Privacy Policy

Introduction

Evolve Health & Wellness (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard information when you visit our website at evolvehealthfl.com.

This policy applies only to information collected through our website. Protected health information (PHI) collected during clinical care is governed separately by HIPAA and our Notice of Privacy Practices, which is provided to all patients at the time of their first visit.

Information We Collect

Information you provide

Our website does not collect personal health information. When you book an appointment, you are redirected to our third-party scheduling platform (Zenoti), which has its own privacy policy and security measures. We do not store booking data on this website.

If you contact us by phone or email, we may collect:

• Your name and contact information
• The content of your message or inquiry

Information collected automatically

When you visit our website, we may automatically collect:

• Browser type and version
• Pages visited and time spent on each page
• Referring website or search terms
• General geographic location (city/state level, not precise)
• Device type (desktop, mobile, tablet)

This information is collected through standard web analytics and does not include personally identifiable health information.

How We Use Your Information

We use the information collected through our website to:

• Respond to your inquiries and requests
• Improve our website content and user experience
• Understand how visitors navigate our site
• Ensure the security and functionality of our website

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

HIPAA Compliance

Evolve Health & Wellness complies with the Health Insurance Portability and Accountability Act (HIPAA). Our website does not collect, store, or transmit protected health information (PHI).

All clinical records, lab results, and treatment information are maintained in HIPAA-compliant systems separate from this website. Patients receive a full Notice of Privacy Practices at their first visit, which details how PHI is used and protected during clinical care.

Cookies and Tracking

Our website may use cookies and similar technologies to improve functionality and analyze traffic. Cookies are small text files stored on your device that help us understand how you interact with our site.

You can control cookies through your browser settings. Disabling cookies may affect some website functionality.

Do Not Track

Some web browsers transmit “Do Not Track” (DNT) signals. Because there is no universally accepted standard for how to respond to DNT signals, our website does not currently respond to them. However, you may opt out of analytics tracking by adjusting your cookie preferences or using browser-level privacy controls.

Third-Party Services

Our website may link to or integrate with the following third-party services:

• Zenoti — Online appointment scheduling (opens in a new tab)
• Google Fonts — Web typography
• Sanity — Content management
• FormSubmit — Contact form submissions

Each of these services operates under its own privacy policy. We encourage you to review their policies when interacting with these services.

Data Retention

We retain the information we collect only for as long as necessary to fulfill the purposes described in this policy. Specifically:

• Contact form submissions and inquiries are retained for up to 24 months, then deleted.
• Website analytics data is retained in aggregate form and does not contain personally identifiable information.
• Cookie data expires based on the specific cookie's lifespan, typically within 12 months or when you clear your browser data.

Protected health information collected during clinical care is retained in accordance with Florida state law (minimum seven years for adult records) and HIPAA requirements. This data is maintained in separate, HIPAA-compliant systems and is not governed by this website privacy policy.

Data Security

We implement reasonable technical and organizational measures to protect the information collected through our website, including encrypted connections (HTTPS/TLS) and secure hosting infrastructure.

However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

Your Rights

Depending on your location, you may have the right to:

• Request access to the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Opt out of analytics tracking

For requests related to protected health information collected during clinical care, please contact our office directly.

State Privacy Rights

California Residents (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) provides you with specific rights regarding your personal information. You have the right to:

• Know what personal information we collect, use, and disclose about you
• Request deletion of your personal information
• Opt out of the sale or sharing of your personal information — we do not sell or share personal information as defined under the CCPA/CPRA
• Not be discriminated against for exercising your privacy rights
• Correct inaccurate personal information
• Limit the use of sensitive personal information — we do not collect sensitive personal information through this website

To exercise any of these rights, please contact us using the information below. We will verify your identity before processing your request and respond within 45 days as required by law.

In the preceding 12 months, the categories of personal information we have collected are limited to identifiers (name, email, phone number from contact forms) and internet activity information (browsing data via analytics). We have not sold personal information to any third party.

Florida Residents

Florida's Digital Bill of Rights (effective July 1, 2024) provides Florida residents with specific rights, including the right to access, correct, and delete personal data, as well as the right to opt out of targeted advertising and certain profiling. We do not engage in targeted advertising, sell personal data, or profile consumers for decisions that produce legal or similarly significant effects. To exercise your rights under Florida law, contact us using the information below.

Other State Privacy Laws

Residents of other states with comprehensive consumer privacy laws — including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and others — may have similar rights to access, correct, delete, and opt out of certain uses of personal information. To exercise any applicable privacy rights, please contact us using the information provided below.

Children's Privacy

Our website is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised “Last updated” date. We encourage you to review this policy periodically.

Contact Us

If you have questions about this Privacy Policy, your personal information, or wish to exercise your privacy rights, contact us: