Privacy Policy

What this site collects

Nothing, directly. Every page here is a pre-built file. There is no login, no profile, no order history, no cart, and no server-side database that we own or operate.

Three things still happen around the edges, and they are worth being precise about:

• Server request logs. Our hosting provider records standard technical information for every request (IP address, browser user-agent, the URL requested, and a timestamp) so it can serve pages, block abuse, and keep the site up. We do not use those logs to build a profile of you.
• Third-party embeds. The booking page loads a scheduling calendar inside an iframe. That embed is served by the scheduling provider and can set its own cookies and see its own request data.
• Affiliate link parameters. Product links carry an ambassador tracking code so the brand knows the referral came from this site. The tracking happens on the brand's side after you click, not here.

We do not currently run analytics, advertising pixels, session recording, or A/B testing of any kind. If that changes, this page will say so, and it will say which provider, before the tool goes live.

Information you choose to give us

• Booking a call. The booking calendar is operated by TidyCal. When you book, your name, email address, chosen time, and anything you type into the booking form go to TidyCal and are shared with Abby so she can hold the appointment. See TidyCal's privacy policy.
• The mailing list. The email sign-up form on the home page is not connected to an email provider yet. Submitting it stores nothing, sends nothing, and subscribes you to nothing; the page tells you so on submit. When it is switched on, this policy will be updated to name the provider before a single address is collected.
• Messages. If you message the practice on Instagram, that conversation lives in Instagram and is governed by Meta's policies.
• Working together. If you go on to become a client, the health information you share in that relationship is handled under the separate agreement you sign at the start of the program, not under this website policy.

Cookies

This site sets no cookies of its own and stores nothing in your browser's local storage. Filter selections on the shop page are kept in the address bar, which is why a filtered view can be copied and shared as a link.

Cookies you may still pick up come from elsewhere: the scheduling iframe on the booking page, and the affiliate network's cookie once you land on a partner brand's site after clicking a product link. Both are governed by those companies' policies, and both can be managed through your browser's cookie settings.

The third parties involved

• Vercel. Hosting and content delivery. Processes server request logs. Privacy policy.
• TidyCal. The booking calendar, embedded on the booking page and linked from every call-to-action. Privacy policy.
• EquiLife and its affiliate network. The practitioner platform that sells most of the products and lab panels, and the network that attributes referrals. Your order, payment, shipping, and returns are entirely theirs. EquiLife.
• Other partner brands. Any additional affiliate brand this site links to, whether as an individual product in the dispensary or as a brand-level link to that brand's own shop, each under its own policy. The brand is named wherever it is linked.
• Instagram / Meta. The practice's social profile and direct messages.

Web fonts and product images are served from this site's own domain; they are downloaded once at build time rather than fetched from a font or image CDN while you browse, so loading a page here does not announce your visit to a third party.

How information is used

• To hold and prepare for a call you booked.
• To reply to a message you sent.
• To keep the site available, fast, and free of abuse.
• To understand, in aggregate, which products a referral came from; the affiliate network reports totals to us, not identities.

We do not sell personal information, we do not share it with data brokers, and we do not use it for automated decision-making or profiling.

How long it is kept

Booking records are kept for as long as the scheduling account is open, so appointment history stays intact. Messages persist in the platform they were sent on. Hosting logs are retained on the provider's standard short cycle. Because this site itself stores nothing, there is nothing here to delete.

Your rights

Depending on where you live, you may have the right to ask what personal information is held about you, to have it corrected or deleted, to object to or restrict its processing, to receive a copy in a portable format, and to opt out of the sale or sharing of personal information. We do not sell or share personal information, so there is nothing to opt out of on that last point.

To exercise any of these, get in touch. Send a message on Instagram at @holistichaven.health, which Abby reads herself, or raise it on a call booked through the booking page. A dedicated inbox for privacy and legal requests will be published here when one is in place.

Because much of the information described here sits with the third parties named above, the fastest route for a booking or mailing-list request is often to contact that provider directly. We will point you to the right place if you ask us first.

A note about health information

Holistic Haven Health is not a healthcare provider covered by HIPAA, and this website is not a patient portal. Please do not send detailed health history, test results, or anything else sensitive through a website form, a social media message, or an unencrypted email. Bring it to a call instead.

Children

This site is intended for adults. It is not directed to children under 13, and we do not knowingly collect information from them. Some products in the dispensary are formulated for children; they are meant to be chosen and purchased by a parent or guardian.

Security

The site is served over HTTPS. Holding no personal data of our own is the strongest security control available to a site like this one, and it is the one we have chosen. For everything held by the providers named above, their security practices apply.

Visitors outside the United States

The practice is based in the United States and the providers named above process data there. If you visit or contact us from elsewhere, information involved will be handled in the United States, which may have different data-protection rules than your own country.

Changes to this policy

If this policy changes, the revised version will be posted here with a new date at the top of the page. Material changes (adding analytics, or switching the mailing list on) will be described rather than slipped in.

Contact

Send a message on Instagram at @holistichaven.health, which Abby reads herself, or raise it on a call booked through the booking page. A dedicated inbox for privacy and legal requests will be published here when one is in place.