top of page

Privacy Policy

Luz Chavez, IBCLC, LLC

Effective Date: May 6, 2026

This website is operated in compliance with the Health Insurance Portability and Accountability Act (HIPAA). Any health-related information you share with us through this website is treated as Protected Health Information (PHI) and handled accordingly.

Luz Chavez, IBCLC, LLC (“we,” “us,” or “our”) committed to protecting your privacy and the confidentiality of your personal and health information. This Privacy Policy describes how we collect, use, store, and protect information gathered through our HIPAA-compliant website, including our contact forms, email communications, and virtual and in-home lactation consulting services.

By using our website or submitting your information, you acknowledge and agree to the practices described in this Privacy Policy.

1. Information We Collect

We collect personal and health-related information that you voluntarily submit through our website contact forms, including:

  • Full name

  • Phone number

  • Email address

  • ZIP code

  • Estimated due date

  • Date of birth of your baby

 

We may also collect additional information you share with us during virtual or in-home consultations, through email, or over the phone. This information may constitute Protected Health Information (PHI) under HIPAA and is handled with the highest standard of care.

 

2. HIPAA Compliance & Protected Health Information

As a lactation consulting practice, we are committed to operating in accordance with HIPAA. Information that relates to your health, the health of your baby, or the provision of healthcare services — including your estimated due date and your baby's date of birth — may be considered Protected Health Information (PHI).

Our website is hosted on a HIPAA-compliant platform with appropriate safeguards in place, including:

  • Encrypted data transmission (SSL/TLS)

  • Secure storage of any submitted information

  • Access controls limiting who can view your information

  • Business Associate Agreements (BAAs) with applicable third-party service providers as required by HIPAA

 

We use and disclose your PHI only as permitted or required by HIPAA and applicable law — primarily to provide you with lactation consulting services and, where necessary, to coordinate your care.

 

3. How We Use Your Information

We use the information we collect for the following purposes:

  • To respond to your inquiries and schedule in-home or virtual lactation consulting appointments

  • To deliver and personalize lactation support services

  • To send appointment reminders and care-related follow-up communications

  • To send you email newsletters, educational resources, and promotional information about our services (only with your consent — see Section 4)

  • To maintain records in connection with our professional services

  • To improve our website and client experience

  • To comply with applicable legal and regulatory obligations

 

4. Email Marketing

If you opt in to receive marketing emails from us, we may send you breastfeeding tips, educational content, newsletters, and information about our services. Your consent to receive marketing emails is separate from any health-related communications necessary for your care.

You may unsubscribe from marketing emails at any time by clicking the "Unsubscribe" link included in every marketing email, or by contacting us directly. Opting out of marketing communications will not affect your ability to receive service-related communications.

 

5. How We Share Your Information

We do not sell, rent, or trade your personal information or PHI to any third party. We may share your information only in the following limited circumstances:

  • With HIPAA-compliant service providers (such as scheduling platforms or email marketing tools) who have signed a Business Associate Agreement (BAA) with us and are contractually required to safeguard your information

  • When required by law, court order, or governmental authority

  • To prevent or address fraud, safety issues, or violations of our terms

  • With your explicit written consent for any other purpose

 

6. Third-Party Tools & Service Providers

We use third-party platforms to operate our website and deliver our services — including scheduling software, email marketing platforms, and web hosting. We only work with vendors that maintain HIPAA-compliant environments and with whom we have executed Business Associate Agreements, where applicable.

These vendors are not permitted to use your information for their own marketing purposes. We encourage you to review the privacy policies of any third-party platforms you interact with directly.

 

7. Data Security

We implement administrative, technical, and physical safeguards to protect your personal information and PHI against unauthorized access, disclosure, alteration, or destruction. Our website uses SSL/TLS encryption to protect data transmitted between your browser and our website.

While we take every reasonable precaution to protect your information, no method of internet transmission or electronic storage is 100% secure. We encourage you to contact us by phone if you have concerns about transmitting sensitive information online.

 

8. Data Retention

We retain personal information and PHI for as long as necessary to provide our services, fulfill legal and professional obligations, and comply with applicable recordkeeping requirements. When information is no longer needed, it is securely deleted or de-identified in accordance with HIPAA standards.

 

9. Your Rights

As our client, you have the right to:

  • Access the personal information and PHI we hold about you

  • Request corrections to inaccurate or incomplete information

  • Request restrictions on certain uses or disclosures of your PHI

  • Request deletion of your personal information, subject to legal retention requirements

  • Receive a copy of our Notice of Privacy Practices (available upon request)

  • Opt out of marketing communications at any time

 

To exercise any of these rights, please contact us using the information in Section 12 below.

 

10. Children's Privacy

Our website is intended for use by adults seeking lactation consulting services. We do not knowingly collect personal information from children under the age of 13. Information about a client's baby is collected solely to facilitate the provision of lactation support to the parent or legal guardian.

 

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or applicable law. The effective date at the top of this document will be updated when changes are made. We encourage you to review this policy periodically. Continued use of our website after changes are posted constitutes your acceptance of the updated policy.

 

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or the handling of your information, please contact us:

 

Luz Chavez, IBCLC, LLC

Luz Chavez, IBCLC

Email:ask@luzchavezibclc.com

Website: luzchavezibclc.com

bottom of page