On this page
- 1. About this Policy
- 2. What We Collect
- 3. This Site Does Not Collect Health Information
- 4. Cookies & Analytics
- 5. How We Use Information
- 6. We Do Not Sell Your Information
- 7. Third-Party Services
- 8. Your Choices
- 9. Your State Privacy Rights
- 10. Security & Retention
- 11. Children's Privacy
- 12. Changes to this Policy
- 13. Contact
1. About this Policy
This policy explains how coloradohormoneandweightloss.com (the "Site") handles information. The Site is an informational website operated by Midwest Mind & Body Healthcare, a Nebraska healthcare practice owned by Kimberly Wohlwend, MSN, APRN, with its principal office at 131 N Washington Street, Suite A, Papillion, NE 68046. In this policy, "we," "us," and "our" mean that practice.
The Site describes telehealth weight-loss and hormone-therapy services available to Colorado residents. It is a marketing and education site only. It does not schedule appointments, take payment, or deliver care. When you click "Book Appointment," you leave this Site for our scheduling platform, which has its own privacy terms.
2. What We Collect
This Site has no forms. There is no contact form, no newsletter signup, no account, no comment box, and no chat widget. There is nothing on this Site that asks you to type in your name, email, phone number, or anything else. We therefore collect no personal information from you directly.
What is collected automatically, and only if you consent to analytics, is standard website measurement data:
- Approximate location (city or region level, derived from IP address — we have IP anonymization enabled)
- Browser type and version, operating system, and device type
- The page you arrived from (referring URL) and the pages you viewed on this Site
- Date, time, and general duration of your visit
This data is aggregated. We use it to understand which pages are useful, not to identify you.
3. This Site Does Not Collect Health Information
If you go on to become a patient of Midwest Mind & Body Healthcare, the privacy of your health information is governed by our HIPAA Notice of Privacy Practices, available at midwestmindandbodyhealthcare.com/privacy-policy. That notice — not this one — controls your medical records.
Please do not send health information by email. Standard email is not secure. Anything about your care should go through the patient portal you receive after booking.
4. Cookies & Analytics
This Site uses Google Analytics 4 to measure aggregate traffic. Analytics storage is set to denied by default and is only enabled if you consent. We do not use advertising cookies, retargeting pixels, or cross-site tracking of any kind.
| Cookie / Technology | Purpose | Category | Retention |
|---|---|---|---|
cookie_consent_v1 | Remembers your cookie choice so we do not ask on every page. | Strictly necessary | Until you clear it (localStorage) |
_ga, _ga_<id> | Google Analytics 4. Measures aggregate site usage. IP anonymization on; Google Signals and ad-personalization signals off. | Analytics (consent-based) | Up to 14 months |
5. How We Use Information
- To understand which pages people find useful and improve the Site.
- To measure whether our content reaches the Colorado residents it is written for.
- To keep the Site working correctly and secure.
- To comply with legal obligations.
We do not use this data to build profiles, to serve ads, or to make any decision about an individual.
6. We Do Not Sell Your Information
We do not sell personal information. We do not share it for cross-context behavioral advertising. We do not run targeted advertising or profiling on this Site. There is no data broker relationship of any kind.
7. Third-Party Services
- Google Analytics 4. Aggregate, privacy-configured website analytics, loaded only after you consent.
- Our website host. Serves the pages and keeps standard server logs (IP address, request time, page requested) for security and troubleshooting.
- Tebra. Our scheduling platform. You only reach it if you click "Book Appointment," and it is governed by its own privacy policy from that point forward.
We do not authorize any of these providers to use information from this Site for their own marketing.
8. Your Choices
- Decline analytics. Choose "Reject" on the cookie banner. Nothing on the Site stops working.
- Change your mind. Clear this site's storage in your browser settings and the banner will appear again.
- Global Privacy Control. If your browser sends a GPC signal, we honor it as an opt-out of sale and targeted advertising — neither of which we do anyway.
- Browser controls. Every major browser lets you block or delete cookies entirely.
- Google's own opt-out. Google offers a browser add-on that blocks Analytics on every site you visit.
9. Your State Privacy Rights
The Colorado Privacy Act (C.R.S. §§ 6-1-1301 et seq.) gives Colorado residents the right to access, correct, delete, and obtain a portable copy of their personal data, and to opt out of targeted advertising, the sale of personal data, and profiling with legal or similarly significant effects. It also gives you the right to appeal if a controller denies your request.
Like every comprehensive state privacy statute, the CPA applies only to businesses above certain size thresholds. A solo practice of our size falls below those thresholds and is not a "controller" under it. We are telling you that plainly rather than implying obligations we do not have.
What we do anyway. Regardless of whether a statute applies to us, if you contact us we will tell you what non-medical data we hold about you, correct it, or delete it. Given that this Site has no forms, in almost every case the honest answer is that we hold nothing that identifies you.
Medical records, if you become a patient, are a separate matter governed by HIPAA and state medical-records law, which set their own access and retention rules. Most state privacy acts expressly exempt HIPAA-regulated information for that reason.
State privacy law changes quickly. If Colorado law grants you a right after the date at the top of this page, we will honor it whether or not we have updated this section yet.
10. Security & Retention
The Site is served over HTTPS. We keep the small amount of data described above only as long as it is useful:
- Google Analytics data: up to 14 months.
- Web-server logs: typically up to 90 days.
- Your cookie preference: stored in your own browser until you clear it. We never see it.
No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.
11. Children's Privacy
This Site and the services it describes are for adults aged 18 and older. We do not knowingly collect personal information from children under 13, consistent with the Children's Online Privacy Protection Act. If you believe a child has provided information, contact us and we will delete it.
12. Changes to this Policy
We may update this policy. The "Last Updated" date at the top shows when the current version took effect. Material changes will be noted on this page for a reasonable period.
13. Contact
Midwest Mind & Body Healthcare
131 N Washington Street, Suite A
Papillion, NE 68046
Phone: 531-217-5257
Email: Info@midwestmindandbodyhealthcare.com (please do not include health information)
For questions about accessibility, see our Accessibility Statement. For the terms governing use of this Site, see our Terms of Use.