What we collect, and what we refuse to do with it.

Who we are

Rootworth is a telehealth classical Chinese herbal medicine practice operated by Nat Sol Inc. in California. Our website is rootworth.org. Rootworth is a separate brand from Makari Wellness; this policy covers rootworth.org only.

If you have a question about anything here, reach us via the intake page at https://rootworth.org/intake/.

What we collect

• Intake and consultation information. When you begin an intake you are handed off to AcuBliss, our booking and clinical-records partner, and the health history you enter there is collected on their platform under our account. It typically includes your name, contact details, symptoms, medical and medication history, and anything else you choose to tell us.
• Email and correspondence. If you email us or sign up for a newsletter, we keep your address and the messages you send.
• Website analytics. Standard web measurement — pages viewed, approximate region, device and browser type, and how you arrived. This is collected through Google Analytics 4 and is not linked to your intake record.
• Server logs. Our host records IP addresses and request times for security and abuse prevention.

We do not ask for payment-card numbers on this website.

Cookies and analytics

We use Google Analytics 4 with Google Consent Mode. Analytics cookies help us see which pages are read and where people get stuck; they do not tell us who you are.

The banner that appears on your first visit lets you accept or decline. Your choice is stored in a vd_consent cookie for 180 days and you can change it any time from the Cookie preferences control in the corner of any page. If you decline, advertising and measurement storage stays switched off.

We run no advertising cookies, no remarketing pixels, and no cross-site ad trackers on rootworth.org.

How we use information

• To read your pattern and compose, adjust, and follow up on a herbal formula.
• To answer your questions and arrange consultations and re-exams.
• To send you the things you asked to receive, and nothing you did not.
• To keep the site working, secure, and readable.
• To meet our professional record-keeping and legal obligations.

Who we share it with

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We disclose information only to:

• AcuBliss — our booking, intake, and clinical-records processor.
• Google Analytics — website measurement, as described above.
• Our email provider — to deliver correspondence and any newsletter you asked for.
• Our web host and security services — to run and protect the site.
• Anyone you direct us to, such as another provider on your care team.
• A court or regulator, where the law requires it.

Each of these acts as our service provider and is permitted to use your information only to perform that service for us.

Health information

Information you give us during intake, consultation, and follow-up is confidential medical information. We handle it under California's medical-privacy law, including the Confidentiality of Medical Information Act, and under the professional confidentiality obligations that apply to a licensed practitioner. Consultations are conducted by telehealth, which means your information travels over the internet; we use encrypted connections and vetted platforms, and no internet transmission can be promised to be perfectly secure.

Website analytics are kept entirely separate from clinical records. We never load analytics or advertising tools inside the intake platform.

How long we keep it

Clinical records are retained for the period required of a California licensed practitioner and then destroyed securely. Email correspondence is kept as long as it is useful to your care or our business records. Analytics data is retained on Google's standard schedule. You can ask us to delete anything we are not required to keep.

Your California privacy rights

If you live in California you may ask us to tell you what personal information we hold about you and where it came from, to correct it, or to delete it. You may also opt out of any sale or sharing of personal information — we do neither, so there is nothing to opt out of, but the right stands. You will never be treated differently for exercising these rights.

To make a request, reach us via the intake page at https://rootworth.org/intake/ with enough detail for us to find your record. We will verify who you are before we act, and we will respond within the time the law allows. An authorised agent may make a request on your behalf with written permission.

Children

This website is not directed at children under 13 and we do not knowingly collect their personal information here. A parent or guardian who wants care for a minor should contact us directly, and we will handle that record as the parent's or guardian's to control.

Security

The site runs over HTTPS. Access to clinical records is limited to the practitioner and, where necessary, the platform that stores them. We keep software patched and monitored. No system is perfect; if a breach ever affected your information, we would notify you as the law requires.

Changes to this policy

When this policy changes we update the date at the top of the page. Material changes will also be noted on the site. Continuing to use rootworth.org after a change means the revised policy applies.

Contact

Questions, corrections, and privacy requests: reach us via the intake page at https://rootworth.org/intake/.