Whole Womanhood LLC
Privacy Policy
Privacy Policy Consent
The Website and its Content is owned by Whole Womanhood LLC ("Company", "we", or "us"). The term "you" refers to the user or viewer of our Website ("Website").
This Privacy Policy describes how we collect, use, process, and distribute your information, including Personal Data (as defined below) used to access this Website. We will not use or share your information with anyone except as described in this Privacy Policy. The use of information collected through our Website shall be limited to the purposes under this Privacy Policy, and also our Terms of Service if you are a client or customer.
Please read this Privacy Policy carefully. We reserve the right to change this Privacy Policy on the Website at any time. In the event of a material change, we will let you know via email and/or a prominent notice on our Website.
By using our Website or its content, you consent to this Privacy Policy, whether or not you have read it.
Information We Collect
We collect personal information from you so that we can provide you with a positive experience when utilizing our Website or content. We will only collect the minimum amount of information necessary to fulfill our obligation to you.
Personal Information We May Collect
Account Information
- Name, email address, password, billing address, phone number
Payment Information
- Credit card details and billing information (processed through secure third-party payment processors — we do not store full credit card numbers)
Health and Wellness Information (for LabShop and 1:1 Mentorship clients)
In order to provide personalized functional wellness consulting and education, we may collect the following information that you voluntarily share with us:
- Health history and self-reported symptoms
- Functional lab test results
- Current and past health concerns
- Medication and supplement usage
- Menstrual cycle data and fertility information
- Dietary information, exercise habits, and stress levels
- Sleep patterns and lifestyle factors
- Information shared during consulting sessions and messaging
This information is collected solely to support your wellness education and consulting experience. It is not collected or used in the context of clinical care or a provider-patient relationship.
Communication Data
- Messages sent through contact forms
- Email correspondence
- Voxer or messaging platform communications
- Questions submitted during live calls or in community forums
Usage Data
- IP address
- Browser type and version
- Device information
- Pages visited and time spent on site
- Referring website
- Operating system
Marketing and Analytics Data
- Email engagement (opens, clicks)
- Course progress and completion
- Webinar and call attendance
- Community participation
How We Collect This Information
- Directly from you when you complete forms, make purchases, submit applications, or communicate with us
- Automatically through cookies and similar tracking technologies when you use our Website
- From third parties such as payment processors or functional lab testing facilities
We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products and services. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.
The Personal Data you provide is voluntary. By providing this information, you are giving consent for us to use, collect, and process this data. You may opt out or request deletion of your Personal Data at any time by contacting [email protected]. If you choose not to provide certain information, you may not be able to participate in certain aspects of our Website or Services.
Health and Wellness Information
Please note: Whole Womanhood is a functional wellness education and consulting company. We are not a clinical healthcare provider, and no doctor-patient or provider-patient relationship is formed through your use of our Services. Health and wellness information you share with us is used solely to support your educational and consulting experience.
How We Use Your Health and Wellness Information
For clients enrolled in LabShop functional lab testing or 1:1 Private Mentorship, the health and wellness information you voluntarily share is used to:
- Provide personalized root-cause wellness education and consulting
- Review and contextualize functional lab results in an educational framework
- Offer protocol guidance and lifestyle recommendations in a consulting capacity
- Track your progress and refine consulting support as needed
- Communicate with functional lab facilities for the purpose of processing your test orders
How We Protect Your Information
- We use secure platforms for all communications, consulting sessions, messaging, and storage of wellness records
- Your information will only be accessed by authorized team members directly involved in supporting your experience
- We implement appropriate administrative, physical, and technical safeguards to protect your data
- We will not share your health and wellness information without your consent, except as required by law
Attorney Review Notice
The applicability of HIPAA to LabShop and 1:1 Mentorship services is subject to legal review. This section will be updated following attorney guidance. If you have questions about how your health information is handled in the interim, please contact us at [email protected].
Your Rights Regarding Your Information
- Right to access and receive a copy of the information we hold about you
- Right to request corrections to inaccurate information
- Right to request deletion of your information (subject to any legal retention requirements)
- Right to request restrictions on how we use your information
- Right to withdraw consent at any time
Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience on our Website.
Types of Cookies We Use
Essential Cookies
- Necessary for the website to function properly
- Enable core functionality such as security, login sessions, and shopping cart
Analytics Cookies
- Help us understand how visitors use our site
- Provide statistics on website usage and performance (e.g., Google Analytics)
Marketing Cookies
- Used for targeted advertising and retargeting
- Track your activity across websites to show relevant ads (e.g., Facebook Pixel, Google Ads)
Preference Cookies
- Remember your settings and preferences
- Enhance your user experience by remembering your choices
Managing Cookies
You can manage your cookie preferences through your browser settings. Most browsers allow you to view what cookies are stored and delete them individually, block third-party cookies, block all cookies from specific sites, block all cookies, or delete all cookies when you close your browser. Note that disabling certain cookies may limit your ability to use some features of our website. For more information, see our full Cookie Policy.
How We Use Your Information
1. To Provide Services and Fulfill Contracts
We use your Personal Data to:
- Process your enrollment in The Collective, Hormone Alchemy, LabShop, or 1:1 Mentorship
- Deliver purchased products, programs, and services
- Process payments and maintain billing records
- Provide customer support
- Send you order confirmations, receipts, and account updates
2. To Provide Wellness Education and Consulting
For LabShop and 1:1 Mentorship clients, we use the health and wellness information you voluntarily share to:
- Contextualize functional lab results and provide root-cause wellness education
- Offer personalized wellness consulting and protocol recommendations
- Track your progress and adjust consulting support as needed
- Communicate with you about your wellness journey
- Coordinate with functional lab facilities for test processing
This is wellness education and consulting, not clinical care. We do not diagnose, treat, or manage medical conditions.
3. To Communicate With You
We may contact you based on these lawful grounds:
- Consent: We contact you if you give us clear, unambiguous, affirmative consent (e.g., signing up for our newsletter or downloading a freebie)
- Contract: We contact you under our contractual obligation to deliver goods or services you purchase from us
- Legitimate Interest: We may contact you if we believe you have a legitimate interest in hearing from us (e.g., if you attend a webinar, we may send related marketing emails)
You always have the option to opt out of marketing communications.
4. For Marketing and Advertising
With your consent or based on legitimate interest, we may:
- Send you newsletters, educational content, and promotional offers
- Run targeted social media advertisements
- Create look-alike audiences for advertising
- Personalize content based on your interests and behavior
5. To Improve Our Services
We use aggregated, de-identified data to analyze website usage and trends, improve our programs and offerings, develop new content and services, and conduct research and analysis.
6. To Comply With Legal Obligations
We may use or disclose your information to comply with applicable laws and regulations, respond to legal requests (subpoenas, court orders), protect our rights and property, and investigate and prevent fraud or security issues.
How We Share Your Information
Third-Party Service Providers
We share your information with trusted third-party service providers who assist us in operating our business. All third-party providers are carefully vetted and required to maintain the confidentiality and security of your information. We use AI-assisted tools for internal content creation and business operations only. We do not input member or client personal data into these systems.
- Email Marketing: Kajabi
- Payment Processing: Stripe / PayPal / Kajabi
- Course and Community Hosting: Kajabi
- Video Conferencing: Zoom
- Wellness Consulting Platform: Practice Better
- Functional Lab Ordering: Rupa Health
- Lab Processing: CLIA-certified labs
- Analytics: Google Analytics, Facebook Pixel
- Customer Support: Google Gmail
- AI Tools (Internal Operations): Anthropic (Claude)
Legal Disclosures
We may disclose your information if required by law or in the good-faith belief that such action is necessary to comply with legal obligations or respond to legal requests, protect and defend our rights or property, investigate or respond to violations of our Terms of Service, protect the personal safety or rights of our users or the public, or prevent or investigate fraud, security issues, or technical problems.
With Your Consent
We may share your information with third parties when you give us explicit consent to do so.
What We Do NOT Do
- We do not sell your personal information to third parties
- We do not rent your email list to others
- We do not share your health and wellness information except as described in this policy or as required by law
Publicly Shared Information
Whenever you voluntarily make your Personal Data available for viewing by others online through this Website or its content, it may be seen, collected, and used by others. We cannot be responsible for any unauthorized or improper use of information you voluntarily share publicly. Examples include posting comments on blog posts, participating in Facebook groups we manage, sharing during group calls, or contributing to community forums.
Please be mindful of what you share publicly, as we cannot control how others may use that information.
Data Security
We take the security of your Personal Data seriously and implement commercially reasonable administrative, physical, and technical safeguards to protect your information from misuse, disclosure, or unauthorized access.
Security Measures Include
- Encryption: All sensitive data is encrypted in transit and at rest using industry-standard protocols (SSL/TLS)
- Access Controls: Strict access controls ensure only authorized personnel can access your information
- Secure Platforms: Health and wellness information is stored and transmitted using secure, vetted platforms
- Regular Security Audits: We regularly review and update our security practices
- Secure Payment Processing: Payment information is processed through PCI-DSS compliant payment processors
- Team Training: All team members are trained on data privacy and security best practices
Data Breach Notification
In the event of a data breach that compromises your personal information, we will notify you within 72 hours of becoming aware of the breach via email to the address on file. The notification will include the nature of the breach, the types of information involved, steps we are taking to address the breach, and recommended actions you can take to protect yourself.
We cannot guarantee that your Personal Data will always be secure due to factors beyond our control. No method of transmission over the Internet or electronic storage is 100% secure.
Data Retention
We retain your information for the minimum amount of time necessary to provide you with the services you requested, or as required by legal, contractual, and accounting obligations.
Retention Schedule
| Data Type | Retention Period |
|---|---|
| Account Information | Duration of active account, plus 7 years for financial and tax records |
| Health and Wellness Records (LabShop and 1:1 Mentorship clients) | 7 years from last service date |
| Marketing Communications | Until you unsubscribe or request deletion |
| Lab Results | 7 years from the date of service |
| Course Access Data | Duration of access plus 3 years |
| Website Usage Data | 26 months (Google Analytics default retention) |
| Payment Records | 7 years (tax and accounting purposes) |
You may request deletion of your data at any time by contacting [email protected], subject to our legal obligations to retain certain information.
International Data Transfers
Whole Womanhood is based in the United States. If you are located outside the United States, please be aware that the information we collect will be transferred to, stored, and processed in the United States. By using our services, you consent to this transfer.
The United States may not have the same data protection laws as your country; however, we comply with applicable data protection laws and implement appropriate safeguards to protect your information. For users in the European Union or United Kingdom, we use Standard Contractual Clauses approved by the European Commission when transferring data from the EU/UK to the United States.
Your Privacy Rights
General Rights (All Users)
- Right to Access: Request information about how your Personal Data is being used and request a copy of what we have
- Right to Rectification: Request correction of inaccurate or incomplete Personal Data
- Right to Erasure ("Right to be Forgotten"): Request deletion of your Personal Data (subject to legal retention requirements)
- Right to Restrict Processing: Request that we limit how we use your Personal Data if you believe it is inaccurate, unlawful, or no longer needed
- Right to Data Portability: Request a copy of your Personal Data in a structured, machine-readable format
- Right to Object: Object to our use of your Personal Data for certain purposes (such as direct marketing)
- Right to Withdraw Consent: Withdraw your consent at any time (this does not affect processing that already occurred)
- Right Not to be Subject to Automated Decision-Making: You will not be subject to decisions based solely on automated processing that produce legal or similarly significant effects
California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including:
- Right to Know: What personal information we collect, use, disclose, and sell (Note: We do not sell personal information)
- Right to Delete: Request deletion of your personal information
- Right to Opt-Out: Opt-out of the sale or sharing of your personal information (Note: We do not sell personal information)
- Right to Correct: Request correction of inaccurate personal information
- Right to Limit Use: Limit the use and disclosure of sensitive personal information
- Right to Non-Discrimination: We will not deny you services, charge different prices, or provide different quality of service because you exercised your rights
California residents may designate an authorized agent to make requests on their behalf. We will require proof of authorization.
