Effective Date:

4/25/2025

Horn Holistic Health, Inc. ("we", "our", or "us") values your privacy. This Privacy Policy explains

how we collect, use, disclose, and safeguard your information, including Protected Health Information (PHI), in compliance with the Health Insurance Portability and Accountability
Act (HIPAA) , the California Consumer Privacy Act (CCPA), and other applicable laws.

1. Who We Are
Horn Holistic Health is a functional medicine and acupuncture practice located at 419 Main St., Ste E, Huntington Beach, CA 92648. We operate as an S Corporation founded by Jennifer
Horn in 2020, offering both in-person and telehealth services.

2. Information We Collect
a. Information You Provide:
● Personal details (e.g., name, email, address, phone)
● Health and medical history (via HIPAA-compliant intake forms)

● Appointment and payment information

● Communications (email or contact form inquiries)

b. Automatically Collected Information:
● Browser/device data

● Browser/device data

● IP address

● Site activity via cookies or analytics tools (non-health-related)

3. How We Collect Data
● Intake forms and client portals via Unified Practice (HIPAA-compliant)●

● Appointment scheduling through Unified Practice and Google Calendar(for free consults only)

● Direct communications via email or our website

4. Use of Information

We use your data to:

● Provide holistic health services

● Schedule and confirm appointments
● Maintain medical records and comply with legal obligations

● Improve our website and offerings

5. Data Sharing and Disclosure
We only share your information:

●With your consent

●With third parties that are HIPAA-compliant (e.g., Unified Practice)

●To comply with legal requirements or respond to lawful requests. We do not sell or share your personal or health information for commercial purposes.

6. HIPAA Compliance
Horn Holistic Health is a HIPAA-compliant practice, and all medical data is transmitted and stored securely. Intake and treatment information is processed through Unified Practice, which has signed a Business Associate Agreement (BAA).

7. Your Rights (California & Federal)
You may request to:

● Access, correct, or delete your personal data

● Receive a copy of your health records

●Withdraw consent or opt out of non-essential emails

To exercise these rights, contact:

📧 [email protected]
📞 949-416-8616

8. Cookies and Analytics
We may use basic cookies or website analytics for user experience purposes. No PHI is collected via cookies.

9. Third-Party Tools

We utilize:

● Unified Practice for booking, intake, and payments

● Google Calendar for non-medical appointment scheduling

● Email servicesfor communication (no PHI shared unless explicitly consented to)

10. Data Retention
We retain client data as long as required by law and in accordance with healthcare

record keeping standards.

11. Security
We implement industry-standard safeguards to protect your data. However, no method of transmission or storage is 100% secure.

12. Changes to This Policy

We may update this Privacy Policy periodically. Check back for updates.