OPTIMALThis notice covers this website — what it collects when you browse, book or buy, and which third parties receive it. It does not describe how the clinic handles your medical record. Clinical privacy, including any obligations under HIPAA, is governed separately by the notice the clinic gives you in person, and that determination rests with Optimal Wellness and its counsel rather than with this site.
What this site collects
When you use the booking form: your name, phone number, email address, the service and location you selected, any day or time preference, anything you type into the message box, and whether you ticked the box consenting to text messages. If you tick it, we also record the exact wording shown to you, the moment you ticked it and the page you were on, because a record of consent is only meaningful if it captures what was actually agreed.
When you buy something: the same contact details plus what you ordered, and whether you ticked the box in the cart consenting to text messages. As with the booking form, ticking it also records the exact wording you were shown, the moment you ticked it and the page you were on. Card details are entered on Stripe’s own hosted checkout and are never seen by, or stored on, this site.
When you use the chat widget: whatever you type, plus the contact details you give the assistant.
Automatically: standard web server logs, and — if you arrived by clicking an advertisement — the click identifier that advertisement carried.
Advertising and measurement
We advertise on Google and on Meta (Facebook and Instagram). When you arrive from one
of those advertisements, the link carries an identifier. We store it in your browser for
up to 90 days so that if you go on to book or buy, we can tell which advertisement
produced it. It is stored under the key ow_ads_attr in your browser’s
local storage and is removed automatically after 90 days.
We use the Meta pixel and Google Ads conversion tracking. These allow Meta and Google to recognise that a visit or a booking followed one of their advertisements, and to show you advertising elsewhere on their platforms. What they collect is governed by their own privacy policies, not this one.
We do not sell your personal information, and we do not share it with anyone for their own independent marketing.
Who else receives your information
Only the services required to run the clinic and this site:
- GoHighLevel — our customer record system, which stores your enquiry, powers the booking calendars, the chat widget and the follow-up messages.
- Stripe — payment processing. Card data goes to Stripe directly.
- Vercel — hosting for this site.
- Cloudflare — a bot check on the booking form.
- Meta and Google — advertising measurement, as described above.
Text messages
We only send marketing texts to people who ticked the consent box. Reply STOP to any message to end them. Appointment confirmations and reminders relating to a booking you actually made are transactional and are sent regardless, because they are part of the service you asked for.
Your choices
You can clear the advertising identifier at any time by clearing your browser’s site data for this domain. You can opt out of personalised advertising through Google’s ad settings and Meta’s ad preferences. You can ask us what we hold about you, ask us to correct it, or ask us to delete it, by emailing info@optimalwellness.shop or calling (813) 501-8341. Deleting a record we are required to retain for clinical or tax reasons is not always possible, and we will say so if that applies.
How long we keep it
Enquiries and customer records are kept for as long as you are a customer and afterwards for as long as we are required to keep them. The advertising identifier expires after 90 days. Server logs are kept for a short operational period.
Still outstanding. Whether the clinic is a HIPAA covered entity — which turns on whether it or its reference laboratory transmits a HIPAA standard transaction electronically — has not been determined. That answer changes what a clinical privacy notice must say. This page deliberately does not attempt it, and it is not a substitute for one. A licensed Florida healthcare attorney should review this alongside the clinic’s own notice of privacy practices.