NOURISHING LIFE COLLECTIVE – Notice of Website and Clinic Privacy Practices

THESE NOTICES DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

_____________________________

Nourishing Life Collective - Website Privacy Policy:

Effective Date: November 2, 2026  |  Portland, Oregon

Nourishing Life Collective (“NLC,” “we,” “us,” or “our”) is committed to protecting your privacy and the security of your personal and health information. This Privacy Policy explains how we collect, use, share, and protect information when you visit our website, and describes your choices.

Please read this policy carefully. By using our website, you agree to the practices described here.

1. Two Categories of Information We Handle

NLC handles two types of information, and different rules govern each.

A. Protected Health Information (PHI)

Information you share with us when you receive care, including your health history, treatment records, diagnoses, and insurance information, is Protected Health Information (PHI) under the Health Insurance Portability and Accountability Act (HIPAA). Our Notice of Privacy Practices (the “Notice”) describes how we handle PHI. NLC and the independent providers who practice here share one joint Notice.

We give the Notice to every patient at or before the first appointment, post it in our clinic, and post it on this website at [LINK TO NOTICE OF PRIVACY PRACTICES]. You can also ask us for a paper copy.

This Privacy Policy does not replace the Notice. If the two conflict about PHI, the Notice controls.

B. Website and General Personal Information

Information collected through your use of this website, such as your name, email address, and browsing behavior, is governed by this Privacy Policy. The sections below address this information.

2. Information We Collect

Information You Provide Directly

We may collect personal information that you choose to give us when you:

  • Submit a contact, inquiry, or appointment request form

  • Subscribe to our clinic communications

  • Create a patient portal account

  • Communicate with us by email, phone, or through our website

This information may include your name, email address, phone number, mailing address, and any details you choose to share in your message.

Health Information and Website Forms

Please do not send health details through our general website forms, regular email, or text messages. These are not fully secure. To send us health information, use our secure new patient form, which you can reach from this website and which is provided by Paubox, or call us.

Information Collected Automatically

When you visit our website, we collect certain information automatically through cookies, web beacons, and similar technologies, including:

  • IP address and general geographic location

  • Browser type and version

  • Pages visited and time spent on each page

  • Referring URL (the site that directed you to ours)

  • Device type and operating system

We collect this information in aggregate. It is generally not linked to your identity unless you have also given us personal information through a form or account.

Cookies and Tracking Technologies

Our website may use cookies, which are small data files stored on your device, to improve your browsing experience, analyze site traffic, and support certain site functions. You can set your browser to refuse cookies or to alert you when cookies are sent. Disabling cookies may affect parts of our website.

We may also use third-party analytics tools such as Google Analytics to understand how visitors use our site. These services have their own privacy policies for the data they collect on our behalf.

3. How We Use Your Information

We use the information we collect to:

  • Respond to your inquiries and appointment requests

  • Communicate with you about your care, appointments, bills, and NLC services

  • Send clinic communications, such as provider spotlights, health education content, and event announcements

  • Improve our website content, structure, and user experience

  • Comply with legal and regulatory obligations

  • Protect the security and integrity of our website and systems

We do not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects.

4. How We Share Your Information

NLC does not sell, rent, or trade your personal information. We may share information in these limited circumstances:

Service Providers

We may share information with vendors who help us operate our website, manage appointments, process billing and payments, host our secure forms, keep our electronic health record, and send clinic communications. These vendors must use your information only as we direct and must maintain appropriate security standards.

Legal Requirements

We may disclose information if law, regulation, court order, or a government authority requires it, or if we believe in good faith that disclosure is necessary to protect our rights, the safety of our patients or staff, or the public.

Business Transitions

If NLC merges with another organization, is acquired, or sells all or substantially all of its assets, patient and user information may be transferred as part of that transaction. We will notify affected individuals as the law requires.

With Your Consent

We may share your information for any other purpose with your explicit prior consent. We do not publish patient stories, testimonials, or photos without your written authorization.

5. HIPAA and Your Health Information

NLC is a HIPAA covered entity. We must protect the privacy and security of your PHI and give you our Notice, which describes your rights and our duties.

  • Your rights under HIPAA include the right to:

  • See and get a copy of your health records

  • Ask us to correct information that is wrong or incomplete

  • Ask us to restrict certain uses and disclosures of your PHI, including a request not to share information about a service you pay for in full out of pocket with your health plan

  • Ask us to contact you in a particular way or at a particular place

  • Receive a list of certain disclosures of your PHI

  • Get a paper copy of the Notice

  • Be notified if a breach affects your PHI

  • File a complaint with NLC or with the U.S. Department of Health and Human Services if you believe we violated your privacy rights

  • The Notice explains each right and how long we take to respond. We will not retaliate against you for filing a complaint. To use any of these rights, contact our Privacy Officer at admin@nourishinglifecollective.com.

6. Data Security

NLC uses administrative, technical, and physical safeguards designed to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include encrypted data transmission, access controls, and privacy and security training for our providers and staff.

No method of electronic transmission or storage is completely secure. We use commercially reasonable means to protect your information, but we cannot guarantee absolute security. If you have reason to believe your interaction with us is no longer secure, please contact us immediately.

If a data breach affects your personal information, we will notify you as federal and Oregon law require.

7. Your Privacy Choices

Oregon residents may have privacy rights under state law. Whether or not those laws apply to us, you can ask us to:

  • Tell you what website and general personal information we hold about you and how we use it

  • Give you a copy of that information

  • Correct inaccurate information

  • Delete your information, subject to the limits below

We do not sell personal data, and we will not treat you differently for making a request. We may not be able to delete information we must keep by law, including health records, which we handle under our Notice (see Section 11). We may need to verify your identity before we act on a request.

To make a request, contact us using the information in Section 13. We will respond within the time the law requires.

8. Children’s Privacy

Our website is not directed to children under 13, and we do not knowingly collect personal information from children under 13 without verifiable parental consent. If you believe we have collected information from a child under 13, please contact us promptly and we will take steps to delete it.

For patients who are minors, we handle health information under HIPAA, Oregon minor consent laws, and our Notice.

9. Clinic Communications

We send clinic communications by email, such as provider spotlights, health education content, event announcements, and service updates. We add patients to our clinic communications list when they give us their email address, and anyone can subscribe through our website.

These messages describe only what is happening at NLC. They never include information about your care. We do not share your email address with anyone else for their own use.

You can unsubscribe at any time by clicking the “unsubscribe” link in any clinic communication or by contacting us. If you unsubscribe, we may still send you messages about your appointments, care, bills, or account, such as confirmations, reminders, and bill notices.

10. Third-Party Websites and Services

Our website may link to third-party websites and services, including our scheduling platform, patient portal, and secure new patient form. This Privacy Policy applies only to our website and does not govern the practices of third-party sites. Please review the privacy terms of any third-party service you use.

Our secure new patient form, patient portal, secure bill pages, and electronic health record are operated by vendors under Business Associate Agreements, which require them to protect your health information as HIPAA requires.

11. Retention of Information

We keep personal information collected through our website for as long as needed for the purposes in this Privacy Policy, unless the law requires or permits a longer period.

We keep patient health records for the periods that Oregon law and the rules of each provider’s licensing board require, and at least that long.

12. Changes to This Privacy Policy

We may update this Privacy Policy at any time. When we make material changes, we will post the updated policy on this page with a new effective date. Please review it from time to time.

Your continued use of our website after we post changes means you accept the updated policy.

13. Contact Us

If you have questions, concerns, or requests about this Privacy Policy or your personal information, contact our Privacy Officer:

Tara Radsliff, Privacy Officer

Nourishing Life Collective

3115 NE Sandy Blvd, Suite 231

Portland, Oregon 97232-2779

Phone: (503) 701-8766

Email: admin@nourishinglifecollective.com

Website: https://www.nourishinglifecollective.com

You can file a complaint about our HIPAA practices with the U.S. Department of Health and Human Services at www.hhs.gov/ocr/privacy/hipaa/complaints. We will not retaliate against you for filing a complaint.

These Terms of Service were last updated on November 2, 2026.

_____________________________

Nourishing Life Collective - Clinic Privacy Policy:

Effective Date: November 2, 2026  |  Portland, Oregon

Who Follows This Notice

This Notice applies to Nourishing Life Collective (NLC) and to the providers and staff who care for you here. Providers at NLC practice acupuncture, naturopathic medicine, physical therapy, chiropractic care, and nutrition counseling. As we add other types of providers, such as massage therapists, this Notice covers them too.

The providers who practice at NLC are independent practitioners, not employees of NLC. They run their own practices, and we bill under NLC's group billing number. NLC and these providers participate together in an organized health care arrangement. We present ourselves to patients as one clinic, we use one electronic health record system, and we share your health information with each other as needed for treatment, payment, and the clinic's operations. This is a joint notice for all of us, and each provider follows it.

Our Responsibilities

Your health information is personal. The law requires us to:

  • Keep your health information private and secure.

  • Give you this Notice and follow what it says.

  • Tell you promptly if a breach puts the privacy or security of your information at risk.

How We May Use and Share Your Health Information

We may use and share your information in the ways below without asking for your written permission each time.

  • Treatment. We use and share your information to care for you. For example, your naturopathic provider may talk with your acupuncturist about your care, order labs or imaging, send a prescription to a pharmacy, or refer you to a specialist. This includes visits by telehealth.

  • Sharing records with other clinics. If you consent, we may share your records electronically through athenahealth with other clinics that use athenahealth, so those clinics can care for you. We do this only with your consent, and you can withdraw your consent at any time by telling us in writing.

  • Payment. We use and share your information to bill and collect payment for your care. For example, we verify your insurance benefits, send claims to your insurance company, get prior authorizations, charge your card on file, and send you bill notices. If a balance goes unpaid, we may share the information needed to collect it with a collection agency.

  • Health care operations. We use and share your information to run NLC. For example, we review the quality of our care, train staff, schedule appointments, manage our electronic health record and billing systems, and get legal, accounting, and consulting advice. Companies that help us with these tasks must agree in writing to protect your information.

