Privacy Policy
1. INTRODUCTION
This Privacy Policy (“Policy”) describes how OC Medical Wellness, Inc. (“Company,” “we,” “us,” or “our”) collects, uses, maintains, protects, and discloses information about you through our website, mobile applications, and related services (collectively, the “Service”).
By accessing or using the Service, you agree to the terms of this Policy. If you do not agree with this Policy, please do not use the Service. We may update this Policy at any time. Your continued use of the Service following updates constitutes your acceptance of the revised Policy.
2. DEFINITIONS
- Personal Data or Personal Information: Any information that can be used to identify you directly or indirectly, including your name, address, email, phone number, and unique identifiers.
- Protected Health Information (PHI): Health information that is protected under the Health Insurance Portability and Accountability Act (HIPAA) and related regulations.
- Sensitive Personal Information: Information that requires special protection, including government-issued IDs, health data, financial account information, and biometric data.
- Consumer Health Data: Personal data that is subject to Washington State My Health My Data Act, Nevada Health Data Privacy Act, or similar state consumer health privacy laws.
3. INFORMATION WE COLLECT
3.1 Information You Provide Directly
We collect information you voluntarily provide, including:
Account Registration Information:
- Full name
- Email address
- Phone number
- Username and password
- Billing and shipping address
- Date of birth
- Gender
Healthcare Information:
- Medical history
- Current medications and supplements
- Allergies and adverse reactions
- Health conditions and symptoms
- Treatment preferences
- Insurance information
Payment Information:
- Credit or debit card details (processed securely)
- Billing address
- Transaction history
Communications:
- Messages and emails to us or our Providers
- Customer service inquiries
- Feedback and complaints
3.2 Information Collected Automatically
As you use the Service, we automatically collect certain information:
Healthcare Information:
- Internet Protocol (IP) address
- Device type and model
- Operating system and browser type
- Clickstream data and navigation patterns
- Pages visited and time spent
- Search queries
- Date and time of visits
Location Information:
- General location based on IP address
- Precise location (if you grant permission)
- Location history if you enable location services
Cookies and Tracking Technologies:
- Browser cookies
- Web beacons and pixels
- Local storage and similar technologies
- Analytics data
3.3 Information from Third Parties
We may collect information about you from payment processors, healthcare providers, pharmacies, business partners, publicly available sources, and your employer (if covered by an employer plan).
4. HOW WE COLLECT INFORMATION
- Directly from You: Registration forms, online consultations, product purchases, customer service communications, surveys
- Automatically: Cookies, pixels, web server logs, analytics tools, mobile app tracking
- From Third Parties: Payment processors, healthcare providers, pharmacies, insurance companies, business partners
5. HOW WE USE YOUR INFORMATION
We use the information we collect for the following purposes:
- Providing Services: Delivering healthcare services, processing prescriptions, fulfilling orders, providing support
- Legal and Compliance: Complying with laws, responding to legal processes, enforcing Terms, protecting against fraud
- Improving Services: Analyzing usage patterns, conducting research, improving user experience
- Communications: Sending transactional emails, healthcare communications, administrative notices
- Marketing (with consent): Sending promotions, creating targeted ads, personalizing experience
- Creating Aggregated Data: Generating de-identified statistics for research
6. DISCLOSURE AND SHARING OF INFORMATION
6.1 When We Share Information
We may disclose your information in the following circumstances:
- With Your Consent: Any disclosure explicitly authorized by you
- Service Providers: Payment processors, hosting providers, email services, customer support vendors
- Healthcare Providers: Physicians, medical practices, pharmacies, laboratories
- Legal Requirements: Court orders, law enforcement, government requests
- Business Transactions: Merger, acquisition, bankruptcy, business reorganization
- Fraud Prevention: To prevent fraud, detect threats, enforce agreements
- Aggregated Data: De-identified statistics without restriction
6.2 Categories of Recipients
- Healthcare Providers and Facilities
- Pharmacies and Pharmaceutical Suppliers
- Payment Processors and Financial Institutions
- Third-Party Service Providers
- Government and Law Enforcement Agencies
- Insurance Companies
6.3 User Contributions
If you publicly post information through the Service, that information may be visible to other users and the public. You are responsible for the information you choose to share publicly.
7. DATA SECURITY
7.1 Security Measures
We implement industry-standard security measures including:
- Secure Sockets Layer (SSL) and encryption technology
- Secure password protection and multi-factor authentication
- Regular security audits and assessments
- Firewall and intrusion detection systems
- Access controls and role-based permissions
- Employee training and data protection protocols
7.2 Limitations
- No security system is completely impenetrable
- We cannot guarantee absolute security of data transmitted over the Internet
- You are responsible for maintaining password confidentiality
- Unauthorized access by third parties may occur despite our efforts
7.3 Your Responsibilities
You agree to keep your password confidential, log out when finished, report unauthorized access immediately, maintain device security, and use strong passwords.
8. DATA RETENTION
We retain your information for as long as necessary to provide services, fulfill legal obligations, respond to disputes, and maintain business records. Different retention periods apply for different information types:
- Account information: While account is active plus 7 years
- Medical records: As required by healthcare laws (typically 7-10 years)
- Payment and transaction records: 7 years for tax purposes
- Marketing information: Until you unsubscribe
- Analytics data: 12-36 months
We will delete or de-identify information when no longer needed.
9. YOUR PRIVACY RIGHTS
9.1 Access and Portability
You have the right to access the personal information we hold about you and request a copy in a portable format. You can access your information by logging into your account or contacting us at privacy@ocmedicalwellness.com
9.2 Correction and Deletion
You have the right to correct inaccurate information, request deletion of your data, and request de-identification. We may refuse deletion if it would impair our ability to provide services, violate legal obligations, or create liability.
