Privacy Policy
Last Updated: July 26, 2026
Restora Functional Health LLC (“we,” “us,” “our,” or “Restora”) operates restorafunctional.com and related digital services (collectively, the “Services”). This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and the rights you have regarding it.
By using our Services, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use our Services.
1. Who We Are and What We Do
Restora Functional Health LLC provides functional health coaching services focused on digestive health. Our practitioner may be referred to as a “Functional Health Practitioner” specializing in digestive health — this title describes a professional identity and area of specialization, not a professional license, medical degree, or clinical credential. Any additional degrees, certifications, or credentials referenced on our website or elsewhere (including but not limited to PhD, MBA, FDN-P, CHNP, or board certification through the American Association of Drugless Practitioners) reflect academic and private-certification achievements and do not constitute a license to practice medicine or healthcare in Colorado or any other state. Restora Functional Health LLC is not a medical practice, and our practitioners are not physicians, nurse practitioners, dietitians, or licensed healthcare providers acting in a clinical capacity.
We are not a HIPAA “covered entity” or “business associate.” The Health Insurance Portability and Accountability Act (HIPAA) generally applies to healthcare providers who diagnose, treat, or bill insurance, along with their business associates. Because we do not diagnose or treat medical conditions or bill insurance for clinical services, HIPAA’s Privacy Rule does not govern our handling of your information. Instead, we protect your information under this Privacy Policy and applicable state privacy law, described below.
Nothing in our Services should be understood as a substitute for medical advice, diagnosis, or treatment from a licensed healthcare provider. Please see our Disclaimer for more detail on the scope of our services.
2. Information We Collect
a. Information You Provide Directly
- Contact information: first name, last name, email address, phone number, physical/mailing address
- Billing and payment information: processed securely through third-party payment processors; we do not store full payment card numbers on our own systems
- Health coaching intake information: health goals, symptom history, lifestyle information, and related details you voluntarily submit through intake forms, consultations, or client portals
- Communications: messages you send us through contact forms, email, or client messaging tools
b. Information Collected Automatically
When you visit our website, we automatically collect certain data through cookies and similar technologies, including:
- IP address
- Browser type and version
- Device identifiers
- Pages visited, time spent, and referring/exit pages
- Approximate geographic location (derived from IP address)
c. Information From Third Parties
We may receive limited information from scheduling, payment, or client-management platforms we use to operate the business (for example, confirming that an invoice was paid, or that an appointment was booked). If you complete lab testing recommended through Fullscript, we may also receive your lab results from that platform to inform your coaching program.
3. Sensitive Data and Your Consent
Under the Colorado Privacy Act (CPA), information revealing a physical or mental health condition is considered “sensitive data,” regardless of whether it is collected by a licensed medical provider or a health coach. Because our intake process involves health-related goals and history, some of the information you share with us qualifies as sensitive data.
We do not collect sensitive data from you without your consent. By voluntarily completing an intake form, checking a consent box, or otherwise knowingly submitting health-related information to us, you are providing affirmative, opt-in consent for us to collect and process that data for the purposes described in this policy. You may withdraw this consent at any time (see Section 8), though withdrawing consent may limit our ability to continue providing coaching services to you.
We do not use your sensitive data for any purpose beyond delivering, improving, and administering our coaching services, unless we obtain your separate, explicit consent.
4. How We Use Your Information
We use collected information to:
- Provide, personalize, and improve our health coaching Services
- Schedule and manage consultations and coaching sessions
- Order lab testing and supplements through third-party platforms, and interpret results to build your coaching program
- Process payments and manage billing
- Respond to inquiries and provide customer support
- Send transactional communications (appointment confirmations, account notices)
- Send marketing communications — only if you have opted in, and you may opt out at any time
- Monitor, maintain, and secure our website and systems
- Comply with legal obligations
We do not use your health information for advertising, do not sell it, and do not share it with data brokers.
5. How We Share Your Information
We do not sell, rent, or trade your Personal Data. We share information only with service providers who help us operate our business, under confidentiality obligations consistent with this policy:
| Category | Purpose |
|---|---|
| Payment processors | Securely process payments |
| Scheduling / client-management platforms | Book appointments, manage intake forms and coaching records |
| Email service providers | Send transactional and (opted-in) marketing communications |
| Hosting and analytics providers | Operate the website, monitor performance and traffic |
| Fullscript (lab testing and supplement platform) | Order lab testing and supplements based on your health goals, and receive results to inform your coaching program |
| Reference laboratories and phlebotomy partners (e.g., Quest Diagnostics, LabCorp, GetLabs) | Collect specimens and generate lab results for blood-based testing, which are then routed to Fullscript |
Lab testing and supplements (Fullscript): We use Fullscript exclusively for lab testing and supplement recommendations. Because we are not licensed physicians, qualifying lab orders are reviewed and authorized by a licensed clinician within Fullscript’s Authorization Network before being sent to you. You create your own Fullscript account to complete required intake questions and pay directly; for supplement orders, you enter your own shipping address and payment information directly into Fullscript (including setting up autoship, if desired), which we do not handle or store — we only provide your name and email to Fullscript to generate your account. Fullscript’s fulfillment centers and shipping couriers then deliver your order. Lab results are returned to us through Fullscript, where we review them, prepare your protocol, and release the report to you. Fullscript’s own privacy policy governs its handling of your data once you interact with it directly, in addition to this Privacy Policy governing our own use of your information.
