Privacy Policy

1. Introduction

BioX Unlimited LLC d/b/a Function Bone Health (“Company,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website at https://functionbonehealth.com, use our services, or otherwise interact with us.

By using our services or providing your information to us, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described herein, please do not use our services.

2. Information We Collect

2.1 Information You Provide Directly

We collect information that you voluntarily provide when you interact with us, including:

• •Contact Information: Name, email address, phone number, and mailing address provided when booking an appointment, contacting us, or joining our waitlist.
• •Demographic Information: Age, date of birth, gender, and other demographic details collected during the intake process.
• •Health-Related Screening Data: Bone health screening results, questionnaire responses, body composition data, and related wellness metrics collected during your visit for the purpose of generating your educational report.
• •Payment Information: Payment card details are processed by our third-party payment processor (Stripe) and are never stored on our servers.
• •Communication Data: Information you provide when contacting us via email, phone, SMS, or website forms, including the content of your messages.
• •Feedback and Reviews: Testimonials, survey responses, and reviews you voluntarily submit.

2.2 Information Collected Automatically

When you visit our website, we automatically collect certain information, including:

• •Device Information: Browser type and version, operating system, device type, and screen resolution.
• •Usage Data: Pages viewed, time spent on pages, click patterns, referring URLs, and navigation paths.
• •Network Information: IP address, approximate geographic location, and internet service provider.
• •Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to collect usage data and improve your experience. See our Cookie Policy for more details.

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• •Booking Platforms: Appointment scheduling data from our CRM and booking system (GoHighLevel).
• •Payment Processors: Transaction confirmation and fraud prevention data from Stripe.
• •Analytics Providers: Aggregated website usage data from analytics services.
• •Marketing Platforms: Engagement data from email marketing and social media platforms when you interact with our campaigns.

3. How We Use Your Information

3.1 Service Delivery

• •To process bookings and manage your appointments
• •To perform bone health screenings and generate educational reports
• •To process security deposits and payments through our payment processor
• •To maintain your screening history for progress tracking across visits

3.2 Communication

• •To send appointment confirmations, reminders, and follow-up communications
• •To respond to your inquiries and support requests
• •To deliver your screening results and educational materials

3.3 Business Operations

• •To improve our website, services, and overall client experience
• •To analyze usage trends and optimize our operations
• •To manage our client relationship management (CRM) system

3.4 Marketing (With Your Consent)

• •To send promotional emails, newsletters, and educational content about bone health
• •To display relevant advertisements on third-party platforms
• •You may opt out of marketing communications at any time by clicking “unsubscribe” in any marketing email or contacting us directly

3.5 Legal Compliance

• •To comply with applicable laws, regulations, and legal processes
• •To enforce our Terms of Service and protect our legal rights
• •To detect, prevent, and address fraud, security issues, or technical problems

4. How We Share Your Information

4.1 We Do Not Sell Your Personal Information

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We have not sold personal information in the preceding 12 months.

4.2 Service Providers

We share your information with trusted service providers who assist us in operating our business:

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order, subpoena, or government agency request).

4.4 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website of any change in ownership or uses of your personal information.

4.5 With Your Consent

We may share your information for other purposes with your explicit consent, such as sharing your testimonial on our website or marketing materials.

5. Data Security

We implement commercially reasonable safeguards to protect your personal information, including:

• •Encryption: All data transmitted between your browser and our servers is encrypted using TLS/SSL protocols.
• •Access Controls: Personal information is accessible only to authorized personnel who need it to perform their job functions.
• •Secure Payment Processing: Payment information is processed by PCI DSS-compliant processors and is never stored on our servers.
• •Regular Security Reviews: We periodically review our data collection, storage, and processing practices to ensure ongoing security.
• •Vendor Security: We require our service providers to implement appropriate security measures to protect your data.
• •Incident Response: We maintain procedures to detect, respond to, and recover from data security incidents.

Disclaimer: While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security of your data.

6. Data Retention

We retain your information for the following periods, unless a longer retention period is required by law:

Upon expiration of the applicable retention period, we will securely delete or anonymize your information. You may request earlier deletion of your data, subject to our legal obligations.

7. Your Privacy Rights

7.1 Rights for All Clients

Regardless of your location, all of our clients have the following rights:

• •Right to Access: Request a copy of the personal information we hold about you.
• •Right to Correction: Request correction of inaccurate or incomplete personal information.
• •Right to Deletion: Request deletion of your personal information, subject to our legal retention obligations.
• •Right to Opt Out: Opt out of marketing communications at any time.
• •Right to Data Portability: Request a copy of your data in a structured, commonly used, machine-readable format.
• •Right to Non-Discrimination: You will not receive discriminatory treatment for exercising your privacy rights.

7.2 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:

• •The right to know what personal information we collect, use, disclose, and sell
• •The right to delete personal information collected from you
• •The right to opt out of the sale or sharing of personal information (we do not sell your data)
• •The right to correct inaccurate personal information
• •The right to limit the use and disclosure of sensitive personal information

7.3 Virginia Residents (VCDPA)

If you are a Virginia resident, you have rights under the Virginia Consumer Data Protection Act (VCDPA), including:

• •The right to confirm whether we are processing your personal data and to access such data
• •The right to correct inaccuracies in your personal data
• •The right to delete personal data you have provided
• •The right to obtain a portable copy of your personal data
• •The right to opt out of targeted advertising, sale of personal data, and profiling

7.4 Colorado Residents (CPA)

If you are a Colorado resident, you have rights under the Colorado Privacy Act (CPA), including:

• •The right to opt out of targeted advertising, the sale of personal data, and certain profiling
• •The right to access, correct, and delete personal data
• •The right to data portability

7.5 Connecticut Residents (CTDPA)

If you are a Connecticut resident, you have rights under the Connecticut Data Privacy Act (CTDPA), including:

• •The right to access, correct, delete, and obtain a copy of personal data
• •The right to opt out of the sale of personal data, targeted advertising, and profiling
• •The right to appeal a denial of a privacy rights request

7.6 EEA/UK Residents (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, you have rights under the General Data Protection Regulation (GDPR), including:

• •The right to access, rectify, erase, and restrict the processing of your personal data
• •The right to data portability
• •The right to object to the processing of your personal data
• •The right to withdraw consent at any time where we rely on consent as the legal basis for processing
• •The right to lodge a complaint with a supervisory authority

8. How to Exercise Your Rights

To exercise any of your privacy rights, you may contact us using any of the following methods:

• •Email: support@functionbonehealth.com
• •Phone: (239) 544-4114
• •Mail: BioX Unlimited LLC, Attn: Privacy Officer, 800 Goodlette-Frank Rd N, Suite 200, Naples, FL 34102

We will verify your identity before processing your request. You may be asked to provide information that matches our records to confirm your identity.

Response Times:

• •CCPA/CPRA requests: We will respond within 45 days, with the possibility of a 45-day extension for complex requests.
• •GDPR requests: We will respond within 30 days, with the possibility of a 60-day extension for complex requests.
• •All other requests: We will respond within 30 days.

9. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@functionbonehealth.com. If we become aware that we have collected personal information from a child under 16 without verification of parental consent, we will take steps to delete that information promptly.

10. Third-Party Websites

Our website may contain links to third-party websites, services, or content that are not owned or controlled by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party websites you visit. This Privacy Policy applies solely to information collected by our website and services.

11. International Data Transfers

Our services are primarily operated in the United States. If you access our services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country of residence. By using our services, you consent to the transfer of your information to the United States. Where required, we will implement appropriate safeguards to protect your data in accordance with applicable law, including Standard Contractual Clauses for transfers from the EEA/UK.

12. Do Not Track Signals

Some web browsers transmit “Do Not Track” (DNT) signals to websites. Because there is no uniform standard for interpreting DNT signals, our website does not currently respond to DNT signals. We will continue to monitor developments around DNT browser technology and update our practices accordingly.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will notify you by posting the updated policy on this page and updating the “Effective” date at the top. For significant changes, we may also provide additional notice (such as an email notification). We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Privacy Officer: