Website Privacy Policy

Dr. Toni Varela, ND
www.drtonivarela.com

Last Updated: April 6, 2026

Important Notice: This policy covers data collected through our website only. It is separate from our HIPAA Notice of Privacy Practices, which governs the use and protection of your Protected Health Information (PHI) in connection with your medical care. A copy of our Notice of Privacy Practices is available on this website and in our office.

Who We Are

This website is operated by Dr. Toni Varela, ND, a California-licensed naturopathic doctor practicing at:

939 Hartz Way, Suite 100
Danville, CA 94526
Phone: 925.786.0375
Email: info@drtonivarela.com

Information We Collect

We collect information in the following ways:

Information you provide directly:

  • Name, email address, and phone number submitted through contact forms or newsletter sign-ups

  • Appointment booking information submitted through our online scheduler (Acuity Scheduling)

  • Messages sent to us via email or contact forms

Information collected automatically:

  • IP address and general location data

  • Browser type, device type, and operating system

  • Pages visited, time spent on pages, and referring URLs

  • Cookie data (see Cookies section below)

We do not collect sensitive health information through this website. Our online scheduler is used for appointment booking only. Any health-related information you provide as part of your care is governed by our HIPAA Notice of Privacy Practices, not this policy.

How We Use Your Information

We use the information collected through this website to:

  • Respond to inquiries and appointment requests

  • Send appointment confirmations and reminders

  • Send newsletters or practice updates, if you have opted in

  • Improve the functionality and content of our website

  • Comply with applicable legal obligations

We do not sell, rent, or trade your personal information to third parties.

Sharing of Information

We may share your information only in the following limited circumstances:

  • Service Providers: We use third-party vendors to operate our website and scheduling system (e.g., Squarespace for website hosting, Acuity Scheduling for appointment booking). These vendors may have access to your information only to perform services on our behalf and are contractually prohibited from using it for other purposes.

  • Legal Requirements: We may disclose your information when required to do so by law, court order, or government authority.

  • Safety: We may disclose information when necessary to protect the safety of any person.

We do not disclose your information for advertising, marketing, or data broker purposes.

California Residents -- Your Rights Under the CCPA and CPRA

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the sources of that information, the purposes for which it is used, and the categories of third parties with whom it is shared.

Right to Delete: You have the right to request that we delete personal information we have collected from you, subject to certain exceptions.

Right to Correct: You have the right to request that we correct inaccurate personal information we hold about you.

Right to Opt-Out of Sale or Sharing: We do not sell or share your personal information for cross-context behavioral advertising. No opt-out is required at this time, but we will honor any opt-out requests.

Right to Limit Use of Sensitive Personal Information: To the extent we collect sensitive personal information (as defined by the CPRA), you have the right to limit its use to what is necessary to provide our services.

Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights.

To exercise your rights, contact us at info@drtonivarela.com or call 925.786.0375. We will respond within 45 days as required by California law. We may need to verify your identity before processing your request.

Note for Patients: Your medical records and PHI are not subject to the CCPA -- they are governed by HIPAA and the California CMIA. Please refer to our Notice of Privacy Practices for those rights.

Cookies

This website uses cookies and similar tracking technologies to improve your browsing experience and analyze site traffic. Cookies are small text files stored on your device.

We use the following types of cookies:

  • Strictly Necessary Cookies: Required for the website to function. These cannot be disabled.

  • Analytics Cookies: Used to understand how visitors interact with our website (e.g., Google Analytics). Data collected is aggregated and anonymized.

  • Functional Cookies: Used to remember your preferences.

You may disable cookies through your browser settings. Please note that disabling certain cookies may affect website functionality.

This website may contain links to third-party services (e.g., our scheduling platform) that use their own cookies. We do not control third-party cookies and encourage you to review the privacy policies of any third-party sites you visit.

Third-Party Links and Affiliate Disclosure

This website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review their privacy policies before submitting any personal information.

Some links on this website may be affiliate links. Dr. Varela only recommends products she has personally vetted and uses within her own clinical protocols. Affiliate relationships are disclosed in accordance with FTC guidelines (16 CFR Part 255).

Email Communications

If you subscribe to our newsletter or mailing list, you will receive periodic emails about practice updates, health information, and related content. You may unsubscribe at any time by clicking the "Unsubscribe" link in any email, or by contacting us directly.

We will not send you unsolicited commercial email and will not share your email address with third parties for marketing purposes.

Data Security

We take reasonable technical and organizational measures to protect the personal information we collect through this website. Our website uses HTTPS encryption. Access to personal information is limited to those who need it to perform their role.

However, no method of transmission over the internet is completely secure. We cannot guarantee absolute security of your data.

Please do not send Protected Health Information (PHI) -- such as details about your health conditions, medications, or treatment -- by email or through contact forms on this website. For health-related communications, please call our office directly.

Children's Privacy

This website is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately and we will promptly delete it.

Changes to This Policy

We reserve the right to update this Privacy Policy at any time. Material changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.

Your continued use of this website after changes are posted constitutes acceptance of the updated policy.

Contact Us

For questions about this Privacy Policy or to exercise your California privacy rights, contact:

Dr. Toni Varela, ND
939 Hartz Way, Suite 100
Danville, CA 94526
Email: info@drtonivarela.com
Phone: 925.786.0375

This policy applies to data collected through www.drtonivarela.com only. It does not govern Protected Health Information collected in connection with your medical care. Please refer to our separate HIPAA Notice of Privacy Practices for information about how your health information is handled.