Privacy Policy

1. Introduction

MyCare MD LLC ("MyCare MD," "we," "us," or "our") operates the website located at https://mycare.md and the associated telehealth platform (collectively, the "Services"). MyCare MD is a telehealth company that provides online medical consultations, with physician services delivered through the Beluga Health physician network and prescriptions fulfilled by The Pharmacy Hub 2 LLC.

We are committed to protecting the privacy and security of your personal information and health information. This Privacy Policy explains what information we collect, how we use and share that information, and the measures we take to safeguard it. It also describes your rights regarding your information and how you can exercise those rights.

By accessing or using our Services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not use our Services.

2. Information We Collect

We collect various categories of information in order to provide, maintain, and improve our Services.

2.1 Personal Information

When you create an account, complete intake forms, or otherwise interact with our Services, we may collect the following personal information:

• Full legal name
• Date of birth
• Email address
• Phone number
• Shipping address (for prescription delivery)
• Billing address
• Payment information (see Section 2.4 below)

2.2 Health Information

To facilitate telehealth consultations and prescription services, we collect health-related information, including but not limited to:

• Medical history
• Current medications
• Known allergies
• Responses to health questionnaires and intake forms
• Treatment preferences
• Telehealth consultation records and clinical notes
• Prescription information

This health information may constitute Protected Health Information ("PHI") under the Health Insurance Portability and Accountability Act ("HIPAA") and is handled accordingly, as described in Section 5 of this Privacy Policy.

2.3 Technical Information

When you visit our website or use our platform, we may automatically collect certain technical information, including:

• Internet Protocol (IP) address
• Browser type and version
• Device type and operating system
• Referring and exit pages
• Pages viewed and time spent on pages
• Cookies and similar tracking technologies (see Section 7)
• Usage analytics and interaction data

2.4 Payment Information

We collect payment information necessary to process transactions for our Services. Payment processing is handled through third-party payment processors that are compliant with applicable data security standards (such as PCI-DSS). MyCare MD does not store full credit card numbers, CVV codes, or other sensitive payment card data on our servers. MyCare MD operates on a cash-pay model and does not bill insurance.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Telehealth Consultations. To facilitate online medical consultations through the Beluga Health physician network, including physician review of your health history and treatment recommendations.
• Prescription Fulfillment. To process and fulfill prescription orders through our dispensing pharmacy partner, The Pharmacy Hub 2 LLC, including dispensing, packaging, and shipping of medications.
• Communications. To communicate with you regarding your treatment, prescription orders, account updates, and responses to your inquiries.
• Payment Processing. To process payments for Services rendered, including verifying billing information and completing transactions through our third-party payment processors.
• Legal and Regulatory Compliance. To comply with applicable federal and state laws, regulations, court orders, and other legal obligations, including HIPAA requirements.
• Service Improvement. To analyze usage trends, improve our platform, enhance user experience, and develop new features.
• Service-Related Notifications. To send transactional and service-related communications, such as appointment reminders, order confirmations, shipping updates, and account notifications. We will not send marketing communications without your prior consent.

4. How We Share Your Information

We may share your information with the following categories of recipients and for the following purposes. We do not sell, rent, or trade your personal or health information to any third parties, and we do not share your information with third parties for their own marketing purposes.

4.1 Beluga Health

Physician services and medical consultations are conducted through the Beluga Health physician network via our telehealth patient portal. We share your personal and health information with Beluga Health as necessary for physicians to review your health history, conduct consultations, and provide medical recommendations and prescriptions.

4.2 The Pharmacy Hub 2 LLC

Prescription fulfillment, dispensing, and shipping are provided by The Pharmacy Hub 2 LLC, located at 2750 Bridge Way, Unit 180, Davie, FL 33314. We share your personal information, prescription details, and shipping address with The Pharmacy Hub 2 LLC as necessary to fulfill and deliver your prescription orders.

4.3 Payment Processors

We share limited billing and transaction information with third-party payment processors as necessary to process payments for our Services. These processors are bound by their own privacy and security obligations.

4.4 Legal Compliance

We may disclose your information when required to do so by law, regulation, court order, subpoena, or other legal process, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others, investigate fraud, or respond to a government request or regulatory authority.

4.5 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your information.

4.6 No Sale of Information

We do NOT sell your personal information or health information to third parties. We do NOT share your information with third parties for their own marketing purposes.

5. HIPAA Compliance

MyCare MD is committed to compliance with the Health Insurance Portability and Accountability Act of 1996 ("HIPAA") and its implementing regulations, including the HIPAA Privacy Rule and Security Rule.

5.1 Protected Health Information

All Protected Health Information ("PHI") collected, used, or disclosed in connection with our Services is handled in accordance with HIPAA requirements and our Notice of Privacy Practices.

5.2 Business Associate Agreements

We maintain Business Associate Agreements ("BAAs") with all service partners who access, receive, maintain, or transmit PHI on our behalf, including Beluga Health (for physician services) and The Pharmacy Hub 2 LLC (for prescription fulfillment).

5.3 Minimum Necessary Standard

We apply the minimum necessary standard to all uses and disclosures of PHI. This means that we limit the PHI we use, disclose, or request to the minimum amount reasonably necessary to accomplish the intended purpose.

5.4 Your Rights Under HIPAA

As a patient, you have the following rights under HIPAA with respect to your Protected Health Information:

• Right of Access. You have the right to request access to and obtain a copy of your PHI that we maintain.
• Right to Request Amendments. You have the right to request that we amend your PHI if you believe it is inaccurate or incomplete.
• Right to an Accounting of Disclosures. You have the right to request an accounting of certain disclosures of your PHI that we have made.
• Right to Request Restrictions. You have the right to request restrictions on certain uses and disclosures of your PHI. While we will consider your request, we are not required to agree to all restrictions.
• Right to Receive Confidential Communications. You have the right to request that we communicate with you about your health information by alternative means or at alternative locations.
• Right to File a Complaint. If you believe your HIPAA rights have been violated, you have the right to file a complaint with us or with the U.S. Department of Health and Human Services, Office for Civil Rights (see Section 8 for details).

