Privacy Policy

1. Introduction

Iboga Wellness Institute (“IWI,” “Institute,” “we,” “us,” or “our”), operated by IBO Trust, is committed to protecting your privacy and handling your personal and health information with the highest standards of confidentiality and security.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, submit intake forms, or communicate with us. Given the sensitive nature of health information and medical services, we apply rigorous privacy protections to all data we collect.

By using our website or services, you consent to the data practices described in this policy.

2. Types of Information We Collect

2.1 Personal Information

We collect personal information that you voluntarily provide to us, including:

Contact Information:

• Full name
• Email address
• Phone number
• Mailing address

Account Information:

• Inquiry and correspondence records
• Communication preferences
• Date and time of contact

2.2 Health Information

IMPORTANT: We collect sensitive health information through intake forms and communications. This information is subject to enhanced privacy protections.

Health information may include:

• Medical history
• Current medications and supplements
• Substance use history
• Mental health history
• Psychiatric treatment history
• Current symptoms and conditions
• Previous treatment experiences
• Laboratory test results (when applicable)
• Physician contact information
• Insurance information (if provided)
• Family medical history
• Allergies and contraindications

Note: While our website intake forms collect preliminary health information, comprehensive medical records are collected separately once you become a patient. Website submissions do not create a HIPAA-covered relationship until you enter into a formal treatment agreement.

2.3 Information Collected Automatically

When you visit our website, we automatically collect:

Usage Data:

• Pages visited and content viewed
• Time spent on pages
• Click patterns and navigation
• Referring website
• Date and time of visits
• Search queries entered on our site

Device Information:

• IP address
• Browser type and version
• Operating system
• Device type and screen resolution
• Language preferences
• Geographic location (general area, not precise)

Cookies and Tracking Technologies:

• Session cookies
• Persistent cookies
• Analytics cookies
• Preference cookies

2.4 Information from Third Parties

We may receive information about you from:

• Healthcare providers (with your authorization)
• Emergency contacts
• Family members (when you provide consent)
• Payment processors (for treatment arrangements)

3. How We Use Your Information

3.1 Treatment Evaluation and Coordination

We use your information to:

• Evaluate your suitability for ibogaine therapy
• Conduct medical screening and risk assessment
• Coordinate pre-treatment medical evaluations
• Communicate with you about treatment options
• Schedule consultations and appointments
• Provide ongoing patient support

3.2 Health and Safety

We use health information to:

• Assess medical contraindications and risks
• Determine treatment eligibility
• Ensure safe administration of therapy
• Monitor for potential drug interactions
• Coordinate emergency medical care if needed
• Maintain medical records for continuity of care

3.3 Communication

We use your contact information to:

• Respond to inquiries and questions
• Provide information about our services
• Send appointment confirmations and reminders
• Deliver educational materials and newsletters (with consent)
• Communicate important updates or safety information
• Follow up after initial contact

3.4 Website Improvement and Analytics

We use automatically collected information to:

• Analyze website usage and visitor behavior
• Improve website functionality and user experience
• Understand which content is most helpful
• Optimize website performance
• Identify and fix technical issues

3.5 Legal and Safety Obligations

We may use information to:

• Comply with legal and regulatory requirements
• Protect the rights, safety, and property of IWI, patients, and others
• Prevent fraud, abuse, or misuse of services
• Enforce our Terms & Conditions
• Respond to legal process (subpoenas, court orders)

3.6 Research and Quality Improvement

With appropriate safeguards and de-identification:

• Contribute to ibogaine therapy research
• Improve treatment protocols
• Measure treatment outcomes
• Advance medical knowledge (only with explicit consent and anonymization)

4. How We Share Your Information

4.1 We Do Not Sell Your Information

We do not sell, rent, or trade your personal or health information to third parties for marketing purposes.

4.2 Service Providers

We share information with trusted third-party service providers who perform functions on our behalf:

Supabase (Data Storage):

• Purpose: Secure storage of intake forms and health information
• Data collected: All information submitted through website forms
• Privacy Policy: https://supabase.com/privacy
• Security: Industry-standard encryption and access controls

Email Marketing Platforms:

• Purpose: Newsletter delivery and communications
• Data collected: Email addresses, names, engagement metrics
• Use: Only with your explicit consent for marketing communications

Analytics Services:

• Purpose: Website analytics and usage tracking
• Data collected: Anonymous usage data, device information
• Google Analytics: https://policies.google.com/privacy

Metricool:

• Purpose: Social media and marketing analytics
• Data collected: Engagement metrics from our social content
• Privacy Policy: https://metricool.com/privacy-policy/

4.3 Medical Professionals

With your authorization, we may share health information with:

• Your personal physicians
• Referring healthcare providers
• Medical consultants evaluating your case
• Emergency medical personnel (in emergencies)
• Laboratory and diagnostic services

4.4 Legal Requirements

We may disclose information when required by law or to:

• Comply with court orders, subpoenas, or legal process
• Cooperate with law enforcement investigations
• Protect against legal liability
• Enforce our rights and agreements
• Prevent harm to individuals or property

4.5 Business Transfers

If IBO Trust is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you of any such change and provide choices regarding your information.

