Privacy Policy

Embrace Wellness, a Botanica Beauty Co., is a brand of Embrace By Botanica LLC, a Wyoming limited liability company. In this document, "Embrace," "we," "us," and "our" refer to Embrace By Botanica LLC.

Embrace is not a medical practice and does not provide medical care. Clinical services are provided by licensed clinicians of an affiliated professional corporation and its affiliated professional entities, who exercise independent professional judgment. Embrace provides non-clinical membership services — the client interface, intake system, scheduling, care navigation, education, and support.

Health information created in the course of your clinical care is protected health information under HIPAA. It is held by the affiliated professional entities that provide your care, who are the covered entities, and is governed by their Notice of Privacy Practices — not by this policy.

Embrace acts as a business associate of those entities and is bound by a Business Associate Agreement with them. This Privacy Policy describes information we collect and handle in our own non-clinical role.

Information you give us: contact and account information — name, email, postal address, phone number, date of birth, and account credentials.

Health information you enter in our intake questionnaire — such as height, weight, medical history, current medications, allergies, and related answers. We operate the intake system and collect this information, then pass it to the treating professional entity.

Payment information. Payments are collected on our behalf and processed by our payment processor. We do not store card details.

Your messages to us.

Collected automatically: device and connection information such as IP address, browser type, and operating system; and usage information, collected through analytics only after you consent. Decline and we collect none of it.

From others: from the affiliated professional entities providing your care and from dispensing pharmacies, to the extent needed to administer your membership.

To create and administer your membership, and to process payments and renewals.

To operate the intake process and pass your information to the treating professional entity.

To provide scheduling, care navigation, education, and non-clinical support.

To communicate with you about your membership and your care, and to send program messages if you separately consented.

To operate and secure the website, comply with law, and enforce our terms.

We do not use your health information to advertise to you, and we do not use it to build advertising audiences.

With the affiliated professional entities providing your clinical care.

With dispensing pharmacies, to fill and ship prescriptions.

With our payment processor, to process payments.

With service providers for hosting, email, SMS delivery, and support.

For legal and safety reasons, where required by law or to protect rights and safety.

In a business transfer, if the business is sold or merged, subject to this policy.

We do not sell your personal information. We do not share it with advertising networks, data brokers, or social media platforms. We do not share mobile numbers or SMS consent with anyone for marketing.

If you are a Washington resident, additional rights apply under the My Health My Data Act. Those rights and our handling of that data are described in our Consumer Health Data Privacy Policy, linked in the footer of every page.

We use cookies strictly necessary for the site to function. We use analytics only after you consent — it starts in a denied state and collects nothing until you accept.

We do not use advertising pixels, conversion tracking, retargeting tags, session recording, or heatmap tools. Our site responds to Global Privacy Control signals.

We keep account and membership information for as long as your membership is active and afterward only as long as needed for legal, tax, and recordkeeping purposes.

Clinical records are held and retained by the treating professional entity under applicable medical record requirements, not by us.

[PLACEHOLDER — PENDING LEGAL REVIEW] Specific retention periods, including how long partially completed intake information is kept for people who do not become clients, are being finalized with counsel.

Access and update your account information through your account.

Opt out of program messages at any time by replying STOP or contacting us.

Decline analytics, and change that choice at any time using the privacy link in the footer.

Request access, correction, or deletion by contacting us. Requests about clinical records are directed to the treating professional entity.

We use administrative, technical, and physical safeguards designed to protect your information. No transmission over the internet is completely secure and we cannot guarantee absolute security.

Our services are for adults 18 and over. We do not knowingly collect information from anyone under 18.

This policy does not apply to sites we do not control. We may update this policy and will post the updated version with a new date.

[PLACEHOLDER — PENDING LEGAL REVIEW] The approved state-specific privacy rights sections, including Washington and California has not been finalized yet. Counsel's final wording will replace this section.