Privacy Policy.

1. Information we collect

We collect two categories of information:

Information you give us

• Contact form submissions (name, email, phone, message)
• Sign-in credentials for the member portal (email + password)
• Information you voluntarily share via email or phone

Information collected automatically

• Device and browser data (user agent, screen size, referring URL)
• Aggregate analytics (page views, session duration) — no third-party advertising trackers
• Server logs (IP address, timestamps) retained for security auditing

2. How we use it

• To respond to inquiries and route them to the appropriate anchor or subsidiary
• To authenticate access to the member portal
• To understand site usage and improve our content
• To comply with legal obligations

3. What we do not do

• We do not sell personal data. Ever.
• We do not share information with advertisers or data brokers.
• We do not use behavioral retargeting tracking.
• We do not commingle marketing data with PHI held at the anchor level.

4. Cookies and similar technologies

We use a small number of strictly-necessary cookies (for session continuity and basic preference storage). We use first-party analytics that respect Do Not Track signals. We do not deploy third-party advertising cookies.

5. Sharing with third parties

We share information only as follows:

• With the anchor or subsidiary you are inquiring about, so they can respond to you
• With service providers (hosting, email delivery, error monitoring) under contract requiring confidentiality
• When required by law (subpoena, court order, or to protect against imminent harm)

6. Security

We use industry-standard technical and administrative safeguards: TLS in transit, encryption at rest where applicable, role-based access controls, and audit logging. No system is impervious, and we will notify affected individuals in the event of a breach, as required by law.

7. Your rights

Depending on your jurisdiction, you may have the right to access, correct, or delete personal information we hold about you, and to object to certain processing. To exercise these rights, email privacy@atlaswh.com.

California residents: we comply with the CCPA / CPRA. EU/UK residents: Atlas does not actively market in the EU/UK; if you have submitted information from there, the GDPR/UK GDPR rights apply.

8. Retention

Contact form submissions and email correspondence are retained for up to 36 months. Server logs are retained for 90 days. Portal accounts are retained while active and deleted on request.

9. Children

The Atlas website is not directed at children under 13, and we do not knowingly collect information from them. Adolescent care at any anchor entity is conducted under the anchor's clinical-side consent processes, not via this website.

10. Changes to this policy

We may revise this policy as needed. Material changes will be flagged on this page and dated above.

11. Contact

Atlas Wellness Holdings, LLC
Privacy Officer
privacy@atlaswh.com