Privacy Policy

Napa Valley Lifestyle and Wellness ("we," "our," or "us") respects your privacy and is committed to protecting the information you share with us. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit our website, schedule an appointment, receive care from our practice, or communicate with us by phone, text message, or email.

As a HIPAA-covered health care provider, Protected Health Information (PHI) that we receive in the course of providing care is governed separately by our Notice of Privacy Practices, which is provided to you at the time of your first visit. This Privacy Policy covers information collected through our website and pre-patient communications, as well as non-PHI practice communications such as SMS and email.

2.1 Information You Provide Directly

We collect information you give us when you:

• Fill out the appointment request, contact, or intake form on our website
• Schedule an appointment by phone or email
• Opt in to receive SMS or email communications
• Communicate with our staff in any form

This may include your name, phone number, email address, mailing address, date of birth, insurance information, reason for visit, and any additional details you choose to share with us.

2.2 Information Collected Automatically

When you visit our website we may automatically collect:

• IP address and approximate geographic location
• Browser type, device type, and operating system
• Pages visited, time on site, and referring website
• Interactions with forms or chatbots on the site
• Cookies and similar tracking technologies (see Section 8)

We use the information we collect to:

• Respond to your inquiries and appointment requests
• Schedule, confirm, and remind you of appointments
• Provide medical care and follow-up
• Process insurance claims and billing
• Send SMS and email communications you have opted in to receive
• Improve our website, services, and patient experience
• Comply with legal, regulatory, and professional obligations
• Protect the rights, property, and safety of our patients, staff, and practice

We do not sell your personal information. We do not use your information for third-party marketing. We do not share your information with advertisers or data brokers.

As a HIPAA-covered entity, we protect Protected Health Information (PHI) — including diagnosis, treatment, medications, lab results, and clinical notes — in accordance with federal law and our separate Notice of Privacy Practices. Information you submit through our website before you become a patient is handled with the same standard of care, though it is not technically classified as PHI until a provider-patient relationship is established.

5.1 How You Opt In

You opt in to receive SMS messages from Napa Valley Lifestyle and Wellness by checking the SMS consent box on our appointment request form at https://napavalleylifestyleandwellness.com/contact-us/ or on our in-office new-patient intake form. The checkbox is unchecked by default and is presented with a clear disclosure of the message types you will receive, the frequency, and opt-out instructions. Consent is not a condition of receiving medical services from us.

5.2 Types of Messages You May Receive

After opting in, you may receive text messages that include:

• Appointment reminders
• Appointment confirmations
• Post-visit follow-up questions
• Requests for feedback or a review of your visit
• Occasional practice updates (e.g., holiday hours)

We do not send marketing messages, promotional offers, or messages about specific medications or treatments via SMS.

5.3 Message Frequency

Message frequency varies based on your appointment schedule and is typically 2–4 messages per month.

5.4 Message and Data Rates

Standard message and data rates from your mobile carrier may apply. We do not charge you for receiving messages. Contact your carrier for details about your plan.

5.5 How to Opt Out

You may opt out at any time by:

• Replying STOP to any text message from us (you will receive a one-time confirmation and no further messages will be sent)
• Calling the practice at (707) 637-4108
• Emailing info@napavalleylifestyleandwellness.com

5.6 How to Get Help

Reply HELP to any message for assistance, or contact us at (707) 637-4108 or info@napavalleylifestyleandwellness.com.

5.7 HIPAA and SMS Content

To comply with HIPAA, our SMS messages do not contain Protected Health Information. Messages reference only the practice name, scheduling details, and general feedback or review requests.

5.8 No Sale or Sharing of Mobile Information

Mobile information — including your phone number and SMS opt-in status — will not be shared with third parties or affiliates for marketing or promotional purposes. Information sharing with subcontractors that support message delivery (such as our SMS provider, Twilio) is permitted solely to deliver the messages you have consented to receive. This exclusion applies to all categories of mobile information collected through the opt-in process.

You opt in to receive email communications by checking the email consent box on our contact or intake form. Emails may include appointment information, general health information relevant to your care, and occasional practice updates. You may unsubscribe at any time by using the unsubscribe link in any email, by calling the practice, or by emailing info@napavalleylifestyleandwellness.com. Consent is not a condition of receiving medical services.

We share information only as necessary and only in the following circumstances:

• With other health care providers involved in your care
• With your insurance carrier for claims and coverage verification
• With service providers that support our operations (website host, email provider, SMS provider, scheduling software, electronic health records)
• When required by law, subpoena, court order, or to respond to lawful requests from public authorities
• To protect the rights, property, or safety of our patients, staff, or the public
• In connection with a sale, merger, or transfer of our practice (any successor will be bound by this Privacy Policy)

We do not sell personal information. We do not share your information with advertisers, data brokers, or third parties for marketing or promotional purposes.

Our website uses cookies and similar technologies to enable core site functionality, remember your preferences, and measure how visitors use the site so that we can improve it. You can disable cookies in your browser settings, though some features of the website may not function properly if you do. We do not use tracking cookies for cross-site behavioral advertising.

We use reasonable administrative, technical, and physical safeguards — including encryption in transit, access restrictions, and staff training — to protect the information we collect. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

We retain your information for as long as necessary to provide the services described in this policy, comply with our legal and regulatory obligations, resolve disputes, and enforce our agreements. Medical records are retained in accordance with California and federal requirements — no less than seven (7) years after the last date of service for adult patients, and longer for minor patients as required by law.

If you are a California resident, you have the right to:

• Know what personal information we have collected, used, and disclosed about you
• Request deletion of your personal information (subject to legal and medical record retention requirements)
• Correct inaccurate personal information
• Opt out of any "sale" or "sharing" of personal information (we do not sell or share for cross-context behavioral advertising)
• Limit the use of sensitive personal information
• Receive non-discriminatory treatment for exercising these rights

Medical information governed by HIPAA is generally exempt from the CCPA/CPRA. Non-medical information collected through our website is covered. To exercise any of these rights, contact us using the information in Section 14. We may ask you to verify your identity before responding to your request.

Our services are intended for adults and for minors who are patients of the practice under the care of a parent or legal guardian. We do not knowingly collect personal information from children under 13 through our website without parental consent. When minors are patients of the practice, their information is handled in accordance with HIPAA and applicable state laws.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. Material changes will be communicated through prominent notice on our website or by email.

For questions about this Privacy Policy or to exercise any of your privacy rights, contact: