Privacy Policy
Legal
How Dr. Autoimmune handles personal and health-related information.
Last updated: October 12, 2026
Dr. Autoimmune (“we,” “us,” or “our”) is a functional medicine practice based in Boulder, CO. We provide care primarily through secure telehealth. This Privacy Policy describes how we collect, use, share, and protect information when you visit drautoimmune.com, contact us, book a discovery call or evaluation, use our patient portal, browse our wellness store links, or otherwise interact with our practice online.
This page is written for patients and website visitors in plain language. It is not a substitute for notices your care team may provide during clinical onboarding, and it does not create rights beyond those that apply under U.S. law and our professional obligations.
Who This Policy Covers
This policy applies to people who visit our public website, submit contact or booking forms, join educational webinars we host, shop through links to our online store, or become patients of the practice. Discovery calls are described elsewhere on the site as available to USA patients only; clinical telehealth is likewise delivered to patients in the United States.
Third-party sites we link to — for example Shopify at shop.drautoimmune.com, Zoom webinar registration pages, podcast hosts, or laboratory partners — have their own privacy practices. When you leave drautoimmune.com, review that provider’s policy for how they handle your data.
Information We Collect
Depending on how you interact with us, we may collect:
- Contact details such as name, email address, phone number, and mailing address when you submit a form, book online, or email us.
- Health-related information you choose to share in discovery calls, evaluations, messages, questionnaires, or through our patient portal — including symptoms, history, and lab results needed for care.
- Scheduling and account data associated with online booking tools and the patient portal used for messaging, results, and visit management.
- Technical data such as IP address, browser type, device information, and pages visited, collected through standard website logs and analytics tools.
- Communications you send to us by phone, email, or website forms, including npc@drautoimmune.com and +1 (303) 882-8447.
We collect only what is reasonably needed to respond to you, deliver care, operate the website, and meet recordkeeping requirements. You control how much health detail you share on public forms; once you are a patient, more detailed clinical information is gathered through the channels designed for care.
How We Use Information
- To schedule and provide telehealth consultations and ongoing care
- To respond to inquiries and coordinate labs or referrals when appropriate
- To operate, secure, and improve our website and booking tools
- To send practice updates you request (for example, newsletter signup)
- To support educational offerings such as live webinar registration when you opt in
- To meet legal, regulatory, and professional recordkeeping obligations
We do not use your health information for unrelated marketing without a lawful basis and, where required, your permission. Unsubscribe links are included in marketing emails so you can stop those messages at any time.
How We Share Information
We do not sell your personal information. We may share information with trusted service providers who help us operate the practice (for example, secure telehealth or booking platforms, laboratory partners such as those used for blood draws and extensive marker panels, payment processors, and our patient portal vendor), only as needed to perform those services.
We may also disclose information when required by law, to protect the rights or safety of patients or others, or in connection with a professional consultation you authorize. If you ask us to coordinate with another clinician — such as a rheumatologist, endocrinologist, or neurologist — we share only what is needed for that coordination.
Health Information & Telehealth
Because we provide clinical care, some information we maintain may be protected health information under applicable U.S. health privacy laws (including HIPAA, where it applies). We use administrative, technical, and physical safeguards appropriate to a telehealth medical practice. Video visits and portal access are intended to be conducted through secure systems; please use a private setting for appointments and protect your portal login credentials.
Telehealth from a Boulder-based practice means your information may be accessed by our clinical team while you are located elsewhere in the United States. Lab partners process specimens at their facilities under their own privacy and security programs. Ask your care team if you have questions about where a specific record lives.
Cookies & Analytics
Our website may use cookies or similar technologies for essential site function, analytics, and to understand how visitors use the site. You can control cookies through your browser settings. Disabling cookies may limit some site features, such as remembering preferences or completing certain forms smoothly.
Your Choices
- Request access to or correction of contact information we hold about you
- Ask questions about health records through the channels we provide for patients
- Unsubscribe from marketing emails using the link in those messages
- Contact us to discuss privacy concerns
- Limit what you share on public website forms until a secure care channel is available
Patients can typically manage much of their day-to-day communication through the patient portal. Portal login issues can be raised by phone or through our contact page.
Data Retention
We retain information for as long as needed to provide services, respond to inquiries, and meet professional and legal recordkeeping requirements that apply to a medical practice. Website analytics and marketing lists may follow shorter or different retention schedules than clinical records. If you have a specific retention question about your file, contact us and we will explain the relevant process.
Children
Our website is not directed to children under 13. We do not knowingly collect personal information from children under 13 through the public website. Guardians seeking care for a minor should contact the practice directly so we can use appropriate enrollment pathways.
Changes to This Policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will change when we do. Continued use of the site after an update constitutes notice of the revised policy for website visitors. Material changes that affect patients may also be communicated through practice channels when appropriate.
Contact Us
Dr. Autoimmune
Boulder, CO · Telehealth nationwide
Phone: +1 (303) 882-8447
Email: npc@drautoimmune.com
Or use our contact form. To begin care rather than ask a privacy question, start with a discovery call.