To exercise any of these rights, please contact our Privacy Officer using the information provided in Section 13.

6. Data Security

We take the security of your information seriously and implement a combination of administrative, technical, and physical safeguards designed to protect your personal and health information.

• Encryption in Transit. All data transmitted between your device and our servers is protected using industry-standard Secure Sockets Layer/Transport Layer Security (SSL/TLS) encryption.
• Encrypted Storage. Personal information and health information stored on our systems is encrypted at rest using industry-standard encryption protocols.
• Access Controls. We restrict access to PHI and personal information to authorized personnel who require such access on a need-to-know basis in order to perform their job responsibilities.
• Regular Security Assessments. We conduct regular security assessments, vulnerability scans, and monitoring to identify and address potential threats to our systems.
• Secure Telehealth Platform. Our telehealth platform is designed and maintained with security safeguards appropriate for the transmission and storage of health information.
• Workforce Training. Our employees and contractors who handle PHI receive training on HIPAA requirements and our privacy and security policies.

Please be aware that no method of electronic transmission or storage is completely secure. While we strive to protect your information using commercially acceptable means, we cannot guarantee absolute security.

7. Cookies and Tracking Technologies

7.1 Essential Cookies

We use essential cookies that are necessary for the basic functionality of our website, such as maintaining your session, remembering your login status, and ensuring the security of your account. These cookies are required for the Services to operate and cannot be disabled.

7.2 Analytics Cookies

We may use analytics cookies and similar technologies to understand how visitors interact with our website. This helps us analyze usage trends, improve site performance, and enhance the overall user experience. Third-party analytics tools, such as Google Analytics, may be used for this purpose. These tools may collect information such as pages visited, time spent on the site, and general geographic location.

7.3 Managing Cookie Preferences

You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. However, if you disable essential cookies, certain features of our website may not function properly. For more information on how to manage cookies, please refer to your browser's help documentation.

8. Your Rights

Depending on your location and applicable law, you may have certain rights regarding your personal and health information.

8.1 General Rights

All users of our Services have the right to:

• Access your personal and health information that we maintain.
• Request Correction of any personal or health information that is inaccurate, incomplete, or outdated.
• Request Deletion of your personal data, subject to applicable legal retention requirements and our obligations under HIPAA and other laws.
• Opt Out of Marketing Communications at any time by following the unsubscribe instructions in any marketing email or by contacting us directly.

8.2 HIPAA Complaint Rights

If you believe your HIPAA rights have been violated, you have the right to file a complaint with:

• MyCare MD LLC using the contact information in Section 13; or
• The U.S. Department of Health and Human Services, Office for Civil Rights at https://www.hhs.gov/ocr/ or by calling 1-800-368-1019.

We will not retaliate against you for filing a complaint.

8.3 California Residents

If you are a California resident, you may have additional rights under the California Consumer Privacy Act ("CCPA") and the California Privacy Rights Act ("CPRA"), including:

• The right to know what personal information we have collected, used, disclosed, or sold.
• The right to request deletion of your personal information, subject to certain exceptions.
• The right to opt out of the sale or sharing of your personal information. Note that MyCare MD does not sell personal information.
• The right to non-discrimination for exercising your privacy rights.
• The right to correct inaccurate personal information.
• The right to limit the use and disclosure of sensitive personal information.

To exercise any of these rights, please contact us using the information provided in Section 13.

9. Data Retention

We retain your information for as long as necessary to fulfill the purposes described in this Privacy Policy and as required by applicable law.

• Health Records. Medical records and health information are retained in accordance with applicable state and federal requirements, which generally require a minimum retention period of seven (7) years from the date of the last treatment or service.
• Payment Records. Payment and billing records are retained in accordance with applicable financial and tax regulations.
• Account Information. Account information is retained for as long as your account remains active. Following account closure, we may retain certain information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements.
• Anonymized and Aggregated Data. Data that has been de-identified, anonymized, or aggregated so that it can no longer reasonably identify you may be retained and used indefinitely for analytics, research, and service improvement purposes.

10. Third-Party Links

Our website and Services may contain links to third-party websites, applications, or services that are not owned or controlled by MyCare MD. This Privacy Policy applies only to our Services and does not govern the practices of any third-party sites.

We are not responsible for the privacy practices, content, or security of any third-party websites. We encourage you to review the privacy policy of every third-party site you visit before providing any personal information.

11. Children's Privacy

Our Services are not intended for individuals under the age of eighteen (18). We do not knowingly collect, solicit, or maintain personal information or health information from anyone under 18 years of age.

If we become aware that we have inadvertently collected personal information from an individual under 18, we will take prompt steps to delete such information from our records. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately using the information in Section 13 so that we can take appropriate action.

12. Changes to This Privacy Policy

MyCare MD reserves the right to update or modify this Privacy Policy at any time. When we make changes, we will revise the "Last Updated" date at the top of this document and post the updated Privacy Policy on our website.

If we make material changes to how we handle your personal or health information, we will provide notice through one or more of the following methods: posting a prominent notice on our website, sending an email notification to the address associated with your account, or presenting an in-platform notification.

Your continued use of our Services after the posting of changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

For HIPAA-related inquiries, including requests to exercise your rights under HIPAA or to file a privacy complaint, please contact our Privacy Officer at:

We will respond to your inquiry in a timely manner and in accordance with applicable law.