Privacy Policy

1. Introduction

Restora Health LLC ("Restora Health," "we," "us," or "our") operates the website restorahealth.net and provides physician-led telehealth metabolic medicine services. This Privacy Policy describes how we collect, use, disclose, and safeguard information when you visit our website or use our services.

By visiting our website or engaging with our services, you agree to the terms of this Privacy Policy. If you do not agree with the terms of this policy, please do not access the site.

This policy governs information collected through our website. Protected Health Information (PHI) collected as part of clinical care is governed separately by our HIPAA Notice of Privacy Practices, which you may review at hipaa.html.

2. Information We Collect

We collect information that you voluntarily provide to us when you:

• Complete a contact or inquiry form
• Request a consultation or appointment
• Subscribe to communications from us
• Correspond with us via email

The information we collect may include: your name, email address, phone number, state of residence, and how you heard about us. We do not collect Protected Health Information (PHI) through this website. Medical history, lab results, diagnoses, prescriptions, and clinical records are handled exclusively through Cerbo EHR — our HIPAA-compliant electronic health record and patient portal.

We also automatically collect certain technical information when you visit our website, including your IP address (anonymized), browser type, referring URL, pages visited, and time and date of your visit. This information is collected through Google Analytics and does not identify you personally.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Appointment scheduling and confirmation: To confirm and manage your consultation with Dr. Kresch.
• Communication: To respond to your inquiries, send appointment reminders, and provide program information.
• Service improvement: To understand how visitors interact with our website and improve content and user experience.
• Legal compliance: To comply with applicable laws and regulations.

We do not sell, rent, or share your personal information with third parties for marketing purposes. We do not use your information for advertising targeting or behavioral profiling.

4. HIPAA Compliance

Restora Health is a covered entity under the Health Insurance Portability and Accountability Act (HIPAA). All Protected Health Information (PHI) related to your medical care is handled exclusively through Cerbo, our HIPAA-compliant EHR platform. PHI is never transmitted through this website, web forms, or standard email.

Our full HIPAA Notice of Privacy Practices, which describes your rights regarding your medical records and how we use and disclose PHI in connection with your care, is available at restorahealth.net/pages/hipaa.html.

5. Google Analytics

We use Google Analytics to understand website traffic patterns and improve our content. Google Analytics collects anonymized data about your visit, including pages viewed, time on site, and referring sources. We have enabled IP anonymization, which means your full IP address is not stored by Google Analytics. We do not use Google Analytics Advertising Features and have not enabled cross-site tracking.

You may opt out of Google Analytics data collection by installing the Google Analytics Opt-out Browser Add-on.

6. Cookies

Our website uses minimal, functional cookies necessary for the site to operate correctly. We do not use advertising cookies, third-party tracking cookies, or cookies from social media platforms. The cookies we use are:

• Session cookies: Temporary cookies that expire when you close your browser. Used for navigation and session management.
• Analytics cookies: Set by Google Analytics (anonymized) to count visits and traffic sources. These expire after 2 years and do not contain personal information.

You may disable cookies in your browser settings. Disabling cookies may affect website functionality.

7. Data Security

Our website uses SSL/TLS encryption (HTTPS) for all connections, ensuring that information transmitted between your browser and our website is encrypted. We do not store PHI on our website servers. Clinical records are maintained exclusively within Cerbo's HIPAA-compliant infrastructure.

While we implement reasonable security measures, no method of electronic transmission or storage is 100% secure. We encourage you to use a secure network connection when communicating with us.

8. Your Rights

You have the following rights with respect to the information we hold about you:

• Access: You may request a copy of the personal information we hold about you.
• Correction: You may request that we correct inaccurate personal information.
• Deletion: You may request that we delete your personal information from our systems, subject to legal retention requirements.
• Opt-out: You may unsubscribe from marketing communications at any time by following the unsubscribe instructions in any email or by contacting us directly.

To exercise any of these rights, please contact us at info@restorahealth.net.

For rights related to your medical records under HIPAA, please see our HIPAA Notice of Privacy Practices.

9. Contact

If you have questions about this Privacy Policy or our data practices, please contact us:

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website following any changes constitutes your acceptance of the revised policy.