Privacy Policy

1. Who we are and what this policy covers

This Privacy Policy describes how Full Circle Care — the naturopathic medical practice of Dr. Leslie Peterson, N.D., operated by Leslie Peterson, N.D., P.C., a Utah professional corporation — handles information in connection with our website, fullcirclecare.com (the “website”).

This policy covers the website only. If you become a patient, your medical records and the information you share in the course of care are held in our clinical records system and are protected under applicable law and our professional obligations — not governed by this website policy. Section 6 explains where the website ends and clinical care begins.

We serve patients located in Utah. The website is directed to a Utah audience (see Section 11).

2. The short version

This website does not collect personal information. It has no forms, no user accounts, and no comment sections, and it sets no cookies. We use one privacy-focused analytics tool, Plausible, which counts visits without cookies and without identifying you — Section 3 describes exactly what it measures. The one page where information beyond those measurements leaves your browser is our booking page, where an embedded Google scheduling tool is provided — Section 5 describes exactly how that works and what Google receives. Beyond those, the only visitor data that exists anywhere is the standard server logs our hosting infrastructure keeps for security (Section 3).

The rest of this policy is the detail behind those statements.

3. Information the website collects

Directly from you: none. The website contains no forms and no fields that transmit anything you type. Specifically:

• The symptom-awareness tool on our home page runs entirely in your browser. You can tap symptom options and read the response it shows you. Nothing you select is transmitted to us or to anyone else, nothing is stored, and your selections disappear when you leave or refresh the page. It looks like it collects health information; it does not.
• We do not currently operate a newsletter or mailing list through the website, and the website does not collect email addresses.

Automatically: hosting and security logs. Like nearly every website, ours is served by hosting infrastructure that keeps standard server and network-security logs. These record technical details of each request — including your IP address, browser type, the pages requested, and timestamps — and are used for security, abuse prevention, and keeping the website operating. Our host is Kinsta, which serves the website through Cloudflare’s network as part of its service. We do not use these logs to identify or profile visitors.

Website analytics (Plausible). We use Plausible Analytics, a privacy-focused measurement tool, to understand how the website is used in aggregate — which pages are visited, roughly how many people visit, and where they arrive from. When you view a page, Plausible receives the page’s address, the referring site (if any), your browser and operating system type, your device type (desktop, tablet, or phone), and an approximate location (such as country or region) derived from your IP address. Your IP address itself is not stored, no cookies are set, nothing is saved on your device, and Plausible does not track you across other websites or build a profile of you. To count whether visits are new or returning within a single day, Plausible briefly uses a scrambled, automatically-discarded identifier that cannot be linked back to you afterward. We also count one action: whether the booking button or booking calendar was used — the count only, not who used it or anything entered into the booking tool itself (see Section 5). Analytics data exists only in this aggregated, non-identifying form.

4. What the website does not do

Each of the following has been verified against the website’s source code as of the effective date:

• It sets no cookies for visitors.
• Beyond the visit-counting described in Section 3, it contains no advertising, remarketing, or social-media tracking pixels, no tag manager, no session recording, no heatmaps, and no chat widget.
• It stores nothing in your browser (no localStorage or similar).
• Beyond the analytics script described in Section 3, it loads no fonts or scripts from third-party content networks — the website’s fonts are served from our own site, so opening our pages does not send your visit to a font provider.
• It offers no user accounts, no logins, and processes no payments.

5. Third-party services

Google (appointment scheduling) — the one place visitor data leaves this website. Our booking page (/begin/) includes Google’s appointment-scheduling tool so you can book a Fit Call.

• On desktop-width screens, the scheduling tool loads when the page opens. That means that by opening the booking page, your IP address, browser information, and any Google cookies already on your device reach Google — before you interact with anything.
• On phones and other narrow screens, the embedded tool does not load at all; nothing about your visit reaches Google unless you tap the booking button, which opens our booking page hosted by Google in a new tab.
• Anything you type into the scheduling tool goes to Google, not to this website. Google provides this scheduling service to our practice under our Google Workspace agreement, which includes a signed Business Associate Agreement.

