Introduction
At Metabolixx, we value your privacy and are dedicated to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and utilize our telemedicine services. As a healthcare provider, we comply with the Health Insurance Portability and Accountability Act (HIPAA) to ensure the confidentiality and security of your protected health information (PHI).
How We Use and Share Your Information
No mobile information will be shared with third parties/affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
We use your personal and health information to provide and manage your medical treatment, including sharing necessary data with healthcare professionals involved in your care. Your information may also be used for healthcare operations, such as quality improvement initiatives, regulatory compliance, and administrative functions. For billing and payments, we securely process transactions through encrypted channels.
Data Security & Breach Notification
We implement industry-standard encryption, access controls, and security monitoring to protect your PHI from unauthorized access, alteration, or destruction. If a data breach occurs that compromises your PHI, you will be notified promptly, as required by HIPAA, along with steps to mitigate any potential harm.
Cookies & Tracking Technologies
To enhance your experience, we use cookies and similar tracking technologies to analyze site usage, improve functionality, and ensure security. You can manage cookie preferences through your browser settings. Please refer to our Cookie Policy for more details.
Data Retention
We retain your personal and health information only as long as necessary to fulfill the purposes for which it was collected or as required by law. Once your information is no longer needed, we securely delete or anonymize it following HIPAA regulations.
Age Restrictions
Our services are for individuals 18 years or older. We do not knowingly collect personal information from anyone under 18 years of age. If we become aware of such collection, we will take immediate steps to delete the information.
Your Rights Under HIPAA
You have the right to access and obtain copies of your medical records in either electronic or paper format, and we will provide them within 30 days of your request. If you believe your information is inaccurate, you may request corrections, though we may deny certain requests with a written explanation. You can request confidential communications, specifying how we contact you, such as via email, phone, or an alternative address. Additionally, you may request a record of disclosures of your PHI for up to six years, except for those related to treatment, payment, and healthcare operations. You also have the right to appoint a medical power of attorney or legal guardian to exercise your privacy rights on your behalf.
If you pay for a healthcare service out-of-pocket in full, you have the right to request that we do not share that information with your health insurer. We will comply with this request unless legally required to disclose it.
If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services. No retaliation will occur as a result of filing a complaint. You may also request a paper copy of this privacy policy at any time, even if you have agreed to receive it electronically.
Under HIPAA, we may share PHI under specific lawful conditions, including public health and safety reporting (e.g., disease prevention, product recalls, suspected abuse, or domestic violence) and to comply with law enforcement or legal requirements (e.g., court orders, subpoenas, or government audits). In certain cases, PHI may be disclosed for organ and tissue donation requests, worker’s compensation claims, and medical examiner or coroner requests following a patient’s passing. PHI may also be used for approved medical research, following safeguards to ensure confidentiality. Additionally, in cases of medical emergencies or serious threats to health or safety, we may disclose PHI without prior authorization if necessary to protect the individual or the public. However, PHI will never be used for marketing or fundraising without your explicit written consent.
Changes to This Privacy Policy
We may update this policy periodically to reflect regulatory changes or updates in our business practices. If significant changes occur, we will notify you via email or a website notice. You are encouraged to review this policy regularly to stay informed.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your PHI, you can contact us at:
