Privacy Policy
Effective Date: January 1st, 2026
Welcome to the website of Flourish Metabolic Health (“Practice,” “we,” “our,” or “us”). This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website, schedule appointments, submit forms, or otherwise interact with our services.
By using this website, you agree to the practices described in this Privacy Policy.
1. Information We Collect
We may collect the following categories of information:
Personal Information
Information you voluntarily provide, including:
name
email address
phone number
mailing address
date of birth
payment-related information
appointment requests
information submitted through forms or questionnaires
Health-Related Information
If you submit information relating to symptoms, medical history, medications, lab work, or health concerns, that information may constitute protected health information (“PHI”) under applicable laws.
Automatically Collected Information
When you use the website, we may automatically collect:
IP address
browser type
device information
pages visited
referral source
approximate geographic location
cookies and usage analytics
2. How We Use Information
We may use collected information to:
provide and manage services
schedule appointments or e-visits
communicate with you
process payments
improve website functionality
respond to inquiries
maintain records
comply with legal obligations
protect the security of our systems and users
We may also use aggregated or de-identified information for operational or analytical purposes.
3. Third-Party Services
We may use third-party service providers to support website and business operations, including:
website hosting providers
appointment scheduling services
payment processors
analytics providers
telehealth or communication platforms
These providers may process information on our behalf subject to their own privacy practices and contractual obligations.
Examples may include:
Squarespace
Calendly
Stripe
PayPal
Google Analytics
Zoom
We encourage users to review the privacy policies of third-party services separately.
4. Cookies and Analytics
Our website may use cookies, analytics tools, and similar technologies to:
improve user experience
analyze website traffic
remember preferences
support website functionality
You may modify browser settings to refuse cookies; however, some website features may not function properly.
5. Telehealth and Electronic Communications
Electronic communications, including email and online scheduling systems, may not always be fully secure. By using electronic communication methods, you acknowledge and accept associated risks.
Telehealth services may involve additional privacy considerations addressed separately in our Telehealth Consent documentation.
6. HIPAA and Medical Privacy
If the Practice is a covered entity under the Health Insurance Portability and Accountability Act (“HIPAA”), your protected health information may also be governed by our Notice of Privacy Practices and applicable federal and state laws.
This website Privacy Policy is not intended to replace any legally required HIPAA notices.
7. Information Sharing and Disclosure
We do not sell personal information.
We may disclose information:
to service providers assisting our operations
to healthcare providers involved in your care, where permitted
when required by law
to protect legal rights or safety
during business transfers or restructuring
8. Data Security
We implement reasonable administrative, technical, and physical safeguards designed to protect information from unauthorized access, disclosure, alteration, or destruction.
However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.
9. California Privacy Rights
Residents of California may have rights under applicable privacy laws, including rights relating to access, correction, deletion, and information regarding data collection practices.
To submit a privacy-related request, contact us using the information below.
10. Children’s Privacy
This website is not intended for children under the age of 13, and we do not knowingly collect personal information from children.
11. External Links
This website may contain links to external websites or services not operated by us. We are not responsible for the content, privacy practices, or security of third-party websites.
12. Changes to This Privacy Policy
We may update this Privacy Policy periodically. Updated versions will be posted on this page with a revised effective date.
Continued use of the website after updates constitutes acceptance of the revised policy.
13. Contact Information
If you have questions regarding this Privacy Policy or privacy practices, contact:
Anisha Sarma, D.O.