Plain-English privacy.

1. Who is the controller

Resonance Agency LLC, publisher of Building the Future of Health is the data controller for personal information collected through Building the Future of Health. Contact for privacy questions and rights requests: hello@buildingthefutureofhealth.com.

2. Categories of information we collect

• Account information: name, email address, password hash. If you sign in with Google, the Google profile name, email, and avatar URL Google provides.
• Practitioner information (if you claim a listing): display name, practice name, specialty, biography, photos, location, contact channels, social links, conditions treated, education, podcast metadata, and any other field you fill in.
• Content you submit: directory applications, contact form messages to practitioners, flags, vouches, podcast pitches, search and concierge queries.
• Communications: emails you send us and our replies.
• What you save: bookmarked practitioners, followed conditions, saved lists.
• Technical and log data: IP address (truncated), browser type, device type, referring page, timestamps, and basic interaction events used for security, debugging, and aggregate analytics.
• Cookies and similar: see our cookie notice.

3. Why we collect it (purposes and legal bases)

We use the information above to:

• Operate the site: serve pages, run search, manage accounts, save bookmarks, deliver podcast and editorial content. Legal basis (GDPR): performance of a contract with you.
• Communicate with you: send transactional email (sign-in links, password resets, claim invitations, listing notifications, replies to your questions). Legal basis: contract and legitimate interest.
• Editorial newsletter and updates: only with your opt-in consent, with a one-click unsubscribe in every message. Legal basis: consent.
• Moderate and protect the site: detect abuse, spam, fraud, and security threats; enforce our terms. Legal basis: legitimate interest and legal obligation.
• Improve the site: aggregate analytics, debugging logs. Legal basis: legitimate interest.
• Comply with law: respond to lawful requests, defend legal claims, keep records required by law. Legal basis: legal obligation.

4. What we do not do

• We do not sell or rent your personal information. Ever.
• We do not "share" personal information for cross-context behavioral advertising as defined by the California Privacy Rights Act.
• We do not run third-party advertising trackers, Facebook Pixel, or retargeting pixels.
• We do not collect protected health information. The site is not a covered entity under HIPAA and is not intended to receive PHI. If you submit health details voluntarily through a contact or concierge form, you do so at your own initiative and consent to processing for the limited purpose of follow-up.

5. Who we share it with

We share personal information only with the categories of recipients below, and only as needed for the purposes listed above:

• Service providers ("processors"): our hosting and database provider, transactional email provider, file storage provider, and analytics provider. These providers act on our instructions, are contractually bound to confidentiality and data protection, and may not use your data for their own marketing.
• Sister editorial properties: Resonance Agency and FrequencyOS, for the limited purpose of syndicating listings and coordinating practitioner relationships. Practitioners may opt out by writing to us.
• Practitioners you contact: messages you send through a practitioner's contact form are delivered to that practitioner. BTFOH editors can see message metadata for moderation.
• Authorities and other parties: when required by law, to respond to lawful requests, to enforce our terms, to protect rights, property, or safety, or in connection with a merger, acquisition, financing, or asset sale (with notice to affected users where required).

6. International transfers

Our hosting is provided by infrastructure in the United States. If you are in the European Economic Area, the United Kingdom, or another jurisdiction with data export restrictions, your information will be transferred to and processed in the United States. Where required, we rely on the European Commission's Standard Contractual Clauses or an equivalent transfer mechanism.

7. How long we keep it

• Account data: for as long as your account is open, plus a short retention window after deletion to satisfy backups and legal obligations.
• Concierge and search queries: raw queries are deleted after 30 days. Aggregate, de-identified usage may be kept longer for analytics.
• Contact form messages and follow-ups: if you ask for a callback, we store your email and a short summary for 90 days after we close the request.
• Email send logs: kept for up to 12 months for deliverability and abuse prevention.
• Listings, articles, and podcast content: retained as long as the listing or content is published. After removal, archival copies may persist in backups for a reasonable period.
• Legal and security records: kept as long as required by law.

8. Your rights

Depending on where you live, you may have the right to:

• Know what personal information we hold about you and how we use it.
• Access a copy of your personal information.
• Correct inaccurate information.
• Delete your personal information ("right to erasure").
• Receive a portable copy of information you provided.
• Restrict or object to certain processing.
• Withdraw consent at any time, without affecting earlier processing.
• Opt out of sale or sharing of personal information (we do not sell or share, but you may still submit the request).
• Not be subject to unlawful discrimination for exercising your privacy rights.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email hello@buildingthefutureofhealth.com. We will respond within the timeframes required by applicable law (generally 45 days under CCPA/CPRA and 30 days under GDPR). We may need to verify your identity, typically by confirming control of the account email or by matching information you previously provided. You may use an authorized agent; we will verify the agent's authority.

9. Sensitive information

We discourage you from sharing sensitive personal information (such as health details, government IDs, biometric data, or precise geolocation) through public or semi-public surfaces of the site. The search and concierge boxes use AI to match descriptions to practitioners. Do not include personal health information you would not share publicly. Queries are processed by a third-party model under contract and stored briefly for quality.

10. Children

The site is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe we have collected information from a child under 13, email us and we will delete it. Users between 13 and 18 should review these terms with a parent or guardian.

11. Cookies and tracking signals

We use a small number of first-party cookies for sign-in, security, and aggregate analytics. We do not use cross-site advertising cookies. We honor the Global Privacy Control browser signal as a valid opt-out of sale or sharing where applicable. See our cookie notice.

12. Security

We use industry-standard safeguards including HTTPS in transit, hashed passwords, role-based database access with row-level security, scoped administrative permissions, audit logs, and least-privilege service accounts. No method of transmission or storage is perfectly secure. If we learn of a personal data breach affecting you, we will notify you and the appropriate authorities as required by law.

13. Subprocessors

We work with a short list of subprocessors for hosting, database, file storage, and transactional email. The current list is available on request from hello@buildingthefutureofhealth.com. We require each subprocessor to provide appropriate security and confidentiality protections and to process personal data only on our documented instructions.

14. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top reflects the current version. Material changes will be announced on the site, and registered users will receive an email notice.

15. Contact

Privacy questions, rights requests, and complaints: hello@buildingthefutureofhealth.com. If you are in the EU or UK and want to raise a concern with a regulator, you may also contact your national data protection authority.