BioFunctional Health Solutions (BHS) Privacy Policy

Last updated: December 8th, 2025

BioFunctional Health Solutions, Inc. (“BHS,” “we,” “us,” or
“our”) is committed to protecting your privacy and maintaining the security of
your personal information. This Privacy Policy explains how we collect, use,
disclose, safeguard, and store information obtained through our websites,
online forms, programs, SMS messaging, and in-clinic or remote services
(collectively, the “Services”).

By using our Services, you consent to the practices
described in this Privacy Policy.

1. Information We Collect

We collect information in several ways, depending on how you
interact with us.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use-case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. 

1.1 Information You Provide Directly

This includes:

  • Name
  • Phone
    number
  • Email
    address
  • Mailing
    address
  • Date
    of birth
  • Insurance
    information
  • Health
    history or symptoms submitted through forms
  • Appointment
    requests
  • Payment
    information
  • Survey
    responses
  • Messages
    you send to us
  • Consent
    forms and treatment agreements

If you are receiving clinical services, the health
information you provide or that we create in connection with your care may be
considered Protected Health Information (PHI) under HIPAA or other state
privacy laws.

1.2 Information Collected Automatically

When you access our website or landing pages, we may
automatically collect:

  • IP
    address
  • Browser
    type and device information
  • Pages
    viewed
  • Time
    spent on site
  • Interactions
    with forms or buttons
  • Referral
    source
  • Cookies
    and tracking pixels

We may use tools such as Google Analytics, Facebook Pixel,
or GHL’s built-in tracking systems.

1.3 Information Received from Third Parties

We may receive information from:

  • Insurance
    providers
  • Referral
    partners
  • Employers
    offering BHS services
  • Electronic
    Health Record (EHR) systems
  • Payment
    processors
  • Advertising
    partners

2. How We Use Your Information

We use personal information only for legitimate business,
marketing, and healthcare purposes, including:

2.1 To Provide Healthcare or Wellness Services

  • Scheduling
    appointments
  • Creating
    personalized wellness, regenerative medicine, or treatment plans
  • Conducting
    telehealth assessments
  • Documenting
    and coordinating care

2.2 To Communicate With You

Including:

  • Appointment
    confirmations and reminders
  • Follow-up
    instructions
  • Care
    coordination messages
  • Account
    notifications
  • SMS
    updates and service-related messages
  • Emails
    or newsletters (with your consent)

2.3 For Business Operations

  • Billing
    and payments
  • Insurance
    claims
  • Quality
    assurance
  • Training
    and service improvement
  • Analytics
    and performance tracking

2.4 For Marketing Purposes

With your consent, we may send:

  • Promotional
    SMS messages
  • Educational
    content
  • Wellness
    program updates
  • Device
    or service announcements

You may opt out at any time.

3. How We Share Your Information

We do not sell your personal information.

We may share information with trusted partners only when
necessary to provide services or comply with legal requirements.

3.1 Healthcare-Related Disclosures

We may share information with:

  • Physicians
    and healthcare providers involved in your care
  • Laboratories
    or diagnostic partners
  • Pharmacies
  • Your
    insurance company
  • Employers
    participating in onsite programs (only with your authorization)

All PHI disclosures follow HIPAA requirements.

3.2 Service Providers

We use secure third-party vendors for:

  • Appointment
    scheduling
  • Email
    and SMS delivery
  • Payment
    processing
  • Data
    storage
  • Cloud
    hosting
  • Analytics
    and marketing tools

Examples include: Go High Level, Microsoft 365/SharePoint,
Stripe, and similar HIPAA-compatible systems when used for PHI.

All vendors are contractually required to maintain
confidentiality.

3.3 Legal Requirements

We may disclose information when required to:

  • Comply
    with applicable law
  • Respond
    to valid legal process
  • Prevent
    fraud or abuse
  • Protect
    the safety of patients or the public

4. SMS Messaging and Consent

If you provide your mobile number, you may receive SMS
messages related to:

  • Appointment
    reminders
  • Wellness
    program updates
  • Service
    notifications
  • Promotional
    or educational messages (with consent)

Message frequency varies. Message and data rates may apply.

You may opt out anytime by replying STOP.
Reply HELP for assistance.

For full details, see our SMS Messaging Terms.

5. Cookies and Tracking Technologies

We use cookies, pixels, and similar technologies to:

  • Improve
    site performance
  • Personalize
    your experience
  • Deliver
    relevant ads
  • Measure
    marketing effectiveness

You may disable cookies in your browser settings, though
some features may not function properly.

6. Data Security

We use technical, administrative, and physical safeguards to
protect your information, including:

  • Encrypted
    data transmission
  • Secure
    cloud storage
  • Role-based
    access controls
  • Staff
    training on privacy and security
  • Regular
    system monitoring

Despite these measures, no system is completely secure. We
cannot guarantee absolute protection.

7. Your Rights

Depending on your state and the nature of your information,
you may have rights to:

  • Access
    your personal information
  • Request
    corrections
  • Request
    copies of your medical records
  • Restrict
    certain uses of information
  • Withdraw
    consent for marketing communications

To exercise these rights, contact us at:

info@biofunctionalhealth.com
1-833-800-0BHS

8. Data Retention

We retain your information only as long as necessary to:

  • Deliver
    services
  • Maintain
    medical records as required by law
  • Fulfill
    contractual or legal obligations
  • Support
    business operations

PHI is retained according to federal and state health record
retention rules.

9. Children’s Privacy

Our services are not directed to children under 13 unless
part of a parent-approved treatment plan. We do not knowingly collect
information from children without parental consent.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes
take effect when posted. We encourage you to review the policy periodically.

11. Contact Us

BioFunctional Health Solutions, Inc.
1755 Telstar Dr., Suite 304
Colorado Springs, CO 80920
Email: info@biofunctionalhealth.com
Phone: 1-833-800-0BHS