Privacy Policy & Compliance Notice

HIPAA Notice of Privacy Practices & GDPR Privacy Statement

Effective Date: June 2, 2026

Data Protection Officer / Privacy Official: Aubrey Richardson, RN, IBCLC

Contact: [aubreyibclc@gmail.com] | [+33699424430]

Please review this notice carefully. It describes how your medical and personal information may be used, disclosed, and accessed under US Federal Law (HIPAA) and EU Law (GDPR).

1. Scope of Our Practice

This notice applies to all health information and personal data collected across my specialized services as a Registered Nurse (RN), International Board Certified Lactation Consultant (IBCLC), and Certified Medical Interpreter.

Because I operate in an intersection of clinical care, specialized feeding support, and linguistic translation, your data is handled strictly within the professional ethics of these combined fields.

2. Your Rights (HIPAA & GDPR)

You have extensive rights over your data. Because we adhere to both US and EU frameworks, we honor whichever law grants you the strongest protection:

Your Right	What It Means for You
Access & Portability	You can request an electronic or paper copy of your medical and personal records. Under GDPR, we will provide this data in a structured, machine-readable format.
Correction / Rectification	If you believe your health or personal data is inaccurate or incomplete, you can request an update.
The Right to Be Forgotten (GDPR)	If you are covered by GDPR, you can request that we completely erase your personal data when it is no longer required for legal or clinical retention purposes.
Restrict Processing	You can ask us to limit how we use or share your data for treatment or operations. If you pay for a service entirely out-of-pocket, you have the absolute right to restrict sharing that data with your health insurer.
Confidential Communications	You can choose how we contact you (e.g., specific phone number, secure email, or encrypted messaging platforms).
Accounting of Disclosures	You can request a list of the times we’ve shared your data, with whom, and why, for up to 6 years prior to your request date.

3. How We Use & Share Your Data

We typically use and disclose your information for three core professional categories:

Clinical Care & Treatment

We use your health information to provide nursing care and lactation therapy. We may share information with your OB/GYN, pediatrician, or primary care provider to coordinate care for you and your infant.

Interpretation Services

As a medical interpreter, information processed during translation sessions is strictly confidential. Data is only utilized to bridge communication gaps between you and your healthcare team, and is never logged or stored permanently unless explicitly required as a part of your clinical record.

Healthcare Operations & Billing

We use your information to run our practice, improve client care, and process invoices or insurance claims for the services rendered.

4. Legal Grounds for Data Processing (GDPR Compliance)

If you reside within the European Economic Area (EEA), our legal bases for processing your data under GDPR include:

• Consent: You give explicit consent for us to process your health data (Special Category Data) regarding lactation and nursing support.
• Contractual Obligation: Processing is necessary to fulfill our service agreement with you.
• Vital Interests & Public Good: We may share minimal information if required to prevent a serious, imminent threat to the health or safety of a parent or infant.

International Data Transfers: If you are based in the EU, your data may be transferred to and stored on secure, HIPAA-compliant servers located in the United States. We use Standard Contractual Clauses (SCCs) and end-to-end encrypted platforms to ensure your data receives an equivalent level of protection to EU frameworks.

5. What We Will Never Do

Without your explicit, written authorization, we will never:

• Sell your personal or medical data to third parties.
• Use your health information for marketing or fundraising initiatives.
• Share your details with family members or friends unless you explicitly tell us we can.

6. How to File a Complaint

If you believe your privacy rights have been violated, you can file a complaint directly with us using the contact information at the top of this page.

You will not be penalized or retaliated against for filing a complaint.

• In the US: You may file a formal complaint with the U.S. Department of Health and Human Services Office for Civil Rights by visiting www.hhs.gov/ocr/privacy/hipaa/complaints/.
• In the EU: You have the right to lodge a complaint with your local Data Protection Authority (DPA) within the European Economic Area.