Effective Date: October 2025
Last Updated: October 22, 2025
Spruce Health Collective (“Spruce,” “we,” “our,” or “us”) values your privacy. This Privacy Policy describes how we collect, use, and protect your personal information when you visit sprucehealthcollective.com (the “Site”), use our online scheduling tools, or communicate with our practitioners.
By using our Site, you consent to the practices described in this Policy.
1. Information We Collect
We collect information in the following ways:
a. Information You Provide Directly
- Appointment requests and forms: Name, email, phone number, date of birth, and other details submitted through our scheduling or contact forms.
- Patient intake: Medical and health information you provide during registration or visits through our electronic health record platform (Charm EHR).
- Payment details: Information provided to third-party payment processors (we do not store your payment details).
b. Information Collected Automatically
When you use our Site, we may automatically collect limited technical data such as:
- IP address and device type
- Browser and operating system
- Pages visited and time spent on the Site
This information helps us understand usage trends and improve website performance.
2. Use of Information
We use collected information to:
- Schedule and manage appointments
- Deliver healthcare services and communicate with patients
- Maintain accurate medical records
- Improve website functionality and user experience
- Comply with legal, billing, and reporting requirements
We do not sell, rent, or trade your personal information.
3. Protected Health Information (PHI)
As a healthcare provider, Spruce Health Collective complies with the Health Insurance Portability and Accountability Act (HIPAA).
All PHI you share through Charm EHR or directly with your practitioner is stored and transmitted securely.
We only share your PHI as necessary to:
- Coordinate care with other providers (with your consent)
- Process insurance or billing (if applicable)
- Comply with legal or regulatory obligations
4. Third-Party Services
Our Site may link to or integrate with third-party services such as:
- Charm EHR for patient management and scheduling
- Telehealth and video consultation platforms
- Payment processors for billing services
These services have their own privacy and security policies. We encourage you to review them before submitting information.
5. Cookies and Analytics
We may use cookies or analytics tools (such as Google Analytics) to track aggregate website activity.
These tools do not collect personal health information. You may disable cookies in your browser settings if you prefer.
6. Data Security
We implement industry-standard safeguards to protect your personal and medical information, including:
- Encrypted data transmission (SSL/HTTPS)
- Secure password-protected systems
- Access limited to authorized staff only
While no system is 100% secure, we take reasonable measures to minimize risks of unauthorized access or disclosure.
7. Your Rights
You have the right to:
- Access or request copies of your medical records
- Request corrections to inaccurate information
- Withdraw consent for certain data uses (subject to legal obligations)
- File a complaint if you believe your privacy rights have been violated
To exercise these rights, contact us using the information below.
8. Children’s Privacy
Our services are intended for adults and minors under parental or guardian supervision.
We do not knowingly collect personal information from children under 13 without parental consent.
9. Updates to This Policy
We may update this Privacy Policy from time to time.
Any changes will be posted on this page with an updated effective date.
Your continued use of the Site after such changes means you accept the revised policy.
10. Contact Us
If you have any questions or concerns about this Privacy Policy, please contact us at:
Spruce Health Collective
920 E Jackson St.
Medford, OR 97504
[email protected]
sprucehealthcollective.com
