Last updated: October 22, 2024

This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.

We use Your Personal data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.

Interpretation and Definitions

Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

• Account means a unique account created for You to access our Service or parts of our Service.
• Affiliate means an entity that controls, is controlled by or is under common control with a party, where "control" means ownership of 50% or more of the shares, equity interest or other securities entitled to vote for election of directors or other managing authority.
• Application refers to Dr. Shada Functional Medicine, the software program provided by the Company.
• Business, for the purpose of CCPA/CPRA, refers to the Company as the legal entity that collects Consumers' personal information and determines the purposes and means of the processing of Consumers' personal information, that does business in the State of California.
• CCPA/CPRA refers to the California Consumer Privacy Act as amended by the California Privacy Rights Act of 2020.
• Company ("the Company", "We", "Us" or "Our") refers to Attraplsi Medical Corp, 451 W Enterprise Ave. For the purpose of the GDPR, the Company is the Data Controller.
• Consumer, for the purpose of the CCPA/CPRA, means a natural person who is a California resident.
• Cookies are small files placed on Your computer, mobile device or any other device by a website, containing details of Your browsing history on that website among its many uses.
• Country refers to: California, United States.
• Data Controller, for the purposes of the GDPR, refers to the Company as the legal person which alone or jointly with others determines the purposes and means of the processing of Personal Data.
• Device means any device that can access the Service such as a computer, a cellphone or a digital tablet.
• Do Not Track (DNT) is a concept promoted by US regulatory authorities, in particular the FTC, for allowing internet users to control tracking of their online activities across websites.
• GDPR refers to the EU General Data Protection Regulation.
• Personal Data is any information that relates to an identified or identifiable individual — such as a name, identification number, location data, online identifier, or one or more factors specific to physical, physiological, genetic, mental, economic, cultural, or social identity.
• Service refers to the Application or the Website or both.
• Service Provider means any natural or legal person who processes data on behalf of the Company. For GDPR purposes, Service Providers are considered Data Processors.
• Third-party Social Media Service refers to any website or social network through which a User can log in or create an account to use the Service.
• Usage Data refers to data collected automatically, either generated by use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
• Website refers to Dr. Shada Functional Medicine, accessible from https://drshadafunctionalmedicine.com/.
• You means the individual accessing or using the Service, or the company or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

Collecting and Using Your Personal Data

Types of Data Collected

Personal Data. While using Our Service, We may ask You to provide certain personally identifiable information that can be used to contact or identify You, including but not limited to: email address; first and last name; phone number; address, state, province, ZIP/postal code, city; and Usage Data.

Usage Data is collected automatically when using the Service. It may include Your Device's IP address, browser type and version, the pages of our Service that You visit, the time and date of Your visit, time spent on those pages, unique device identifiers and other diagnostic data. When You access the Service through a mobile device, We may also collect the type of mobile device, unique device ID, mobile IP address, operating system, and mobile browser type.

Information from Third-Party Social Media Services

The Company allows You to create an account and log in through the following Third-Party Social Media Services: Google, Facebook, Instagram, Twitter, and LinkedIn. If You register through or grant Us access to one of these, We may collect Personal Data already associated with that account, such as Your name, email address, activities, or contact list. Providing such information gives the Company permission to use, share, and store it consistent with this Privacy Policy.

Tracking Technologies and Cookies

We use Cookies and similar tracking technologies (beacons, tags, and scripts) to track activity on Our Service and improve it. Cookies can be Persistent (remain after You go offline) or Session (deleted when You close Your browser). We use both for the following purposes:

• Necessary/Essential Cookies (Session, administered by Us) — required to provide the services available through the Website and to authenticate users and prevent fraudulent use of accounts.
• Cookies Policy / Notice Acceptance Cookies (Persistent, administered by Us) — identify whether users have accepted the use of cookies on the Website.
• Functionality Cookies (Persistent, administered by Us) — remember choices You make, such as login details or language preference, for a more personalized experience.

