Privacy Policy

Welcome to Virtual Wellness Clinic Health. Your privacy and the security of your personal health information are our highest priorities. This Privacy Policy outlines how we collect, use, and protect your data.

1. Information We Collect

We collect information you provide directly to us when booking an appointment, joining a waitlist, or contacting support. This may include:

• Personal identification details (Name, Date of Birth).
• Contact information (Email address, Phone number).
• Health-related information shared voluntarily during consultation booking.
• When you sign a consent or authorization form electronically, we record the IP address and device/browser information used to sign, along with the date and time, as part of the signature record.

2. How We Use Your Information

Your information is used exclusively to:

• Provide and manage virtual clinical services.
• Process payments securely via our payment processor (Stripe).
• Communicate important updates regarding your appointments (e.g., video call links).
• Send text messages you have explicitly opted in to receive (see Section 5).
• Improve the quality and safety of our platform.

3. Data Security and HIPAA Compliance

We employ industry-standard security measures to protect your data. While this website serves as a booking and informational platform, all clinical consultations and detailed health records are maintained in compliant, secure electronic health record (EHR) systems.

4. Third-Party Services

We utilize trusted third-party services for specific functions: Zoom for telehealth consultations, Stripe for payment processing, Resend for transactional emails, and Twilio for delivering text messages you have opted in to receive. These services adhere to strict security protocols.

5. SMS / Text Messaging

If you opt in to text messages, we use your mobile phone number only to send appointment confirmations, appointment reminders, and account login security codes. You can opt in by checking the optional SMS consent box in your patient portal settings. Consent is not a condition of receiving care or making a purchase. See our SMS Program page for details on how opt-in works.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All of the categories of information and sharing described in this policy exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Message frequency varies. Message and data rates may apply. You can opt out at any time by replying STOP to any message, or by unchecking the SMS box in your portal settings. Reply HELP for help, or call us at (801) 871-9168.

6. Security Records and Site Visit Counts

To keep the service secure and reliable, our systems record the following. None of these records contain health information or the contents of messages, forms, or documents, and names, email addresses, and phone numbers are masked or removed before a record is stored.

• Error and security logs: records of system errors, failed sign-in attempts, and rejected requests. Each record notes the country and network the request came from, the type of browser, and a one-way, keyed hash of the IP address. The hash changes every day, so one visitor cannot be followed from one day to the next, and the IP address itself is not stored in these logs. These records are kept for 30 days by default, and the clinic may set a different period. Records of critical errors are kept for up to 365 days, and administrative audit records (who changed which setting or record) are kept for at least 6 years, and longer if the clinic sets a longer period.
• Browser error reports: when a page in your browser hits an error, it may send a short report with the page route (without any query or fragment), the kind of error, the app version, and whether the page was public, patient, practitioner, or admin. It carries no name, email, account identifier, or sign-in token.
• Site visit counts: we count visits to our pages using a one-way, keyed hash of your IP address and browser type, together with the page visited. The hash changes every day, so we cannot follow you from one day to the next. These counts are kept for 90 days by default, and the clinic may set a different period.

The signature records described in Section 1 are separate: they continue to store the IP address and device used to sign.

7. Contact Us

If you have any questions about this Privacy Policy, please contact us via our Secure Contact Form or call (801) 871-9168.