  • Appointment reminders and bills. We may contact you about appointments and bills by phone, text, or email, using the contact information you gave us. We may leave brief messages. You can ask us to contact you in a different way (see "Your Rights").

  • Clinic communications. We may add the email address you gave us to our clinic communications list. We use it to send clinic news, such as provider spotlights and upcoming events. These messages describe only what is happening at NLC. They do not include information about your care. We do not share your email address or health information with anyone else for their own use, and no one pays us to send these messages. You can unsubscribe at any time using the link in the email, or by telling us.

  • People involved in your care or payment. We may share relevant information with a family member, friend, or other person you name who helps with your care or pays your bill. If you are present, we will give you the chance to object first. If you cannot say yes or no, we will share only what we believe is in your best interest.

  • Parents and guardians. We generally share a minor's information with the parent or guardian who consents to the minor's care. Oregon law lets some minors consent to certain care on their own. In those cases, the minor controls who sees the related information.

Other Ways We May Share Your Information Without Your Permission

The law allows or requires us to share your information in these situations:

  • When federal, state, or local law requires it.

  • For public health purposes, such as reporting certain diseases, injuries, or adverse reactions to products.

  • To report suspected abuse, neglect, or domestic violence to the proper authorities.

  • To health oversight agencies for audits, investigations, and licensing.

  • In response to a court order, subpoena, or other legal process, as the law allows.

  • To law enforcement, in limited situations the law describes.

  • To a coroner, medical examiner, or funeral director, and to organizations that handle organ and tissue donation.

  • For approved research, when a review board has found that your privacy is protected.

  • To prevent a serious and imminent threat to someone's health or safety.

  • For specialized government functions, such as military and national security activities.

  • For workers' compensation claims, as the law allows.

When We Need Your Written Permission

For anything not described in this Notice, we will ask for your written authorization first. In particular, we will get your written authorization before we:

  • Use or share psychotherapy notes, if we keep any.

  • Use or share your information to send you marketing messages for another company's products or services, or any message that another company pays us to send. Patient stories, testimonials, and photos also need your written authorization.

  • Sell your information. We do not sell health information.

You can cancel an authorization at any time by telling us in writing. Cancelling does not undo anything we already did because of it.

Extra Protections

  • Oregon and federal laws give extra protection to some kinds of information, such as mental health, HIV/AIDS, genetic, and substance use disorder information. When those laws are stricter than this Notice, we follow the stricter law.

  • If we receive records from a substance use disorder treatment program covered by 42 CFR Part 2, we will not use or share those records, or testimony about what they contain, against you in a civil, criminal, administrative, or legislative proceeding. The only exceptions are your written consent or a court order issued after you have had notice and a chance to be heard.

How We Contact You About Bills

When your bill is ready, we email you a notice that shows only that your bill is ready and your balance. To see the details, you use a secure link and confirm your identity.

Regular email and text messages are not fully secure. If you prefer that we contact you another way, tell us (see "Your Rights").

Your Rights

  • See and get a copy of your records. You can ask to see your records or get a paper or electronic copy. We will respond within 30 days. We may charge a reasonable, cost-based fee for copies. In limited cases, we may deny access, and you can ask for a review of that decision.

  • Ask us to correct your records. If you believe something in your records is wrong or incomplete, ask us in writing to correct it. We will respond within 60 days. If we deny your request, we will tell you why in writing, and you can submit a statement of disagreement to place in your records.

  • Ask for private communication. You can ask us to contact you in a particular way or at a particular place, such as only by phone, or at a different address. We will say yes to reasonable requests.

  • Ask us to limit what we share. You can ask us not to use or share certain information for treatment, payment, or operations. We do not have to agree. We must agree if you ask us not to share information with your health plan about a service you pay for in full out of pocket, unless the law requires us to share it. Please ask before the service so we can arrange payment first.

  • Get a list of who we shared your information with. You can ask for a list of certain disclosures we made in the past six years. The first list in any 12 months is free.

  • Get a paper copy of this Notice. You can ask for one at any time, even if you agreed to receive it electronically.

  • Choose someone to act for you. If you have given someone medical power of attorney, or if someone is your legal guardian, that person can use your rights and make choices about your health information. We will confirm that the person has this authority before we act.

To use any of these rights, contact us at the address or phone number below.

Changes to This Notice

We may change this Notice. A new Notice will apply to all the information we already have and all the information we receive in the future. We post the current Notice in our clinic and on our website, and we will give you a copy on request.

Questions and Complaints

If you have a question about this Notice, or you think we have violated your privacy rights, contact us:

Nourishing Life Collective

Attn: Tara Radsliff, Privacy Officer

3115 NE Sandy Boulevard, Suite 231

Portland, OR 97232

Phone: 503-701-8766

Email: admin@nourishinglifecollective.com

You can also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights:

200 Independence Avenue S.W., Washington, D.C. 20201

Phone: 1-877-696-6775

Website: www.hhs.gov/ocr/privacy/hipaa/complaints/

We will not retaliate against you for filing a complaint.

These Terms of Service were last updated on November 2, 2026.