Privacy Policy
Last updated: [DATE]
This Privacy Policy explains how InsertMD ("we," "us," or "our") collects, uses, and protects information when you use this patient portal (the "Portal"). By using the Portal, you agree to the practices described here.
1. Information We Collect
- Account information you provide, such as name, email, phone number, and login credentials.
- Health-related information you or your provider submit through intake forms, orders, or messages.
- Usage information such as pages viewed and device/browser data collected automatically.
2. How We Use Information
- To operate the Portal and provide the educational content and services you request.
- To coordinate with your prescribing physician and the dispensing pharmacy where applicable.
- To communicate with you about your orders, account, and support requests.
- To maintain security, prevent fraud, and comply with legal obligations.
3. How We Share Information
We do not sell your personal information. We share information only with your prescribing provider, the dispensing pharmacy, service providers who support the Portal under contract, and as required by law. Protected health information is handled in accordance with HIPAA and our Notice of Privacy Practices.
4. Data Security
We use secure, encrypted connections and administrative, technical, and physical safeguards designed to protect your information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
5. Your Choices & Rights
You may request access to, correction of, or deletion of your personal information, subject to legal and recordkeeping requirements. To make a request, contact us at [PRIVACY EMAIL].
6. Retention
We retain information for as long as needed to provide services and to meet legal, medical-records, and regulatory obligations.
7. Changes to This Policy
We may update this Policy from time to time. Material changes will be posted here with a revised "Last updated" date.
8. Contact
Questions about this Policy? Contact us at [PRIVACY EMAIL] or [MAILING ADDRESS].