Notice of Privacy Practices

We collect the information you give us when you create an account, complete an intake questionnaire, message your care team, or attend a visit: your name, date of birth, state of residence, contact details, payment method, medical and medication history, symptoms, lab results, and clinician documentation.

We also collect limited technical information needed to operate and secure the service, such as device and browser type, IP address, and records of sign-in and record access.

For treatment: your clinician and the clinical staff supporting your care use your record to evaluate you, prescribe when appropriate, order labs, and follow up.

For payment: we use the minimum information necessary to process membership charges and, when you choose to use insurance, to submit claims.

For health care operations: quality review, clinician supervision, licensure and credentialing, security monitoring, and audit logging.

As required by law: for public health reporting, court orders, subpoenas, and mandatory reporting obligations under Florida or New York law.

With your written authorization: for anything else, including sharing your record with a third party you designate. We do not sell your health information and we do not use it for advertising.

Access is role-based and limited to the minimum necessary. Physicians, nurse practitioners, and nurses can view clinical records only for patients they are actively serving. You can see only your own record.

Administrative and billing staff can manage memberships, scheduling, and configuration, but cannot read intake answers, encounter notes, secure messages, or clinical documents.

Access to records is logged. Audit records are retained for review and are not editable by end users.

You have the right to inspect and obtain a copy of your medical record, to request a correction, to request an accounting of certain disclosures, to request restrictions on certain uses and disclosures, to request confidential communications, and to receive a paper copy of this notice.

Florida and New York residents may also have additional rights under state law, including heightened protections for HIV-related, mental health, and substance use disorder information.

To exercise any right, message your care team in the portal or email privacy@youronlinedr.com. If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services Office for Civil Rights. We will not retaliate against you for filing a complaint.

Health information is stored encrypted at rest and transmitted over encrypted connections. Accounts are protected by authentication controls, sessions time out after inactivity, and record access is audited.

Our safeguards are designed around HIPAA's privacy and security requirements. We are not certified as HIPAA compliant, and we require executed Business Associate Agreements with vendors that handle health information before that information is processed.

We retain medical records for at least the period required by Florida and New York law, and account and billing records as required for tax and audit purposes.

We may change this notice. The revised notice applies to all information we maintain, and the current version is always posted at youronlinedr.com/privacy with its effective date.