theharacenter.com
This policy explains how Hara Center, LLC ("Hara Center," "we," "us," "our") handles information collected through our website at theharacenter.com. It covers the website only.
This is not our Notice of Privacy Practices. Once you become a patient, the health information we create and hold about your care is protected health information under HIPAA, and it is governed by our Notice of Privacy Practices, which is posted on this website and available at our front desk. Where the two documents differ about protected health information, the Notice of Privacy Practices governs.
the website itself collects nothing from you
There is no form on this website. There is no account, no login, no patient portal, and no payment processing. You cannot submit information to us through any page here.
information you send us by email or telephone
If you email us at hello@theharacenter.com or call us, we receive and keep what you send: your name, your email address or telephone number, and whatever you choose to write or say. You decide what that is.
information collected automatically when you visit
Our website host records standard technical information when a page loads: your IP address, browser and device type, the pages you view, the date and time of your visit, and the website you came from. We use this to operate the site and keep it secure.
Our email is hosted by a provider that has signed a Business Associate Agreement with us, and messages are stored under that agreement. That protects your information once it reaches us. It does not make the journey between your email provider and ours private in every case: email is encrypted in transit only when both providers support encryption, and neither we nor you can control that on every message.
So please do not send us your medical history, laboratory results, medication lists, photographs of a medical concern, or any question that needs a clinical answer. Tell us how to reach you and we will follow up by telephone or through a secure channel. If you would rather we correspond with you by ordinary email anyway, tell us and we will — patients may ask us to do that, and we will confirm that you understand the risk before we start.
We do not sell your personal information. We do not rent or trade it. We do not share it with third parties for their own advertising or marketing.
Where a service provider will handle protected health information on our behalf, we require a signed Business Associate Agreement before that happens.
As of the effective date of this policy, the website uses only the cookies and technical logging necessary for the site to load, function, and stay secure. We do not run advertising pixels, remarketing tags, or third-party analytics tools on this site. If we add analytics or advertising tools in the future, we will update this policy to say what they are and what they collect, before or at the time those tools go live. You can also set your browser to refuse cookies; parts of the site may not work correctly if you do.
Some browsers can send a "Do Not Track" signal. There is no common industry standard for how a website should respond to that signal, and we do not currently respond to it.
We do not currently allow third parties to collect personally identifiable information about your online activities over time and across different websites when you visit theharacenter.com.
Our site may link to other websites, such as a laboratory, a supplement dispensary, or an educational resource. We do not control those sites and are not responsible for their content or their privacy practices. Read their policies before giving them information.
You may email us at hello@theharacenter.com or write to us at the address below to ask what information we hold from an inquiry you sent us, to correct it, or to ask us to delete it. We will respond within 30 days. We may need to verify who you are before we act.
If you are a patient, your rights in your medical record — access, amendment, an accounting of disclosures, restrictions, and confidential communications — are handled under our Notice of Privacy Practices rather than this policy. We may keep information where a law, a professional obligation, or a legitimate business record requires us to.
This website is not directed to children under 13, and it collects nothing from anyone. If you believe a child has emailed us personal information, contact us and we will delete it. Care for patients under 18 at the practice is handled at the clinic with parent or guardian involvement.
We use administrative, physical, and technical safeguards appropriate to the size of our practice: our website is served over an encrypted connection, our email is hosted under a Business Associate Agreement with multi-factor authentication on staff accounts, and only named staff may read the practice inbox. No method of transmission over the internet and no method of electronic storage is completely secure, and we cannot guarantee absolute security.
If you ask us to add you to a mailing list, every message we send will include a way to unsubscribe. We do not send marketing text messages to your telephone number unless you have separately agreed in writing to receive them.
We may update this policy. The current version is always posted on this page with its effective date. If we make a material change in how we handle information, we will note it on the website for at least 30 days.
If you have a concern about how your information has been handled, contact us at the address or email above and we will look into it. Patients' privacy rights, and how to raise a concern about them, are set out in our Notice of Privacy Practices. We will not retaliate against anyone for raising a concern.
Effective date: August 31, 2026