Privacy Policy
Effective Date
Last updated: August 25, 2025
Scope and Controller
This Privacy Policy describes how Bonnie Doon HealthNet ("we," "us," or "our") collects, uses, discloses, and safeguards personal information when you access or use bonniedoon.net and related services in the United States of America. This Policy applies to information collected online and offline from website visitors, subscribers, and individuals who contact us.
The data controller is: Bonnie Doon HealthNet, owned by Tiffany Ravenshaw, 449 Broadway, Cambridge, MA 02138, United States.
Information We Collect
Categories of Personal Information
- Identifiers: name, email address, IP address, device identifiers, and cookies or similar identifiers.
- Contact Information: postal address and phone number if you provide them.
- Internet or Network Activity: browsing history on our site, pages viewed, referring/exit pages, timestamps, and interactions with site features.
- Device and Technical Data: browser type, operating system, screen resolution, language settings, and approximate geolocation derived from IP address.
- User Content: messages or information you submit via forms or email, including inquiries and feedback.
- Inferences: preferences or interests inferred from your interactions with our services.
- Sensitive Personal Information: we do not seek to collect sensitive personal information (e.g., precise geolocation, health diagnoses, payment card numbers, government IDs). Please do not submit sensitive information to us. If you voluntarily provide such information, we will handle it in accordance with this Policy and applicable law.
Sources of Personal Information
- Directly from you: when you subscribe to communications, submit a contact form, or communicate with us.
- Automatically: through cookies, pixels, and similar technologies when you use our website.
- Service providers and partners: analytics, hosting, security, and customer support providers.
How We Use Personal Information
- To operate, maintain, and improve our website, content, and user experience.
- To respond to inquiries, provide customer service, and send administrative communications.
- To send newsletters or informational updates when you opt in, and to manage your preferences.
- To analyze usage, measure performance, and conduct research to enhance our content and services.
- To protect against, investigate, and deter fraudulent, unauthorized, or illegal activity.
- To comply with legal obligations, enforce our terms, and exercise or defend legal claims.
Cookies and Tracking Technologies
We use cookies, web beacons, and similar technologies to enable core site functionality, remember preferences, analyze traffic, and support limited advertising or content personalization.
- Strictly Necessary Cookies: enable essential website features and security.
- Functional Cookies: remember preferences to improve usability.
- Analytics Cookies: help us understand how visitors use our site to improve it.
- Advertising/Personalization Cookies: may be used to deliver or measure content relevance and limited targeted advertising.
Your Choices: You can manage cookies through your browser settings to accept, block, or delete cookies. Some features may not function correctly if cookies are disabled. We honor browser-based opt-out preference signals where legally required, including Global Privacy Control (GPC), for "sale" or "sharing" of personal information as defined under applicable law.
Do Not Track: Our services currently do not respond to Do Not Track (DNT) signals, but we process legally recognized opt-out preference signals as described above.
Disclosure of Personal Information
- Service Providers: We disclose personal information to trusted vendors that perform services on our behalf, such as hosting, analytics, security, email delivery, and customer support. These providers are contractually restricted from using personal information for purposes other than providing services to us.
- Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, personal information may be transferred as part of the transaction, subject to this Policy.
- Legal and Safety: We may disclose information when required by law or legal process, to respond to lawful requests, or to protect the rights, property, or safety of our users, the public, or our organization.
- Advertising/Personalization Partners: Where permitted by law, we may disclose limited information (e.g., cookie IDs or device data) to support advertising measurement or personalization. You may opt out of such sale or sharing as described in the Your Privacy Rights and Do Not Sell or Share sections.
We do not knowingly sell or share the personal information of individuals we know to be under 16 years of age.
Data Retention
We retain personal information for as long as necessary to fulfill the purposes described in this Policy, including to comply with legal, accounting, or reporting obligations, resolve disputes, and enforce agreements. We consider the nature and sensitivity of the information, potential risk of harm, and applicable legal requirements. Where feasible, we will de-identify or aggregate data or delete it when no longer needed.
Security
We implement reasonable administrative, technical, and physical safeguards designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Your Privacy Rights
Rights for U.S. Residents
Subject to eligibility and applicable law (including the California Consumer Privacy Act as amended by the CPRA, and similar state laws in Colorado, Connecticut, Virginia, Utah, and others), you may have the right to:
- Access: request to know the categories and specific pieces of personal information we have collected, used, disclosed, sold, or shared.
- Correction: request correction of inaccurate personal information.
- Deletion: request deletion of personal information, subject to legal exceptions.
- Portability: obtain a portable copy of certain personal information.
- Opt Out of Sale/Sharing/Targeted Advertising: direct us not to sell or share personal information or use personal information for targeted advertising as defined by applicable law.
- Limit Use of Sensitive Personal Information: where applicable, request limits on certain processing of sensitive personal information (we do not use sensitive personal information to infer characteristics).
How to Exercise Your Rights
- Email: Submit requests to [email protected].
- Mail: Bonnie Doon HealthNet, Attn: Privacy, 449 Broadway, Cambridge, MA 02138, United States.
Verification: We will verify your identity by matching information you provide with our records. Depending on the request type, we may ask for additional information or a signed declaration. Authorized Agents: If you use an authorized agent, we may require proof of authorization and verification of your identity.
Timing: We aim to respond within 45 days of receiving a verifiable request, with a possible 45-day extension where reasonably necessary. For appeals (where available), we will respond within 60 days.
Appeals Process
If we deny your privacy request, you may appeal by emailing [email protected] with the subject line "Privacy Request Appeal" and an explanation of your concerns. We will provide a written decision and the reasons for it within the time required by applicable law.
Non-Discrimination
We will not discriminate against you for exercising your privacy rights, including by denying goods or services, charging different prices, or providing a different level or quality of services, except to the extent permitted by law (e.g., if a difference is reasonably related to the value of your data).
California Notice at Collection
We provide the following notice at or before the point of collection for California residents:
- Categories Collected: Identifiers; Contact Information; Internet/Network Activity; Device and Technical Data; User Content; Inferences. We do not seek to collect Sensitive Personal Information.
- Sources: Directly from you; automatically through your interactions with our site; service providers and partners.
- Purposes: To operate and improve services; communicate with you; security and fraud prevention; analytics and research; legal compliance.
- Retention: Retained for the duration necessary to fulfill the purposes described above and as required by law, then deleted or de-identified where feasible.
- Disclosure for Business Purposes: We disclose information to service providers under contracts restricting use.
- Sale/Sharing: We may "sell" or "share" (as defined by California law) limited personal information, such as cookie or device identifiers, with advertising or analytics partners to measure or personalize content. You may opt out as described in the Do Not Sell or Share section. We do not knowingly sell or share the personal information of consumers under 16.
- Sensitive Personal Information: We do not use or disclose sensitive personal information to infer characteristics or for purposes other than those permitted by law.
Do Not Sell or Share My Personal Information
You may direct us to stop selling or sharing your personal information for cross-context behavioral advertising by sending a request to [email protected] and by adjusting your cookie preferences in your browser. We also honor Global Privacy Control (GPC) signals as an opt-out request for the browser or device on which the signal is active, to the extent required by law.
Children's Privacy
Our services are intended for a general audience and are not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will delete it as required by the Children’s Online Privacy Protection Act (COPPA).
Email Communications and CAN-SPAM Compliance
If you subscribe to our emails, you may receive newsletters or updates. You can opt out at any time by using the unsubscribe instructions in our emails or by contacting us at [email protected]. We will process opt-out requests promptly as required by the CAN-SPAM Act.
HIPAA and Health Information
Bonnie Doon HealthNet provides health and pharmaceuticals information for educational purposes and is not a healthcare provider or health plan. We are generally not a "covered entity" or "business associate" under the Health Insurance Portability and Accountability Act (HIPAA). Do not submit protected health information (PHI). If you choose to share health-related information with us, we will handle it in accordance with this Policy and applicable law but such information may not be subject to HIPAA protections.
International Users
Our website is operated in the United States. If you access our services from outside the United States, you understand that your information may be transferred to, stored, and processed in the United States where data protection laws may differ from those in your jurisdiction.
Third-Party Links and Services
Our website may reference third-party content or services. We are not responsible for the privacy practices of such third parties. We encourage you to review their privacy policies before providing information to them.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. When we make material changes, we will revise the "Last updated" date and take additional steps as required by law.
Contact Information
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:
Bonnie Doon HealthNet
Owner: Tiffany Ravenshaw
449 Broadway, Cambridge, MA 02138, United States
Email: [email protected]
Related Post
Type your Comment
Your E-mail Address is secured. Required Fields are marked (*)