Simpson Naturopathic — Website Privacy Policy

Effective date: October 11, 2026

Last updated: October 11, 2026

## 1. Who we are and what this policy covers

Dr. Stevie Simpson Burk, operating as Simpson Naturopathic (“we,” “us,” or “our”) operates https://www.dr.stevie-nd.com. This policy explains how we collect, use, disclose, and protect personal information through our public website, patient interest form, and related inquiry communications.

This website policy does not replace clinical informed consent, telehealth consent, or any separate patient privacy notice required by applicable law. Medical information is handled in accordance with applicable California confidentiality and patient-record laws. Nothing in this policy limits your rights under those laws.

Our cash-pay practice. Simpson Naturopathic is a cash-pay practice. We do not bill health insurance, check insurance eligibility, or request insurance authorization for our services, directly or through a service acting on our behalf.

Cash-pay status alone does not determine whether HIPAA applies. HIPAA coverage for a healthcare provider generally depends on whether the provider conducts qualifying electronic healthcare transactions, directly or through another party. Regardless of HIPAA status, we remain responsible for complying with applicable California medical-information protections. This policy does not claim that our practice or website has been certified as HIPAA compliant.

Privacy contact: Dr. Stevie Simpson Burk

Email: simpsonnaturopathic@gmail.com

Mailing address:

## 2. Information we collect

Information you provide. Our patient interest form collects your name and email address. When you submit the form or contact us, we also collect:

- Your reason for seeking care, such as perimenopause concerns, sleep difficulties, weight management, or anxiety.

- Your responses about readiness to make changes and willingness to invest in your health.

- How you heard about our practice.

- Any additional information you choose to include in your message or subsequent inquiry communications.

Health concerns are sensitive information. Please provide only a brief description on the interest form. Do not submit Social Security numbers, payment card details, medical records, laboratory reports, or a detailed medical history through this form. Contact us to arrange an appropriate method for sending clinical information.

Information collected automatically. [Insert a verified description of the information collected by the website host, form provider, analytics tools, and embedded services. Identify applicable categories such as IP address, browser and device information, pages viewed, referring website, timestamps, and cookie identifiers. If a category is not collected, omit it.] See Section 5 for cookies and tracking.

## 3. How we use information

We use interest-form information to review your inquiry, understand the type of support you are seeking, respond directly by email, discuss our services and scheduling, and manage related administrative communications. Dr. Stevie Simpson Burk personally follows up with people who submit the form. We do not use automated follow-up or automation integrations for these submissions.

We use the “how you heard about us” response to understand referral sources and improve outreach. We use aggregated summaries for this purpose and do not provide identifiable health responses to advertisers.

We also use information as reasonably necessary to operate and secure the website, address misuse, maintain required records, and comply with applicable legal obligations.

Submitting an interest form is a request for a response about our services. It is not enrollment in a newsletter or authorization for unrelated promotional messages. We obtain a separate opt-in before adding you to a marketing email list.

## 4. When information may be disclosed

We do not sell your personal information.

We use website and form hosting/storage providers and an email provider to collect, store, and respond to inquiries. These providers may process information as needed to provide their services.

Squarespace collects patient interest-form submissions. We use Google/Gmail for direct email communication. We do not connect form submissions to automation services.

We limit disclosures to what is appropriate for the purpose and applicable law. Where required, we obtain appropriate confidentiality, data processing, or business associate agreements. Use of a service provider does not authorize disclosure of health information for that provider’s advertising purposes.

We may disclose information when required or otherwise permitted by applicable law, including in response to a valid legal demand, or to protect rights and safety where legally permitted. We review requests involving medical information under the laws applicable to that information.

We may disclose information at your direction or with legally required authorization. Submission of an interest form does not authorize publication of your health information or use of your identity in a testimonial.

## 5. Cookies, analytics, and tracking

You can use your browser settings to manage or remove cookies. Blocking necessary cookies may affect website functionality.

Do Not Track.

Collection across websites.

Global Privacy Control.

## 6. Email and your communication choices

After you submit a patient interest form, we respond directly to the email address you provide. Ordinary email may carry privacy risks. Please avoid sending detailed health information by ordinary email; contact us to arrange an appropriate communication method.

You may ask us to stop nonessential inquiry follow-up or request a different contact method by using the privacy contact above. If you separately subscribe to marketing emails, you may unsubscribe using the link in those emails or contact us directly.

These choices do not necessarily stop communications required for an established care relationship or by law. Submitting the form does not waive your privacy rights or constitute blanket authorization to transmit medical information insecurely.

## 7. Retention

We retain personal information for the time reasonably necessary to respond to inquiries, administer our services, meet applicable recordkeeping obligations, and address legal or security needs.

If an inquiry becomes part of a patient medical record, separate medical-record retention requirements may apply. Information subject to a legal preservation obligation may be retained for the required period.

## 8. Security

No internet transmission or electronic storage system can be guaranteed completely secure. This statement does not reduce our legal obligations to safeguard information or provide any required breach notifications.

## 9. Requests concerning your information

You may contact us to request access to, correction of, or deletion of personal information submitted through the interest form, or to ask about our practices. We may need to verify your identity in a manner appropriate to the sensitivity of the information.

We evaluate requests under applicable law and respond within any legally required timeframes. Deletion or changes may be limited by medical-record requirements, legal preservation obligations, or other applicable exceptions. Requests about clinical records are handled under the laws applicable to those records.