We may also disclose information if required by law, to comply with legal process, or to protect the rights, property, or safety of Restora Functional Health LLC, our clients, or others.
We do not engage in “targeted advertising” or “sale” of data as those terms are defined under the Colorado Privacy Act. If this changes in the future, we will update this policy and provide the required opt-out mechanisms before doing so.
6. Cookies and Tracking Technologies
We use cookies and similar technologies to operate our website, understand usage, and (where applicable) support opted-in marketing.
Your browser-based choices: You can configure your browser to block or delete cookies; some site features may not function properly without them.
Universal opt-out signals: We honor Global Privacy Control (GPC) and other recognized universal opt-out mechanisms as required under the Colorado Privacy Act. If your browser sends a GPC signal, we will treat it as a valid request to opt out of any applicable sale, sharing, or targeted advertising of your data.
7. Data Retention
We retain Personal Data only as long as necessary to provide our Services, meet legal or accounting obligations, and resolve disputes:
- Active client records: retained for the duration of the coaching relationship and for a period afterward as needed for recordkeeping
- Billing records: retained as required by applicable tax and accounting law
- Marketing contact information: retained until you unsubscribe or request deletion
When information is no longer needed, we delete or de-identify it in accordance with our internal retention practices.
8. Your Privacy Rights
We work with clients across the United States, not only Colorado. While the Colorado Privacy Act (CPA) is the primary framework we build our practices around, we extend the same core rights to clients in other states, consistent with each state’s applicable law. Depending on where you live, you may have the right to:
- Confirm and access the Personal Data we hold about you
- Correct inaccurate Personal Data
- Delete your Personal Data
- Data portability — obtain a copy of your data in a portable format
- Opt out of targeted advertising, the sale of data, or profiling that produces legal or similarly significant effects (we currently do not engage in these practices)
- Withdraw consent for processing of sensitive data at any time
Non-discrimination: We will not deny you services, charge you a different price, or provide a lesser level of service because you exercised any privacy right described in this policy.
Authorized agents: You may designate an authorized agent to submit a privacy request on your behalf. We may require proof of the agent’s authorization and may still need to verify your identity directly before completing the request.
Identity verification: To protect your data, we will verify your identity before fulfilling access, correction, deletion, or portability requests — typically by confirming details matching our records (such as your name and the email address associated with your account). We may decline a request if we cannot reasonably verify the requester’s identity.
How to exercise your rights: Submit a request to the contact information in Section 12. We will respond within the timeframe required by applicable law (commonly 45 days, with a possible one-time 45-day extension for complex requests).
Right to appeal: If we decline to act on your request, you may appeal our decision by replying to our denial with “Appeal” and a brief explanation. We will respond to appeals within 60 days. If your appeal is denied, you may contact your state’s Attorney General or applicable privacy regulator.
State-Specific Notes
- California residents: California’s Consumer Privacy Act (CCPA/CPRA) grants similar rights and additionally provides a private right of action allowing consumers to sue directly in the event of certain data breaches. We do not sell or “share” personal information as defined under California law.
- Nevada residents: Nevada law allows you to submit a verified request opting out of the sale of certain covered information. We do not sell covered information, but you may still submit such a request to the contact information in Section 12, and we will confirm your opt-out status in writing.
- All other states: If your state has enacted a comprehensive consumer privacy law, we will honor valid requests to the extent required by that law, using the process described above.
9. International Visitors
Restora Functional Health LLC markets its Services exclusively within the United States and does not direct advertising or marketing toward audiences outside the U.S. Our Services are hosted, and Personal Data is processed and stored, in the United States.
If you are accessing our Services from outside the United States — including from the European Union, United Kingdom, Canada, or elsewhere — please be aware that any Personal Data you provide will be transferred to and processed in the United States, where privacy laws may differ from those in your jurisdiction. By voluntarily using our Services from outside the U.S., you acknowledge and consent to this transfer and processing.
If you contact us from outside the United States regarding your Personal Data, we will work with you in good faith to address your request consistent with this Privacy Policy.
10. Children’s Privacy
Our Services are not directed to, and are not intended for use by, anyone under the age of 18. We do not knowingly collect Personal Data from children. If you believe a child has provided us with Personal Data, please contact us so we can delete it.
11. Data Security
We use commercially reasonable safeguards — including SSL encryption in transit and access controls on our systems — to protect your Personal Data. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
In the event of a data breach affecting your Personal Data, we will notify you in accordance with the Colorado Consumer Protection Act’s breach notification requirements and other applicable law.
12. Contact Us
If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at:
Restora Functional Health LLC
Email: info@restorafunctional.com
Mailing Address: [Insert Commercial Registered Agent Street Address, Suite #, City, CO, Zip]
13. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will post any changes on this page and update the “Last Updated” date above. Material changes affecting how we handle sensitive data will be accompanied by a request for renewed consent where required by law.