1. Information We Collect

1.1. Information Collected Automatically

When you visit our website, we may automatically collect certain information, including:

• IP address
• Browser type and version
• Geographic location
• Device type and operating system
• Pages visited and time spent on our website
• Cookies and other tracking technologies

This data helps us analyze website traffic and improve user experience.

1.2. Information You Provide to Us

We may ask you to provide certain personal and health-related information, including but not limited to:

• Full name
• Email address
• Phone number
• Mailing address
• Date of birth
• Medical history and treatment details
• Insurance information (if applicable)
• Any information shared during telehealth consultations

You provide this information when you schedule a telehealth session, fill out a form, communicate with healthcare providers, or use our services.

2. How We Use Your Information

We use your personal and health information for the following purposes:

• To provide telehealth services and virtual consultations
• To verify patient identity and ensure security
• To communicate with you regarding appointments and healthcare services
• To comply with healthcare regulations and reporting requirements
• To improve our website and telehealth platform security
• To fulfill legal obligations under HIPAA, GDPR, and CCPA

We do not sell, rent, or trade your personal or health information to third parties.

3. HIPAA Compliance & Medical Data Protection

Therapy Fleet follows the Health Insurance Portability and Accountability Act (HIPAA) to ensure your Protected Health Information (PHI) is securely stored, transmitted, and used. We implement:

• End-to-End Encryption: All telehealth sessions and communications are encrypted.
• Access Controls: Only authorized healthcare professionals can access PHI.
• Secure Data Storage: Medical records are stored in HIPAA-compliant servers.
• Confidentiality Measures: We do not disclose PHI without your explicit consent unless required by law.

If you have questions about our HIPAA compliance, contact us at [email protected].

4. Legal Basis for Processing Data (GDPR Compliance)

If you are located in the European Economic Area (EEA), our legal basis for collecting and using your personal information depends on the specific context in which we collect it:

• Your consent (when you provide medical information voluntarily)
• Contractual necessity (when we process your data to provide telehealth services)
• Legal obligations (when required by healthcare or data protection laws)
• Legitimate interests (for improving telehealth security and fraud prevention)

5. Your Rights & Data Control (GDPR & CCPA Compliance)

You have the following rights regarding your personal and medical data:

• Access & Correction: Request access to your medical records and correct inaccuracies.
• Deletion (Right to Be Forgotten): Request deletion of your personal and health data.
• Restrict Processing: Limit how we use your PHI.
• Data Portability: Receive a copy of your medical records in a secure format.
• Opt-Out (CCPA): California residents can opt out of data collection and sharing.

To exercise these rights, contact us at [email protected].

6. Cookies & Tracking Technologies

We use cookies to:

• Enhance website functionality
• Analyze user behavior
• Improve user experience on our telehealth platform

You can manage your cookie preferences through your browser settings.

7. Third-Party Sharing & Healthcare Compliance

We may share your information with third parties only in the following cases:

• With Your Consent – When you authorize us to share your information with a healthcare provider or insurance company.
• Legal Compliance – If required by law, court order, or regulatory obligations.
• Business Associates (HIPAA-Compliant Vendors) – Such as secure medical record storage providers, telehealth software providers, and insurance claim processors.

We do not sell user data for marketing or advertising purposes.

8. Data Retention Policy

We retain personal and health data for as long as necessary to:

• Provide telehealth services
• Comply with HIPAA, GDPR, and CCPA regulations
• Meet legal and medical record-keeping obligations

Once no longer needed, data is securely deleted or anonymized.

9. Security Measures

We implement strict security protocols to protect personal and medical data, including:

• HIPAA-compliant encryption for all sensitive information.
• Multi-factor authentication (MFA) for secure access.
• Regular security audits to ensure compliance with healthcare data protection laws.

Despite these measures, no system is 100% secure. We encourage users to take precautions when sharing medical information online.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices and recommend reviewing their policies before sharing any personal information.

11. Changes to This Privacy Policy

We may update this policy periodically. Any changes will be posted on this page with the revised effective date.

12. Contact Us

If you have questions about this Privacy Policy, contact us:

Therapy Fleet
8407 Central Ave, 2nd Floor
Newark, CA 94560, USA
Email: [email protected]
Phone: (510) 996-3118