Privacy Policy

At Dr. Ace Wellness, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.dracewellness.com and use our services.

1. Information We Collect

We collect various types of information to provide and improve our services to you.

1.1 Personal Information

When you register for our services, make a purchase, or contact us, we may collect:

• Name and contact details (email address, phone number, mailing address)
• Date of birth and age
• Gender
• Account credentials (username and password)
• Payment and billing information
• Shipping address for product deliveries

1.2 Health Information

For our functional medicine programs, we may collect sensitive health information including:

• Medical history and current health conditions
• Current medications and supplements
• Dietary preferences and restrictions
• Lifestyle habits (exercise, sleep patterns, stress levels)
• Symptoms and health goals
• Laboratory test results (if provided)
• Progress notes and health assessments

1.3 Automatically Collected Information

When you visit our website, we automatically collect:

• IP address and device information
• Browser type and version
• Operating system
• Pages visited and time spent on pages
• Referring website addresses
• Clickstream data
• Cookies and similar tracking technologies

1.4 Information from Third Parties

We may receive information from:

• Payment processors for transaction verification
• Analytics providers for website usage statistics
• Marketing partners (with your consent)
• Healthcare providers (with your authorization)

2. How We Use Your Information

We use the collected information for the following purposes:

Purpose	Description
Service Delivery	To provide functional medicine programs, consultations, and deliver fitness equipment
Personalization	To customize programs and recommendations based on your health profile
Communication	To send program updates, appointment reminders, and respond to inquiries
Payment Processing	To process transactions and maintain billing records
Improvement	To analyze usage patterns and improve our services
Marketing	To send promotional materials (with your consent)
Legal Compliance	To comply with legal obligations and protect our rights

3. Legal Basis for Processing

We process your personal information based on:

• Consent: You have given explicit consent for specific purposes
• Contract Performance: Processing is necessary to fulfill our services to you
• Legal Obligation: We must comply with applicable laws and regulations
• Legitimate Interests: Processing is necessary for our legitimate business interests while respecting your rights

4. How We Share Your Information

We do not sell your personal information. We may share your information with:

4.1 Service Providers

• Payment processors for transaction handling
• Shipping companies for product delivery
• Cloud storage providers for data hosting
• Email service providers for communications
• Analytics services for website performance
• Customer support platforms

4.2 Healthcare Professionals

With your explicit consent, we may share health information with:

• Your primary care physician
• Specialists involved in your care
• Laboratory services for testing

4.3 Legal Requirements

We may disclose information when required to:

• Comply with court orders or legal processes
• Respond to lawful requests from government authorities
• Protect our rights, property, or safety
• Prevent fraud or illegal activities
• Protect the safety of individuals

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections.

5. Data Security

We implement robust security measures to protect your information:

• Encryption: Data transmitted over the internet is encrypted using SSL/TLS protocols
• Access Controls: Strict access limitations to personal and health information
• Secure Storage: Data stored on secure servers with firewall protection
• Regular Audits: Periodic security assessments and vulnerability testing
• Employee Training: Staff trained on data protection and confidentiality
• Data Minimization: We only collect information necessary for our services

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience:

6.1 Types of Cookies We Use

• Essential Cookies: Necessary for website functionality and security
• Performance Cookies: Help us understand how visitors use our website
• Functional Cookies: Remember your preferences and settings
• Marketing Cookies: Track effectiveness of our marketing campaigns (with consent)

6.2 Managing Cookies

You can control cookies through your browser settings. Note that disabling cookies may affect website functionality. Most browsers allow you to:

• View what cookies are stored and delete them individually
• Block third-party cookies
• Block all cookies
• Delete all cookies when closing the browser

7. Your Privacy Rights

To exercise any of these rights, please contact us using the information provided at the end of this policy. We will respond to your request within 30 days.

8. Data Retention

We retain your information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law.

8.1 Retention Periods

• Account Information: Retained while your account is active and for 3 years after closure
• Health Records: Retained for 7 years from last interaction (as per medical record guidelines)
• Transaction Records: Retained for 7 years for tax and accounting purposes
• Marketing Data: Retained until you unsubscribe or request deletion
• Website Analytics: Typically retained for 26 months

8.2 Deletion Process

When data is no longer needed, we securely delete or anonymize it. You may request earlier deletion, though we may need to retain certain information for legal compliance.

9. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will take steps to delete such information.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer information internationally, we ensure appropriate safeguards are in place, such as:

• Standard contractual clauses approved by regulatory authorities
• Adequacy decisions by relevant data protection authorities
• Binding corporate rules for intra-company transfers

11. Third-Party Websites

Our website may contain links to third-party websites, plugins, and applications. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of every website you visit.

12. Marketing Communications

With your consent, we may send you promotional emails about:

• New programs and services
• Special offers and discounts
• Health tips and educational content
• Events and webinars
• Product launches

12.1 Opting Out

You can opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Updating your preferences in your account settings
• Contacting us directly

Please note that even if you opt out of marketing communications, we will still send you transactional messages related to your account and services.

13. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information held by us
• Right to opt-out of the sale of personal information (note: we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

14. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation including the right to access, rectification, erasure, restriction of processing, data portability, and the right to lodge a complaint with a supervisory authority.

15. Health Information Privacy

We treat health information with the highest level of confidentiality and security:

• Health data is stored separately from other personal information
• Access is limited to authorized personnel only
• We use de-identification techniques when possible
• We obtain explicit consent before sharing health information
• We comply with healthcare privacy regulations applicable in your jurisdiction

16. Automated Decision-Making

We may use automated processes to personalize program recommendations based on your health profile. However, significant decisions affecting your health are always reviewed by qualified professionals. You have the right to request human intervention in automated decision-making processes.

17. Data Breach Notification

In the event of a data breach that affects your personal information, we will:

• Notify affected individuals without undue delay
• Report the breach to relevant authorities as required by law
• Take immediate steps to mitigate the breach
• Provide information about the nature of the breach and steps being taken
• Offer guidance on protective measures you can take

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated policy on our website
• Updating the "Last Updated" date at the top of this policy
• Sending an email notification for significant changes
• Requesting your consent where required by law

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

19. Your Consent

By using our website and services, you consent to the collection, use, and sharing of your information as described in this Privacy Policy. For sensitive health information, we will obtain your explicit consent before collection and use.

20. Contact Information and Data Protection Officer

21. Grievance Redressal

In accordance with Information Technology Act, 2000 and rules made thereunder, if you have any grievance with respect to our privacy practices, you may contact our Grievance Officer:

Grievance Officer Email: grievance@dracewellness.com
Response Time: Within 48 hours of receipt

© 2026 Dr. Ace Wellness. All rights reserved.
This Privacy Policy was last updated on September 30, 2025.