Draft for review by counsel. Not final legal text. Items in yellow brackets still need real answers.
Who we are
mothermade ("we," "us") provides virtual lactation care with International Board Certified Lactation Consultants (IBCLCs). [Legal company name] operates mothermade.health. This policy explains what we collect, why, and the choices you have. Health information we handle while providing care is also covered by our HIPAA Notice of Privacy Practices.
What we collect
Information you give us
- Contact details: name, email, phone, state.
- Quiz and intake answers: your baby's age, feeding method, goals, and what is hard right now.
- Insurance details: insurer, plan, member ID, so we can check your benefits.
- Payment details: handled by our payment processor. We do not store full card numbers.
- Visit information: notes and your written plan from your IBCLC.
- Messages you send through our contact form or by email.
Information collected automatically
- Device and browser type, pages viewed, and approximate location from your IP address.
- Cookies and similar technologies for site function and analytics [list of tools: analytics, advertising pixels, session replay. Counsel to confirm health-data rules for tracking].
How we use it
- To check your insurance benefits, schedule visits, and provide care.
- To process payments, copays, and receipts.
- To answer your questions and send reminders and follow-ups.
- To keep the service secure, fix problems, and improve how it works.
- To meet legal and regulatory obligations.
We do not sell your personal information. [Confirm. If any advertising or analytics tools receive health-related data, counsel must review.]
Who we share it with
- Your care team: the IBCLC(s) providing your visit.
- Your insurer or its agents, to verify benefits and bill for covered visits.
- Service providers who work for us under contract: video platform, scheduling, payments, email, hosting, customer support.
- Legal and safety: when required by law, or to protect someone's safety.
- Business transfers: if mothermade is part of a merger or sale, with the same protections.
Health information
When we provide care, some of what you share is protected health information under HIPAA. How we use and share it is described in our Notice of Privacy Practices. Please do not put medical details in the contact form. Tell your IBCLC during your visit instead.
Cookies and tracking
We use cookies to keep the site working and to understand how it is used. You can control cookies in your browser settings. [Add cookie banner / consent choices and 'Do Not Track' and Global Privacy Control language as needed]
Your choices and rights
Depending on where you live, you may have the right to access, correct, delete, or get a copy of your personal information, and to opt out of certain uses. Some states give extra protection for health data [counsel: confirm state laws that apply, for example California, Washington, Nevada]. To make a request, email [privacy@mothermade.health]. We may need to verify your identity first. Health records we hold as a care provider may be kept for the period the law requires.
How long we keep it
We keep information as long as needed to provide care and meet legal, tax, and insurance requirements [retention schedule, for example medical record retention period by state].
Security
We use administrative, technical, and physical safeguards, such as encryption in transit and access controls [confirm actual controls]. No system is perfectly secure, and we will tell you about a breach as the law requires.
Children
mothermade is for adults. You provide information about your baby as their parent or guardian. We do not knowingly collect information directly from anyone under 13.
Changes
If we change this policy we will post the new version here and update the date above. If a change is significant, we will tell you directly.
Contact us
[Legal company name]
[Mailing address]
Email: [privacy@mothermade.health]
Or use our contact page.