Privacy Policy — Lotus Wellness

Lotus Wellness ("we," "our," "us") provides Targeted Service Coordination ("TSC") to individuals with developmental disabilities in Idaho. This Privacy Policy explains what information we collect through this website (lotustsc.com), why we collect it, how we protect it, and your choices.

1. Information we collect

Intake & referral information you submit through forms — including the individual's name, date of birth, region/city, services needed, current benefits, income (if you choose to share), urgency, and any documents you upload (e.g., IEPs, support plans).
Contact information — your name, email, phone, relationship to the individual, and preferred contact method.
Communications — messages you send us through forms or email.
Technical data — limited server logs (IP address, user agent, timestamps) used to operate and secure the site.

2. How we use information

To respond to your intake, referral, or contact request.
To evaluate eligibility for Targeted Service Coordination and coordinate services on behalf of the individual.
To send transactional emails (confirmations, status updates, scheduling) related to your request.
To comply with legal, regulatory, and Medicaid requirements.

3. Sensitive & health information

Some information you submit (diagnoses, services received, benefits) may be considered protected health information ("PHI") under HIPAA once a service relationship is established. We handle that information consistent with our Notice of Privacy Practices.

4. How we share information

We do not sell or rent your information. We share it only:

With Callie Henderson and authorized Lotus Wellness staff.
With your written authorization — for example, with Medicaid, the Idaho Department of Health and Welfare, providers, schools, or family members you designate.
With vetted service providers we use to operate the site and email (hosting, transactional email, secure file storage). These providers process data on our behalf and are bound by confidentiality and security obligations.
When required by law (court orders, subpoenas, mandated reporting).

5. Storage & security

Form submissions and uploaded documents are stored in a private, access-controlled database and storage bucket. Only authenticated staff with assigned roles can view them. Uploaded files are accessed via short-lived signed links. We use TLS for all data in transit.

6. Retention

We retain intake submissions and related records as long as needed to provide services and as required by Medicaid and state recordkeeping rules (generally at least six years from the last date of service). You may request earlier deletion subject to those legal obligations.

7. Your choices & rights

Request a copy of the information we hold about you.
Request correction of inaccurate information.
Request deletion or restriction (subject to retention obligations).
Withdraw communication consent at any time — see our Communication Consent page or email us directly.

8. Children

Our services frequently involve minors. Intake information about a child is submitted by a parent or legal guardian. We do not knowingly collect information directly from children without parental involvement.

9. Changes

We may update this Policy from time to time. Material changes will be posted here with a new "Last updated" date.

10. Contact

Lotus Wellness — callie@lotustsc.com
Serving Idaho Regions 5, 6 & 7.