Last Updated: March 22, 2026
WITHiN TCM ("we," "us," or "our"), operated by Kelly Duignan, Licensed Acupuncturist, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website or use our services. By using our website, you consent to the data practices described in this policy.
We may collect basic personal information that you voluntarily provide when you email us at info@withintcm.com, such as your name, email address, and phone number. We do not offer online signup or appointment booking through our website. All health-related information is collected only during in-person consultations. In keeping with privacy protections consistent with HIPAA standards, we do not collect, store, or process any health information or medical records electronically through our website or email. Please do not send protected health information via email. If you inadvertently include health details in an email, we will transfer that information to your secure physical record and delete the electronic copy. We also automatically collect certain information about your device, including IP address, browser type, referring/exit pages, and operating system through cookies and similar technologies to improve our website functionality.
Our website uses the following third-party services that may collect data about your visit:
Google Fonts: We use Google Fonts to display typography on our website. When you load a page, your browser connects to Google's servers, which may collect your IP address, browser information, and referring URL. Google's privacy policy applies to this data collection.
Google Maps: Our contact page displays embedded Google Maps to show our office locations. Google may collect location data, cookies, and device identifiers through this service. Google's privacy policy governs their use of this data.
Repuso: We use the Repuso widget to display patient reviews. Repuso may set cookies and collect visitor data including IP address and browsing behavior. Repuso's privacy policy governs their data practices.
We do not currently honor Do Not Track browser signals, as there is no industry standard for compliance. You may disable cookies through your browser settings, though this may affect website functionality.
Your basic contact information is used primarily to communicate with you about scheduling appointments, respond to your emails, send appointment reminders, and address your general inquiries. Our practice maintains privacy protections consistent with HIPAA standards, and detailed health information is only collected and documented during in-person visits, never through our website or electronic communications. We may also use your information to comply with legal obligations, resolve disputes, and enforce our agreements.
We do not sell, trade, or otherwise transfer your personally identifiable information to outside parties except as required by law or with your explicit consent. We implement appropriate security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction and retain your information only as long as necessary to fulfill the purposes outlined in this policy. All detailed health information is maintained only in our secure physical records at our practice locations.
In accordance with the New York SHIELD Act, in the event of a data breach involving your private information, we will notify affected individuals in the most expedient time reasonable and without unreasonable delay, consistent with the legitimate needs of law enforcement and any measures necessary to determine the scope of the breach.
Our website is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at info@withintcm.com and we will promptly delete such information.
This website privacy policy is separate from our HIPAA Notice of Privacy Practices, which governs how we handle protected health information collected during in-person clinical visits. Our HIPAA Notice of Privacy Practices is available at our office locations and upon request by emailing info@withintcm.com.
You have the right to access, correct, or delete your personal information by contacting us at info@withintcm.com. You may also opt out of receiving communications from us at any time. We may update this Privacy Policy periodically, and changes will be effective upon posting to our website. If you have questions about this Privacy Policy, please contact Kelly Duignan at WITHiN TCM, 151 West 19th St, 11th Floor, Suite 1103, New York, NY 10011. Phone: 646.383.3738.