Privacy Policy

Effective Date: 3/31/2026

Maluhia Health & Wellness (“we,” “our,” or “us”) is committed to protecting your privacy and safeguarding your personal and health information. This Privacy Policy explains how we collect, use, and protect your information when you visit our website or use our services.

HIPAA Notice & Health Information Privacy

Maluhia Health & Wellness complies with the Health Insurance Portability and Accountability Act of 1996 (HIPAA), which protects the privacy and security of your Protected Health Information (PHI).

Use of Protected Health Information (PHI)

We may use and disclose your PHI for:

• Treatment (providing and coordinating your care)

• Payment (billing and processing payments)

• Healthcare operations (practice management and quality improvement)

Your Rights Under HIPAA

You have the right to:

• Access and receive a copy of your health records

• Request corrections to your health information

• Request restrictions on certain uses or disclosures

• Request confidential communications

• Receive an accounting of disclosures

• File a complaint without fear of retaliation

Safeguards

We implement administrative, physical, and technical safeguards to protect your PHI from unauthorized access or disclosure.

INFORMATION WE COLLECT

Personal Information
	• Name
	• Email address
	• Phone number
	• Date of birth
	• Health information you voluntarily provide (e.g., intake forms, health history)

Non-Personal Information
	• Browser type
	• IP address
	• Pages visited on our site
	• Date and time of visits
How We Use Your Information

We use your information to:
	• Schedule & manage appointments
	• Communicate with you about services, updates, or promotions
	• Provide personalized care & treatment
	• Maintain clinical records
	• Improve our website & services
	• Comply with legal & regulatory requirements
Sharing Your Information

We do not sell or rent your personal or health information.

We may share your information only when necessary:
	• With service providers such as Acuity Scheduling and Google for business operations
	• When required by law or legal process
	• To protect the safety, rights, or property of our business or clients

  • We use trusted third-party platforms to support our operations:

    • Acuity Scheduling (Squarespace Scheduling): Used for online appointment booking, intake forms, and scheduling communications. Information submitted through Acuity may include personal and health-related information necessary for your care.

    • Google (Gmail): Used for email communication. While we take precautions to protect your information, standard email may not always be a fully secure method of communication.

    These providers are expected to maintain appropriate security measures. Where applicable, we take steps to use HIPAA-compliant services.on text goes here

  • Data Security

    We take reasonable measures to protect your information. However, no method of transmission over the Internet or electronic storage is completely secure.

    Cookies & Tracking

    Our website may use cookies to enhance your browsing experience and analyze website traffic. You can adjust your browser settings to refuse cookies if you prefer.

  • You may:

    • Request access to your personal information

    • Request corrections

    • Request deletion of non-medical personal data (where legally permitted)