European Union / UK Rights (GDPR)
If you are in the European Union or United Kingdom, you have rights under the General Data Protection Regulation (GDPR), including all the general rights listed above, plus:
- Right to Lodge a Complaint: Lodge a complaint with your local Data Protection Authority if you believe we have not handled your personal information in accordance with GDPR
EU/UK Data Protection Authorities:
- EU residents: Your local Data Protection Authority
- UK residents: Information Commissioner's Office (ICO) at ico.org.uk
How to Exercise Your Rights
To exercise any of these rights, please contact us at:
- Email: [email protected]
- Mail: Whole Womanhood LLC, Privacy Officer, 655 Irwin Street Suite B #1053, San Rafael, CA 94901
We will respond to your request within 30 days (or as required by applicable law). We may need to verify your identity before processing your request.
Children's Privacy
Our services are intended for individuals 18 years of age or older. We do not knowingly collect personal information from anyone under 18, in compliance with COPPA (Children's Online Privacy Protection Act), GDPR, and other applicable laws. If you are under 18, please do not use our website or provide any information to us.
If we become aware that we have collected personal information from a child under 18 without parental consent, we will take steps to delete that information as quickly as possible. If you believe we have collected information from a child under 18, please contact us immediately at [email protected].
Passwords and Account Security
To use certain features of the Website or its content, you may need a username and password. You are responsible for maintaining the confidentiality of your username and password, all activities that occur under your account, and logging out at the end of each session.
We cannot and will not be liable for any loss or damage arising from your failure to protect your login credentials. Please notify us immediately of any unauthorized use of your account by contacting [email protected].
Anti-Spam Policy
We have a no-spam policy and provide you with the ability to opt out of our communications by selecting the unsubscribe link at the footer of all emails. We are compliant with the CAN-SPAM Act of 2003 and will never send out misleading information. We will not sell, rent, or share your email address.
How to Unsubscribe
You may unsubscribe from our newsletters or marketing emails at any time through the unsubscribe link at the footer of all email communications. If you are experiencing problems unsubscribing, please contact us at [email protected].
Even if you unsubscribe from marketing emails, we may still send you transactional emails related to your account, purchases, or services (order confirmations, receipts, important account updates, etc.).
Third-Party Websites
Our Website may contain links to other websites that are not operated by us. We have no responsibility or liability for the content and activities of any other individual, company, or entity whose website or materials may be linked to our Website or its content. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit.
Automated Decision-Making
We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on you. Any wellness education, protocol guidance, or consulting provided through our services is created by a qualified human consultant, not algorithms or automated systems.
Changes to This Privacy Policy
We reserve the right, at our sole discretion, to change, modify, or otherwise alter our Website, its content, and this Privacy Policy at any time. Such changes shall become effective immediately upon posting our updated Privacy Policy.
How We Notify You of Changes
- Material changes: We will notify you via email and/or a prominent notice on our Website
- Minor changes: Will be posted with an updated "Last Updated" date
We encourage you to review this Privacy Policy periodically. Continued use of the Website following the posting of changes constitutes acceptance of the revised Privacy Policy.
Data Controllers and Processors
Whole Womanhood LLC is the data controller as we are collecting and using your Personal Data. We use trusted third parties as our data processors for technical and organizational purposes, including for payments, email marketing, course hosting, functional lab coordination, and video conferencing. We use reasonable efforts to ensure our data processors maintain appropriate data security standards and comply with applicable privacy laws.
Right to Lodge a Complaint
If you believe we have not handled your personal information in accordance with applicable law, you have the right to lodge a complaint with your local data protection authority or supervisory authority.
Contact Information for Data Protection Authorities
- EU residents: Your local Data Protection Authority (find yours at edpb.europa.eu)
- UK residents: Information Commissioner's Office (ICO) — ico.org.uk | Phone: 0303 123 1113
- California residents: California Attorney General — oag.ca.gov | Phone: 916-210-7580
Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact:
Privacy Officer
Whole Womanhood LLC
655 Irwin Street Suite B #1053
San Rafael, CA 94901
General Support
GDPR Inquiries (EU/UK Residents)
CCPA Inquiries (California Residents)
We will respond to all inquiries within 30 days (or as required by applicable law).