Privacy Policy

Effective Date: 12/8/25

Whole Family Lactation Consulting (“we”, “us”, “our”) operates the website wholefamilylactation.com (the “Site”). This policy explains what personal information we collect, how we use it, who we share it with, and your rights regarding that information. Please read it carefully before using the Site.

Device information (automatically collected)

When you visit the Site we receive your IP address, browser type, operating system, time‑zone, language preference, and any functional cookies that Hostinger sets (session ID, language, time‑zone).

Typical Purpose: To make the Site work correctly, remember your language/time‑zone choices, and protect against abuse.

Voluntary personal data

If you fill out a contact form, request a consultation, or otherwise submit information, we may collect your name, email address, phone number, city, and any other details you voluntarily provide.

Typical Purpose: To respond to your inquiry, schedule appointments, and provide the services you request.

Cookies

Hostinger places strictly‑necessary functional cookies (e.g., hostinger_session, lang_pref). No analytics, advertising, or tracking cookies are added by us.

Typical Purpose: To maintain your session, remember language/time‑zone preferences, and protect against CSRF attacks.

We do NOT collect payment information on this Site. All payment processing (cash, credit/debit card, or insurance billing) is handled by third‑party platforms (SimplePractice, The Lactation Network, Wildflower Health) that operate under their own privacy policies and Business Associate Agreements.

Why We Process Your Data

• To provide the services you request – schedule appointments, send confirmations, and answer inquiries.

• To keep the Site functional – the functional cookies and device data are required for the booking form to work and for basic security (e.g., detecting abusive traffic).

• To comply with legal obligations – we retain records for the period required by tax, professional, and (if applicable) HIPAA regulations.

We never use your data for marketing, profiling, or any purpose other than those listed above.

Who We Share Your Data With

SimplePractice, The Lactation Network, Wildflower Health for appointment scheduling, insurance verification, and generation of super‑bills (out‑of‑network). Includes: Name, email, phone, appointment date, service description (no raw payment details).

Payment processor (Bill.com) To complete credit‑card or ACH transactions (only for out‑of‑network cash/card payments). Transaction token/ID and amount (no card numbers).Legal authoritiesWhen required by law (subpoenas, court orders, fraud investigations, safety concerns).Any relevant personal data.

Hosting provider (Hostinger) To store the website files and serve them. Only the functional cookies and device information listed above.

All third parties are bound by contractual agreements (including Business Associate Agreements where required) to protect your data.

Data Retention

• Device & cookie data – retained for the duration of the session or up to 30 days (as set by the cookie TTL).

• Contact‑form submissions – kept for 2 years unless you request deletion.

• Appointment & billing records – retained for 7 years to satisfy professional, tax, and HIPAA requirements.

5. Security Measures

• HTTPS (TLS) encryption for all traffic to the Site.

• Password‑protected admin area with two‑factor authentication.

• Encrypted storage of any personal data on our servers.

• HIPAA‑compliant platforms (SimplePractice, TLN, Wildflower Health) handle all protected health information (PHI).

While we use industry‑standard safeguards, no method of transmission over the Internet is 100 % secure.

6. Your Rights

If you are a resident of a jurisdiction that grants data‑subject rights (e.g., EU, UK, California), you may:

• Access the personal data we hold about you.

• Correct inaccurate or incomplete data.

• Delete your data (subject to legal retention requirements).

• Restrict or object to processing.

• Receive a portable copy of your data.

To exercise any of these rights, please email us at SarahSmithWFLC@proton.me. We will respond within 30 days.

7. Links to Other Websites

Our Site may contain links to external sites that are not operated by us. We are not responsible for the privacy practices of those sites. We encourage you to read the privacy policies of any third‑party sites you visit.

8. Legal Disclosure

We may disclose your information if required by law (e.g., a subpoena), or in good faith belief that such disclosure is necessary to:

• Protect our rights or property.

• Protect your safety or the safety of others.

• Investigate fraud or illegal activity.

• Comply with a governmental request.

9. Contact Information

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

Whole Family Lactation Consulting
Email: SarahSmithWFLC@proton.me