Privacy Policy
1. Introduction
Youre Good is committed to protecting your privacy and handling your personal and health information with care. This Privacy Policy explains what information we collect, how we use it, how we protect it, and your rights regarding your information.
As a healthcare provider, Youre Good is subject to the Health Insurance Portability and Accountability Act (HIPAA). Our full Notice of Privacy Practices, which governs how we handle your Protected Health Information (PHI), is available separately and provided to all patients at the time of enrollment.
[Legal review recommended: ensure a separate HIPAA-compliant Notice of Privacy Practices is drafted and published!!!!]
2. Information We Collect
We may collect the following types of information:
Personal Information
Name, date of birth, and contact information
State of residence
Payment information
Communications you send us by phone, email, or through our patient portal
Health Information
Medical history, current medications, and health concerns
Lab results and clinical notes
Information you provide during consultations and follow-up visits
Prescription and medication history
Technical Information
IP address and browser type when you visit our website
Pages visited and time spent on our site
Device information
[Legal review recommended: confirm this list aligns with what is actually collected through Tebra and your website platform.]
3. How We Use Your Information
We use your information to:
Provide clinical care and telehealth services
Communicate with you about your appointments, care plan, and medications
Process payments and enforce our cancellation policy
Send practice updates and health information if you have opted in
Comply with applicable laws and licensing requirements in Massachusetts and Florida
Improve our services over time
We do not sell your personal information. We do not share your information with advertisers or third parties for marketing purposes.
4. How We Share Your Information
We may share your information in the following limited circumstances:
With your consent. We will share your information with other providers or parties only when you have given us explicit permission to do so.
For treatment purposes. We may coordinate with pharmacies, labs, or other providers involved in your care. Our compounding pharmacy partner, Strive Compound Pharmacy, receives only the information necessary to fulfill your prescription.
With service providers. We use Tebra as our patient portal and telehealth platform. Tebra is a HIPAA-compliant platform and operates under a Business Associate Agreement with Youre Good. We may use other HIPAA-compliant third-party services to support our operations — all vendors who handle patient information are required to maintain appropriate safeguards.
As required by law. We may disclose your information when required by applicable federal or state law, court order, or regulatory authority.
In an emergency. We may share information necessary to protect your safety or the safety of others in a medical emergency.
[Legal review recommended: confirm Business Associate Agreements are in place with all relevant vendors including Tebra and Strive Compound Pharmacy.]
5. HIPAA & Your Health Information
As a HIPAA-covered entity, Youre Good follows strict federal standards for the protection of your Protected Health Information (PHI). Your rights under HIPAA include:
The right to access your medical records
The right to request corrections to your records
The right to know how your information has been shared
The right to request restrictions on certain uses of your information
The right to file a complaint if you believe your privacy rights have been violated
To exercise any of these rights, contact us directly at the information listed at the bottom of this policy. You also have the right to file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights at hhs.gov/ocr.
[Legal review recommended: a full HIPAA Notice of Privacy Practices must be provided to patients separately — this section is a summary only.]
6. Telehealth & Electronic Communications
All clinical visits at Youre Good are conducted through Tebra, a HIPAA-compliant telehealth platform. We take reasonable steps to ensure that electronic communications containing health information are transmitted securely.
Please be aware that standard email and text message communications are not fully secure. We recommend using our patient portal for any communications that involve your health information. If you choose to communicate with us via email or text, you do so understanding that those channels carry inherent privacy limitations.
7. Cookies & Website Tracking
Our website may use cookies and similar tracking technologies to understand how visitors use our site and to improve the user experience. This information is collected in aggregate and is not linked to your personal health information.
You can adjust your browser settings to decline cookies, though some features of our website may not function properly as a result.
[Legal review recommended: confirm cookie usage and ensure compliance with applicable state privacy laws, including any applicable Massachusetts or Florida requirements.]
8. Children's Privacy
Youre Good provides services to adults only. We do not knowingly collect personal information from anyone under the age of 18. If we become aware that we have collected information from a minor, we will delete it promptly.
9. Data Security
We take the security of your information seriously. We use administrative, technical, and physical safeguards designed to protect your personal and health information from unauthorized access, disclosure, or misuse. These include secure, HIPAA-compliant platforms, access controls, and staff training on privacy practices.
No method of electronic transmission or storage is 100% secure. While we work hard to protect your information, we cannot guarantee absolute security.
10. Data Retention
We retain patient records for the period required by applicable Massachusetts and Florida law and professional licensing standards. When records are no longer required to be retained, they are disposed of securely.
[Legal review recommended: confirm retention periods meet MA and FL medical records requirements.]
11. Your Rights & Choices
Depending on your state of residence, you may have additional rights regarding your personal information, including the right to access, correct, or request deletion of certain data. To make a request, contact us at the information below. We will respond within a reasonable timeframe and in accordance with applicable law.
[Legal review recommended: review Massachusetts and Florida state privacy law requirements in addition to HIPAA.]
12. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before providing any personal information.
13. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the date at the top of this page. We encourage you to review this policy periodically. Continued use of our services after any update constitutes your acceptance of the revised policy.
14. Contact Us
If you have questions, concerns, or requests related to this Privacy Policy or your health information, please contact us:
Youre Good
MA: 978-490-3113
Got more questions?