Use of Your Personal Data

The Company may use Personal Data to: provide and maintain the Service; manage Your Account and registration; perform contracts for products or services You've purchased; contact You by email, phone, SMS, or push notification regarding updates or security matters; provide news, offers, and information about similar goods or services (unless You've opted out); manage Your requests; deliver targeted advertising tailored to Your interests; support business transfers (such as a merger or sale of assets); and for other purposes such as data analysis, identifying usage trends, and improving Our Service.

We may share Your personal information with Service Providers (for analytics, advertising, payment processing, and to contact You); in connection with business transfers; with Affiliates who honor this Privacy Policy; with business partners for certain promotions; with other users when You interact publicly on the Service; and with Your consent for other purposes.

Retention, Transfer, and Deletion of Your Personal Data

We retain Your Personal Data only as long as necessary for the purposes in this Privacy Policy, including to comply with legal obligations, resolve disputes, and enforce Our agreements. Usage Data is generally retained for a shorter period unless needed for security, functionality, or legal reasons.

Your information may be transferred to and processed in locations outside Your state, province, country, or governmental jurisdiction, where data protection laws may differ. By submitting Your information, You agree to this transfer. We take reasonable steps to ensure Your data is treated securely in accordance with this Privacy Policy.

You have the right to delete Your Personal Data, or request that We assist in doing so. You may update, amend, or delete information from within Your account settings, or by contacting Us directly — though We may need to retain certain information where We have a legal obligation to do so.

Disclosure of Your Personal Data

Your Personal Data may be disclosed in connection with a business transaction (merger, acquisition, or asset sale, with notice provided beforehand); when required by law or valid requests from public authorities; or in good faith where necessary to comply with a legal obligation, protect Our rights or property, investigate wrongdoing, protect personal safety, or defend against legal liability.

Security of Your Personal Data

The security of Your Personal Data matters to Us, but no method of transmission over the Internet or electronic storage is 100% secure. While We use commercially acceptable means to protect Your Personal Data, We cannot guarantee its absolute security.

Detailed Information on the Processing of Your Personal Data

Email Marketing

We may use Your Personal Data to send newsletters, marketing, or promotional materials. You may opt out at any time via the unsubscribe link in any email or by contacting Us. We use email marketing service providers, including ScaleRize (privacy policy: scalerize.ai/privacy-policy--page).

Payments

We may offer paid products or services and use third-party payment processors. We do not store or collect Your payment card details directly; that information is provided to Our processors, who adhere to PCI-DSS standards. We use Stripe (privacy policy: stripe.com/us/privacy).

Behavioral Remarketing

We use remarketing services, including Facebook, to advertise to You after You've visited Our Service. These vendors use cookies and non-cookie technologies to recognize Your Device and tailor advertising. You may opt out of interest-based advertising through the NAI (networkadvertising.org/choices), EDAA (youronlinechoices.com), or DAA (optout.aboutads.info) opt-out platforms, or through Your mobile device's ad-tracking settings.

GDPR Privacy (for EU Users)

We process Personal Data on one or more of the following legal bases: Your consent; performance of a contract; compliance with a legal obligation; protection of vital interests; a task carried out in the public interest; or Our legitimate interests.

If You are in the EU, You have the right to: access, correct, or request deletion of Your Personal Data; object to processing based on legitimate interest or direct marketing; request data portability; and withdraw consent at any time. You may also lodge a complaint with Your local Data Protection Authority in the EEA.

CCPA/CPRA Privacy Notice (California Residents)

This section supplements Our Privacy Policy and applies solely to California residents. In the last 12 months, We may have collected the following categories of personal information as defined under the CCPA/CPRA:

• Identifiers (name, address, IP address, email, etc.) — Collected: Yes
• California Customer Records data (name, signature, financial or medical information, etc.) — Collected: Yes
• Protected classification characteristics (age, race, religion, medical condition, etc.) — Collected: No
• Commercial information (products or services purchased or considered) — Collected: Yes
• Biometric information — Collected: No
• Internet or network activity (interaction with Our Service) — Collected: Yes
• Geolocation data — Collected: No
• Sensory data — Collected: No
• Professional or employment information — Collected: No
• Non-public education information — Collected: No
• Inferences drawn from other personal information — Collected: No
• Sensitive personal information (account login/password, geolocation) — Collected: Yes

We obtain this information directly and indirectly from You, automatically through cookies, and from Service Providers. We use it to operate the Service, respond to Your inquiries, process payments, comply with legal obligations, and for internal administration and security purposes.

