Privacy Policy

1. Who we are

Finding Her MD ("Finding Her MD," "we," "us," or "our") is a physician-led concierge women's wellness practice serving Columbus, Ohio and surrounding areas, founded by Dr. Maclain Magee, MD. This Privacy Policy explains how we handle information collected through this website.

2. Website privacy and patient privacy are not the same thing

This distinction matters, so we want to be direct about it.

Website visitors

If you browse this site or submit the discovery call request form, the information you provide is governed by this Privacy Policy. At that stage you are a prospective patient, and the information you send us through the website is generally not protected health information under HIPAA.

Patients

Once you establish care with Finding Her MD, information about your health, treatment, and payment becomes protected health information (PHI). PHI is governed by the Health Insurance Portability and Accountability Act (HIPAA), applicable Ohio law, and our separate Notice of Privacy Practices, which you will receive when you become a patient. Where this Privacy Policy and the Notice of Privacy Practices differ regarding PHI, the Notice of Privacy Practices controls.

3. Information we collect

Information you give us

When you submit the discovery call request form, we collect:

• Your first and last name
• Your email address
• Your phone number, if you choose to provide it
• The general topic you select from the dropdown, such as weight management or menopause
• Anything you choose to write in the optional free-text message field

Only your name and email are required. Everything else is optional.

Information collected automatically

Our hosting provider records standard server and access log data, which may include your IP address, browser type and version, device type, referring page, pages viewed, and the date and time of your visit. This is used for security, troubleshooting, and understanding aggregate site usage.

Information we do not collect here

We do not collect payment card details, Social Security numbers, insurance identifiers, or clinical records through this website.

4. How we use information

We use the information described above to:

• Respond to your request and schedule your complimentary discovery call
• Answer questions you ask us
• Determine, together with you, whether our practice is a good fit for your needs
• Operate, secure, maintain, and improve the website
• Comply with legal, regulatory, and professional obligations

We do not sell your personal information. We do not rent, trade, or otherwise disclose it for anyone else's marketing purposes.

5. Legal basis and consent

By submitting the form, you are asking us to contact you, and you consent to us doing so by the email address and, if provided, the phone number you gave us. You can withdraw that consent at any time by replying to any message from us or contacting us using the details in Section 15.

6. How we share information

We share information only in these circumstances:

• With service providers who help us operate the site and the practice, and only to the extent needed for them to perform that work. See Section 7.
• When you ask us to, for example if you direct us to coordinate with your primary care physician or another member of your care team.
• When required by law, including in response to a valid subpoena, court order, regulatory request, or other lawful process, or where disclosure is required to comply with mandatory reporting obligations.
• To protect safety, where we believe in good faith that disclosure is necessary to prevent serious harm to you or another person.
• In a business transfer, if the practice is ever sold, merged, or reorganized, in which case information may transfer as part of that transaction, subject to the same protections described here.

7. Service providers

We use a small number of third-party providers to run this site and the practice. As of the last update above, these include:

• Netlify, which hosts this website and processes form submissions
• Google Fonts, which serves the typefaces used on this site. Loading these fonts involves a request to Google's servers, which receives your IP address as part of the ordinary operation of the internet.
• A HIPAA-compliant patient portal and electronic records platform, which will be used for patient communication and clinical records once it is live
• A partner pharmacy, for patients who are prescribed medication, and only with respect to that prescription

Providers who handle protected health information on our behalf are required to enter into a Business Associate Agreement with us as required by HIPAA.

8. Cookies and analytics

This website does not currently set advertising cookies or run third-party analytics or tracking pixels. Your browser may store standard technical data required to load the page.

If we add analytics or advertising measurement in the future, we will update this policy before doing so and, where required, present a cookie consent notice. Most browsers let you block or delete cookies through their settings.

9. Data retention

We keep discovery call requests only as long as needed to respond to you and to maintain a reasonable record of our communications, and no longer than three years from your last contact with us unless a longer period is required by law. If you become a patient, your medical records are retained according to Ohio medical record retention requirements and applicable federal law, which are longer.

You may ask us to delete a website inquiry at any time. See Section 11.

10. Security

This site is served over HTTPS, and we take reasonable administrative and technical measures to protect the information we hold. However, no method of transmission over the internet and no method of electronic storage is completely secure. We cannot guarantee absolute security, and we want to be honest with you about that rather than imply otherwise.

This is why we ask you not to send detailed medical information through the website form or ordinary email.

11. Your choices and rights

You may:

• Ask what information we hold about you
• Ask us to correct information that is inaccurate
• Ask us to delete a website inquiry
• Ask us to stop contacting you

Contact us using the details in Section 15 and we will respond within a reasonable period. Note that requests to delete may be limited where we are legally required to retain records, which is common for medical records.

If you are a patient, your rights with respect to your protected health information, including the right to access, amend, and request an accounting of disclosures, are described in our Notice of Privacy Practices.

12. Children's privacy

This website and this practice are directed to adults. We do not knowingly collect personal information from anyone under 18 through this website. If you believe a minor has submitted information to us, please contact us and we will delete it.

13. Third-party links

This site may link to other websites we do not control. We are not responsible for their content or their privacy practices, and this policy does not apply to them. We encourage you to read the privacy policy of any site you visit.

14. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Material changes will be highlighted on this page. Your continued use of the site after an update means you accept the revised policy.

15. How to contact us

Questions about this Privacy Policy, or requests regarding your information, can be sent to us using the contact form on our homepage.