Last updated: January 2026
At Nutrition Wellness Path, we are committed to protecting your privacy and ensuring the security of your personal and health-related information. This Privacy Policy outlines our practices regarding data collection, usage, security, and your rights as a user of our services.
1. Information We Collect
We collect personal identification information including your name, email address, phone number, date of birth, and mailing address when you register on our platform, book appointments, or subscribe to our newsletters.
2. Health Information Collection
When you use our healthcare services, we collect health-related data including medical history, current symptoms, medications, allergies, and treatment preferences. This information is collected only with your explicit consent and is used solely for providing medical services.
3. How We Use Your Information
Your information is used to: provide and improve our healthcare services, process appointments and payments, send appointment reminders and follow-up communications, deliver newsletters and promotional materials (with consent), comply with legal obligations, and enhance user experience on our platform.
4. Data Sharing and Disclosure
We do not sell your personal information. We may share your data with: healthcare providers involved in your care, insurance partners for claims processing, third-party service providers who assist our operations, law enforcement when required by law, and business affiliates with your explicit consent.
5. Data Security Measures
We implement industry-standard security measures including: 256-bit SSL encryption for all data transmissions, AES-256 encryption for data at rest, regular security audits and penetration testing, multi-factor authentication for internal access, and employee training on data protection protocols.
6. HIPAA Compliance
Nutrition Wellness Path adheres to all requirements under the Health Insurance Portability and Accountability Act (HIPAA). We maintain administrative, physical, and technical safeguards to protect Protected Health Information (PHI) as mandated by federal law.
7. Cookies and Tracking Technologies
We use cookies, web beacons, and similar technologies to: remember your preferences and login status, analyze website traffic and usage patterns, deliver personalized content and advertisements, and improve our website functionality. You can manage cookie preferences through your browser settings.
8. Third-Party Links
Our website may contain links to third-party sites. We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies before providing any personal information.
9. Data Retention Period
We retain your personal information for as long as your account is active or as needed to provide services. Health records are retained for the period required by state and federal regulations, typically a minimum of seven years from the last date of service.
10. Your Right to Access
You have the right to request access to the personal data we hold about you. We will provide a copy of your data in a commonly used electronic format within 30 days of receiving your request, free of charge.
11. Your Right to Correction
You may request correction of any inaccurate or incomplete personal data we hold about you. You can update certain information directly through your account settings, or you may contact our support team for assistance.
12. Your Right to Deletion
You may request the deletion of your personal data, subject to certain exceptions such as: legal obligations to retain records, ongoing service requirements, dispute resolution needs, and regulatory compliance requirements.
13. Your Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and you may request that we transmit this data directly to another service provider where technically feasible.
14. Your Right to Restrict Processing
You may request that we restrict the processing of your personal data in certain circumstances, including when you contest the accuracy of the data, when processing is unlawful, or when you need the data for legal claims.
15. Your Right to Object
You have the right to object to the processing of your personal data for direct marketing purposes, profiling, or processing based on legitimate interests. We will cease processing unless we have compelling legitimate grounds.
16. Email Communications
With your consent, we send both transactional emails (appointment confirmations, test results) and promotional emails (newsletters, special offers). Transactional emails cannot be opted out of as they are essential for service delivery. You may opt out of promotional emails at any time.
17. SMS and Phone Communications
We may send SMS notifications for appointment reminders and urgent health alerts. We may also contact you by phone for follow-up care or service-related matters. You can manage your communication preferences in your account settings.
18. Children's Privacy
Our services are not directed to individuals under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected such data, we will take immediate steps to delete it.
19. Telehealth Privacy
Our telehealth services use end-to-end encrypted video and messaging platforms. Sessions are not recorded unless explicitly requested and consented to by the patient. All telehealth communications are treated with the same confidentiality as in-person visits.
20. Payment Information
We collect and process payment information through PCI-DSS compliant payment processors. We do not store full credit card numbers on our servers. Billing information is retained only as long as necessary for accounting and legal requirements.
21. Analytics and Research
We may use anonymized and aggregated data for research, analytics, and service improvement. This data cannot be used to identify individual patients. We may share aggregate insights with research institutions under strict data use agreements.
22. Data Breach Notification
In the event of a data breach affecting your personal information, we will notify you within 72 hours of becoming aware of the breach. Notifications will include the nature of the breach, data affected, and steps you can take to protect yourself.
23. International Data Transfers
If your data is transferred outside the United States, we ensure appropriate safeguards are in place including Standard Contractual Clauses, adequacy decisions, and binding corporate rules as applicable.
24. Automated Decision-Making
We do not use automated decision-making for healthcare diagnoses or treatment recommendations. Any AI-assisted tools used are supplementary and all final medical decisions are made by licensed healthcare professionals.
25. Marketing and Advertising
With your consent, we may use your data to deliver targeted advertisements related to health services and wellness products. You can opt out of personalized advertising through your account settings or by contacting us directly.
26. Employer-Sponsored Plans
If you access our services through an employer-sponsored plan, your employer may receive aggregate utilization reports. These reports do not contain individually identifiable health information and are used solely for plan administration purposes.
27. Mobile Application Privacy
Our mobile application may collect device information, location data (with permission), and usage analytics. We implement the same privacy standards across our mobile platform as our web services.
28. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes via email or a prominent notice on our website. Continued use of our services after changes constitutes acceptance of the updated policy.
29. Complaints and Disputes
If you believe your privacy rights have been violated, you may file a complaint with our Privacy Officer at privacy@nutritionwellnesspath.org or with the U.S. Department of Health and Human Services Office for Civil Rights.
30. Contact Our Privacy Team
For any questions or requests regarding this Privacy Policy or your personal data, please contact our Privacy Team at: Nutrition Wellness Path, 23 Cross St, Nutley, NJ 07110, USA, email: privacy@nutritionwellnesspath.org, phone: +1 212-707-9857.
31. Consent Acknowledgment
By using Nutrition Wellness Path's services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. Your continued use of our platform constitutes ongoing consent to our data practices.
32. Severability
If any provision of this Privacy Policy is found to be unenforceable or invalid, that provision shall be limited or eliminated to the minimum extent necessary so that the remaining provisions remain in full force and effect.