California privacy rights depend on the law applicable to the information and the practice. Nothing in this policy waives any right to access, correction, deletion, restrictions, opt-out, or other protection provided by applicable law.

## 10. Children

Our public patient interest form is intended for adults age 18 and older and is not directed to children under 13. We do not knowingly collect personal information online from children under 13 through this form.

If you believe a child has submitted personal information, please contact us so we can assess and address it as required by law. If you accept pediatric inquiries, replace this section with language reflecting your actual parent/guardian process and legally required protections.

## 11. Other websites and services

Our website may link to external scheduling, patient portal, laboratory, or other services. Those services may provide their own privacy notices. Please review them before submitting information. Their notices do not eliminate our responsibilities for information we disclose to or handle through them.

## 12. Policy changes

We post updates to this policy on this page and revise the “Last updated” date. For material changes, we provide any additional notice or obtain any consent or authorization required by applicable law. A policy update does not itself authorize new uses of previously collected health information.

## 13. Contact and concerns

For questions, requests, or privacy concerns, contact our privacy contact at simpsonnaturopathic@gmail.com or the mailing address listed above. We do not currently have a work telephone number. Nothing in this policy prevents you from contacting an appropriate regulator or exercising a legal right.

---

# Practice-owner implementation notes — do not publish

Legal-operator verification: The owner has designated Dr. Stevie Simpson Burk as the current website operator. Confirm that this matches the actual operator before publication. If a registered entity later takes over, update the operator name accordingly.

This draft is based on your description of an interest form collecting health concerns, readiness to change, willingness to invest, referral source, and direct email follow-up. Your website and vendors have not been audited. This is drafting assistance, not an attorney opinion, a compliance certification, or a guarantee against lawsuits.

Before publication:

1. Complete every bracketed item. Verify the legal operator name, contact information, form fields, website host, form provider, email provider, and all integrations.

2. Review the entire flow of health information: browser to form, form to storage, notifications, inbox, automation tools, exports, backups, and access by support staff. Consider collecting only contact information on the public site and moving health questions to an appropriately secured intake system.

3. You have confirmed that the practice is cash-pay and does not conduct insurance transactions. On that description, the independent practice likely is not a HIPAA-covered provider, provided no qualifying electronic standard transactions are conducted by you or on your behalf and no other HIPAA-regulated role applies. Confirm this with counsel before making a definitive exemption statement. Keep the separate HIPAA notice as a draft until applicability is confirmed. If your operations change, reassess HIPAA coverage. California confidentiality and patient-record obligations apply independently.

4. Review tracking on the form, submission-confirmation page, scheduling pages, and embedded tools. Do not allow identifiable health responses to flow to advertising pixels, analytics, or session replay tools without a legally valid basis. A cookie banner or generic policy acknowledgment does not itself supply a HIPAA authorization.

5. Verify Do Not Track behavior and cross-site collection. Review Global Privacy Control separately. “I do not sell information” does not prove that the site does not share information for cross-context behavioral advertising.

6. Determine whether the CCPA/CPRA applies to the business and which information is covered. Medical-information exceptions are not automatically a blanket exemption for every website datum. If covered, add the required collection notice, disclosures, rights, and functional request/opt-out mechanisms.

7. Establish and implement retention, deletion, access, and breach-response procedures. Describe real practices rather than aspirational safeguards.

8. Link the completed policy conspicuously in the website footer and immediately next to the form’s submit button. Keep the policy separate from informed consent, telehealth consent, website terms, and medical disclaimers.

9. Have a California healthcare/privacy attorney review the completed policy and actual collection process, particularly the health questions, email workflow, California confidentiality rules, and tracking.

Suggested notice immediately above the submit button (fill in contact/link and verify the workflow):

“We use the information you submit to review your inquiry and contact you by email about our services. Please provide only a brief description of your concern; do not submit medical records, laboratory reports, payment details, or urgent medical questions. Read our Privacy Policy .. To arrange a different communication method, contact Submitting this form does not establish a doctor–patient relationship. This form is not monitored for emergencies. For a medical emergency, call 911.”

Optional separate, unchecked newsletter opt-in, only if you offer a newsletter:

“I would also like to receive optional educational and promotional emails from Simpson Naturopathic. I can unsubscribe at any time.”

Do not treat a privacy-policy acknowledgment as a waiver of legal rights, informed consent for treatment, or authorization for unrelated disclosures.

Official resources checked for this draft:

- California Attorney General, CalOPPA disclosures: https://oag.ca.gov/news/press-releases/attorney-general-kamala-d-harris-launches-new-tool-help-consumers-report

- California Attorney General, CCPA: https://oag.ca.gov/privacy/ccpa

- HHS, covered entities: https://www.hhs.gov/hipaa/for-professionals/covered-entities/index.html

- HHS, Notice of Privacy Practices: https://www.hhs.gov/hipaa/for-professionals/privacy/guidance/privacy-practices-for-protected-health-information/index.html

- HHS, online tracking guidance (including the court-vacated portion noted by HHS): https://www.hhs.gov/hipaa/for-professionals/privacy/guidance/hipaa-online-tracking/index.html

- California Civil Code section 56.10: https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?sectionNum=56.10.&lawCode=CIV (official text could not be retrieved during drafting; counsel should confirm the current text and applicability).