1. Introduction

This Consumer Privacy Policy applies to individuals ("consumers" or "clients") who interact with healthcare professionals using the Farela platform. It supplements our general Privacy Policy and explains how your personal information is handled when your healthcare provider uses Farela to manage their practice.

2. Who Controls Your Data

Your healthcare provider (the dietitian or nutrition specialist you work with) is the primary controller of your personal and health information. Farela acts as a data processor, handling your data on behalf of your provider to deliver the Service. For questions about how your data is used, please contact your healthcare provider directly.

3. Information Collected About You

When your healthcare provider uses Farela, the following information about you may be processed:

Contact Information: Name, email address, phone number
Appointment Data: Scheduling details, appointment history, and session notes
Health Information: Dietary assessments, health goals, medical history as provided to your practitioner
Communication Records: Messages and correspondence through the platform
Payment Information: Billing details for services rendered

4. How Your Information Is Used

Your information is used to:

Facilitate appointment scheduling and reminders
Enable your provider to deliver personalized nutrition care
Process payments for services
Send appointment confirmations and follow-up communications
Maintain accurate health and session records

5. Your Rights Under CCPA / CPRA

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

Right to Know: You can request details about the personal information collected about you
Right to Delete: You can request deletion of your personal information
Right to Correct: You can request correction of inaccurate personal information
Right to Opt-Out: You can opt out of the sale or sharing of your personal information
Right to Non-Discrimination: You will not be discriminated against for exercising your privacy rights

We do not sell or share your personal information for cross-context behavioral advertising.

6. Your Rights Under Other State Laws

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and other states with consumer privacy laws may have additional rights including the right to access, correct, delete, and port their data, as well as the right to opt out of targeted advertising and profiling.

7. Health Information Protections

Health information processed through Farela may be protected under HIPAA (Health Insurance Portability and Accountability Act). Farela maintains HIPAA-compliant safeguards including encryption, access controls, audit logging, and Business Associate Agreements with healthcare providers.

8. Data Security

We protect your information using industry-standard security measures including:

End-to-end encryption for data in transit
AES-256 encryption for data at rest
Regular security assessments and penetration testing
Strict access controls and authentication
Continuous monitoring and incident response procedures

9. Data Retention

Your data is retained for as long as your healthcare provider maintains an active account and as required by applicable healthcare record retention laws. When data is no longer needed, it is securely deleted in accordance with our data retention policies.

10. How to Exercise Your Rights

To exercise any of your privacy rights, you may:

Contact your healthcare provider directly
Contact Farela at the address below

We will respond to verified requests within 45 days as required by applicable law.

11. Contact Us

If you have questions about this Consumer Privacy Policy, please contact us at:

Farela
44 Montgomery St
San Francisco, CA 94104