Privacy Policy & Notice of Privacy Practices

How we may use and disclose your health information

For treatment

We use your PHI to provide and coordinate your care. Examples: sending laboratory orders to and receiving results from Quest Diagnostics; transmitting prescriptions to our partner pharmacy so medication can be dispensed and shipped to you; and sharing your chart with our collaborating physician when your care is reviewed under our Prescriptive Authority Agreement.

For payment

We use your information to process the payments you authorize (onboarding and membership fees) and, on request, to provide receipts suitable for HSA/FSA reimbursement. We do not bill insurance.

For health care operations

We may use your PHI for quality assurance, chart review with our collaborating physician, compliance auditing, and practice administration.

Business associates

Some services — such as our electronic health record and intake platform, telehealth video platform, and secure messaging — are provided by vendors who may handle PHI on our behalf. Every such vendor signs a Business Associate Agreement (BAA) requiring them to safeguard your information as HIPAA requires.

When required or permitted by law

• Reporting to the Texas Prescription Monitoring Program and checking it before controlled-substance prescriptions, as required by state and federal law
• Responses to court orders, subpoenas, or lawful requests from oversight agencies
• Public-health reporting and reporting of abuse, neglect, or serious threats
• Disclosures to health oversight agencies such as licensing boards and the DEA

Uses requiring your written authorization

We will not use your PHI for marketing, sell your PHI, or share psychotherapy notes (we do not create them) without your explicit written authorization. You may revoke an authorization at any time, in writing, except to the extent we have already relied on it.

Your rights regarding your health information

• Access. You may inspect and obtain a copy of your medical record, usually within 15 days for electronic records under Texas law.
• Amendment. You may request that we amend information you believe is incorrect or incomplete.
• Accounting of disclosures. You may request a list of certain disclosures we have made of your PHI.
• Restrictions. You may request limits on how we use or disclose your PHI. We are not required to agree to all restrictions, but we will honor reasonable requests where the law allows.
• Confidential communications. You may ask us to contact you in a specific way — for example, only at a particular phone number or email address.
• Breach notification. We will notify you if a breach occurs that compromises the privacy or security of your PHI.
• Paper copy of this notice. You may request a paper copy at any time.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with us using the contact information below, or with the U.S. Department of Health and Human Services, Office for Civil Rights (www.hhs.gov/ocr, 1-800-368-1019). You will never be penalized or retaliated against for filing a complaint.

What we collect — and what we deliberately don’t

• We do not sell personal information. Ever, to anyone.
• No advertising trackers or pixels on health-related pages. We do not place third-party advertising pixels (such as social-media or ad-network trackers) on pages where you read about or begin seeking care.
• Minimal analytics. If analytics are used, they are limited to aggregate, privacy-respecting page statistics — never tied to your health information.
• Health information belongs in clinical systems. Your intake answers and medical details are collected and stored in our HIPAA-compliant electronic health record under a Business Associate Agreement — not in this website’s hosting or analytics infrastructure.

Like most websites, our hosting provider may automatically log basic technical data (such as IP address, browser type, and pages requested) for security and reliability. These logs are not used for advertising.

Age requirement

This website and our services are intended for adults 18 and older. We do not knowingly collect information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.

Links to other sites

Pages may link to third-party sites (for example, Quest Diagnostics or licensing boards). Their privacy practices are their own; this policy does not cover them.

Changes to this policy

We may update this policy from time to time. The effective date at the top of the page will always reflect the current version, and material changes to Part I will be made available as required by law. See also our Telehealth Informed Consent.

Contact us about privacy