Last updated: August 23, 2026
Before publishing: this is an interim, non-attorney draft, same status as the Client Services Agreement. Insert your exact registered business entity name (for example, "CoreRoot Health, LLC") wherever "CoreRoot Health" appears in a legal capacity below, and have this reviewed alongside the rest of the Legal Starter Kit.
1. Who we are
CoreRoot Health ("CoreRoot Health," "we," "us," or "our") is a virtual functional health and wellness practice. This Privacy Policy explains what personal information we collect through our website, booking process, and client portal, how we use it, and the choices you have. It applies to visitors to coreroothealth.com, discovery call bookers, and clients.
2. Information we collect
Information you give us
- Contact details: name, email address, phone number, submitted through our booking flow, contact form, or client portal
- Intake and health-interest information: answers to our intake questionnaire, submitted only if you book a paid package (Rooted Reset or Rooted Foundations); the specific questions differ by package
- Payment information: processed directly by our booking and payment platform (Healthie, using Stripe). We do not store your full card number on our own systems
- Session content: if we use an AI-based transcription or "scribe" tool during a video consultation, the resulting notes or summaries generated from that session (see Section 4 below); you may request manual notes instead by letting us know before your session
- Anything you choose to share in messages, forms, or sessions with us
Information collected automatically
At the time of this policy, we are not yet running website analytics. When we activate Google Analytics 4, this section will be updated to describe the specific data collected, which is expected to include pages visited, general location (city/region level), device and browser type, and referral source, with IP addresses anonymized. We will update this policy before or at the same time analytics goes live.
3. How we use your information
- To schedule and manage your discovery call, sessions, and programs
- To process payments for paid packages
- To deliver the services, documents, and programs included in your package
- To respond to questions you send us
- To send you service-related communications (appointment reminders, program content)
- To send you marketing communications, only if you have opted in; you may unsubscribe at any time
- To improve our website and services
- To comply with legal obligations
4. How we share your information
We do not sell your personal information. We share it only as needed to run the practice, with the following types of service providers:
- Healthie, our client portal, scheduling, and payment platform, including video consultations delivered through it
- GoHighLevel, our marketing and lead management platform, used only for visitors who have not yet booked a session, including the live chat widget on this site and operated on our behalf by our marketing partner
- Payment processors engaged through Healthie (such as Stripe)
- An AI transcription/scribe service provider, only if that tool is used during your video session, and only to generate notes or summaries to support your care
- Our website hosting provider
- Government agencies or other parties, only where required by law
Each of these providers has its own privacy practices governing the data it processes on our behalf.
5. Cookies and analytics
Our website may use cookies or similar technology for basic site functionality (such as remembering your form entries in a single session) and, once activated, for analytics through Google Analytics 4. You can control cookies through your browser settings.
6. Data security and HIPAA status
We take reasonable steps to protect your personal information, including using Healthie, a platform built for health and wellness practices. CoreRoot Health is not a medical practice and is not a HIPAA-covered entity. We nonetheless treat your personal and health-interest information with care, consistent with the confidentiality terms in our Client Services Agreement.
7. Your choices and rights
- You may ask us to access, correct, or delete the personal information we hold about you by emailing hello@coreroothealth.com
- You may unsubscribe from marketing emails at any time using the link in those emails
- If you are a resident of a state with a consumer health data law (such as Washington's My Health My Data Act or a similar Nevada law), you have the right to consent to and withdraw consent from the collection of health-interest data, and to request deletion of that data. Contact us at the email above to exercise these rights
- If you are a California resident, you may have additional rights under California privacy law regarding access, deletion, and opting out of the sale or sharing of personal information; we do not sell personal information
8. Children's privacy
Our services are intended for adults. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, contact us and we will delete it.
9. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent version. Material changes will be reflected here before they take effect.
10. Contact us
Questions about this Privacy Policy can be sent to hello@coreroothealth.com or (201) 614-4445.