Plausible (analytics). Plausible Analytics processes the measurement data described in Section 3 on our behalf. Plausible is an EU-based service that stores its data in the European Union, sets no cookies, does not sell or share data, and does not track visitors across websites. What it receives is listed in Section 3; it receives nothing you type anywhere, and nothing from the booking tool.

Patient portal (Charm). The footer links to our patient portal, operated by our electronic health records vendor, Charm, at its own website. Clicking the link takes you out of our website; no information about you is passed in the link. Once there, Charm’s own privacy practices apply.

Map links. Our contact page links to Google Maps and Apple Maps using our own office address. Nothing about you is included in those links; following one takes you to that provider’s service under its own policies.

Hosting (Kinsta / Cloudflare). Described in Section 3. These providers process technical log data on our behalf to deliver and secure the website.

No third party other than those listed in this section receives information from this website.

6. Health information, patients, and where clinical care lives

Nothing on this website collects or stores health information. Becoming a patient — intake, medical history, records, lab results, clinical communications — happens through our clinical systems, principally our EHR (Charm), not through this website. The Fit Call itself is a telephone conversation with our Practice Manager; booking it through the scheduling tool involves only the scheduling details described in Section 5.

If you email or call us using the contact links on the website, your message goes directly to our practice through our phone and email systems, which we maintain under HIPAA business associate agreements with those providers. Please use those channels for scheduling and general questions; detailed clinical matters belong in a visit or the patient portal.

7. How we use and share the limited information that exists

The hosting logs described in Section 3 are used only to operate, secure, and troubleshoot the website. The aggregated analytics data described in Section 3 is used only to understand how the website is used. We do not sell any information, share it for advertising, or use it for profiling. We would disclose log information only if required by law or as necessary to investigate abuse of the website.

8. Your choices and browser privacy signals

The website sets no cookies, so there is nothing for cookie controls to manage. Our analytics tool does not identify you or follow you across the web, and it operates the same whether or not your browser sends a Do Not Track or Global Privacy Control signal — there is no cross-site tracking to opt out of. If your browser or a privacy extension blocks the analytics script, the website works exactly the same and your visit simply is not counted; we deliberately do not attempt to circumvent content blockers. If you prefer that no data reach Google when booking, use a narrow-screen device as described in Section 5, or call us at +1-801-746-3555 to schedule by phone.

9. Data retention

The website itself retains nothing about visitors. Hosting and security logs are retained by our hosting provider according to its operational schedules; we do not maintain our own copy of visitor logs. Aggregated analytics data — page counts and the other non-identifying measurements described in Section 3 — is retained in our Plausible account for as long as we use the service, and contains nothing that identifies any visitor.

10. Security breach notification

In the unlikely event of a security breach affecting personal information we hold in our computerized systems, we will investigate and, where notification is required, notify affected Utah residents in the manner and timeframe required by Utah’s Protection of Personal Information Act (Utah Code Title 13, Chapter 44), and notify any other authorities that law requires.

Note the unusual posture of this website: because it collects and stores no personal information, a breach of the website itself would have essentially nothing to disclose. This commitment describes our obligations for personal information the practice holds through any of its systems.

11. Who this website is for

Our practice provides in-person care in Murray, Utah, and telemedicine follow-up visits to established patients located in Utah. The website is intended for a Utah audience and is not directed to residents of other states or countries. We do not target our services or this website to residents of any other jurisdiction, and we do not process personal information in a manner subject to the European Union’s GDPR.

12. Children

The website is intended for adults. We do not knowingly collect personal information from anyone, including children under 13 — the website collects no personal information from any visitor. If you believe a child has submitted information to us through some channel, contact us and we will delete it.

13. Changes to this policy

If our website’s data practices change — for example, if we add a newsletter, change our analytics practices, or use a new booking provider — we will update this policy before the change takes effect, post the updated policy at this address with a new effective date, and, for material changes, provide conspicuous notice on the website.

14. Contact us

Questions about this policy or about how we handle information:

Full Circle Care (Leslie Peterson, N.D., P.C.)
Attn: Practice Manager
925 E Executive Park Dr Ste G, Murray, UT 84117
+1-801-746-3555 · info@fullcirclecare.com