1. Who We Are
This Privacy Policy explains how information may be collected, used, and shared when you visit this website or use its website features. It does not replace any separate patient Notice of Privacy Practices or other clinical consent documents that may apply to your care.
This website, https://drdonnaficaro.com, is operated by Dr. Donna Ficaro, a virtual functional medicine practice serving women in Illinois. In this policy, “we,” “our,” and “us” refer to Dr. Donna Ficaro and her practice.
2. Information We Collect Through This Website
Discovery Call Sign-Up
If you sign up for a Discovery Call through this website, we collect the information you provide in the sign-up form: your first name, last name, and email address.
Please do not submit medical information, symptoms, test results, or other sensitive health information through this website sign-up form. It is intended for scheduling and initial contact, not for communicating clinical information.
Technical Information
When you visit the website, technical information may be collected automatically by the website, its hosting provider, or services used to operate or protect it. Depending on the services and settings in use, this may include your IP address, browser and device information, pages visited, and information about how your browser interacts with the website.
3. How We Use Website Information
Information collected through this website may be used to:
-
- Respond to your Discovery Call sign-up or scheduling request.
-
- Communicate with you about your inquiry.
-
- Operate, maintain, and protect the website.
-
- Identify technical issues and help prevent spam, fraud, or unauthorized activity.
-
- Meet applicable legal obligations.
We do not ask you to provide clinical details through the Discovery Call sign-up form.
4. Appointment Scheduling and Google Services
The website provides access to Google scheduling services for Discovery Call appointments. When you follow a scheduling link, you may interact directly with Google. Google may collect information needed to provide the scheduling service, such as your name and email address, under Google’s privacy practices and terms.
Please review the privacy information provided by Google when using its services. Information you submit through Google’s scheduling service is subject to Google’s privacy practices and any applicable arrangements with our practice.
5. Cookies and Website Technologies
This website uses cookies and similar technologies. These technologies may be used to support website functionality, security, performance, and services provided by our website hosting, security, scheduling, and other service providers.
Cookies and similar technologies may collect technical information such as browser or device information, IP address, pages visited, or information about how you interact with the website. The specific cookies and technologies used may change as website features, plugins, hosting services, security services, or other third-party services are updated.
We do not use this Privacy Policy to identify every individual cookie that may be placed on your device because the specific cookies and technologies may vary over time and by the services being used.
You can manage or delete cookies through your browser settings. Blocking or disabling cookies may affect some website features or functionality.
6. Website Hosting, Security, and Plugins
This website is hosted through GoDaddy and uses WordPress. It also uses website plugins and services, including Wordfence for website security.
These providers may process technical information, such as IP addresses, browser information, or security-related data, as needed to provide their services. The information collected and the length of time it is retained depend on the provider’s services, settings, and applicable policies.
We do not control the privacy practices of independent third-party providers. Please review their privacy policies for further information.
7. Patient Information and Clinical Services
Information you provide in connection with clinical care is handled separately from the general website Discovery Call sign-up form.
Our virtual practice uses third-party services for patient care and practice operations, including:
-
- Patient Ally: for patient intake forms and communication between the patient and practice.
-
- Office Ally 24/7: electronic medical record system: for maintaining patient clinical records.
-
- Doxy.me: for virtual consultations. If a consultation is recorded or transcribed, the applicable consent process is used. Recordings or transcripts that are retained are downloaded to the patient’s clinical chart.
These services may process or store information necessary to provide their services. Their handling of information is subject to applicable agreements, privacy and security practices, and legal requirements.
Please use the designated patient-care systems—not the general website sign-up form—to provide information needed for your care.
This website Privacy Policy is not a substitute for a separate Notice of Privacy Practices or other clinical privacy and consent documents that may apply to you.
8. How Information May Be Shared
We do not sell personal information collected through the website’s Discovery Call sign-up form.
Information may be shared with service providers when reasonably necessary to operate the website, manage scheduling, provide security, or respond to your request. These providers may use or process information to perform services for us, subject to applicable arrangements and law.
Information may also be disclosed when required by law, to respond to valid legal process, to protect rights or safety, or in connection with a business or operational change where permitted by law.
Clinical information is handled under the privacy requirements and agreements applicable to patient care. Where HIPAA applies, disclosures of protected health information are subject to HIPAA and other applicable requirements.
For more information about patient health information and your privacy rights, please read our Notice of Privacy Practices.
9. Data Security
We use website hosting, security tools, and third-party systems to help protect information. However, no website, electronic transmission, or storage system can be guaranteed to be completely secure.
Please avoid sending sensitive medical or personal information through general website forms or ordinary email. Use the designated patient communication systems for clinical matters.
10. Data Retention
Website inquiry information may be retained for as long as reasonably necessary to respond to your request, maintain business records, address disputes, and meet applicable legal obligations.
Clinical records are maintained through our electronic medical record system and retained in accordance with applicable legal requirements and our record-retention policies. The retention period may differ depending on the type of record and the requirements that apply.
Third-party providers may retain information under their own policies and applicable agreements or legal obligations.
11. Your Choices and Privacy Requests
You may choose not to submit information through the website. If you have submitted information through the Discovery Call form and have questions about the information you provided, please contact the practice using the contact information on this website.
You can manage cookies through your browser settings. Depending on applicable law, you may have additional rights concerning personal information. Requests involving clinical records may be subject to separate procedures and legal requirements.
12. Third-Party Websites and Services
This website may link to third-party websites or services, including appointment scheduling services. We are not responsible for the privacy, security, or content practices of those independent services. When you leave this website, review the privacy policy of the service you are using.
13. Children’s Privacy
This website is intended for adults seeking information about our services. It is not designed to solicit personal information from children. If you believe a child has submitted personal information through this website, please contact the practice.
14. Changes to This Privacy Policy
We may update this Privacy Policy as our website, services, or practices change. The effective date at the bottom of this page indicates when this version was last updated. Please review this page periodically for changes.
15. Contact Us
If you have questions about this Privacy Policy or the website’s handling of information, please contact:
Dr. Donna Ficaro
Website: https://drdonnaficaro.com
Email: drdonna@drdonnaficaro.com
You may also visit our Contact page.
Please do not include sensitive medical information in a general privacy inquiry.
Effective Date: 09/30/2026