NOURISHING LIFE COLLECTIVE – Privacy Policy
Effective Date: July 1, 2026 | Portland, Oregon
Nourishing Life Collective (“NLC,” “we,” “us,” or “our”) is committed to protecting your privacy and the security of your personal and health information. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website or use our services, and describes your rights with respect to that information.
Please read this policy carefully. By using our website or engaging our services, you agree to the practices described in this Privacy Policy.
1. Two Categories of Information We Handle
NLC handles two distinct types of information, each governed by different legal frameworks:
A. Protected Health Information (PHI)
Information you share with us in the context of receiving care — including your health history, treatment records, diagnoses, and insurance information — is Protected Health Information (PHI) governed by the Health Insurance Portability and Accountability Act (HIPAA). Our handling of PHI is described in our separate Notice of Privacy Practices, which is provided to all patients at or before their first appointment and is available upon request.
This Privacy Policy does not replace or supersede our Notice of Privacy Practices. If there is any conflict between this Policy and our Notice of Privacy Practices regarding the handling of PHI, the Notice of Privacy Practices controls.
B. Website and General Personal Information
Information collected through your use of this website — such as your name, email address, and browsing behavior — is governed by this Privacy Policy. The sections that follow address this category of information.
2. Information We Collect
Information You Provide Directly
We may collect personal information that you voluntarily provide when you:
Submit a contact, inquiry, or appointment request form
Subscribe to our newsletter or email communications
Create a patient portal account
Communicate with us by email, phone, or through our website
This information may include your name, email address, phone number, mailing address, and any details you choose to share in your message or inquiry.
Information Collected Automatically
When you visit our website, certain information is collected automatically through cookies, web beacons, and similar technologies, including:
IP address and general geographic location
Browser type and version
Pages visited and time spent on each page
Referring URL (the site that directed you to ours)
Device type and operating system
This information is collected in aggregate and is generally not linked to your identity unless you have also provided personal information through a form or account.
Cookies and Tracking Technologies
Our website may use cookies — small data files stored on your device — to improve your browsing experience, analyze site traffic, and support certain site functions. You may configure your browser to refuse cookies or to alert you when cookies are being sent. Please note that disabling cookies may affect the functionality of certain areas of our website.
We may also use third-party analytics tools such as Google Analytics to understand how visitors interact with our site. These services have their own privacy policies governing their use of data collected on our behalf.
3. How We Use Your Information
We use the information we collect for the following purposes:
To respond to your inquiries and appointment requests
To communicate with you about your care, appointments, and NLC services
To send newsletters, health education content, or practice updates (only if you have opted in)
To improve our website content, structure, and user experience
To comply with applicable legal and regulatory obligations
To protect the security and integrity of our website and systems
We do not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects.
4. How We Share Your Information
NLC does not sell, rent, or trade your personal information to third parties. We may share information in the following limited circumstances:
Service Providers
We may share information with trusted third-party vendors who assist us in operating our website, managing appointments, or delivering communications on our behalf — such as our electronic health record system, scheduling platform, or email service provider. These vendors are contractually required to use your information only as directed by NLC and to maintain appropriate security standards.
Legal Requirements
We may disclose information if required to do so by law, regulation, court order, or government authority, or when we believe in good faith that disclosure is necessary to protect our rights, the safety of our patients or staff, or the public.
Business Transitions
In the event of a merger, acquisition, or sale of all or substantially all of NLC’s assets, patient and user information may be transferred as part of that transaction. We will notify affected individuals as required by law.
With Your Consent
We may share your information for any other purpose with your explicit prior consent.
5. HIPAA and Your Health Information
As a covered entity under HIPAA, NLC is required to maintain the privacy and security of your protected health information and to provide you with a Notice of Privacy Practices describing your rights and our obligations.
Your rights under HIPAA include the right to:
Access and obtain a copy of your health records
Request corrections to inaccurate or incomplete health information
Request restrictions on certain uses and disclosures of your PHI
Receive an accounting of certain disclosures of your PHI
Request confidential communications from NLC
File a complaint with NLC or with the U.S. Department of Health and Human Services if you believe your privacy rights have been violated
To exercise any of these rights, please contact our Privacy Officer at admin@nourishinglifecollective.com.
6. Data Security
NLC implements reasonable administrative, technical, and physical safeguards designed to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include encrypted data transmission, access controls, and staff training on privacy and security practices.
However, no method of electronic transmission or storage is completely secure. While we strive to use commercially reasonable means to protect your information, we cannot guarantee absolute security. If you have reason to believe that your interaction with us is no longer secure, please contact us immediately.
In the event of a data breach affecting your personal information, we will notify you as required by applicable federal and Oregon state law.
7. Oregon Consumer Privacy Rights
Oregon residents have specific rights under the Oregon Consumer Privacy Act (OCPA) and other applicable state laws, including the right to:
Know what personal data we have collected about you and how it is used
Access a copy of the personal data we hold about you
Correct inaccurate personal data
Request deletion of your personal data, subject to certain exceptions
Opt out of the sale or sharing of your personal data (NLC does not sell personal data)
Non-discrimination for exercising your privacy rights
To submit a request related to your Oregon privacy rights, please contact us using the information in Section 13 below. We will respond within the timeframe required by applicable law. We may need to verify your identity before processing your request.
8. Children’s Privacy
Our website is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13 without verifiable parental consent. If you believe we have inadvertently collected information from a child under 13, please contact us promptly and we will take steps to delete that information.
For patients who are minors, health information is handled in accordance with HIPAA, Oregon minor consent laws, and our Notice of Privacy Practices.
9. Email Communications and Marketing
If you subscribe to our newsletter or opt in to marketing communications, we will use your email address to send health education content, practice news, and service updates. You may unsubscribe at any time by clicking the “unsubscribe” link included in any marketing email or by contacting us directly.
Please note that even if you opt out of marketing communications, we may still send you transactional or administrative messages related to your appointments, care, or account — such as appointment confirmations or reminders.
10. Third-Party Websites and Services
Our website may contain links to third-party websites, including our scheduling platform, patient portal, and other external resources. This Privacy Policy applies only to our website and does not govern the privacy practices of third-party sites. We encourage you to review the privacy policies of any third-party services you access through our website.
Our patient portal and electronic health record platform may be operated by a third-party vendor under a Business Associate Agreement (BAA) that ensures HIPAA-compliant handling of any PHI accessed through those systems.
11. Retention of Information
We retain personal information collected through our website for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.
Patient health records are retained in accordance with Oregon law, which generally requires retention of adult patient records for a minimum of ten (10) years from the date of last treatment, and minor patient records until the patient reaches age 21 or for ten years from the date of last treatment, whichever is longer.
12. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy at any time. When we make material changes, we will post the updated policy on this page with a new effective date. We encourage you to review this policy periodically to stay informed about how we protect your information.
Your continued use of our website or services after any changes to this policy constitutes your acceptance of the updated terms.
13. Contact Us
If you have questions, concerns, or requests related to this Privacy Policy or your personal information, please contact our Privacy Officer:
Privacy Officer — Nourishing Life Collective
Address: 3115 NE Sandy Blvd – Suite 231, Portland, Oregon 97232-2779
Phone: (503) 701-8766
Email: admin@nourishinglifecollective.com
Website: https://www.nourishinglifecollective.com
To file a complaint with the U.S. Department of Health and Human Services regarding our HIPAA practices, visit: www.hhs.gov/ocr/privacy/hipaa/complaints
These Terms of Service were last updated on June 8, 2026.