Privacy Statement

Last updated: August 2026

Your privacy is of paramount importance to OPTIO Women's Health. This Privacy Statement explains how we collect, use, protect, and store your personal and health information, and the rights you have over it.

Information We Collect

Information you provide. We collect information you provide directly to us through our online consultation form, including:

Personal contact information (name, email address, phone number)
Date of birth
Health information relevant to your consultation
Medical history necessary for providing telehealth services
Shipping and delivery information

Information collected automatically. When you visit our website, our servers and analytics service receive standard technical data sent by your browser: your IP address, browser type, the pages you visit, and the approximate (city-level) location your IP address corresponds to. We use this data only in aggregate, to operate and improve the site — we do not use it to build profiles of individual visitors. See Website Analytics below.

Health Information

Health information is the most sensitive information we hold, and we give it the highest level of protection. You provide it knowingly and directly through the consultation form; we do not obtain health information about you from any other source, and we use it solely for your care.

How We Protect Your Information

All information collected through OPTIO Women's Health is stored on HIPAA-compliant servers and protected using industry-standard security measures:

Encryption: All data is encrypted in transit and at rest using TLS/SSL protocols
Secure Storage: Information is stored on HIPAA-compliant servers with 24/7 monitoring
Access Controls: Strict access limits ensure only authorized personnel can access your information
No Data Sales: We never sell, rent, or share your personal information with third parties for marketing purposes

How We Use Your Information

Your information is used solely for:

Providing telehealth consultations and medical services
Processing and fulfilling orders
Communicating with you about your care
Security and fraud prevention
Complying with legal and regulatory requirements

We do not sell or rent your personal information, and we do not share it with anyone for marketing or advertising purposes. The only disclosures we make are the minimum needed to deliver your care:

Shipping. Your name and delivery address are shared with the shipping carrier, and with the postage service that produces the shipping label, so your order can be delivered. They receive no information about the contents of the package or the nature of our services — see our Shipping Policy on discreet packaging.
Payment processing. Your name, card details, and billing address are handled by a PCI-DSS-compliant payment processor in order to charge your payment. Payment processors never receive your health information.
At your direction. We share your information when you ask us to — for example, sending your records to another health care provider you designate.
When California law requires it. We may disclose information where a valid legal obligation under California law compels us to. We do not disclose patient information voluntarily, and California’s shield law protects reproductive health records against out-of-state demands — see our Terms of Service for more on shield law protections.

If OPTIO Women's Health were ever acquired by or merged with another organization, your information could be transferred to the successor, which would remain bound by the commitments in this Privacy Statement.

Data Retention

We retain your health information only as long as necessary to provide services and as required by law. Medical records are maintained according to applicable state and federal regulations.

Your Rights

You have the right to:

Access a copy of your personal health information
Request corrections to inaccurate information
Request deletion of your information (where legally permitted)
Opt out of communications (except essential service-related communications)

We will never discriminate against you for exercising any of these rights — doing so will not affect the price, quality, or availability of our services to you.

Marketing Communications

If you have opted in to receive marketing or informational messages from us, you can opt out at any time: use the unsubscribe link in any email, reply STOP to any text message, or contact us directly. We may still contact you when necessary about your own order or care.

Third-Party Services

We keep third-party involvement to a minimum. The messages we send you come from our own self-hosted systems, not from a marketing platform. The third-party services we do use are payment processors and shipping carriers (described under Who We Share Information With above) and privacy-focused website analytics (below). Each receives only the information necessary to perform its function.

If you book a telehealth consultation through our scheduling link, the scheduling provider (Calendly) receives the details you enter to book the appointment — such as your name, email address, and appointment time. Please keep health details out of the booking notes; if you prefer not to use the scheduling service, you can call us instead.

Website Analytics

We use a privacy-focused analytics tool (Plausible Analytics) that does not use cookies and does not track individual users or follow you across other sites. It receives the standard technical data described under Information We Collect — page visited, browser type, and IP address (used transiently to derive approximate location, not stored as a profile). This helps us understand site usage without compromising your privacy. No health information or consultation form data is ever sent to analytics.

Additional Disclosures for U.S. State Privacy Laws

This section provides additional disclosures required by the privacy laws of certain U.S. states (including California, Colorado, Delaware, Florida, Virginia, and Utah) and applies to residents of those states.

Do Not Track. Some browsers offer a "Do Not Track" signal. Our website does not track individual visitors across sites in the first place — our analytics works without cookies or persistent identifiers — so your browsing is treated the same way with or without a DNT signal.

Notice of collection. In the past 12 months, we have collected the following categories of personal information: identifiers (such as name, email address, and phone number); customer records (such as billing and shipping address; payment card data is handled by our payment processor); health information you provide in the consultation form; internet activity on our site (pages visited); and approximate location derived from IP address. The sources and purposes are described in the sections above. We have not sold or shared personal information for cross-context behavioral advertising.

Right to know and delete. You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the purposes for collection, and the categories of third parties to whom information was disclosed — and you may request deletion of your personal information, subject to legal retention requirements for medical records. To exercise these rights, contact us using the details below; we will verify your identity before responding and will not discriminate against you for making a request.

Direct marketing ("Shine the Light"). California residents may ask about disclosures of personal information to third parties for those parties' own direct marketing purposes. We do not disclose personal information to third parties for their direct marketing purposes.

Minors' Privacy

There is no minimum age for our services. Under California law, a person under 18 can consent to medical care related to the prevention or treatment of pregnancy, without a parent's or guardian's consent or knowledge. We protect a minor patient's information with the same confidentiality as any other patient's — including from their parents or guardians, except where the patient directs otherwise or California law requires it.

Our website itself is not directed at children, and apart from providing care that a minor may lawfully consent to, we do not knowingly collect personal information from anyone under 13.

Where Your Information Is Stored

Our services are provided only in the United States, and your information is stored and processed in the United States.

Changes to This Policy

We may update this Privacy Statement from time to time. Significant changes will be communicated through our website or directly to you.

Contact Us

If you have questions about this Privacy Statement or how we handle your information, see our Contact page, email [email protected], call 707-710-8866, or use our secure contact form. Please use the secure form rather than email for anything that includes health information.