Privacy policy
Who this covers
This policy applies to the website at holisticautoimmune.com, which is published by The Holistic Rheumatologist LLC, and it was last updated on 10 September 2026. It covers the website alone, and the rest of this page describes what that means in practice. The clinical practice is at White River Health, where Dr. Luebker sees her own patients under an entirely separate set of obligations.
This website is separate from that practice in every sense that counts. It isn't a patient portal, nothing here forms part of any medical record, and reading this site doesn't create a doctor and patient relationship of any kind. That distinction recurs through the whole of this page and through the medical disclaimer as well.
We aren't set up to receive protected health information, and we ask you not to send us any. Please keep medical details about yourself out of anything you send, whether through a form on this site or by email, and take clinical questions to your own treating clinicians instead. If you've already sent us something clinical, tell us and we'll delete it without any fuss.
The short version
This is a static website, and that shapes everything below. It sets no cookies, it runs no analytics, it shows no advertising, and it loads no tracking scripts of any kind. We don't build profiles of readers, we don't sell or share data with advertisers, and we have no way to follow you across other websites.
That means you can read every page here without giving us anything at all. We only receive information about you if you choose to send it, by emailing us or by submitting a form. The sections below describe what happens in each of those two situations.
When you email us
If you email the address published on this site, we receive your message, your email address, and whatever else you choose to put in it. We use that only to reply and to keep a record of the correspondence. We don't add you to a mailing list because you emailed us, and we don't pass your message to anyone else.
Email isn't a secure medium, and it isn't appropriate for medical information about you. Anything you send travels through several systems that we don't control before it ever reaches us, which is reason enough on its own to keep it general. Please keep clinical details out of what you send us.
When you ask for the free guide
The one form on this site asks for your email address and nothing else at all. When you submit it, the address goes to a function running on this site's own servers, and from there to Resend, which is the service that sends our email. Resend receives your address, delivers the guide to you, and stores the address in a contact list held in our account.
Resend acts as a processor, handling that data on our behalf and under its own privacy policy. We keep your address for two reasons and we want to be plain about the second one. The first is to send you the guide you asked for, and the second is so that we can email you occasionally afterwards, which is why the form says so before you type anything rather than leaving you to find it here.
We don't sell your address, we don't rent it, and we don't pass it to anyone for their own marketing. Every email we send comes with a one-click unsubscribe link, and pressing it takes you off the list straight away without anyone here doing anything at all. Your mail program may also show its own unsubscribe button, which does the identical job.
You can reply and ask instead if you'd rather, and a person reads those replies. Unsubscribing stops the email, while asking us to delete removes your address from our list entirely and for good. We'll do either one without asking you why.
We don't ask for your name, your condition, your location, or anything about your health, and the guide form has nowhere to put any of that. It is one field and one field only. Please don't send us medical details about yourself by email either, for the reasons set out further down this page.
Hosting and server logs
This site is hosted by Vercel, and like every web host its servers record technical information about requests. That information includes IP addresses, timestamps, the pages requested, and browser details. These logs exist so that the service works and stays secure, and they're a normal part of how any website operates.
We don't use those logs to identify individual readers, and we don't combine them with anything else at all. Vercel retains them under its own policies as our hosting provider. This is the one form of data processing that happens whether or not you interact with the site, so it's worth stating plainly.
Links to other websites
This site links out to other websites, and among them are Dr. Luebker's YouTube channel and her social media profiles. Following one of those links takes you to a service run by somebody else, and that service will handle your data under its own terms rather than under this policy. YouTube in particular collects substantial information about viewers, and we have no control over that and no access to it.
Pages that cite research link to the source, and those links go to two places only. A citation with a DOI links through the DOI registry at doi.org, and one without a DOI links to its PubMed record instead. Both registries are operated by others, neither is under our control, and following either takes you outside this policy.
Every reference on this site is linked through one of those two routes rather than to a different publisher's website each time. That keeps the number of places a reader can be sent small and predictable. It also keeps this policy short, which is a smaller benefit and a real one.
We link to all of these services because the material there is useful, and not because we receive anything for the referral. We hold no affiliate arrangements relating to the links on this page. If that ever changes, this page will say so before the arrangement begins rather than afterwards.
Watching a talk on the page
A few pages here hold recordings of Dr. Luebker's talks, and those players come from YouTube, which is run by Google. Nothing is requested from Google until you press a button asking for the player, so opening one of those pages sends them nothing at all. That is the whole of the arrangement, and the cookie policy describes the mechanics of it in more detail.
Once you do allow a player, the frame is loaded from youtube-nocookie.com, which is Google's privacy-enhanced embed. Google then receives your IP address, the page you were on, and the technical details any web request includes, and it can see which video was loaded and played. It may also set cookies or similar storage on your device, and that data is held by Google under Google's own policies rather than under this one.
We receive no part of it. No report comes back to us about who watched what, and we have no access to any of it, which also means we cannot tell you what Google holds. A plain link to the same recording is under every player for anyone who would rather go to YouTube directly, and choosing that link keeps this site out of it entirely.
Children
This site isn't directed at children and we don't knowingly collect information from anyone under thirteen. If you believe a child has sent us personal information, please contact us and we'll delete it. We don't ask any visitor to state their age, because nothing on this site is restricted by age in the first place.
Your rights
You can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it. Because we collect so little, the answer to the first question is usually that we hold nothing beyond an email exchange you started yourself. We'll respond to any request within a reasonable period, and we won't charge you for it.
Some privacy laws give people a specific list of rights, and which laws apply depends on where you happen to live. So we give everyone one set of rights wherever they are, which saves working out which law covers whom. You can ask us what we hold about you and get a copy of it, ask us to correct it, ask us to delete it, ask us to send it to you in a portable form, or tell us to stop using it altogether. We won't treat you any differently for asking.
Two of those rights are ones we can answer in advance. We don't sell your personal information and we don't share it for cross-context behavioral advertising, so there's nothing to opt out of. We don't make automated decisions about you either, because we don't profile readers at all.
Tell us what you're asking for and we'll deal with it, and you don't have to cite a statute at us. We'd much rather answer the question than argue about which law covers it. That has been the position from the day this site went up.
Changes to this policy
If we add anything to this site that collects information, such as analytics or a newsletter, we'll update this policy before that change goes live rather than afterwards. The effective date at the top of this page records when it last changed. We won't begin collecting something this policy says we don't collect.
Contact
Questions about this policy, or requests relating to your data, can go to the email address published on this site. Please put the word privacy in the subject line so that it reaches the right place quickly. We answer these ourselves rather than routing them elsewhere.