or a general website inquiry. If a document contains one, ask us whether a redacted copy will meet the purpose before submitting it.

Additional protections may apply under federal law, other Michigan provisions, or the law of another jurisdiction. We honor applicable legal rights regardless of whether a particular statute is named here. A statutory reference does not imply that every website interaction creates a medical record or that every type of information is governed by the same law.

Where information is processed

Information may be processed by us and the service providers described in this policy. Providers may operate or maintain systems in the United States or other countries, where privacy laws may differ. The processing location and safeguards depend on the provider and the particular service.

Automated spam-prevention services may process comment or ordinary inquiry information. Secure client forms and messages are processed through our designated healthcare communication service. Contact us if you need information about a specific provider or data-processing arrangement.

Security and privacy incidents

We use reasonable administrative, technical, and physical safeguards appropriate to the information handled, including designated secure channels for health information, restricted access, and procedures for handling client records. No website, device, email system, or storage method can guarantee absolute security.

If we learn of a privacy or security incident affecting personal information, we will assess it, take appropriate steps, and provide notices required by applicable law. You can help protect your information by securing your devices and accounts and using the designated secure communication links.

When legally required, we notify affected individuals and appropriate authorities using the required methods and deadlines. Notices include the incident details, affected information, protective steps, our response, and contact information to the extent required by the applicable law. A notice on this page does not replace individual notification when the law requires it.

If you suspect that information you provided to us has been exposed or misused, or discover a security concern involving our website or communications, contact support@holistichealthremedy.com promptly. Describe the concern without attaching medical records, passwords, or identifying documents to ordinary email; we can provide a secure follow-up method.

Required notices and permissions

We provide additional notices, authorizations, or permissions when required for a particular service or use of information. Reading this policy, visiting our website, or submitting an inquiry does not waive your rights or constitute blanket consent to marketing or disclosure of health information. Where law requires specific details about an information recipient or service partner, we provide those details in the relevant notice or response.

You may request a copy of this policy. Separate legally required notices, including a HIPAA Notice of Privacy Practices if applicable, are provided through the required channels and are not replaced by this general policy.

Information about others and children

Do not provide another person’s information without their permission or appropriate legal authority. For caregiver communications, we may confirm what information the client has authorized us to share.

This business is not intended for children.

Changes to this policy

We may update this policy as our services, systems, or legal obligations change. The effective date will identify the current version. We will provide additional notice or obtain permission where required for material changes in how information is used or shared.

Contact us

Holistic Health Remedy LLC

Privacy contact: Holistic Health Remedy

Website: https://holistichealthremedy.com

General privacy inquiries: support@holistichealthremedy.com

Secure client communication: Contact us for a secure contact form.

Please do not include personal health information in an initial ordinary email. Ask for a secure link when your request requires medical details or identity documents.