Privacy policy

When you book a consultation on this website, our booking form asks only for:

• Your full name, phone number and email address.
• The Estrella location you prefer.
• The date and time you prefer for your visit.
• A record of your consent: that you agreed to our Terms of service and this Privacy policy, and that you agreed to be contacted by phone, text message or email about your booking, along with when you gave that consent.

We do not collect health information on this website. The booking form does not ask about your health, and you should not include health details when you book. Your health history, current medications, allergies and other health questions are discussed by phone with the Estrella team and in person at your clinic visit.

Payment information. If you choose to pay in advance, you pay on a checkout page hosted by Stripe, our payment processor. Stripe collects and processes your card details under its own privacy policy. Our website never sees or stores your card number. We receive confirmation of the payment and limited details about it, such as the amount, the date and the last four digits of the card, to manage your billing, cancellations and refunds.

Health information from your care. When you talk with our team by phone and when you visit the clinic, we collect health information, and we create medical records such as notes from your doctor consultation, blood work results, medications given and check-in results. That information is covered by our HIPAA Notice of Privacy Practices.

We also keep anything else you choose to tell us when you contact us.

The website itself does not use analytics, advertising pixels or cookies, and it does not include third-party embeds. It stores two small items in your own browser, explained below and in our Cookie policy.

When you submit the booking form, your information is sent over a secure, encrypted (HTTPS) connection from our website's server to our booking and patient communication system, provided by [CRM provider]. Our website does not store your booking in its own database.

Our team uses that system to call you, ask a few more questions, and coordinate your visit.

To work properly, the site saves two items in your browser's storage. They stay on your device and are not sent to anyone:

• estrella-lang (local storage): remembers whether you chose English or Spanish.
• estrella-booking (session storage): keeps a short summary of your booking (your name, preferred location, date and time) so the payment page can show it to you. It is kept only in that browser tab and is cleared when you close the tab. It does not contain health or payment information.

If you use a shared or public computer, we recommend closing the tab when you finish.

We use personal information to:

• Schedule your consultation and contact you about your booking.
• Evaluate whether the program is safe and appropriate for you.
• Provide your care, including consultations, blood work review, medication, nutrition and exercise guidance, and weekly check-ins.
• Communicate with you about appointments, your care and your questions, in English or Spanish.
• Process payments, monthly billing, cancellations and refunds.
• Meet our legal, regulatory and professional obligations, and protect the safety of patients and staff.

We do not sell your personal information, and we do not share it for targeted advertising.

When you book, you agree that Estrella may contact you by phone, text message or email at the number and address you give us, about your booking, your visit and your care. Message and data rates may apply, and message frequency varies.

You can reply STOP to any text message to stop receiving texts, or reply HELP for help. You can also ask us to stop calls or emails at any time by contacting us. Agreeing to be contacted is not a condition of buying any product or service. If you prefer not to receive calls or texts, call the clinic or email info@estrellamedicalcenters.com to book.

We do not use your phone number or email address for marketing unless you separately agree to it, and we do not share them with others for their marketing.

We share personal information only as needed to care for you and run the program:

• Your care team at Estrella, including doctors, nurses, nutritionists and staff involved in your care.
• Our partner pharmacy. If your doctor prescribes a compounded medication, the prescription and the information needed to fill it are sent to our partner compounding pharmacy, Greenstone Rx in Miami.
• Stripe, our payment processor, to collect payments and issue refunds. Stripe handles card information under its own privacy policy, available at stripe.com/privacy.
• [CRM provider], which runs our booking and patient communication system and receives the information you enter in the booking form.
• Other service providers that help us operate, such as website hosting, technology and communication vendors, under contracts that require them to protect the information and use it only for the services they provide to us.
• When required by law, for example in response to a valid legal request, to report as required by public health laws, or to protect someone's health or safety.

Health information is shared only as permitted by HIPAA and Florida law, as described in our Notice of Privacy Practices.

We use administrative, technical and physical safeguards designed to protect personal information from unauthorized access, use or disclosure. No website, network or storage system is completely secure, so we cannot guarantee absolute security. Please contact us right away if you believe your information has been put at risk.

If a security breach affects your personal information, we will notify you and, where required, the Florida Department of Legal Affairs, as required by the Florida Information Protection Act (Fla. Stat. §501.171). Breaches involving health information will also be handled as required by HIPAA.

We keep medical records for as long as Florida law and professional rules require, and other information (such as billing records) for as long as needed for the purposes described here or as required by law. Booking information sent through the website is kept in our booking system, provided by [CRM provider], for as long as needed to schedule and support your care or as required by law. The booking summary stored in your browser is cleared when you close the tab.

Depending on the information and the law that applies, you can ask to:

• Access or get a copy of your information.
• Correct information that is inaccurate or incomplete.
• Delete information, where applicable. Some records, such as medical and billing records, must be kept by law and cannot be deleted on request.

Your rights over your health information, such as getting a copy of your medical record, are explained in our Notice of Privacy Practices. Florida residents, and anyone else with a question or request about their information, can contact us at info@estrellamedicalcenters.com. We may need to confirm your identity before acting on a request.

You can also clear the information stored in your browser at any time. See our Cookie policy for how.

This website and the program are for adults 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has given us information, contact us and we will delete it where the law allows.

Our Notice of Privacy Practices explains how we may use and disclose your health information and your rights under HIPAA. It is available at our clinics, and we will send you a copy if you ask at info@estrellamedicalcenters.com.

We may update this policy from time to time. When we do, we will change the date at the top of this page. If we make significant changes, we will give additional notice where appropriate.

Today the site has no analytics or advertising tracking. If we add tracking tools in the future, we will update this policy first and ask for your consent where the law requires it.

Questions about this policy or your information can be sent to:

• Email: info@estrellamedicalcenters.com
• Mail: Estrella Medical Centers, [Legal entity name], [Mailing address]
• Phone: [Phone number]