We do not sell personal information as the term is commonly understood, though certain data-sharing with Service Providers for advertising and analytics may be deemed a "sale" under CCPA/CPRA's broad definition. We do not knowingly sell personal information of consumers under 16 without proper opt-in authorization.

As a California resident, You have the right to: notice of data collection; know/access the personal information We hold; opt out of the sale or sharing of Your data; correct inaccurate information; limit use of sensitive personal information; request deletion (subject to certain legal exceptions); and not be discriminated against for exercising these rights.

To exercise Your CCPA/CPRA rights, contact Us using the information below. We will verify Your identity and respond within 45 days (extendable once by an additional 45 days with notice).

Do Not Sell My Personal Information

You have the right to opt out of the sale of Your personal information. Once We confirm Your request, We will stop selling Your personal information. Opt-outs are specific to the browser and device You use. You may also opt out of interest-based ads via the NAI, EDAA, or DAA platforms linked above, or through Your mobile device's ad personalization settings.

Limit the Use or Disclosure of My Sensitive Personal Information

You have the right to limit the use and disclosure of Your sensitive personal information to what is necessary to provide the Service. Contact Us for more information.

"Do Not Track" Policy

Our Service does not respond to Do Not Track (DNT) browser signals. Some third-party websites do track browsing activity; You can adjust Your browser preferences to signal that You do not want to be tracked.

California Shine the Light & Minors' Privacy Rights

California residents with an established business relationship with Us may request information once a year about data shared with third parties for their direct marketing purposes. California residents under 18 who are registered users may also request removal of content they have publicly posted, by contacting Us with the email associated with their account.

Children's Privacy

Our Service does not address anyone under the age of 13, and We do not knowingly collect personal information from children under 13. If You are a parent or guardian and believe Your child has provided Us with Personal Data, please contact Us so We can remove it. Where consent from a parent is legally required, We will seek that consent before collecting a child's information.

Links to Other Websites

Our Service may contain links to third-party websites not operated by Us. We strongly advise reviewing the Privacy Policy of every site You visit. We have no control over and assume no responsibility for third-party content or practices.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify You by posting the new policy on this page and updating the "Last updated" date, and where appropriate via email or a prominent notice on Our Service prior to the change taking effect.

We Do Not Sell Your Data

We do not sell, trade, or otherwise transfer your personally identifiable information to outside parties for marketing or promotional purposes. Your information will never be sold, exchanged, transferred, or given to any other company for any reason, without your consent, other than for the express purpose of delivering the product or service requested.

Limited Sharing With Service Providers

We may share your information with trusted third parties who assist us in operating our website, conducting our business, processing payments, or servicing you, provided those parties agree to keep this information confidential. These service providers include:

• Payment processors (Stripe, PayPal, and Intuit) — solely to process your payments
• Email service providers — solely to send communications you've opted into
• Website hosting services — solely to host our website and its content
• SMS message aggregators and providers — solely to deliver text messages you've opted into
• Course delivery platforms — solely to deliver digital course content you've purchased
• Coaching session schedulers — solely to schedule coaching sessions you've enrolled in
• Certification verification systems — solely to issue and verify certifications you've earned
• HighLevel CRM — for client relationship management

SMS / Text Message Privacy Policy

If you have opted in to receive SMS/text messages from us, we are committed to protecting your privacy regarding these communications:

• No Data Sharing: All text messaging originator opt-in data and consent information will not be shared with any third parties, excluding the aggregators and providers necessary to deliver the SMS service.
• Marketing Restrictions: Your mobile information will not be shared with any third parties or affiliates for marketing or promotional purposes.
• Limited Use: Your SMS opt-in data will only be used for the specific purposes you've consented to, such as appointment reminders, event notifications, receipts, customer service updates, and promotional messages you've explicitly opted into.
• Opt-Out Control: You can stop receiving text messages at any time by texting "STOP" to our shortcode. We will confirm your opt-out status via SMS and cease sending you text messages.

Contact Us

If you have any questions about this Privacy Policy, you can contact us: