Privacy Policy

Introduction

VitalPath Health, Inc. (“VitalPath,” “we,” “us,” or “our”) is committed to protecting your privacy and the security of your personal and health information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with us in any way.

We are a covered entity under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) and comply with all applicable federal and state healthcare privacy laws.

Information We Collect

Personal Information

We may collect the following types of personal information:

• Name, email address, phone number, and mailing address
• Date of birth and gender
• Payment and billing information
• Insurance information
• Government-issued identification (as required for identity verification)

Protected Health Information (PHI)

As a healthcare provider, we collect PHI including:

• Medical history and current health conditions
• Medications and allergies
• Lab results and diagnostic information
• Treatment records and clinical notes
• Communications with healthcare providers
• Height, weight, and vital signs

Technical Information

When you use our website or services, we automatically collect:

• IP address and device identifiers
• Browser type and operating system
• Pages visited and time spent on our site
• Referring website information

How We Use Your Information

We use your information for the following purposes:

• Treatment: To provide medical care, including telehealth consultations, prescriptions, and ongoing treatment management
• Payment: To process payments, verify insurance coverage, and manage billing
• Healthcare Operations: To improve our services, conduct quality assessments, and train staff
• Communication: To send appointment reminders, health information, and respond to your inquiries
• Legal Compliance: To comply with federal and state laws and regulations

How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Healthcare Providers: With physicians and pharmacies involved in your care
• Business Associates: With vendors who help us provide services (bound by HIPAA agreements)
• Legal Requirements: When required by law, court order, or government request
• Your Authorization: With your explicit written consent

Your Rights

Under HIPAA and applicable state laws, you have the right to:

• Access and obtain copies of your medical records
• Request amendments to your health information
• Request restrictions on how we use or disclose your information
• Receive confidential communications
• Obtain an accounting of disclosures
• File a complaint if you believe your privacy rights have been violated

Data Security

We implement industry-standard security measures to protect your information, including:

• 256-bit SSL/TLS encryption for data in transit
• AES-256 encryption for data at rest
• Multi-factor authentication for account access
• Regular security audits and penetration testing
• Employee training on HIPAA and security protocols
• Physical security controls at our facilities

Data Retention

We retain your health information in accordance with federal and state medical record retention requirements. In most cases, medical records are retained for a minimum of 7 years after your last treatment. You may request deletion of certain non-medical personal information.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact:

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the “Last updated” date. We encourage you to review this Privacy Policy periodically.