4.6 Emergency Situations

We may disclose health information without authorization in medical emergencies to:

• Provide necessary medical treatment
• Notify family members or emergency contacts
• Coordinate with emergency medical services

4.7 With Your Consent

We may share information for other purposes with your explicit consent.

5. Third-Party Services and Links

5.1 Third-Party Websites

Our website may contain links to external websites, research articles, or resources. We are not responsible for the privacy practices of third-party sites. We encourage you to review their privacy policies before providing information.

5.2 Third-Party Privacy Policies

Key Third-Party Services:

• Google Analytics: https://policies.google.com/privacy
• Supabase: https://supabase.com/privacy
• Metricool: https://metricool.com/privacy-policy/

5.3 Social Media

If you interact with us on social media platforms, your interactions are governed by the privacy policies of those platforms in addition to this policy.

6. Cookies and Tracking Technologies

6.1 What Are Cookies?

Cookies are small text files stored on your device that help websites remember your preferences and track activity.

6.2 Types of Cookies We Use

Essential Cookies:
Required for website functionality. Enable basic features like secure areas and form submissions.

Analytics Cookies:
Help us understand website usage through anonymous statistics (Google Analytics).

Preference Cookies:
Remember your settings and preferences for a personalized experience.

Marketing Cookies:
Track activity to measure the effectiveness of our educational content and outreach.

6.3 Cookie Management

You can control cookies through your browser settings:

• Block all cookies
• Accept only certain cookies
• Delete cookies after each session
• Receive notifications before cookies are stored

Note: Disabling cookies may affect website functionality.

Opt-Out Resources:

• Google Analytics: https://tools.google.com/dlpage/gaoptout
• Browser-specific settings: Consult your browser’s help documentation

7. Data Security

7.1 Security Measures

Given the sensitive nature of health information, we implement comprehensive security measures:

Technical Safeguards:

• SSL/TLS encryption for data transmission
• Secure data storage through Supabase
• Password protection and authentication
• Regular security audits and updates
• Firewall and intrusion detection systems
• Encrypted backups

Administrative Safeguards:

• Limited access to health information
• Staff training on privacy and security
• Confidentiality agreements with all personnel
• Regular privacy compliance reviews
• Incident response procedures

Physical Safeguards:

• Secure facilities and access controls
• Protected computer workstations
• Secure disposal of physical records

7.2 Limitations

While we implement industry-standard security measures, no system is 100% secure. We cannot guarantee absolute security of your information. You are responsible for:

• Maintaining confidentiality of any login credentials
• Using secure internet connections
• Protecting your devices from unauthorized access

7.3 Data Breach Response

In the event of a data breach affecting your personal or health information:

• We will investigate the incident promptly
• Notify affected individuals as required by law
• Take remedial measures to prevent future breaches
• Cooperate with regulatory authorities
• Provide guidance on protective steps you can take

8. Health Information Privacy (HIPAA-Style Protections)

8.1 Enhanced Privacy Standards

While website communications may not be subject to HIPAA (Health Insurance Portability and Accountability Act) requirements until you become a formal patient, we apply HIPAA-style privacy protections to all health information we collect.

8.2 Minimum Necessary Standard

We limit access to health information to the minimum necessary for:

• Treatment evaluation and coordination
• Patient safety and medical decision-making
• Legal compliance
• Quality improvement

8.3 Patient Rights Regarding Health Information

You have the right to:

• Access your health information
• Request corrections to inaccurate information
• Request restrictions on certain uses or disclosures
• Receive confidential communications
• Request an accounting of disclosures
• Receive a paper copy of this Privacy Policy

8.4 Authorization for Use

We will not use or disclose your health information for purposes beyond treatment, safety, legal compliance, and necessary business operations without your written authorization.

9. Data Retention

9.1 Retention Periods

We retain information for as long as necessary to:

• Provide services and support
• Maintain medical records for continuity of care
• Comply with legal and regulatory requirements
• Resolve disputes and enforce agreements

Typical Retention Periods:

• Intake forms and initial inquiries: Minimum 7 years
• Patient medical records: As required by medical record retention laws
• Contact information: Until you request deletion or unsubscribe
• Website usage data: As specified by analytics providers
• Legal and financial records: As required by law

9.2 Secure Deletion

When information is no longer needed, we delete or anonymize it using secure methods to prevent unauthorized recovery.

10. Your Rights and Choices

10.1 Access and Update Information

You have the right to:

• Request access to the personal and health information we hold about you
• Request corrections to inaccurate or incomplete information
• Update your contact information

To exercise these rights: Email us at contactus@theibogainstitute.org with your request. We will respond within 30 days.

10.2 Communication Preferences

Email Communications:

• Unsubscribe from newsletters using the link in any email
• Opt out of marketing communications while receiving administrative notices
• Update preferences by contacting us

Important: You cannot opt out of essential communications related to treatment evaluation, safety, or legal notices.

10.3 Request Deletion

You may request deletion of your information, subject to:

• Legal and regulatory retention requirements
• Medical record retention obligations
• Legitimate business needs
• Ongoing treatment relationships

Note: Deletion may not be immediate and some information may be retained in backup systems for a limited time.

10.4 Restriction of Use

You may request restrictions on how we use or disclose your health information. We will accommodate reasonable requests when possible.

10.5 Confidential Communications

You may request that we communicate with you in specific ways or at specific locations to protect your privacy.

11. Special Protections for Sensitive Information

11.1 Substance Use and Mental Health Information

Information about substance use disorders and mental health treatment receives enhanced privacy protections under federal and state laws. We will not disclose this information without your specific authorization except as required by law or for treatment purposes.

11.2 HIV/AIDS Information

Information related to HIV/AIDS status receives special privacy protections and will not be disclosed without specific authorization.

11.3 Genetic Information

We do not collect genetic information. If provided, it receives the highest level of privacy protection.

12. International Data Transfers and Mexican Operations

12.1 Data Location

Your information is primarily stored in the United States. However, because our treatment facilities are located in Mexico:

• Some information may be transferred to Mexico for treatment purposes
• Mexican data protection laws may differ from US laws
• Treatment in Mexico is governed by Mexican medical regulations

12.2 Cross-Border Data Transfers

By using our services, you consent to:

• Transfer of your information to the United States and Mexico
• Processing of your information under US and Mexican laws
• Storage of data on secure servers that may be located in various jurisdictions

13. Children’s Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect information from minors. If we discover that a minor has provided information, we will delete it immediately. If you believe a minor has provided us with information, please contact us immediately.

14. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time. Changes are effective immediately upon posting. We will notify you of material changes by:

• Updating the “Last Updated” date
• Posting a notice on our website
• Sending email notification (for significant changes)

Your continued use of our services after changes constitutes acceptance of the updated policy.

We encourage you to review this policy periodically, especially before providing health information.

15. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or your privacy rights:

Iboga Wellness Institute
IBO Trust
1201 Dublin Rd.
Columbus, OH 43215
Email: contactus@theibogainstitute.org
Website: https://theibogainstitute.org

Privacy-Specific Inquiries:
Email: contactus@theibogainstitute.org
Subject Line: Privacy Inquiry

Response Time: We will respond to privacy requests within 30 days (or sooner as required by applicable law).

Complaints: If you believe your privacy rights have been violated, you may file a complaint with us or with relevant regulatory authorities. We will not retaliate against you for filing a complaint.

17. Governing Law

17.1 US Jurisdiction

This Privacy Policy is governed by the laws of the State of Ohio and applicable federal laws, without regard to conflict of law principles.

17.2 Dispute Resolution

Privacy disputes shall be subject to the jurisdiction of state and federal courts in Franklin County, Ohio.

18. Acknowledgment

BY USING THE IBOGA WELLNESS INSTITUTE WEBSITE OR PROVIDING US WITH PERSONAL OR HEALTH INFORMATION, YOU ACKNOWLEDGE THAT:

1. You have read and understood this Privacy Policy
2. You understand how we collect, use, and protect your information
3. You consent to our data practices as described
4. You understand the international nature of our operations
5. You understand enhanced privacy protections for health information
6. You have been informed of your privacy rights

Appendix: Privacy Quick Reference

What we collect:

• Contact information, health information, website usage data, device information, cookies

How we use it:

• Treatment evaluation, safety assessment, communication, website improvement, legal compliance

Who we share with:

• Service providers (Supabase, email platforms, Google Analytics, Metricool), medical professionals (with authorization), legal authorities when required

Your rights:

• Access, correct, delete information; control communications; request confidential communications

Security:

• SSL encryption, secure storage, HIPAA-style protections for health information, limited access, staff training

How to contact us:

• Email: contactus@theibogainstitute.org
• Mail: 1201 Dublin Rd., Columbus, OH 43215

Special protections:

• Enhanced privacy for substance use, mental health, and HIV/AIDS information
• HIPAA-style protections even before formal patient relationship
• California and other state privacy rights honored

Last Updated: 11/25/2025
Effective Date: 08/23/2025

This privacy policy applies to website use and preliminary communications. Formal patients receive additional privacy notices under separate treatment agreements.