Scope of this preview
This draft explains the intended separation between public website use, nonclinical Member Dashboard information, and clinical information held in a future external Patient Portal. It is not final legal advice or a production privacy policy.
Information this application may manage
The future application may manage website preferences, account identity, minimal profile details, membership and subscription status, billing references, consent receipts, and broad nonclinical care interests.
The preview does not accept real clinical submissions. Symptoms, diagnoses, medications, records, insurance information, clinical messages, documents, and detailed appointment reasons belong in the approved external clinical system.
How information may be used
Permitted purposes may include operating accounts and memberships, providing requested nonclinical support, maintaining security, recording consent, and improving essential service functionality. Final purposes and retention periods require legal approval.
Service providers
The production provider list, contractual safeguards, data locations, and healthcare vendor approvals remain to be confirmed. Using a technology vendor alone does not make the complete system HIPAA compliant.
Analytics and communications
Advertising pixels, session replay, and ordinary analytics are prohibited on the online consultation journey, authentication, dashboard, booking, billing, and Patient Portal routes. Clinical or member information must not appear in URLs, email bodies, SMS bodies, payment metadata, or application logs.
Choices and contact
Members should be able to manage eligible contact preferences and request support through verified channels. Final rights, request procedures, response periods, and contact details will be added after legal review.