Last updated: January 2026
At Calm Wellness Thrive, your biological and personal data is secured with zero-knowledge encryption. This Privacy Policy outlines our unbreachable standards.
1. Information We Collect
We collect personal identification details such as your name, email, phone number, date of birth, and address when you register, schedule appointments, or subscribe to communications.
2. Health Data Collection
Health-related data — including medical history, current medications, allergies, and treatment preferences — is collected only with your explicit consent and used exclusively for providing care.
3. Use of Information
Your data is used to deliver and improve healthcare services, process payments, send appointment reminders, deliver newsletters (with consent), comply with legal requirements, and enhance our platform experience.
4. Data Sharing
We never sell your personal data. We may share it with treating providers, insurance partners for claims, operational vendors, law enforcement when legally required, and affiliates with your consent.
5. Security Measures
We employ 256-bit SSL encryption, AES-256 data-at-rest encryption, routine penetration testing, multi-factor authentication, and mandatory staff privacy training.
6. HIPAA Compliance
Calm Wellness Thrive fully complies with HIPAA, maintaining administrative, physical, and technical safeguards to protect Protected Health Information (PHI).
7. Cookies & Tracking
We use cookies and analytics tools to remember preferences, analyze traffic, and personalize content. You can manage cookies in your browser settings.
8. Third-Party Links
Our site may link to external websites. We are not responsible for their privacy practices and encourage you to review their policies.
9. Data Retention
Personal data is retained while your account is active. Health records are kept for the minimum period required by state and federal law, typically seven years from last service date.
10. Right to Access
You may request a copy of your personal data in a standard electronic format within 30 days, at no charge.
11. Right to Correction
You can update information via your account settings or contact us to correct inaccurate or incomplete data.
12. Right to Deletion
You may request deletion subject to legal retention obligations, ongoing service needs, and regulatory requirements.
13. Right to Data Portability
You may receive your data in a structured, machine-readable format and request direct transfer to another provider where feasible.
14. Right to Restrict Processing
You can request processing restrictions when data accuracy is contested, processing is unlawful, or data is needed for legal claims.
15. Right to Object
You may object to processing for direct marketing, profiling, or legitimate-interest purposes. We will comply unless compelling grounds exist.
16. Email Communications
With consent, we send transactional emails (essential, non-optional) and promotional emails (optional, unsubscribable). Manage preferences in your account.
17. SMS & Phone
SMS is used for reminders and alerts; phone for follow-ups. Manage communication preferences via account settings.
18. Children's Privacy
Our services are not for children under 13. We do not knowingly collect their data and will delete any inadvertently collected information.
19. Telehealth Privacy
Telehealth uses end-to-end encryption. Sessions are not recorded without consent. All virtual visits carry the same confidentiality as in-person care.
20. Payment Data
Payments are processed via PCI-DSS compliant processors. We never store full credit card numbers on our servers.
21. Analytics & Research
Anonymized, aggregated data may be used for research and improvement. Individual patients are never identifiable in shared insights.
22. Breach Notification
We will notify affected users within 72 hours of discovering a breach, including its nature, affected data, and protective steps.
23. International Transfers
If data is transferred outside the U.S., we implement Standard Contractual Clauses and other appropriate safeguards.
24. Automated Decision-Making
We do not use automated systems for diagnoses or treatment decisions. AI tools are supplementary; all medical decisions are made by licensed professionals.
25. Marketing & Advertising
With consent, we may deliver targeted health and wellness advertisements. Opt out anytime via account settings.
26. Employer-Sponsored Plans
Employers receive only aggregate utilization reports without individually identifiable health information.
27. Mobile App Privacy
Our mobile app follows the same privacy standards. We may collect device info and usage analytics with your permission.
28. Policy Changes
We may update this policy periodically. Material changes will be communicated via email or prominent website notice.
29. Filing Complaints
Complaints may be directed to our Privacy Officer at privacy@calmwellnessthrive.com or to the HHS Office for Civil Rights.
30. Contact Our Privacy Team
Calm Wellness Thrive Privacy Team, 3743 Rosemont Avenue
Orlando, FL 32801 | privacy@calmwellnessthrive.com | +1 607-288-8032
31. Consent Acknowledgment
Using Calm Wellness Thrive services confirms your understanding and acceptance of this Privacy Policy.
32. Severability
If any provision is found unenforceable, the remainder stays in full force and effect.