9.3 Opt-Out Rights
- Marketing Communications: Click “Unsubscribe” on emails or contact us
- Text Messages: Reply “STOP” to marketing texts
- Analytics and Tracking: Adjust browser settings
- Targeted Advertising: Opt out at Digital Advertising Alliance or Network Advertising Initiative
9.4 Exercising Your Rights
To exercise your privacy rights, contact us with your name, email, specific request details, and proof of identity for sensitive information. We will respond within thirty (30) days.
10. STATE-SPECIFIC PRIVACY RIGHTS
10.1 California Residents (CCPA/CPRA)
You have the right to know what personal information is collected, how it is used, and who it is disclosed to. You also have the right to delete personal information, correct inaccurate information, opt out of sale or sharing of data, and opt out of targeted behavioral advertising. To exercise California rights, contact privacy@ocmedicalwellness.com
10.2 Washington Residents (My Health My Data Act)
You have the right to know what consumer health data is collected, access your data, delete your data, withdraw consent, and appeal our decisions.
10.3 Nevada Residents (NHDPA)
You have the right to access personal health data, delete personal health data, and opt out of sale of personal health data. We will honor opt-out requests within sixty (60) days.
10.4 Other States
You may have rights under consumer privacy laws in Colorado, Connecticut, Delaware, Indiana, Montana, Oregon, Tennessee, Texas, Utah, and Virginia. Contact us if you believe you have rights under these laws.
11. PROTECTED HEALTH INFORMATION AND HIPAA
11.1 HIPAA Status
The Company is not a HIPAA-covered entity. However, licensed Providers and affiliated Pharmacies may be covered entities. We may function as a business associate in certain circumstances.
11.2 Notice of Privacy Practices
Affiliated Providers have issued a Notice of Privacy Practices describing their use and disclosure of protected health information. By accessing the Service, you acknowledge receipt of this Notice.
11.3 Information Classification
Information not intended solely for medical diagnosis and treatment may not be considered Protected Health Information and is subject to this Privacy Policy.
11.4 HIPAA Business Associate Agreement
To the extent the Company functions as a business associate, use and disclosure of PHI is governed by our Business Associate Agreement with the covered entity.
12. COOKIES AND TRACKING TECHNOLOGIES
12.1 Types of Cookies
- Essential Cookies: Required for authentication and session management
- Preference Cookies: Remember your settings and preferences
- Analytics Cookies: Track usage patterns and performance
- Marketing Cookies: Enable targeted advertisements
12.2 Cookie Controls
- Adjust browser settings to refuse cookies
- Use the cookie consent manager on our website
- Opt out of specific tracking services
- Use browser extensions that block cookies
Note: Disabling cookies may affect your ability to use certain features.
12.3 Analytics Tools
We use Google Analytics, Mixpanel, Facebook Pixel, and other third-party analytics providers. Each provider has its own privacy policy.
13. THIRD-PARTY LINKS AND SERVICES
The Service may contain links to third-party websites, applications, and services. This Policy does not apply to third-party services. We recommend reviewing their privacy policies before providing information.
14. CHILDREN AND MINORS
15. INTERNATIONAL USERS
The Service is operated from the United States and is subject to U.S. laws. Information you provide is stored and processed in the United States and may be transferred to other countries. By using the Service, you consent to the transfer of your information.
16. DO NOT TRACK SIGNALS
We currently do not honor “Do Not Track” signals sent by some browsers. Our use of cookies and tracking technologies continues regardless of DNT settings.
17. CALIFORNIA SHINE THE LIGHT LAW
California residents may request information about our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please contact privacy@ocmedicalwellness.com
18. CONTACT INFORMATION
If you have questions about this Privacy Policy or our privacy practices, please contact us at:
OC Medical Wellness
Email: privacy@ocmedicalwellness.com
Phone: 1-XXX-XXX-XXXX
Address: [Insert Physical Address]
For Customer Service: support@ocmedicalwellness.com
For Legal Issues: legal@ocmedicalwellness.com
We will respond to privacy inquiries within thirty (30) days.
19. UPDATES TO THIS PRIVACY POLICY
We may update this Policy at any time. Material changes will be posted with an updated “Effective Date”, announced via email, and displayed on the website homepage. Your continued use of the Service following updates constitutes acceptance of the revised Policy.
20. CONSUMER HEALTH DATA PRIVACY SUPPLEMENT
This supplement applies to Consumer Health Data as defined under Washington My Health My Data Act, Nevada Health Data Privacy Act, and similar state laws.
20.1 Consumer Health Data We Collect
Examples of consumer health data include:
- Information about health conditions, diagnoses, treatments, medications
- Vital signs, measurements, and biometric information
- Location data indicating attempts to seek healthcare
- Information reflecting attempts to purchase or obtain health services
- Derived or inferred health information
20.2 Why We Collect Consumer Health Data
We collect and use consumer health data to provide healthcare services, deliver personalized treatment, ensure security and reliability, comply with legal obligations, and conduct research with consent.
20.3 How You Can Control Consumer Health Data
- Access your consumer health data
- Request deletion of consumer health data
- Withdraw consent for collection and use
- Appeal our decisions regarding your requests
- Lodge complaints with your state Attorney General
20.4 Your Rights Regarding Sensitive Information
You have the right to limit our use of sensitive consumer health data to only what is necessary to provide the services you requested.
21. ACCESSIBILITY
We are committed to providing accessible privacy options for all users, including those with disabilities. If you need assistance exercising your privacy rights, please contact us and we will work with you to accommodate your needs.