Privacy Policy
Effective Date: September 27, 2026
Last Updated: September 27, 2026
EndoRehab by Canary House Healing, LLC (“EndoRehab,” “Canary House,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information entrusted to us.
This Privacy Policy explains how we collect, use, disclose, and protect information when you visit EndoRehab.com (the “Website”), communicate with us, submit an application or form, purchase a product or service, or otherwise interact with EndoRehab.
This Privacy Policy applies to information collected through the Website and our general business operations. Information collected as part of a healthcare relationship may also be subject to additional privacy protections, professional confidentiality requirements, informed-consent documents, or notices of privacy practices.
1. Information We Collect
Depending on how you interact with EndoRehab, we may collect the following categories of information.
Personal Information
We may collect information you voluntarily provide, including:
Name
Email address
Telephone number
Mailing or billing address
Date of birth or age
State or geographic location
Account or login information
Appointment and scheduling information
Payment and transaction information
Communications you send to us
Information submitted through applications, questionnaires, contact forms, or intake forms
Health and Wellness Information
If you apply for or participate in EndoRehab services, you may choose or be asked to provide information concerning your health, including:
Symptoms and diagnoses
Medical and surgical history
Endometriosis history
Medications and supplements
Allergies
Laboratory results
Treatment history
Menstrual, hormonal, reproductive, or metabolic information
Mental and behavioral health information
Pain, fatigue, sleep, nervous-system, and functional symptoms
Lifestyle and nutrition information
Healthcare-provider information
Goals for treatment or rehabilitation
We collect this information when reasonably necessary to evaluate eligibility, provide requested services, coordinate care, or fulfill another purpose disclosed to you.
Payment Information
When you purchase a service or product, payment information may be collected and processed by third-party payment processors.
We generally do not directly store complete credit or debit card numbers. Payment processors handle financial information according to their own privacy and security practices.
Automatically Collected Information
When you use the Website, certain technical information may be collected automatically, including:
IP address
Browser type
Device type
Operating system
Pages viewed
Referring website or source
Approximate geographic information derived from an IP address
Dates and times of Website activity
Interactions with Website features
Cookies and similar technologies
We may use this information to operate the Website, understand how visitors use it, improve performance, measure marketing effectiveness, and protect against fraud or misuse.
2. How We Use Information
We may use information we collect to:
Respond to inquiries
Review applications for EndoRehab services
Determine which services may be appropriate
Schedule consultations and appointments
Provide purchased services or products
Review laboratory information
Support care coordination
Communicate about programs or services
Process payments
Provide customer support
Maintain business and clinical records
Improve our Website, services, and educational resources
Understand Website and marketing performance
Send educational or marketing communications when permitted
Maintain security and prevent fraud
Meet professional, regulatory, accounting, tax, and legal obligations
Enforce our agreements and policies
When information is collected in connection with healthcare services, it may also be used for treatment, healthcare operations, care coordination, billing, documentation, and other legally permitted healthcare purposes.
3. Health Information and HIPAA
Some information you provide to EndoRehab may constitute sensitive health information.
However, not every piece of health-related information submitted through a website is necessarily “protected health information” under the Health Insurance Portability and Accountability Act (“HIPAA”).
Whether HIPAA applies depends on the entity receiving the information, the context in which it is collected, and applicable law.
When information is subject to HIPAA or another healthcare privacy law, we handle that information in accordance with the requirements applicable to the relevant service and entity.
Healthcare services may also be provided or supported by independent healthcare professionals, laboratories, pharmacies, telehealth providers, or other entities with their own legal privacy obligations and privacy notices.
If you receive a separate Notice of Privacy Practices or privacy consent in connection with clinical care, that document may provide additional information about how your protected health information is used and disclosed.
4. Applications and Intake Forms
Information submitted through an application, intake form, health questionnaire, or similar process may include sensitive health information.
We use this information to evaluate your needs, determine whether our services may be appropriate, prepare for consultations, and facilitate services you request.
Submitting an application does not necessarily establish a healthcare-provider relationship.
Please provide sensitive information only through forms or communication channels we designate for that purpose.
5. Email and Electronic Communications
If you provide your email address or telephone number, we may use it to communicate with you regarding inquiries, appointments, purchases, programs, account matters, educational information, or other relevant services.
Ordinary email and text messaging may not provide the same security protections as dedicated healthcare communication systems.
Do not use ordinary email, Website contact forms, social media direct messages, or other nonclinical channels for emergencies.
Where appropriate, we may direct clients to a designated platform for sensitive clinical communications.
6. Marketing Communications
If you subscribe to our mailing list, download certain resources, request information, purchase a product, or otherwise provide appropriate consent, we may send you educational information, practice updates, announcements, or marketing communications.
You may unsubscribe from marketing emails using the unsubscribe link included in those messages.
Unsubscribing from marketing communications does not prevent us from sending transactional, administrative, appointment-related, billing, security, or service communications that are necessary to manage an existing relationship or transaction.
We do not use protected health information for marketing in a manner prohibited by applicable healthcare privacy law.
7. Cookies and Analytics
The Website may use cookies, pixels, analytics tools, and similar technologies to operate the Website and understand visitor behavior.
These technologies may help us:
Remember Website preferences
Understand Website traffic
Identify how visitors find the Website
Measure engagement with Website content
Evaluate advertising or marketing campaigns
Improve Website functionality
Detect fraud or security threats
Depending on the tools used on the Website, third-party technology providers may receive certain information about your device or Website activity.
Where required by applicable law, we will obtain appropriate consent before using nonessential cookies or similar technologies.
You may also be able to control cookies through your browser settings.
8. Advertising and Tracking Technologies
We may use advertising or analytics services to understand the effectiveness of our marketing and to reach people who may be interested in EndoRehab.
Because EndoRehab operates in the healthcare space, we recognize that information about an individual's health interests can be sensitive.
We do not knowingly authorize advertising platforms to receive protected health information for advertising purposes in violation of applicable law.
We also seek to limit the transmission of sensitive information through advertising and tracking technologies used on pages or systems associated with healthcare services.
The specific technologies used on our Website may change over time.
9. How We Share Information
We may share information with service providers when reasonably necessary to operate our business or provide requested services.
These may include:
Website hosting and technology providers
Scheduling platforms
Payment processors
Email and communication platforms
Secure client-management platforms
Laboratories
Pharmacies
Healthcare professionals
Telehealth providers
Supplement fulfillment platforms
Professional consultants
Accounting and bookkeeping providers
Attorneys and compliance professionals
Analytics and technology providers
We provide or permit access to information only as reasonably necessary for the applicable purpose and subject to appropriate contractual, professional, or legal safeguards where required.
Some third parties operate independently and process information according to their own privacy policies and legal obligations.
10. We Do Not Sell Health Information
We do not sell protected health information.
We do not sell individually identifiable health information to data brokers.
If our use of a particular technology or business arrangement would legally constitute a “sale” or “sharing” of personal information under an applicable state privacy law, we will provide any notices, choices, or opt-out rights required by that law.
11. Laboratories, Pharmacies, and Healthcare Providers
EndoRehab may facilitate your interaction with independent laboratories, pharmacies, healthcare professionals, or other healthcare organizations.
Information necessary to provide those services may be exchanged with those organizations.
These organizations may maintain their own records about you and may be independently responsible for complying with healthcare privacy laws.
Their handling of information is also governed by their own privacy notices and policies.
12. Third-Party Websites and Platforms
Our Website may contain links to third-party websites or integrate with external platforms.
We are not responsible for the privacy practices of third parties that we do not control.
We encourage you to review the privacy policies of third-party services before providing personal information to them.
13. Data Security
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information from unauthorized access, use, alteration, loss, or disclosure.
Where legally required for protected health information, additional safeguards may apply.
No method of electronic transmission or storage is completely secure, however, and we cannot guarantee absolute security.
You are also responsible for protecting passwords, account credentials, and devices you use to access our services.
14. Data Retention
We retain personal information for as long as reasonably necessary to fulfill the purposes for which it was collected and to comply with applicable legal, professional, tax, accounting, record-retention, and regulatory requirements.
Clinical records may be subject to specific retention requirements that differ from ordinary Website or business records.
When information is no longer reasonably required, we may delete, anonymize, or securely dispose of it as permitted by law.
15. Your Privacy Rights
Depending on where you live and the laws applicable to your information, you may have rights concerning your personal information.
These may include the right to request:
Access to certain personal information
Correction of inaccurate information
Deletion of certain information
A copy of certain information
Information about categories of data collected or disclosed
Restriction of certain processing
Withdrawal of consent where processing is based on consent
Opt-out from certain forms of targeted advertising, sale, or sharing
These rights are not absolute and may be subject to exceptions, including healthcare-record retention requirements and other legal obligations.
We may need to verify your identity before processing a privacy request.
16. State-Specific Privacy Rights
Residents of certain U.S. states may have additional privacy rights under state consumer privacy laws.
The availability and scope of those rights depend on the jurisdiction, the type of information involved, and whether the applicable law covers Canary House Healing, LLC or the particular processing activity.
Where required, we will honor applicable rights concerning access, correction, deletion, portability, targeted advertising, sale or sharing of personal information, or other covered processing.
Health information regulated by HIPAA or other healthcare privacy laws may be exempt from some state consumer privacy laws while remaining subject to separate healthcare privacy protections.
17. Consumer Health Data
Certain states have enacted laws specifically regulating “consumer health data,” which may apply more broadly than HIPAA.
Where such laws apply, we will collect, use, and disclose consumer health data in accordance with applicable requirements.
We will not sell consumer health data or use it for purposes requiring separate authorization without obtaining the authorization required by applicable law.
Additional disclosures or a separate Consumer Health Data Privacy Policy may be provided if required based on where we operate, where our clients reside, or how particular services are structured.
18. Children's Privacy
EndoRehab's Website and general services are not directed toward children under 13.
We do not knowingly collect personal information online from children under 13 without legally required parental or guardian authorization.
Certain services may have additional age requirements.
If you believe a child has provided personal information to us improperly, please contact us so we can evaluate and address the situation.
19. Social Media
Information you post publicly on social media is not private simply because you tag, mention, follow, or communicate with EndoRehab or Canary House.
Please do not submit sensitive medical information through public comments or other public social-media features.
Direct messages on social media should not be used for emergency or sensitive clinical communications.
20. Testimonials and Client Stories
We will obtain authorization or other appropriate permission before using identifiable client health information in testimonials, case studies, photographs, videos, or marketing materials when required by applicable law.
Permission to use identifiable health information for marketing purposes is voluntary and is separate from eligibility for care.
De-identified or aggregated information may be used for educational, operational, research, or informational purposes when permitted by law.
21. Business Transfers
If Canary House Healing, LLC undergoes a merger, acquisition, reorganization, sale of assets, or similar business transaction, information may be transferred as part of that transaction where legally permitted.
Any protected health information involved in such a transaction remains subject to applicable healthcare privacy requirements.
22. Legal Disclosures
We may disclose information when reasonably necessary to comply with applicable law, regulation, subpoena, court order, professional obligation, or other valid legal process.
We may also disclose information when permitted by law to protect the rights, safety, or security of EndoRehab, our clients, another person, or the public.
Additional restrictions may apply to certain categories of sensitive health information.
23. International Visitors
EndoRehab is based in the United States.
If you access the Website from outside the United States, your information may be transferred to and processed in the United States, where privacy laws may differ from those in your country.
Availability of clinical services outside the United States is subject to applicable professional, licensing, and legal restrictions.
24. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our services, technology, vendors, business practices, or legal obligations.
When we make changes, we will update the “Last Updated” date at the top of this page.
Material changes may be communicated through additional notice when appropriate or legally required.
25. Contact Us
If you have questions about this Privacy Policy or would like to submit a privacy request, contact:
EndoRehab by Canary House Healing, LLC
info@canaryhousehealing.com
Website: EndoRehab.com