Privacy Policy

Effective Date: September 1, 2026

At Petal & Poke, your privacy is our priority. This Privacy Policy outlines how we collect, use, protect, and share your personal information when you visit our website www.petalandpoke.com or use our online patient portal and booking systems. Our practice operates in Denver, Colorado, and we take specific measures to protect your health information in accordance with state and federal guidelines.

1. Information We Collect

We may collect the following types of information from you:

  • Personal Information: Name, email address, phone number, date of birth, shipping address, and payment information provided voluntarily when you fill out online contact forms or book appointments.

  • Health Information: Medical history, symptoms, clinical intake data, and treatment details provided during consultations (collected in compliance with HIPAA). Because we use Jane App, clinical notes and intake forms are securely processed through their platform using administrative, physical, and technical safeguards.

  • Technical Information: IP address, browser type, operating system, access times, and usage data collected via our website to improve user experience.

  • Communication Records: Emails, appointment requests, or inquiries submitted through our website or other channels.

2. How We Use Your Information

We use your information for the following purposes:

  • To provide personalized health care services, including acupuncture and East Asian medicine treatments.

  • To schedule, confirm, and manage your appointments.

  • To process payments securely and manage billing.

  • To communicate with you about your treatments, appointments, customer service requests, and clinical questions.

  • To send administrative information, such as updates to terms, conditions, and policies.

  • To improve our services and website functionality.

  • To request feedback or contact you about your experience, and to deliver optional marketing, newsletters, and wellness updates (which you can opt out of at any time).

3. How We Protect Your Information

We employ industry-standard measures to safeguard your information:

  • Encryption: All sensitive data is encrypted during transmission (using HTTPS) and storage utilizing secure data centers.

  • Access Control: Role-based access controls ensure that only authorized personnel have access to your data.

  • Compliance & Audits: We follow all applicable laws and regulations (including HIPAA) to protect your health information. While we take strict precautions, no online transmission or electronic storage is guaranteed 100% secure.

4. Sharing Your Information

We do not sell, trade, or rent your personal or health information to third parties. Your information may only be shared under the following circumstances:

  • With your explicit consent for treatment purposes or other specific requests.

  • With trusted third-party service providers (such as Jane App for scheduling/charting and secure payment processors) who comply with strict data protection standards.

  • To comply with legal obligations, court orders, or respond to legal process, and to protect the rights, property, and safety of our practice or others as permitted or required by federal or Colorado state law.

5. Your Privacy Rights

Under Colorado law, you have specific rights concerning your personal and medical information:

  • Access and Inspection: Request access to and receive copies of your personal data, medical, and billing records maintained by our practice.

  • Correction: Update, amend, or correct inaccurate or incomplete personal or health information in your file.

  • Deletion: Request the deletion of non-clinical data (such as newsletter subscriptions), noting that medical record retention laws in Colorado require us to maintain clinical charts for a designated period (typically 7 years for adults), which supersedes general data erasure requests.

  • Opt-Out: Decline or opt out of marketing communications at any time by contacting us.

6. Cookies and Tracking

We use cookies and similar tracking technologies on our website to improve user experience and analyze site traffic. You can manage or disable your cookie preferences through your browser settings.

7. Third-Party Links

Our website may contain links to third-party websites or resources. We are not responsible for the privacy practices or content of those websites and encourage you to review their respective policies.

8. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes to our practices or for operational, legal, or regulatory reasons. Changes will be posted on this page with an updated effective date.

9. Contact Us

If you have questions, comments, or wish to exercise your privacy rights under Colorado law, please contact us at: