Privacy Policy
Effective October 6, 2026
This policy explains how LATOM Wellness PLLC, a Virginia professional limited liability company (“LATOM Wellness,” “we,” “us”), collects, uses, and shares information through latomwellness.com and our telehealth services. Health information about patients is also covered by our Notice of Privacy Practices below.
Information We Collect
- Contact details you enter in forms: name, email, phone, and the reason for your inquiry.
- Health information you provide in booking and intake forms, such as date of birth, medical history, medications, allergies, goals, and lab results.
- Purchase details: the service you selected, the amount, and payment status. We do not receive or store your full card number.
- Consent records: when you accept a consent or agreement, we record the type of consent, the time, and your browser's device description.
- Technical data: our hosting provider processes standard request data (such as IP address and browser type) to deliver the site and protect it from abuse.
Where Your Information Goes
- Our server and database. Forms on this site are sent to our own server, hosted on Cloudflare, and stored in our database. Booking, intake, lead, and payment records are also logged to the practice's Google Workspace account so the practice can act on them.
- Scheduling. Appointments are scheduled through Cal.com, which receives the details you enter when booking a time.
- Email. Confirmations, invoices, and access links are sent through our email delivery provider, which processes your email address and the message content.
- Labs and supplements. If you order labs or supplements, you do so through Fullscript, which receives the information needed to fulfill your order under its own privacy policy.
- Payments. Card payments are handled by our payment processor. Card data goes directly to the processor and is never stored by us.
- Pharmacies. When a prescription is clinically appropriate, it is sent to a licensed US pharmacy, which receives the information needed to fill it.
We do not sell your personal information, and we do not share it with third parties for their own marketing. This site does not run third-party advertising or analytics scripts.
Cookies and Browser Storage
We use a small number of strictly necessary cookies, for example to keep a purchased protocol unlocked on your browser. Your browser's local storage remembers your light/dark theme choice and whether you acknowledged the Patient Service Agreement. We do not use advertising cookies.
How We Use Information
- To respond to inquiries and schedule consultations
- To provide care, review labs, and keep medical records
- To send invoices, receipts, purchased protocol PDFs, and membership access
- To send resources you request, such as a free guide (you can unsubscribe anytime)
- To meet legal, regulatory, and recordkeeping obligations
Retention and Security
We keep medical records for the period required by Virginia law and other records for as long as needed for the purposes above. We use access controls, encrypted connections (HTTPS), and limited staff access to protect information. No system is perfectly secure.
Health Information and HIPAA
Health information you share as a patient is protected health information (PHI). We handle PHI in accordance with the Health Insurance Portability and Accountability Act (HIPAA). Our Notice of Privacy Practices describes how PHI may be used and disclosed and your rights.
Your Choices
You may ask to access, correct, or delete personal information that is not part of your medical record by emailing info@latomwellness.com. Medical records are handled under the Notice of Privacy Practices below.
Notice of Privacy Practices
This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully. Effective October 6, 2026.
How we may use and disclose your health information
- Treatment: to provide and coordinate your care, for example sending a prescription to a pharmacy or ordering labs.
- Payment: to bill and collect payment for the services you receive.
- Health care operations: to run the practice, for example quality review, recordkeeping, and working with service providers (business associates) who must protect your information.
- As required or permitted by law: for example public health reporting, health oversight, court orders, or to prevent a serious threat to health or safety.
We will not use or disclose your health information for marketing, sell it, or use it for other purposes not described here without your written authorization. You may revoke an authorization in writing at any time.
Your rights
- Access: you may see or get a copy of your health information, including an electronic copy.
- Amendment: you may ask us to correct information you believe is incorrect or incomplete.
- Accounting of disclosures: you may ask for a list of certain disclosures we have made.
- Restrictions: you may ask us to limit certain uses or disclosures. We must agree to restrict disclosures to a health plan for services you paid for in full out of pocket.
- Confidential communications: you may ask us to contact you in a specific way or at a specific address.
- Paper copy: you may ask for a paper copy of this notice.
Our duties
We are required by law to protect the privacy of your health information, to give you this notice, to follow its terms, and to notify you of a breach of unsecured health information. We may change this notice; changes will apply to information we hold and will be posted on this page.
Complaints
If you believe your privacy rights have been violated, you may file a complaint with us at info@latomwellness.com, or with the U.S. Department of Health and Human Services Office for Civil Rights at ocrportal.hhs.gov. We will not retaliate against you for filing a complaint.
Contact
Privacy questions and requests: LATOM Wellness PLLC, info@latomwellness.com.