Cookie Policy

Last updated January 05, 2026

Hale Health ("we," "us," "our") uses minimal cookies to operate our website and provide analytics. We are committed to privacy and only collect data necessary for service delivery and understanding how our website is used.

Cookie Consent Management

Consent Banner

When you first visit our website, you will see a cookie consent banner that allows you to:

1. Accept All: Accept our analytics cookies
2. Reject: Reject analytics cookies (website still works perfectly)
3. Learn More: Access this full cookie policy

Note: We use minimal essential cookies—our service works without most cookies.

Changing Your Preferences

You can change your cookie preferences at any time by: 1. Clicking the "Cookie Settings" link in the footer of our website 2. Clearing your browser cookies and revisiting the site 3. Contacting us at [email protected]

Consent Storage

Your cookie preferences are stored in a secure cookie that expires after 12 months. You will be asked to confirm your preferences again after this period.

Withdrawal of Consent

You can withdraw your consent to non-essential cookies at any time through the cookie settings banner. Withdrawal will not affect the lawfulness of processing based on consent before withdrawal.

What are cookies?

Cookies are small data files that are placed on your computer or mobile device when you visit a website. Cookies are widely used by website owners in order to make their websites work, or to work more efficiently, as well as to provide reporting information.

Cookies set by the website owner (in this case, Hale Health) are called "first-party cookies." Cookies set by parties other than the website owner are called "third-party cookies." Third-party cookies enable third-party features or functionality to be provided on or through the website (e.g., advertising, interactive content, and analytics). The parties that set these third-party cookies can recognize your computer both when it visits the website in question and also when it visits certain other websites.

Why do we use cookies?

We use cookies primarily for analytics purposes. Some cookies are required for technical reasons in order for our Website to operate, and we refer to these as "essential" or "strictly necessary" cookies. We use analytics cookies to understand how our website is being used so we can improve it.

What Cookies Do We Use?

We use minimal cookies:

Cookie Type	Duration	Purpose	Data Collected
Session cookies	Session	Session management	Session identifier
Analytics cookies	Up to 30 minutes	Usage analytics	Visitor session data

We do not use cookies for: - Advertising or marketing - Cross-site tracking - Selling data to third parties

Essential vs. Non-Essential Cookies

Essential Cookies: Minimal cookies required for basic functionality

Non-Essential Cookies: Analytics cookies - You can reject these without affecting website functionality - Rejecting them only prevents us from seeing your analytics data

Third-Party Services

We use various third-party services for payment processing, email delivery, hosting, and analytics. These services follow their own privacy policies.

Stripe: Payment processing.

SendGrid: Email delivery service.

Cloudflare: CDN and DDoS protection.

Supabase: Authentication and database.

New Relic: Observability.

Cookie Retention

Cookies are automatically deleted after their duration expires: - Session cookies: Deleted at end of session - Analytics cookies: Deleted after expiration (typically 30 minutes or less)

You can manually delete cookies anytime through browser settings.

How to Delete Cookies

Browser-Level Deletion: You can delete cookies at any time through your browser settings: - Chrome: Settings → Privacy and Security → Clear Browsing Data - Firefox: Settings → Privacy & Security → Cookies and Site Data - Safari: Preferences → Privacy → Manage Website Data - Edge: Settings → Privacy → Clear Browsing Data - Opera: Settings → Privacy → Clear Browsing Data

Our System Deletion: When you request data deletion, we will: 1. Delete your analytics data within 30 days 2. Provide confirmation of deletion within 45 days

How to Control Cookies

Disable Analytics Tracking

You can opt-out of analytics by: 1. Enabling "Do Not Track" in your browser 2. Using browser privacy extensions 3. Rejecting cookies in our consent banner 4. Contacting us at [email protected]

Delete Cookies

Delete cookies through your browser settings: - Chrome: Settings → Privacy and Security → Clear Browsing Data - Firefox: Settings → Privacy & Security → Cookies and Site Data - Safari: Preferences → Privacy → Manage Website Data - Edge: Settings → Privacy → Clear Browsing Data - Opera: Settings → Privacy → Clear Browsing Data

Do Not Track (DNT) Signals

Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want to have your online activity tracked.

Our DNT Policy: We respect DNT signals and will honor them as follows:

• For Essential Cookies: We will continue to set essential cookies even if DNT is enabled, as these are required for website functionality.
• For Analytics Cookies: If you have DNT enabled, we will not set analytics cookies.

How to Enable DNT: - Chrome: Settings → Privacy and Security → Send "Do Not Track" requests - Firefox: Settings → Privacy & Security → Enhanced Tracking Protection - Safari: Preferences → Privacy → Prevent cross-site tracking - Edge: Settings → Privacy → Tracking prevention

Other Tracking Technologies

In addition to cookies, we may use:

Web Beacons and Tracking Pixels

Tiny graphics files that contain a unique identifier enabling us to recognize when someone has visited our website. These are used to: - Monitor traffic patterns - Measure analytics effectiveness - Improve site performance

Your Control: Most email clients allow you to disable image loading, which prevents beacon tracking in emails.

Server-Side Analytics

We collect analytics data using server-side tracking where possible. This data is used only to understand usage patterns and is not used to identify you personally.

GDPR Compliance (European Union)

Legal Basis for Cookie Processing

We process cookies and similar technologies based on the following legal grounds under GDPR Article 6:

• Consent (Article 6(1)(a)): For non-essential cookies (analytics), we obtain explicit consent through our cookie management banner before placing these cookies on your device.
• Legitimate Interests (Article 6(1)(f)): For essential cookies required to provide our services and maintain website security, we rely on our legitimate business interests.

Your GDPR Rights

Under the General Data Protection Regulation, you have the following rights regarding your personal data:

1. Right of Access (Article 15): You can request a copy of all personal data we hold about you.
2. Right to Rectification (Article 16): You can request correction of inaccurate personal data.
3. Right to Erasure (Article 17): You can request deletion of your personal data, subject to legal retention requirements. We will delete cookies associated with your account upon request.
4. Right to Restrict Processing (Article 18): You can request that we limit how we use your data while we consider your request.
5. Right to Data Portability (Article 20): You can request your data in a structured, commonly used, machine-readable format.
6. Right to Object (Article 21): You can object to processing of your data for marketing and profiling purposes.
7. Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection authority if you believe we have violated your rights.

Data Processing Agreements

For customers in the European Union, we maintain Data Processing Agreements (DPA) as required by GDPR Article 28. Our DPA is available upon request at [email protected].

International Data Transfers

We comply with the Standard Contractual Clauses (SCCs) for transferring personal data outside the EU/EEA. Where applicable, we also rely on adequacy decisions and supplementary measures as required by GDPR Chapter 5.

CCPA Compliance (California Residents)

Your California Privacy Rights

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the following rights:

1. Right to Know (CCPA § 1798.100): You have the right to request what personal information we collect, use, share, and sell about you.
2. Right to Delete (CCPA § 1798.105): You can request deletion of personal information we have collected from you, subject to certain exceptions.
3. Right to Opt-Out (CCPA § 1798.120): You have the right to opt-out of the sale or sharing of your personal information. We do not sell cookies or personal data.
4. Right to Correct (CCPA § 1798.100(d)): You can request correction of inaccurate personal information.
5. Right to Limit Use (CCPA § 1798.121): You can request that we limit our use of your sensitive personal information to purposes necessary to provide the services you requested.
6. Right to Non-Discrimination (CCPA § 1798.125): We will not discriminate against you for exercising your CCPA rights.

How to Exercise Your Rights

To exercise any of these rights, please submit a verifiable consumer request by:

• Email: [email protected]
• Mail: Hale Health, 418 Broadway, STE N Albany, NY 12207

We will respond to verifiable requests within 45 days. You may designate an authorized agent to make requests on your behalf by providing written authorization.

Shine the Light (California Civil Code § 1798.83)

California residents may request information about the categories of personal information we share with third parties for their direct marketing purposes. To make such a request, please contact us at [email protected].

International Privacy Laws

This Cookie Policy complies with the following privacy regulations:

• GDPR (General Data Protection Regulation) - European Union
• CCPA (California Consumer Privacy Act) - California, USA
• LGPD (Lei Geral de Proteção de Dados) - Brazil
• PIPEDA (Personal Information Protection and Electronic Documents Act) - Canada
• ePrivacy Directive - European Union

State Privacy Laws (USA)

In addition to CCPA, the following state privacy laws may apply:

• Virginia VCDPA (Virginia Consumer Data Protection Act)
• Colorado CPA (Colorado Privacy Act)
• Utah UCPA (Utah Consumer Privacy Act)
• Connecticut CTDPA (Connecticut Data Privacy Act)

If you are a resident of these states, you have similar rights to California residents. Please contact us for state-specific information.

How to Exercise Your Rights

Email: [email protected] Mailing Address: Hale Health, 418 Broadway, STE N Albany, NY 12207

Response Timeline: - Acknowledgment: Within 10 business days - Substantive response: Within 45 days - Complex requests may take an additional 45 days

Verification: We will verify your identity before processing requests by: 1. Confirming your email address associated with your account 2. Requesting additional information to confirm your identity 3. For CCPA requests, accepting authorized agent requests with proper documentation

Appeal Process

If you believe we have not properly handled your privacy request, you may appeal by: 1. Submitting a written appeal to [email protected] within 45 days 2. Providing specific details about your original request and why you believe it was mishandled 3. We will review and respond to your appeal within 60 days

Policy Updates and Review Schedule

Update Frequency

We review this Cookie Policy at least quarterly (every 90 days) to ensure it reflects: - Changes in applicable laws and regulations - Updates to our cookie usage and third-party services - Feedback from users and privacy advocates - Industry best practices

Notification of Changes

When we make material changes to this Cookie Policy, we will: 1. Update the "Last Updated" date at the top of this policy 2. Send email notification to registered users (if email on file) 3. Display a prominent notice on our website for 30 days 4. Require explicit consent for new non-essential cookies

Non-material changes (clarifications, formatting) may be made without notification.

Contact Us

If you have any questions about our use of cookies or other technologies, please email us at [email protected] or by post to:

Hale Health 418 Broadway, STE N Albany, NY 12207