Privacy Policy
Effective Date: April 6, 2026
Introduction
WBF Wellness ("we," "us," or "our") operates the website wbfwellness.com (the "Site") and provides in-person medical wellness services, including clinical care and laboratory testing. We are committed to protecting the privacy and security of your personal and health information.
This Privacy Policy explains what information we collect, how we use and share it, and your rights regarding that information. By using our Site or services, you agree to the practices described in this policy.
Information We Collect
a. Personal and Contact Information
When you register, schedule appointments, or contact us, we collect:
• Full name
• Email address
• Phone number
• Mailing address
• Date of birth
b. Health and Medical Information
As a medical wellness provider, we collect health-related information necessary to deliver in-person care, including:
• Medical history and current health conditions
• Symptoms, diagnoses, and treatment plans
• Medications and allergies
• Fitness and wellness data you provide
• Laboratory test orders, specimens, and results
• Communications with our clinical staff
This information may constitute Protected Health Information ("PHI") under the Health Insurance Portability and Accountability Act ("HIPAA") and is handled accordingly.
c. Payment Information
When you make a purchase or pay for services, we collect billing details such as your credit or debit card number, billing address, and transaction history. Payment card data is processed by secure, PCI-DSS-compliant third-party payment processors. We do not store full card numbers on our servers.
d. Technical and Usage Data
We automatically collect certain information when you visit our Site, including:
• IP address and approximate location
• Browser type and operating system
• Pages visited and time spent on the Site
• Referring URLs
• Cookie identifiers and similar tracking technologies
How We Use Your Information
We use the information we collect for the following purposes:
-
To provide, coordinate, and improve our in-person wellness and laboratory services
-
To process payments and maintain billing records
-
To communicate with you about appointments, results, and care plans
-
To send administrative notices, service updates, and health reminders
-
To comply with applicable healthcare laws and regulations, including HIPAA
-
To prevent fraud, enforce our Terms of Service, and protect the security of our platform
-
To analyze Site usage and improve user experience
HIPAA and Protected Health Information
WBF Wellness is a covered entity under HIPAA. Your Protected Health Information (PHI) is used and disclosed in accordance with our Notice of Privacy Practices (NPP), which is provided separately and available on our Site.
In general, we will use and disclose your PHI only:
-
For treatment, payment, and healthcare operations
-
As required or permitted by law
-
With your written authorization for all other purposes
You have the right to request a copy of our Notice of Privacy Practices at any time by contacting us at the information provided in Section 9.
How We Share Your Information
We do not sell your personal or health information. We may share your information with trusted third parties only in the following circumstances:
a. Laboratory Service Providers
When you receive laboratory testing services, we share the necessary PHI with certified laboratory partners to process your specimens and return results. These partners include:
• Quest Diagnostics
• Resolve Diagnostics
These laboratories are HIPAA Business Associates and are bound by Business Associate Agreements (BAAs) requiring them to safeguard your PHI and use it solely for the purpose of processing and reporting your test results.
b. Other Service Providers
We work with additional third-party vendors who assist us in operating our Site and delivering services, including:
• Payment processors (e.g., for billing and transaction handling)
• Electronic health record (EHR) platform providers
• Email and appointment reminder services
• Cloud storage and hosting providers
These parties are contractually obligated to protect your information and use it only as directed by us.
c. Healthcare Providers
With your consent, we may share your health information with referring physicians, specialists, laboratories, or pharmacies involved in your care.
d. Legal Requirements
We may disclose your information when required by law, court order, or governmental authority, or to protect the rights, property, or safety of WBF Wellness, our users, or the public.
e. Business Transfers
In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership.
Cookies and Tracking Technologies
Our Site uses cookies and similar technologies to enhance your experience and analyze usage. Types of cookies we use include:
-
Essential cookies: Required for the Site to function properly
-
Analytics cookies: Help us understand how visitors use our Site (e.g., Google Analytics)
-
Functional cookies: Remember your preferences and settings
You may control cookie settings through your browser. Please note that disabling certain cookies may affect the functionality of our Site. We honor Do Not Track (DNT) signals where technically feasible.
Data Security
We implement administrative, technical, and physical safeguards designed to protect your personal and health information, including:
-
Encryption of data in transit (TLS/SSL) and at rest
-
Role-based access controls limiting data access to authorized personnel
-
Regular security assessments and employee training
-
HIPAA-compliant infrastructure and Business Associate Agreements (BAAs) with service providers
No method of transmission over the internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security. In the event of a data breach affecting your PHI, we will notify you as required by HIPAA and applicable law.
Data Security
a. HIPAA Rights
As a patient, you have the following rights regarding your PHI:
• Right to access and receive a copy of your health records
• Right to request corrections to inaccurate information
• Right to an accounting of disclosures
• Right to request restrictions on how we use or disclose your PHI
• Right to receive communications by alternative means or at alternative locations
b. General Privacy Rights
Depending on your state of residence, you may also have the right to:
• Access the personal information we hold about you
• Request deletion of your personal information (subject to legal and medical record retention requirements)
• Opt out of marketing communications at any time
• Lodge a complaint with a supervisory authority
c. How to Exercise Your Rights
To exercise any of the above rights, please contact us using the information in Section 9. We will respond to verifiable requests within the timeframe required by applicable law.
Children's Privacy
Our services are intended for individuals 18 years of age and older. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a minor, please contact us immediately so we can take appropriate action
Third-Party Links
Our Site may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any external sites you visit.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, we will revise the "Effective Date" at the top of this page and, where appropriate, notify you by email or a notice on our Site. Your continued use of our services after any such update constitutes your acceptance of the revised policy.
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:
WBF Wellness
Website: www.wbfwellness.com
For privacy-specific inquiries, please use the subject line: "Privacy Request"
If you believe your privacy rights have been violated under HIPAA, you also have the right to file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights at www.hhs.gov/ocr.