This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.
Better Within Rx ("Better Within Rx," "we," "us," or "our") respects the privacy and security of your information. This Privacy Policy and Notice of Privacy Practices explains how we collect, use, disclose, maintain, and protect personal information and Protected Health Information ("PHI") in connection with our website, telehealth services, health assessments, consultations, laboratory coordination, wellness programs, and related healthcare services.
Where applicable, Better Within Rx will handle PHI in accordance with the Health Insurance Portability and Accountability Act of 1996 ("HIPAA"), its implementing regulations, and other applicable federal and state privacy laws. If there is a conflict between this Notice and applicable law, the applicable law will control.
Better Within Rx is a physician-guided health and wellness platform providing personalized wellness and preventive health services through telehealth and related healthcare providers.
Our services may include:
Depending on the service and relationship involved, Better Within Rx may act as a healthcare provider, covered entity, business associate, or service provider. Where HIPAA applies, we will use and disclose PHI in accordance with HIPAA and applicable law.
Protected Health Information (PHI) is individually identifiable health information that is created, received, maintained, or transmitted by or on behalf of a HIPAA covered entity or business associate and is protected by HIPAA.
PHI may include information such as:
Not all information collected through our website is PHI. Information collected solely for general website, marketing, or administrative purposes may instead be governed by applicable privacy laws and the general provisions of this Privacy Policy.
A. Information You Provide. When you complete an assessment, request a consultation, create an account, communicate with us, or use our services, we may collect:
B. Information Collected Automatically. When you visit our website, we may collect:
We use this information for website functionality, security, analytics, performance, and other legitimate business purposes, subject to applicable law.
When HIPAA applies, Better Within Rx may use or disclose your PHI without your separate written authorization for purposes permitted by HIPAA, including the following:
Treatment. We may use or disclose PHI to provide, coordinate, or manage your healthcare. For example, we may share relevant information with physicians, healthcare professionals, laboratories, pharmacies, or other healthcare providers involved in your care.
Payment. We may use or disclose PHI as necessary to obtain payment for healthcare services or to process healthcare-related billing.
Healthcare Operations. We may use or disclose PHI for healthcare operations, such as quality assessment and improvement, care coordination, reviewing the performance of healthcare professionals, auditing, compliance activities, business administration, patient safety activities, and planning and management of healthcare services.
Services Provided by Business Associates. We may disclose PHI to vendors and other service providers that perform services for or on behalf of Better Within Rx when those services require access to PHI. Where required by HIPAA, we will enter into appropriate Business Associate Agreements (BAAs) and require our business associates to appropriately safeguard PHI.
Required by Law. We may use or disclose PHI when required by federal, state, or local law.
Public Health Activities. We may disclose PHI when permitted or required for public health activities, such as preventing or controlling disease, reporting certain conditions, or addressing public health threats.
Health Oversight. We may disclose PHI to appropriate governmental authorities for activities authorized by law relating to oversight of the healthcare system, government programs, or compliance with applicable laws.
Judicial and Administrative Proceedings. We may disclose PHI in response to appropriate legal proceedings, court orders, administrative proceedings, subpoenas, or other lawful processes when permitted by applicable law.
Law Enforcement. We may disclose PHI to law enforcement officials when permitted or required by applicable law.
Serious Threats to Health or Safety. We may disclose PHI when necessary to prevent or lessen a serious and imminent threat to the health or safety of a person or the public, when permitted by law.
Workers' Compensation. We may disclose PHI as authorized by and to the extent necessary to comply with workers' compensation laws and other similar programs.
Other Uses and Disclosures. Other uses and disclosures of PHI not described in this Notice will generally require your written authorization when required by HIPAA. If you provide an authorization, you may generally revoke it in writing at any time, except to the extent action has already been taken in reliance on that authorization.
Certain uses and disclosures of PHI generally require your written authorization under HIPAA and applicable law. These may include certain uses and disclosures of psychotherapy notes, uses and disclosures for marketing, and disclosures that constitute a sale of PHI. We will obtain your authorization when required by law before making such uses or disclosures.
We will not sell your PHI.
You have certain rights regarding your PHI. These rights include the following:
Right to Inspect and Obtain a Copy. You generally have the right to inspect and obtain a copy of PHI that we maintain about you in a designated record set, subject to certain legal exceptions. You may request an electronic or paper copy.
Right to Request an Amendment. If you believe that information we maintain about you is incorrect or incomplete, you may request that we amend the information. We may deny an amendment request in certain circumstances permitted by law.
Right to Request Confidential Communications. You may request that we communicate with you about your health information by a particular method or at a particular location. We will accommodate reasonable requests as required by HIPAA.
Right to Request Restrictions. You may request restrictions on how we use or disclose your PHI for treatment, payment, or healthcare operations. We are not required to agree to every restriction request.
Right to an Accounting of Disclosures. You may request a list of certain disclosures of your PHI made by us during the applicable period permitted by HIPAA.
Right to Receive a Copy of This Notice. You have the right to receive a paper copy of this Notice at any time. You may also access a copy through our website.
Right to Choose a Personal Representative. If you have legally authorized another person to act on your behalf, that person may exercise certain rights regarding your PHI to the extent permitted by law.
Right to Receive Notice of a Breach. You have the right to receive notification in the event of a breach of your unsecured PHI as required by applicable law.
We are required by law to maintain the privacy and security of your PHI. We will let you know promptly if a breach occurs that may have compromised the privacy or security of your information. We must follow the duties and privacy practices described in this Notice and provide you with notice of our legal duties and privacy practices with respect to PHI. We may change the terms of this Notice at any time. The revised Notice will be posted on our website and will be effective for all PHI we maintain.
We employ appropriate technical, physical, and organizational measures to protect your information. Clinical and medical data is handled through secure, compliant systems. Access to PHI is limited to authorized personnel who need the information to provide services or perform their job functions.
We may use cookies and similar tracking technologies on our website to enhance user experience, analyze website traffic, and for marketing purposes. You may control the use of cookies through your browser settings. Disabling cookies may affect the functionality of certain features of our website.
We may engage third-party service providers to support our services, including analytics, hosting, payment processing, laboratory coordination, pharmacy fulfillment, and communications. These providers may have access to your information only as necessary to perform their functions and are expected to safeguard it in accordance with applicable law.
Our services are not directed to individuals under the age of 18, and we do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us so we can delete it.
We may update this Privacy Policy and Notice of Privacy Practices from time to time. The most current version will be posted on our website with the effective date. We encourage you to review this page periodically.
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us: