1. Introduction

Concierge Med Partners ("Company," "we," "us," or "our") operates as a telehealth wellness company providing weight loss management, peptide therapy, and hormone wellness services to patients nationwide. We are headquartered in Chicago, Illinois. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website or use our services. Please read this policy carefully. If you disagree with its terms, please discontinue use of our services.

2. Information We Collect

A. Information You Provide Directly:

• Personal Identifiers: Full name, date of birth, email address, telephone number, mailing address, and billing address.
• Health & Medical Information: Current weight, medical history, prescription medications, allergies, health goals, and responses to our online health assessment. This information may constitute Protected Health Information (PHI) under HIPAA and is handled accordingly.
• Payment Information: Credit/debit card numbers and billing details are processed by our PCI-compliant third-party payment processor. We do not store full card numbers on our servers.
• Communications: Messages, emails, feedback, and any other content you submit to us.

B. Information Collected Automatically:

• IP address, browser type and version, operating system, referring URLs, pages viewed, and time spent on pages.
• Cookie data and similar tracking technologies (see our Cookie Policy accessible via the cookie consent banner).

3. How We Use Your Information

• To provide, personalize, and improve our telehealth services and treatment protocols.
• To communicate with you regarding your health assessments, prescriptions, shipments, and ongoing care.
• To process payments and manage your membership or one-time purchases.
• To verify your identity and eligibility for our services.
• To send health and wellness educational content (you may opt out at any time by clicking "Unsubscribe" in any email).
• To fulfill legal and regulatory obligations, including maintaining medical records as required by federal and state law.
• To analyze aggregate, de-identified usage data to improve our website and services.
• To detect and prevent fraud, unauthorized access, or other illegal activity.

4. How We Share Your Information

We do not sell, rent, or trade your personal or health information to third parties for their marketing purposes. We may share your information only in the following circumstances:

• Licensed Healthcare Providers: Physicians, nurse practitioners, and other clinicians who review your health intake and prescribe your personalized treatment plan.
• Pharmacy Partners: Accredited compounding and dispensing pharmacies that fulfill your prescription medication orders.
• Laboratory Services: Clinical labs that process any blood work or diagnostic tests ordered as part of your protocol.
• HIPAA Business Associates: Technology and service vendors who support our operations (e.g., electronic health record platforms, telehealth video platforms, payment processors) are required to sign Business Associate Agreements (BAAs) obligating them to safeguard your PHI in accordance with HIPAA.
• Legal Compliance and Safety: We may disclose information when required by applicable law, subpoena, court order, or government request, or when necessary to protect the safety of any person or to address fraud or security issues.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred. You will be notified via email and/or prominent notice on our website before your information becomes subject to a different privacy policy.

5. Your Privacy Rights

Depending on your state of residence, you may have the following rights:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Correction: Request correction of inaccurate or incomplete personal information.
• Right to Deletion: Request deletion of your personal data, subject to our legal medical record retention obligations.
• Right to Portability: Request your data in a portable, machine-readable format.
• Right to Opt Out of Marketing: Unsubscribe from marketing emails at any time. Note: transactional communications related to your care cannot be opted out of while you are an active patient.
• California Residents (CCPA/CPRA): You have the right to know, delete, correct, and opt out of the sale or sharing of your personal information. To submit a CCPA request, email [email protected].

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

6. Data Security

We implement administrative, physical, and technical safeguards designed to protect your information from unauthorized access, use, alteration, or disclosure. These include SSL/TLS encryption for data in transit, encrypted storage, access controls, and regular security assessments. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain personal information for as long as necessary to provide services and comply with applicable laws. Medical records are retained in accordance with state and federal requirements, generally a minimum of 7 years from the date of last service, or longer if required by your state of residence.

8. Children's Privacy

Our website and services are intended solely for adults 18 years of age and older. We do not knowingly collect personal information from individuals under 18. If you believe a minor has submitted information to us, contact us immediately at [email protected].

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.

10. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. Material changes will be communicated by posting the new policy on this page with a revised "Last Updated" date and, where appropriate, notifying you by email. Your continued use of our services after changes are posted constitutes your acceptance of the revised policy.