Website Privacy Policy

Frontline Wellness Effective date: October 12, 2026

Frontline Wellness ("we," "us," or "our") is a veteran-owned medical wellness clinic in Prosper, Texas. Our provider is Nicole Grasso Rehman, NP. This Privacy Policy explains how we collect, use, and protect information when you visit www.frontlinewellnesstx.com (the "Website").

1. This Policy and Your Health Information

This policy covers information collected through our Website. Once you become a patient, your protected health information (PHI) is governed by our HIPAA Notice of Privacy Practices, available at www.frontlinewellnesstx.com/notice-of-privacy-practices. You can also request a paper copy from our office by calling (469) 739-1714. That includes information in your medical record, lab results, prescriptions, and appointment history. If this policy and our Notice of Privacy Practices conflict about your health information, the Notice of Privacy Practices controls.

2. Please Don't Send Medical Information Through the Contact Form or Email

Our Website contact form and regular email are not meant for sending medical information. Please do not include symptoms, diagnoses, medications, lab results, or other health details in a contact form or email message. To discuss your health, call us at (469) 739-1714 or book an appointment. If you have a medical emergency, call 911.

3. Information We Collect

Information you give us - Contact form: your name, email address, phone number, and the message you write. - Appointment booking: when you book through our scheduler, you enter information directly into DrChrono, our electronic medical record (EMR) and scheduling system (see Section 7). - Phone calls and email: any information you share when you contact us.

Information collected automatically - Device and usage information: such as your IP address, browser type, device type, pages visited, time on page, referring website, and general location (city or region). - Cookies and similar technologies: see Section 5.

4. How We Use Information

We use information to: - respond to your questions and requests; - schedule and manage appointments; - operate, maintain, and secure the Website; - understand how visitors use our informational pages so we can improve them; and - comply with legal obligations.

We do not sell your personal information. We do not currently use advertising pixels or remarketing tools on our Website (see Section 6).

5. Cookies and Analytics

Cookies. Our Website is hosted on Squarespace, which places cookies needed for the site to work (for example, security and load balancing) and may place analytics cookies. You can find details in Squarespace's cookie policy.

Google Analytics. We use Google Analytics 4 to understand how visitors use our informational pages, such as our home, about, service, and blog pages. We have deliberately kept Google Analytics off our appointment booking page and our contact page. Google Analytics collects information such as pages viewed, approximate location, and device type. It does not receive the content of our contact form.

Google Tag Manager. We may use a tag manager, such as Google Tag Manager, to load the analytics tools described here. A tag manager itself does not build a profile of you.

Your choices. - Install the Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout - Block or delete cookies in your browser settings. Some parts of the Website may not work properly without cookies. - Use your browser's privacy settings, such as blocking third-party cookies or using private browsing. - Learn how Google uses data: https://policies.google.com/technologies/partner-sites

6. Advertising and Measurement Tools

Today, our Website does not use advertising tracking tools, such as the Meta Pixel or Google Ads conversion or remarketing tags.

In the future, we may use advertising and measurement tools like these to see how well our ads work and to show our ads to people who may be interested in our services. If we do:

  • they will run on our informational pages only, and never on our appointment booking or contact pages;
  • we will never share your health information with advertising platforms; and
  • we will update this Privacy Policy before adding any such tool, so you know what is used and how to opt out.

Ways to opt out of ad tracking:

7. Third-Party Services

We work with service providers that help us run the Website and our practice. Each has its own privacy policy.

  • Squarespace hosts our Website, processes contact form submissions, and sets cookies.
  • Google provides Google Analytics and Google Tag Manager.
  • DrChrono is our EMR and online scheduling system. When you book an appointment, the scheduler on our booking page is provided by DrChrono, and the information you enter goes directly to DrChrono. The scheduler is operated by DrChrono and may use its own cookies and analytics tools. Information you provide as a patient is protected under HIPAA and our Notice of Privacy Practices.
  • Social media (Instagram and Facebook): our Website links to our pages at @frontlinewellnesstx on Instagram and facebook.com/frontlinewellnesstx. If you click these links or interact with us on social media, Meta's privacy policies apply. Please don't share health information in comments or direct messages.

We may also share information when required by law, to protect our rights or safety, or as part of a business transfer.

Patient services. As part of your care, we may deliver medication to your home and send lab orders to LabCorp. These activities involve PHI and are covered by our Notice of Privacy Practices, not this policy.

8. Texas Privacy Laws

As a Texas health care provider, we follow the Texas Medical Records Privacy Act (Texas Health and Safety Code, Chapter 181, as amended by HB 300). This law protects your health information and limits how it can be used and disclosed, including a ban on selling PHI and rules for electronic disclosures.

The Texas Data Privacy and Security Act (TDPSA) gives Texas residents certain rights over personal data. Under the TDPSA, PHI collected by a HIPAA-covered entity is generally exempt, and small businesses have limited obligations. We do not sell personal data or use it for targeted advertising today. To the extent the TDPSA applies to us, you may contact us to: - ask what personal information we have about you from the Website; - ask us to correct or delete it; or - opt out of any sale of personal data or targeted advertising (we do not sell personal data, and we do not use targeted advertising today).

We will respond within 45 days. If we deny your request, you may appeal by replying to our response, and we will answer your appeal within 60 days. If you're still not satisfied, you may contact the Texas Attorney General.

9. Children's Privacy

Our services are for adults. Patients must be 18 or older, and our Website is not directed to anyone under 18. We do not knowingly collect personal information from minors through the Website. If you believe a minor has sent us information, contact us and we will delete it.

10. Security

We use reasonable administrative, technical, and physical safeguards to protect information. Our Website uses encrypted (HTTPS) connections. No website or email is 100% secure, which is another reason we ask you not to send health information by form or email.

11. Data Retention

We keep Website information only as long as needed for the purposes above or as required by law. Medical records are kept as required by Texas law and our Notice of Privacy Practices. We keep contact form messages only as long as needed to respond to you.

12. Changes to This Policy

We may update this policy from time to time. We will post the updated version on this page with a new effective date. For major changes, we may also post a notice on the Website.

13. Contact Us

Frontline Wellness 1630 W Prosper Trail, Suite 210 Prosper, TX 75078 Phone: (469) 739-1714 Email: nicole@frontlinewellnesstx.com