How we handle your information.

Period Health Clinic exists because talking about periods, pain, and hormones deserves privacy and respect. That belief shapes how we handle your information — on this website and in your care. This policy explains, in plain language, what we collect on this website, what we do with it, and what we will never do with it.

The short version: we collect only what we need to run this website and respond to you. We do not sell your information. We do not share it with advertisers. We do not put social-media tracking pixels on pages where you read about symptoms or book care. Your health information as a patient is protected separately — and more strongly — under federal law (HIPAA).

Website information is what this policy covers: things like your name and email if you fill out a contact form, and basic technical data your browser sends when you visit any website.

Health information — everything you share once you become a patient, including your intake forms, visit records, messages with your clinician, lab results, and payment details tied to care — is protected health information under HIPAA, the federal health-privacy law. It lives in our secure, encrypted electronic health record system, not on this website, and is governed by our Notice of Privacy Practices, which you receive and acknowledge when you register as a patient. If anything in this policy ever seems to conflict with the Notice of Privacy Practices regarding your health information, the Notice controls.

• We do not sell your personal information, and we never will.
• We do not share your information with data brokers or advertisers.
• We do not use advertising trackers (such as the Meta/Facebook pixel, TikTok pixel, or Google advertising tags) on pages where you read about health conditions, view our services, or begin booking care. Visiting a page about period pain should never follow you around the internet.
• We do not ask this website to remember anything about your health. Health information belongs in the patient portal, where it is encrypted and access- controlled.

• To respond when you contact us;
• To send you updates you've asked for — every email includes an unsubscribe link that works;
• To keep the website secure and functioning;
• To understand, in aggregate, what content is useful so we can write better resources.

We use a small number of service providers to run our practice, each bound by contract to protect your information: our website hosting provider, our email service, our electronic health record and patient portal vendor, and our payment processor (which handles card details directly — we never store your full card number ourselves). Vendors that handle patient health information sign HIPAA business associate agreements with us. We may also disclose information if the law genuinely requires it — and if that ever happens, we disclose the minimum required.

This website uses a small number of cookies: those necessary for the site to function, and those supporting the privacy-respecting analytics described above. You can block or delete cookies in your browser settings at any time; the site will still work. We honor browser-based universal opt-out signals (such as Global Privacy Control) where applicable.

You can contact us at any time to ask what information we hold about you from this website, correct it, or ask us to delete it — no thresholds, no forms, no fee. Email info@periodhealth.clinic and we'll respond within 30 days.

Colorado residents have privacy rights under Colorado law; we honor the spirit of those rights for everyone, regardless of whether the law technically obligates a practice of our size. (Requests about your medical records follow the HIPAA process in our Notice of Privacy Practices instead, which gives you stronger rights — including access to your complete record.)

This website is intended for a general audience and is not directed to children under 13; we do not knowingly collect personal information from children under 13 online. Our clinic proudly cares for teenage patients — that care is arranged through a parent or guardian in the patient portal, under the protections described in our Notice of Privacy Practices and our parental consent process.

We use encryption in transit for this website (HTTPS), access controls on every system, and multi-factor authentication for our staff. We keep website information only as long as we need it for the purposes above, then delete it. Medical records are retained as Colorado law requires for physician records.

If we change this policy, we'll update the date at the top and, for meaningful changes, post a notice on this page. We won't weaken the commitments in Section 3 — the "what we deliberately do not do" list is the point of this policy, not fine print.

Period Health Clinic PLLC

Email: info@periodhealth.clinic

If you believe your health-information rights have been violated, you may also file a complaint with the U.S. Department of Health & Human Services Office for Civil Rights — and doing so will never affect your care with us.

This policy covers the Period Health Clinic website. Your care is governed by our Notice of Privacy Practices, telehealth consent, and financial policy, provided during registration.