Compliance · Client-Brandable Template
Privacy Policy Template
Drop-in privacy policy template for client-branded telehealth storefronts. Replace {{Brand}} and jurisdiction language before publishing.
1. Information We Collect
- Account information (name, email, date of birth, shipping address).
- Health information you provide through intake questionnaires.
- Payment information (processed by our PCI-DSS Level 1 payment processor; we do not store card numbers).
- Device and usage data (IP address, browser type, pages viewed).
2. How We Use Information
- Deliver telehealth consultations and fulfill prescriptions.
- Coordinate care with licensed providers and pharmacies.
- Comply with legal obligations (HIPAA, state medical boards, DEA).
3. Sharing
We share PHI only with licensed providers, dispensing pharmacies, and Business Associates under signed BAA. We do not sell personal information.
4. Your Rights
You may request access, correction, or deletion of your data at privacy@{{brand}}.com. Residents of CA, VA, CO, CT, UT have additional rights under state privacy laws.
5. Retention
Medical records retained for the longer of 7 years or state-mandated period.
6. Contact
Privacy Officer, {{Brand}}, {{Address}}.