Privacy Policy

Personal information:

• Name, email address, and phone number
• Date of birth
• Mailing and shipping address
• Government-issued identification, where needed to verify your identity

Health information:

• Medical and medication history
• Laboratory results
• Treatment information and consultation notes
• Measurements you report and photographs you submit

Payment information: billing address and transaction records. Card numbers are processed by our payment processor and are not stored by the Practice.

Technical information: IP address, browser type, device information, pages viewed, referring site, and cookie and usage data.

We use your information to:

• Provide telehealth medical evaluations and treatment
• Coordinate prescriptions with licensed pharmacies
• Order and review laboratory testing
• Communicate with you about appointments, follow-up, and treatment
• Maintain medical records as required by law
• Process payments and administer refunds
• Verify your identity, eligibility, and physical location
• Operate, secure, and improve our website
• Comply with legal and regulatory obligations

We do not use protected health information for marketing without your written authorization, and we do not use it for advertising purposes.

We maintain the privacy and security of protected health information in accordance with HIPAA and applicable state law, including the California Confidentiality of Medical Information Act and New York law governing patient records.

Protected health information is used and disclosed only as permitted for treatment, payment, and healthcare operations, as otherwise authorized by you in writing, or as required by law.

We apply the minimum necessary standard: we access, use, and disclose only the amount of information reasonably needed for the purpose at hand.

We share information, limited to what is necessary, with:

• Licensed compounding and retail pharmacies that dispense your prescriptions
• Laboratory providers that perform and report testing
• Telehealth, scheduling, and electronic health record platforms
• Payment processors and billing services
• Shipping carriers, limited to what is needed to deliver your order
• Professional advisors and government agencies, where required by law

Vendors that create, receive, maintain, or transmit protected health information on our behalf do so under written Business Associate Agreements that require them to safeguard that information and limit how they may use it.

We may also disclose information in response to a subpoena, court order, or other legal requirement; to report suspected abuse or neglect where required; or to prevent a serious and imminent threat to health or safety.

• We do not sell your personal information or protected health information
• We do not share protected health information with advertising platforms
• We do not use protected health information for marketing without your written authorization
• We do not publish patient information, testimonials, or photographs without your written permission

Our website may use cookies and similar technologies to keep the site functioning, remember your preferences, and understand how visitors use the site.

You can disable or delete cookies in your browser settings, though some parts of the site may not function properly if you do. Where required by law, we obtain your consent before setting non-essential cookies.

We may use analytics and advertising services to understand website traffic and to reach people who may be interested in our services.

These tools are not used on pages where patients complete intake, access treatment information, or communicate with providers. We do not provide advertising platforms with information that identifies you as a patient or that reveals your health conditions, medications, or treatment.

Most browsers offer settings to limit tracking, and we honor Global Privacy Control signals where required by law.

Our use of text messaging and email, including the security limitations of those channels, is described in our Telehealth & Electronic Communication Policy.

Marketing emails include an unsubscribe link, and you may reply STOP to any text message to opt out. Opting out of marketing does not stop treatment-related communication about your care.

Under HIPAA and applicable state law, you may:

• Request access to and copies of your medical records
• Request correction or amendment of information you believe is inaccurate
• Request an accounting of certain disclosures
• Request restrictions on certain uses and disclosures
• Request that we communicate with you by an alternative means or at an alternative location
• Receive a copy of our Notice of Privacy Practices
• Revoke a prior authorization in writing, on a going-forward basis

Requests may be submitted using the contact information below. We respond within the timeframes required by law.

California residents have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, including the right to know what personal information we collect, to request correction or deletion, to opt out of the sale or sharing of personal information for cross-context behavioral advertising, and to limit the use of sensitive personal information.

We do not sell or share personal information as those terms are defined under California law.

Medical information governed by HIPAA and the California Confidentiality of Medical Information Act is exempt from the CCPA. Your rights in that information are described in the section above and in our Notice of Privacy Practices.

We will not discriminate against you for exercising your privacy rights. You may designate an authorized agent to make a request on your behalf, and we will verify your identity before responding.

For New York residents, we maintain administrative, technical, and physical safeguards for private information consistent with the New York SHIELD Act, and we handle medical records in accordance with New York law governing patient records and confidentiality.

New York patients may request access to and amendment of their medical records as provided by New York law.

We use administrative, technical, and physical safeguards designed to protect your information, including access controls, encryption in transit, role-based access limited to workforce members who need it, vendor due diligence, and workforce privacy training.

No transmission over the internet and no method of electronic storage is completely secure. Standard text messaging and unencrypted email are not secure channels, as described in our Telehealth & Electronic Communication Policy.

Medical records are retained for the period required by applicable state and federal law. That period continues after your care with us ends, and is generally longer than the retention period for other categories of information.

Other information is retained for as long as needed for the purposes described in this Policy, after which it is deleted or de-identified.

A request to delete your information does not apply to medical records we are legally required to retain.

Our website and services are intended for individuals 18 years of age or older. We do not knowingly collect personal information from minors. If we learn that we have collected information from a minor through this website, we will delete it.

If a breach of unsecured protected health information occurs, we will notify affected individuals, and where applicable the appropriate regulators, as required by the HIPAA Breach Notification Rule and applicable state law.

If you have a privacy concern, please contact us first — most issues are resolved directly. You may also file a complaint with:

• U.S. Department of Health and Human Services, Office for Civil Rights
• California Attorney General, Privacy Enforcement Unit
• New York State Attorney General, Bureau of Internet and Technology

We will not retaliate against you in any way for filing a complaint.

We may update this Policy at any time. Updated versions will be posted on this page with a revised effective date. Material changes affecting protected health information will be communicated as required by law.

For questions regarding this Privacy Policy or your personal information, please contact: