Privacy policy

Who operates this site

bodycompositionguide.com is operated by Michael Hummel, NMD, a naturopathic physician practicing at Hummel Medical in Ashland, Oregon. Questions about this privacy policy may be directed to info@hummelmed.com.

What data is collected

This site is designed to minimize data collection. The only personal data collected is what you voluntarily provide via email.

Data element	Required	Purpose	Retention
Name	Yes	To address the reply appropriately	Until the correspondence is resolved, then deleted within 12 months
Email address	Yes	To send a reply	Until the correspondence is resolved, then deleted within 12 months
Topic selection	Yes	To route the message appropriately	Same as above
Message text	Yes	To understand and respond to your inquiry	Same as above

No phone number is collected. No newsletter subscription or marketing list exists. Form submissions are not added to any mailing list or shared with any third party except as required to send a reply (e.g., an email provider).

Cookies and tracking

This site sets no cookies. There are no session cookies, authentication cookies, tracking cookies, or preference cookies of any kind.

There are no tracking pixels, retargeting tags, conversion pixels, or any other third-party tracking mechanisms embedded in any page on this site.

Analytics

If analytics are used, this site uses a privacy-first analytics approach. Any analytics tool used will be configured to:

• Anonymize IP addresses before processing.
• Set no cookies.
• Collect no personal identifiers.
• Store no data outside the European Economic Area unless the data is fully anonymized.

Tools that do not meet these criteria will not be used. If analytics are introduced, this policy will be updated to name the tool and describe the configuration.

Fonts and third-party assets

At launch, fonts are loaded from Google Fonts CDN (fonts.googleapis.com). Google Fonts requests may result in your IP address being logged by Google's servers according to Google's privacy policy. If you prefer to avoid this, you may block requests to fonts.googleapis.com using a browser extension; the site will fall back to system serif and sans-serif fonts. Future versions of the site may switch to self-hosted fonts to eliminate this dependency entirely, at which point this notice will be removed.

No other third-party assets (CDN JavaScript libraries, externally hosted images, or social media widgets) that would allow cross-site tracking are loaded on this site.

Server logs

The web hosting provider (Bluehost) may retain standard server access logs, which typically include IP addresses, browser type, referring page, and pages visited. These logs are used for security and operational purposes by the hosting provider. The site operator does not access or retain these logs beyond what the hosting provider's standard policy describes. Please consult Bluehost's privacy policy for details on their log retention practices.

HIPAA adjacency note

bodycompositionguide.com is not a covered entity under the Health Insurance Portability and Accountability Act (HIPAA). It does not provide healthcare services, does not transmit health information for healthcare purposes, and does not collect protected health information (PHI) through email correspondence. Nonetheless, if an email inadvertently contains health information, that information will be handled with the same care and discretion applied to all personal data and will not be used for any purpose other than responding to the message.

Your rights under GDPR

If you are located in the European Economic Area, you have the following rights regarding personal data held about you:

• Right of access You may request a copy of any personal data held about you.
• Right to rectification You may request correction of inaccurate personal data.
• Right to erasure You may request deletion of your personal data, subject to any legal obligation to retain records.
• Right to restrict processing You may request that processing of your data be restricted in certain circumstances.
• Right to data portability Where processing is based on consent or contract, you may request your data in a machine-readable format.
• Right to object You may object to processing based on legitimate interests.

To exercise any of these rights, email info@hummelmed.com. Requests will be responded to within 30 days.

The legal basis for processing email data is legitimate interest (responding to your inquiry). Data is not processed for any other purpose.

Your rights under CCPA/CPRA

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• The right to know what personal information is collected about you and how it is used.
• The right to delete personal information, with certain exceptions.
• The right to opt out of the sale or sharing of personal information. This site does not sell or share personal information.
• The right to non-discrimination for exercising your privacy rights.
• The right to correct inaccurate personal information.
• The right to limit use of sensitive personal information. This site does not collect sensitive personal information as defined by CPRA.

To exercise any of these rights, email info@hummelmed.com.

Data security

The site is served over HTTPS. Email correspondence is handled through standard encrypted channels. The site operator takes reasonable measures to secure the systems used to store and process messages.

Children's privacy

This site is not directed at children under 13 years of age. The site does not knowingly collect personal data from children. If you believe a child has submitted personal data via email, please contact us for deletion.

Changes to this policy

If this privacy policy changes materially, the effective date at the top of this page will be updated and, where appropriate, a notice will be added to the About page. Continuing to use the site after such changes constitutes acceptance of the updated policy.