Privacy Policy
Last Updated: June 25, 2026
This Privacy Policy (the “Policy”) of Haven Health Group, Inc. and its subsidiaries (collectively, “Haven” and/or “we/us/our”) explains what information we collect, how information that identifies, relates to, describes, is reasonably capable of being associated with, or may reasonably identify you (“Personal Information”) is collected, how we use that Personal Information, what Personal Information is shared with whom, and how we protect your Personal Information when you use our non-clinical products and services, offered through a suite of online technology including our website (www.HavenHealth.care), mobile-enabled features, communications, and related online services (collectively, the “Non-clinical Services”). It is Haven’s policy to respect your privacy and comply with all applicable laws and regulations regarding any Personal Information we may collect about you. The law in some jurisdictions may provide you with additional rights regarding our use of Personal Information.
This Policy is incorporated by our Terms and Conditions, which may apply to your use of Non-clinical Services and other services. You should regularly check the Policy for changes. We will endeavor to inform you of material changes to the Policy that affect our privacy practices by the email we have on record.
This Policy applies to Personal Information collected through the Non-clinical Services and does not apply to the collection, use, and disclosure of your protected health information by Haven or its affiliated professional providers when they act as covered entities or business associates under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”). Please see the applicable Notice of Privacy Practices for more information about how Haven collects, uses, and discloses your protected health information under HIPAA. If there is a conflict between this Policy and our Notice of Privacy Practices regarding protected health information, the Notice of Privacy Practices will govern.
Information We Collect
Personal Information we collect includes information (i) you knowingly and actively provide us directly, (ii) automatically sent by your devices or generated when you use the Non-clinical Services, and (iii) obtained from third parties, such as service providers, business partners, advertising or analytics partners, payment processors, communications providers, and publicly available sources. We may retain your Personal Information as described in this Policy unless you request that we remove it and deletion is required by applicable law.
For example, information that you provide to us includes, but is not limited to: identifiers and contact information; demographic information; account registration information, usernames, passwords, security questions, and other access credentials; transaction, billing, insurance, payment card, bank account, and other payment information; communications, user contributions, survey responses, reviews, messages, and other content you submit through the Non-clinical Services; preferences and consent records; and any other information you choose to provide.
Information we collect automatically includes, but is not limited to, usage data, device data, log data, IP address, operating system, browser type, mobile device identifiers, referring and exit pages, pages viewed, links clicked, searches, features used, error information, approximate location inferred from IP address, date and time of use, and inferences we may derive from your interactions with the Non-clinical Services.
Third-parties such as our business partners and service providers may also collect information when you use our Non-clinical Services or provide information to us about you. Some content or applications on the website, including advertisements, analytics tools, pixels, software development kits, social media features, and embedded content, are served by third parties including advertisers, analytics providers, service and content providers, application providers, communications providers, and payment processors or financial institutions. These third parties may use cookies alone or in conjunction with web beacons, pixels, tags, scripts, local storage, device identifiers, or other tracking technologies to collect information about you when you use our website or Non-clinical Services. The information they collect may be associated with your Personal Information or they may collect information, including Personal Information, about your online activities over time and across different websites and other online services. They may use this information to provide you with interest-based (behavioral) advertising or other targeted content. We do not control these third-parties’ tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly.
Text Messaging Privacy
If you opt in to receive SMS/text messages from Haven, we may collect and store information related to your mobile number, messaging consent status, and communication preferences.
SMS/text messaging originator opt-in data and consent are not shared with any third parties, affiliates, or non-affiliates for marketing purposes, excluding aggregators and providers of the Text Message services.
Log Data
When you use our Non-clinical Services, our servers may automatically log the standard data provided by your web browser. It may include your device’s Internet Protocol (“IP”) address, your browser type and version, the pages you visit, the time and date of your visit, the time spent on each page, other details about your visit, and technical details that occur in conjunction with any errors you may encounter. Please be aware that while this information may not be personally identifying by itself, it may be possible to combine it with other data to personally identify individual persons.
Cookies
Cookies are files with small pieces of data that are used to identify your computer as you use a network. Specific cookies are used to identify specific users and improve their web browsing experience. Data stored in a cookie is created by the server upon your connection. This data is labeled with an ID unique to you and your computer. When the cookie is exchanged between your computer and the network server, the server reads the ID and knows what information to specifically serve you. The Non-clinical Services use these “cookies,” web beacons, pixels, tags, scripts, local storage, and similar tracking technologies to collect information, remember preferences, authenticate users, measure performance, analyze traffic, prevent fraud, improve our Non-clinical Services, and support advertising or marketing where permitted by law. You have the option to either accept or refuse cookies through your browser or device settings, but disabling cookies may affect Service functionality.
Tracking Technologies and Protected Health Information. We use third-party analytics, advertising, and other tracking technologies only on the public, non-authenticated portions of our website and Non-clinical Services. We do not deploy third-party advertising or analytics trackers that disclose protected health information ("PHI") on authenticated patient portals, scheduling, intake, or other pages through which PHI is collected or displayed, except pursuant to a business associate agreement or as otherwise permitted under HIPAA. Where a tracking technology vendor receives information governed by HIPAA, we enter into a business associate agreement with that vendor.
How We Use Your Information
We use your Personal Information that we collect through the Non-clinical Services for the purposes described below and as otherwise permitted by applicable law:
• To Operate and Maintain the Non-clinical Services. This includes providing, operating, maintaining, personalizing, and improving the Non-clinical Services; creating and administering accounts; authenticating users; fulfilling your requests; providing products, services, information, feedback, and instruction; scheduling and supporting services; processing transactions; billing and collection; and providing customer support.
• To Communicate With You. We may communicate with you about your account, transactions, appointments, requested services, notices, account notices, security alerts, updates, administrative messages, or our relationship. We may also contact you about this Policy. This also includes responding to your feedback, requests for quotes, or requests for more information.
• To Improve Our Non-clinical Services. We may use your Personal Information to make our Non-clinical Services better. We may also use your Personal Information to customize your experience with us.
• To Understand Your Interests. For example, we may use your Personal Information to better understand what features in our Non-clinical Services interest you.
• For Online Marketing Purposes, including Targeted Advertising. We might use your Personal Information to serve you ads, emails, or other content about our products and services, including new features or services that we develop in the future. These might be third-party offers for tools, products, or services that we think you might find interesting. We and our partners may engage in interest-based advertising, or targeted advertising, using data and Personal Information gathered across multiple websites, devices, or other platforms.
• To Send Promotional Communications to You. This includes surveys, promotions, and marketing emails.
• For Security and Legal Purposes. This includes protecting us and the consumers who use our Non-clinical Services; detecting, investigating, and preventing fraud, security incidents, or misuse; complying with legal, regulatory, and professional obligations; and protecting our Non-clinical Services, including this website.
• With Consent or As Otherwise Permitted By Law or As We May Notify You. We may use your Personal Information for additional purposes with your consent, at your direction, or as otherwise disclosed when the information is collected.
How We Share Your Information
We may share your Personal Information in the following ways:
• With Our Service Providers and Payment Processors. We may share your Personal Information with third-parties who perform services on our behalf. For example, this may include hosting providers, analytics providers, customer support providers, communications vendors, payment processors, financial institutions, billing and collections vendors, companies that send emails or text messages on our behalf, fraud prevention providers, professional advisers, or other operating systems or platforms that help us run our Non-clinical Services.
• With Data Analytics Providers for Targeted Advertising. Third-party data analytics providers may collect Personal Information about users over time and across different websites, applications, and devices for the purposes of targeted advertising. Third-party data analytics providers may also collect Personal Information in this way on our website. These practices may be considered a “sale” of Personal Information under some state laws.
• With Our Business Partners. For example, this may include a company that co-sponsors a promotion, supports our products or services, integrates with the Non-clinical Services, or provides benefits, features, content, or offers that you request or choose to access.
• With Any Successors to All or Part of Our Business or One of Our Brands. For example, if we assess or actually merge with, acquire or are acquired by, or sell a brand or part of its business to another business entity. This may include an asset sale, corporate reorganization, or other change of control, potentially involving the bankruptcy process. We may transfer our customer information, which may include your Personal Information, as part of such a transaction or as a stand-alone asset, as permitted by applicable law.
• To Comply with the Laws or Regulations; Protect Rights, Safety, and Security. For example, this could include responding to a court order, subpoena, law enforcement request, regulatory inquiry, or other legal process. It could also include sharing Personal Information if requested by a government agency or investigatory body. We might share Personal Information within the context of protecting or assessing our Own legal rights, such as with third-party accountants or outside legal counsel. We might share Personal Information to collect amounts owed; detect, investigate, or prevent fraud, abuse, security incidents, or illegal activity; or protect the rights, privacy, safety, or property of ourselves, our employees and personnel associated with us, our business partners, or you.
• With Your Direction; Aggregate or Deidentified Information. We may disclose Personal Information when you direct us or consent to the disclosure, including when you use the Non-clinical Services to communicate with another person or connect to a third-party service. We may also disclose information that has been aggregated, deidentified, or otherwise cannot reasonably be used to identify you, and we will maintain and use deidentified information in deidentified form except as permitted by law.
Consent to Receive Communications
You agree that Haven Health may contact You using the Personal Information you provide, including electronically, for appointment reminders, confirmation emails, questions about scheduling or services, and health team communications. You may opt out of promotional emails by using the unsubscribe link or instructions in those messages, and You may opt out of promotional or non-essential text messages by replying STOP or following the instructions in the message. Even if You opt out of promotional communications, we may still send non-promotional, transactional, account, security, legal, or service-related communications where permitted by law.
When We collect and process Personal Information and retain this information, we will protect it within commercially acceptable means to prevent loss and theft, as well as unauthorized access, disclosure, copying, use, or modification. These safeguards may include administrative, technical, and physical controls, and encryption or other protective measures where appropriate. We will comply with laws applicable to us in respect of any data breach. Although we will do our best to protect the Personal Information you provide to us, we advise that no method of electronic transmission or storage is 100% secure, and no one can guarantee absolute data security. If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of your account has been compromised), please immediately notify us in accordance at ADDRESS@havenhealth.care.
As our operations are conducted from the United States, all Personal Information that we collect is used and stored in the US, is subject to US laws, and may be subject to disclosure to US governments, courts, law enforcement, or regulatory agencies pursuant to those laws. If you are using our Non-clinical Services, including accessing this website, from or in another country, please note that your Personal Information will be transmitted to our servers in the US as necessary to provide you with the information that you requested, administer our Non-clinical Services to you, or as otherwise disclosed in this Privacy Policy.
Third-Party Providers
We may employ or hire third-party companies and individuals as vendors to service our Non-clinical Services, and provide other ancillary services related to our Non-clinical Services and the information we collect online. These third-parties have access to your Personal Information only to the extent required to perform that vendor’s specific tasks and are not authorized to use Personal Information for their own purposes except as permitted by law or our agreements with them. All such third-parties are required to maintain the confidentiality of your Personal Information, and we shall not be responsible for the conduct or negligence of a third-party.
International Transfers of Personal Information
The Personal Information we collect is stored and/or processed where we or our partners, affiliates, and third-party providers maintain facilities. Please be aware that the locations to which we store, process, or transfer your Personal Information may not have the same data protection laws as the country in which you initially provided the information. If we transfer your Personal Information to third-parties in other countries: (i) we will perform those transfers in accordance with the requirements of applicable law; and (ii) we will protect the transferred Personal Information in accordance with this Policy.
Your Rights and Controlling Your Personal Information
You always retain the right to withhold Personal Information from us, with the understanding that your experience of our Non-clinical Services may be affected. We will not discriminate against you for exercising any of your rights over your Personal Information. If you do provide us with Personal Information, you understand that we will collect, hold, Use and disclose it in accordance with this Policy. Depending on where you live and subject to legal exceptions, you may have the right to request access to, confirmation of processing of, correction of, deletion of, or portability of Personal Information we hold about you; to opt out of targeted advertising, sales, or certain profiling; to limit certain uses of sensitive Personal Information; to withdraw consent where processing is based on consent; and to appeal a denied privacy request.
If you believe that any information we hold about you is inaccurate, out of date, incomplete, irrelevant, or misleading, or if you wish to exercise any privacy right available to you, please contact using the details provided in this Policy. We may need to verify your identity and authority to make the request, including by asking you to provide information that matches information we maintain about you. We will respond within the time required by applicable law. If we deny a request and applicable law provides an appeal right, you may appeal by contacting us and stating that you are appealing our decision. We will take reasonable steps to correct any information found to be inaccurate, incomplete, misleading, or out of date.
If you believe that we have breached a relevant data protection law and wish to make a complaint, please contact us using the details below and provide us with full details of the alleged breach. We will promptly investigate your complaint and respond to you, in writing, setting out the outcome of our investigation and the steps we will take to deal with your complaint. You also have the right to contact a regulatory body or data protection authority in relation to your complaint.
Other Sites
Our Non-clinical Services may link to external sites that are not operated by us. If you click on a third-party link, you will be directed to that site. Please be aware that we have no control over the content and policies of those sites, and cannot accept responsibility or liability for their respective privacy practices. Therefore, we strongly advise you to review the privacy policies of these websites.
Children’s Privacy
We do not knowingly collect Personal Information from children under eighteen (18) years of age through the Non-clinical Services, and the Non-clinical Services are not directed to children or minors. If You are a parent or guardian and you are aware that Your child has provided us with Personal Information, please contact us. If we discover that a child under eighteen (18) has provided us with Personal Information, we will delete such information from Our servers immediately unless retention is required or permitted by law. Parents or guardians may contact us to request review or deletion of information provided by a minor.
Do Not Track, Global Privacy Signals, and Targeted Advertising Choices.
Some browsers or devices may transmit “Do Not Track” signals. Because there is not currently a uniform industry standard for responding to such signals, we do not respond to all Do Not Track signals. Where required by applicable law, we will recognize legally required opt-out preference signals, such as Global Privacy Control, for the browser or device that sends the signal. You may also use available cookie settings, browser controls, industry opt-out tools, or links that we provide to opt out of certain targeted advertising, sales, or sharing where applicable.
Retention, Deletion, and Anonymization.
We retain Personal Information for as long as reasonably necessary to provide the Non-clinical Services, maintain accounts, fulfill the purposes described in this Policy, comply with legal, regulatory, tax, accounting, and reporting obligations, resolve disputes, enforce agreements, prevent fraud or abuse, and maintain security. When Personal Information is no longer needed, we will delete, deidentify, anonymize, or aggregate it in accordance with our retention practices and applicable law, unless we are required or permitted to retain it for a longer period.
Changes to this Privacy Policy
At our sole discretion and without notice, we may change our Policy for any reason, including to reflect updates to our business processes, current acceptable practices, or legislative or regulatory changes. If we decide to change this Policy, we will post the changes to our website, and they are effective immediately upon posting. If required by law, we will get your permission or give you the opportunity to opt in to or opt out of, as applicable, any new uses of your Personal Information. We advise you to review this Policy periodically for any changes.
Permitted Use
You may use the Non-clinical Services only if you are eighteen (18) years of age or older and solely for your own personal, non-commercial use. Your use of the Non-clinical Services must be in accordance with all applicable laws. You acknowledge that you do not acquire any ownership rights in the Non-clinical Services or any content by your use of the Non-clinical Services. You may not use the Non-clinical Services in any manner that could damage, disable, overburden, or impair our servers, or the networks connected to our servers, or interfere with any other party's use and enjoyment of the Non-clinical Services. You may not attempt to gain unauthorized access of the Non-clinical Services, other accounts, computer systems or networks connected to our servers or to any of the content, through hacking, password mining or any other means. You may not obtain or attempt to obtain any materials or information through any means not intentionally made available through the Non-clinical Services.
Website Does Not Provide Medical Advice
This Website is not intended and must not be interpreted as the rendering of medical or professional health care advice or services, or the practice of medicine or professional health care.
Copyrights, Trademarks and Other Proprietary Rights
The Non-clinical Services, any content on the website or included in the Non-clinical Services, and the infrastructure and software used to provide the Non-clinical Services are proprietary to us, our affiliates, agents, contractors, providers, and other content providers. By using the Non-clinical Services and accepting these terms: (a) Haven grants you a limited, personal, non transferable, nonexclusive, revocable license to use the Non-clinical Services pursuant to these terms of this Policy and to any additional terms and policies set forth by Haven; and (b) you agree not to reproduce, distribute, create derivative works from, publicly display, publicly perform, license, sell, or re-sell any content, software, products, or services obtained from or through the Non-clinical Services without the express permission of Haven.
California Privacy Rights
We include this section to comply with the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act (“CCPA/CPRA”). If you reside in the State of California, this section provides additional details about the Personal Information we collect about you, the purposes for which we collect, use, disclose, sell, or share it, the categories of third parties to whom we disclose it, and your rights under the CCPA/CPRA. California law requires that we provide transparency about personal information we “sell” or “share,” which may include scenarios in which we disclose or make available personal information to partners in exchange for monetary or other valuable consideration or for cross-context behavioral advertising. Subject to certain limitations, and without limitation, the CCPA/CPRA provides you the right to request:
Categories of Personal Information We Collect, Disclose, Sell, or Share.
In the preceding twelve (12) months, we have collected the following statutory categories of Personal Information: (i) identifiers (e.g., name, email, phone number, IP address, online identifiers); (ii) customer records and financial information (e.g., billing, insurance, payment card, and bank account information); (iii) characteristics of protected classifications (e.g., age) where provided; (iv) commercial information (e.g., transactions and services requested); (v) internet or other electronic network activity information (e.g., usage, device, and log data); (vi) approximate geolocation data derived from IP address; (vii) audio or electronic information (e.g., communications and messages); (viii) inferences drawn from the foregoing; and (ix) Sensitive Personal Information, which may include account log-in credentials, financial account information together with required access codes, precise geolocation, and information concerning health. We collect this information from you directly, automatically from your devices, and from third parties such as service providers, business partners, analytics or advertising partners, payment processors, and publicly available sources. We use and disclose each category for the business and commercial purposes described in this Policy. We may disclose each of the above categories to our service providers and contractors, and we may disclose identifiers, internet activity, geolocation, commercial information, and inferences to advertising and analytics partners in connection with cross-context behavioral advertising, which may constitute a "sale" or "sharing" under the CCPA/CPRA. We do not knowingly sell or share the Personal Information of consumers under 16 years of age without affirmative opt-in consent.
Retention.
We retain each category of Personal Information for as long as reasonably necessary to fulfill the purposes for which it was collected, after which we delete, deidentify, or aggregate it. The criteria we use to determine retention periods include: the duration of your account or relationship with us; the time needed to provide the Non-clinical Services and process transactions; our legal, regulatory, tax, accounting, and reporting obligations; the time needed to resolve disputes, enforce agreements, and prevent fraud or abuse; and applicable statutes of limitation. Sensitive Personal Information and financial information are retained only as long as reasonably necessary for the disclosed purposes or as required by law.
Right to Know/Access. That we provide you access to details on the categories or specific pieces of Personal Information we collect and/or sell (including how we use and disclose this information, to whom we may sell it);
Right to Deletion. That we delete any of your Personal Information;
Right to Correct. That we correct inaccurate Personal Information we maintain about you.
Right to Limit Use of Sensitive Personal Information. To limit the use or disclosure of the Sensitive Personal Information to that use which is necessary to perform the services or provide the goods reasonably expected by an average consumer who requests those goods or services, or as otherwise permitted by law; and
Right to Opt Out of Sale or Sharing; Right to Limit Sensitive Personal Information.
You have the right to opt out of the "sale" or "sharing" of your Personal Information and to direct us to limit the use and disclosure of your Sensitive Personal Information to those purposes permitted under the CCPA/CPRA. You may exercise these rights through the "Do Not Sell or Share My Personal Information" and "Limit the Use of My Sensitive Personal Information" links available on our website, by adjusting your cookie or privacy settings, by transmitting a recognized opt-out preference signal such as Global Privacy Control, or by contacting us using the information in this Policy. We will honor a valid opt-out as required by, and within the timeframes set by, applicable law, and we will not require you to create an account to opt out.
If you would like to submit a request to exercise your California privacy rights under the CCPA/CPRA, please contact us. We will verify your request as required by law and may request information sufficient to confirm your identity and authority. You may use an authorized agent where permitted by law, but we may require proof of authorization and verification of your identity. You may make a request to know or for data portability no more than twice in any twelve (12) month period. We will not retaliate or discriminate against you for exercising your California privacy rights.
California "Shine the Light" Rights.
California Civil Code Section 1798.83 permits California residents who have an established business relationship with us to request, once per calendar year, information about the categories of Personal Information (if any) we disclosed to third parties for those third parties' direct marketing purposes during the preceding calendar year, and the names and addresses of those third parties. To make such a request, please contact us using the information in this Policy and indicate that you are submitting a "Shine the Light" request.
Other State Privacy Rights.
Residents of Colorado, Connecticut, Oregon, Texas, Utah, Virginia, and other states with comprehensive privacy laws may have additional rights, subject to legal limitations and exceptions. These rights may include the right to access, confirm processing, correct, delete, obtain a portable copy of Personal Information, opt out of targeted advertising, sales, or certain profiling, limit or revoke consent for certain processing of Sensitive Personal Information, and appeal a denied request. To exercise these rights, please contact Us using the contact information in this Policy and specify the right you wish to exercise and your state of residence
Force Majeure
We shall be excused from performance under this Policy, to the extent we are prevented or delayed from performing, in whole or in part, as a result of an event or series of events caused by or resulting from: (a) weather conditions or other elements of nature or acts of God; (b) acts of war, acts of terrorism, insurrection, riots, civil disorders, or rebellion; (c) quarantines, pandemics, or embargoes; (d) labor strikes; (e) error or disruption to major computer hardware or networks or software failures; or (g) other causes beyond our reasonable control.
Contact Us
You may contact us in connection with this Policy at the following:
Haven Health
Email: legal@havenhealth.care
Attn: Michael Piscadlo
6221 Wilshire Blvd, Suite 216
Los Angeles, CA 90048
