Privacy Policy

Last updated: March 30, 2026

Potential Health ("we," "us," or "our") operates the website www.potential-health.com. This Privacy Policy explains what information we collect, how we use it, and what choices you have. We do not sell your personal information.

1. Information We Collect

Information You Provide

  • Communications: If you email us, we retain your message and email address to respond to your inquiry.

Information Collected Automatically

  • Usage Data: Through Google Analytics 4, we collect anonymized data about how you interact with our website, including pages visited, time on page, referral source, and general geographic region.
  • Device & Browser Data: We automatically receive your browser type, operating system, screen resolution, and language preference.
  • IP Address: Your IP address is processed for rate limiting and security purposes. We do not store full IP addresses in our own databases.

2. How We Use Your Information

We use the information we collect to:

  • Analyze aggregate usage patterns to improve our content and website experience
  • Respond to your questions or feedback
  • Protect against abuse, fraud, and unauthorized access
  • Comply with applicable legal obligations

3. Legal Basis for Processing (EEA/UK Users)

If you are located in the European Economic Area or the United Kingdom, we process your personal data under the following legal bases:

  • Legitimate Interests: Analytics, security, and website improvement, where our interests do not override your rights (GDPR Art. 6(1)(f)).
  • Consent: For non-essential cookies such as analytics cookies, which you may accept or decline (GDPR Art. 6(1)(a)).
  • Legal Obligation: Where we are required to retain or disclose data by law (GDPR Art. 6(1)(c)).

4. Third-Party Services

We rely on the following third-party services, each of which may process limited personal data on our behalf:

We do not share your personal information with advertisers or data brokers.

5. Cookies and Tracking

Essential Cookies: Required for core functionality such as rate limiting and security. These cannot be disabled without breaking the website.

Analytics Cookies: Google Analytics 4 uses cookies to collect anonymized usage data. These cookies help us understand how visitors use our website so we can improve it. You can opt out by installing the Google Analytics Opt-out Browser Add-on or by adjusting your browser's cookie settings.

We do not use advertising, retargeting, or social-media tracking cookies.

6. Data Storage and Security

Your data is stored using industry-standard encryption in transit (TLS) and at rest. We implement appropriate technical and organizational safeguards—including access controls, secure hosting infrastructure, and regular dependency updates—to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

No method of electronic storage or transmission is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide our services. Specifically:

  • Analytics data: Retained by Google Analytics per their standard retention settings (up to 14 months).
  • Communications: Retained as long as necessary to resolve your inquiry, then deleted.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Request correction of inaccurate or incomplete data.
  • Deletion: Request deletion of your personal data.
  • Data Portability: Request a machine-readable copy of your data.
  • Restrict Processing: Request that we limit how we use your data.
  • Object: Object to processing based on legitimate interests.
  • Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, email us at contact.potentialhealth@gmail.com. We will respond within 30 days (or 45 days for complex requests, with notice).

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local data protection supervisory authority.

9. International Data Transfers

Potential Health is operated in the United States. If you access our website from outside the United States—including from the European Economic Area, United Kingdom, or Switzerland—your personal data may be transferred to and processed in the United States, where data protection laws may differ from those in your country.

We rely on standard contractual clauses and the data processing agreements of our third-party service providers to ensure that your information receives an adequate level of protection when transferred internationally.

10. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act and the California Privacy Rights Act:

  • Right to Know: You can request disclosure of the categories and specific pieces of personal information we collect, the sources, the business purposes, and the categories of third parties with whom we share it.
  • Right to Delete: You can request deletion of your personal information, subject to certain legal exceptions.
  • Right to Correct: You can request correction of inaccurate personal information.
  • Right to Opt-Out of Sale/Sharing: We do not sell or share your personal information for cross-context behavioral advertising.
  • Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights.

To exercise these rights, email contact.potentialhealth@gmail.com. We will respond to verified requests within 45 days.

11. Children's Privacy

Our website is not directed at children under 13 years of age (or under 16 in the EEA/UK). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Your continued use of the website after changes are posted constitutes your acknowledgment of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

Email: contact.potentialhealth@gmail.com

We aim to respond to all privacy-related inquiries within 30 days.