Privacy Policy — MilSpecWellness

MilSpecWellness LLC ("we," "us," "our") is committed to protecting the privacy and security of your personal and health information. This Privacy Policy describes how we collect, use, disclose, and protect your information in compliance with the Health Insurance Portability and Accountability Act of 1996 ("HIPAA") and applicable state privacy laws.

1. Information we collect

We collect information you provide directly (name, contact, date of birth, health history, medications, symptoms, payment information), information generated through your care (lab results, provider notes, prescriptions), and limited technical information (IP address, browser type, pages visited) for site functionality.

2. How we use your information

To provide clinical services and prescribe medications
To coordinate care with labs and pharmacies
To process payments and manage your account
To communicate with you about your care
To comply with legal and regulatory obligations
To improve our services (using de-identified data only)

3. How we share your information

We share protected health information ("PHI") only as permitted under HIPAA:

With providers involved in your care
With labs and pharmacies to fulfill orders
With business associates under signed Business Associate Agreements (BAAs)
When required by law (court orders, public health reporting)
With your written authorization

We do not sell your personal health information. Ever.

4. Your rights under HIPAA

You have the right to: access your medical records, request corrections, request restrictions on disclosures, receive an accounting of disclosures, request confidential communications, and file a complaint with us or the U.S. Department of Health and Human Services.

5. Security

We implement physical, technical, and administrative safeguards: 256-bit TLS encryption in transit, encryption at rest, access controls, audit logging, staff training, and incident response procedures.

6. Data retention

We retain medical records for at least the period required by applicable state law (typically 7–10 years after last visit, longer for minors).

7. Cookies and tracking

We use minimal cookies for site functionality and analytics. We do not use advertising pixels or third-party tracking on pages containing PHI.

8. Children's privacy

Services are not offered to individuals under 18. We do not knowingly collect information from minors.

9. Changes to this policy

We may update this policy. Material changes will be notified through the patient portal and email.

10. Contact

Privacy inquiries, record requests, and complaints:

MilSpecWellness LLC
Attn: Privacy Officer
00000 Placeholder Ave, Suite 000
[City], [State] 00000
Phone: (000) 000-0000
Email: privacy@milspecwellness.com