Privacy Policy

The short version

We collect what we need to evaluate and treat you, and nothing beyond that. We do not sell your information. We do not share your health information with advertisers. We do not use your medical intake for marketing.

Information we collect

Information you give us

• Identity and contact details: name, date of birth, email, phone, and state.
• Health information: your goals, conditions, medications, allergies, history, and anything else you submit in an intake or message to your clinician.
• Payment information. Card details are collected and stored by our payment processor. We never receive or store your full card number.

Information collected automatically

• Basic technical data such as IP address, browser type, and pages visited, used to keep the site working and secure.

How we use it

• To evaluate you, treat you, and manage your ongoing care.
• To transmit a prescription to a pharmacy when your clinician writes one.
• To charge the clinical fee and issue refunds.
• To respond to your questions and send information about your own care.
• To meet legal, regulatory, and recordkeeping obligations.

Who we share it with

We share information only where it is necessary to deliver your care or run the practice:

• The dispensing pharmacy, when your clinician sends a prescription. This is limited to what the pharmacy needs to fill it.
• Service providers such as our electronic health record, secure messaging, and payment processor. Vendors that handle protected health information do so under a business associate agreement.
• Legal and regulatory recipients, where required by law, subpoena, or a public health obligation.

We do not sell your personal or health information, and we do not share it with advertising networks or data brokers.

Advertising and analytics trackers

We do not place advertising trackers on pages where you enter health information. Any analytics we use on general marketing pages is configured so that health information and intake responses are never transmitted to a third party.

How long we keep it

Medical records are retained for the period required by the law of the state where you were treated, which is commonly six to ten years from your last visit, and longer for patients who were minors. Records that are no longer required are securely destroyed.

Security

Data is encrypted in transit and at rest, access is limited to workforce members who need it for your care, and access to patient records is logged. No system is perfectly secure, and we will notify you and the appropriate regulators if a breach affects your information, as required by law.

Your choices and rights

• Request a copy of your medical record.
• Ask us to correct information you believe is wrong.
• Ask for an accounting of certain disclosures.
• Unsubscribe from non-clinical email at any time. Messages about your own care continue.
• Residents of some states, including California, Colorado, Connecticut, Texas, and Virginia, have additional rights over personal information. Contact us to exercise them and we will not treat you differently for doing so.

Your rights specific to protected health information are described in our Notice of Privacy Practices.

Children

This practice treats adults only. We do not knowingly collect information from anyone under 18. If you believe a minor has submitted information, contact us and we will delete it.

Contact

Privacy questions or requests: support@pwsclinical.com. Written requests may be sent to PWS-TX PLLC, 5900 Balcones Dr, Austin, TX 78731.