Privacy Policy

Last updated: Jul. 22, 2026

At The Whole Celiac, your trust matters as much as your health. This Privacy Policy explains what information we collect through our website, how we use it, and the choices you have. We've tried to write it in plain language — if anything is unclear, please reach out.

‍

Who We Are

The Whole Celiac ("we," "us," or "our") is a celiac coaching and clinical support practice led by a licensed Nurse Practitioner. Clinical support is offered in OR and WA only. This policy applies to information collected through our website at thewholeceliac.com (the "Site").

‍

A note about your medical care. This Privacy Policy covers only information collected through our website — for example, when you fill out a contact form, sign up for our email list, or buy an educational resource. Protected health information created during actual clinical services (appointments, symptom discussions, lab review, and treatment planning) is handled through our secure client portal on SimplePractice and is governed separately under our HIPAA Notice of Privacy Practices and applicable health-privacy laws. You can review SimplePractice's client privacy notice at https://thewholeceliac.clientsecure.me/privacy. If you are an active patient, those notices — not this one — govern your medical records.

‍

Information We Collect

Information you give us directly

We collect information you choose to provide, such as when you:

Submit a contact or inquiry form (for example, your name, email address, phone number, and the message you send us);
Request or schedule an appointment through our secure client portal on SimplePractice;
Subscribe to our email list or newsletter;
Purchase an ebook, guide, or course (order details processed through our payment and course platforms);
Suggest a topic for the blog or otherwise communicate with us.

Please avoid sharing detailed medical or health information through website forms or email. These channels are not intended for protected health information. If you're an established patient, use the secure SimplePractice client portal we provide instead.

Information collected automatically

Like most websites, we automatically collect certain technical information when you visit, such as your IP address, browser type, device information, pages viewed, and how you arrived at and moved through the Site. We collect this using cookies and similar technologies (see below).

‍

Cookies & Analytics

We use Google Analytics 4 (GA4) to understand how visitors use our Site so we can improve it. GA4 uses cookies and similar technologies to collect information such as pages visited, time on site, and general location (derived from IP address). This data is aggregated and used for analytics — it is not used to personally identify you.

We also use Google Search Console to monitor how our Site performs in search results. This tool helps us understand search traffic and does not track individual visitors on the Site.

You can control cookies through your browser settings, and you can opt out of Google Analytics across all sites by installing Google's Analytics Opt-out Browser Add-on (https://tools.google.com/dlpage/gaoptout). For more on how Google handles data, see Google's Privacy Policy (https://policies.google.com/privacy).

‍

How We Use Your Information

We use the information we collect to:

Respond to your questions and inquiries;
Schedule appointments and support your care through our client portal;
Send you emails, resources, or updates if you've subscribed (you can unsubscribe anytime);
Deliver and support the educational products or courses you purchase;
Operate, maintain, and improve the Site and our content;
Understand which content and topics are most helpful to our community;
Comply with legal obligations and protect our rights.

How We Share Information

We do not sell your personal information. We share it only with trusted service providers who help us run the Site and our services, and only as needed to perform those functions. These may include:

Our website hosting provider;
Analytics services (Google Analytics, Google Search Console);
Our practice management and secure client portal (SimplePractice), which supports scheduling and clinical services;
Our payment processor for purchases is through the third party SimplePractice);

We may also disclose information if required by law, to enforce our terms, or to protect the safety and rights of our clients, the public, or our practice.

‍

Health-Related Information

Because The Whole Celiac focuses on celiac disease, some information you share may relate to your health. We take this seriously. We do not sell consumer health data, and we do not share it for targeted advertising. Any health-related information you voluntarily provide through the Site is used only to respond to you and provide the services you request. Protected health information handled as part of your clinical care is maintained in our secure SimplePractice client portal under our HIPAA Notice of Privacy Practices.

Depending on where you live, you may have specific rights regarding consumer health data. If you are a Washington resident, you may have additional rights under the Washington My Health My Data Act. To exercise any such rights, or to ask how your health-related information is handled, please contact us using the details below.

‍

Data Retention

We keep personal information only as long as needed for the purposes described in this policy — for example, to maintain your email subscription, fulfill your purchases, or meet legal and recordkeeping requirements — after which we delete or de-identify it.

‍

How We Protect Your Information

We use reasonable administrative, technical, and physical safeguards to protect the information we collect. No method of transmission over the internet is completely secure, however, so we cannot guarantee absolute security. Please help protect yourself by not sending sensitive health details through unsecured website forms or email.

‍

Your Choices & Rights

You can:

Unsubscribe from our emails at any time using the link in any message;
Request access to, correction of, or deletion of the personal information we hold about you;
Opt out of analytics cookies as described above.

Depending on your location (for example, if you are a California or Washington resident), you may have additional rights under applicable privacy laws, including the right to know what information we collect and to request its deletion. To make any of these requests, contact us below. We will not discriminate against you for exercising your rights.

‍

Third-Party Links

Our Site may link to other websites, resources, or platforms we don't control. This Privacy Policy does not apply to those sites — we encourage you to review their privacy policies.

‍

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we'll revise the "Last updated" date at the top. Significant changes may be communicated more directly. Your continued use of the Site after any update means you accept the revised policy.

‍

Contact Us

If you have questions about this Privacy Policy or your information, we'd love to hear from you:

The Whole Celiac
Email: hello@thewholeceliac.com
Phone: (360) 234-3433