Privacy Policy
VirtualVisitRX is a HIPAA-covered telehealth provider. This policy explains how we collect, protect, and use your health and personal information.
Effective Date: August 16, 2026 | Last Updated: August 16, 2026
HIPAA-Compliant Practice. Your Protected Health Information (PHI) is safeguarded under the Health Insurance Portability and Accountability Act of 1996. For your full HIPAA rights, see our HIPAA Notice of Privacy Practices.
1. Who We Are & Scope of This Policy
VirtualVisitRX ("we," "us," or "our") is a licensed telehealth medical clinic operating at virtualvisitrx.com. We provide virtual healthcare services to adult patients including urgent care, STD/STI treatment, women's health, men's health, dermatology, weight loss management (including GLP-1 therapies), hormone therapy (TRT and thyroid optimization), and direct primary care (DPC) memberships.
This Privacy Policy governs how we collect, use, disclose, and protect your information — including Protected Health Information ("PHI") as defined under HIPAA — when you visit our website, submit patient intake forms, or receive telehealth services from our providers.
Our Services are intended exclusively for adults aged 18 and older located within the United States. By using our Services, you agree to the practices described in this Policy.
2. Information We Collect
Protected Health Information (PHI)
When you request telehealth services, we collect health information necessary to provide safe and effective care, including:
- Chief complaint, symptoms, and reason for visit
- Medical history, past diagnoses, and surgical history
- Current medications, dosages, and known drug allergies
- Preferred pharmacy name and address
- Responses to clinical intake questionnaires and safety screening tools
- Service-specific information (e.g., GLP-1 safety screening for weight loss; hormone levels for TRT/thyroid; STD/STI exposure history)
- Prescription history and provider treatment notes
- Video appointment scheduling information (for weight loss consultations)
Personal & Contact Information
- Full legal name, date of birth, and biological sex
- Mailing address, email address, and phone number
- State of residence (required to verify provider licensure in your state)
- Emergency contact information
Payment Information
Payments are processed securely through GoDaddy Payments and Stripe. We collect billing name, billing address, and transaction records. We do not store full credit card numbers on our servers. All payment transmissions are encrypted via TLS/SSL. Our flat-fee services range from $50 to $150 per visit depending on the service type.
Technical & Usage Information
We automatically collect IP address, browser type, device identifiers, pages visited, and session data to maintain site security and improve our services. Website analytics are collected only after you accept our cookie consent banner (see Section 7).
3. How We Use Your Information
We use the information we collect to:
- Provide telehealth consultations, clinical assessments, diagnoses, and treatment recommendations from licensed providers
- Transmit prescriptions electronically or via secure fax to your designated pharmacy
- Coordinate care with laboratories, compounding pharmacies, and other providers involved in your treatment plan
- Send appointment confirmations, follow-up care instructions, and treatment reminders
- Process payments for services rendered through our secure payment processors
- Comply with HIPAA, Florida telehealth regulations (Fla. Stat. § 456.47), and all applicable federal and state healthcare laws
- Fulfill mandatory reporting obligations (e.g., communicable disease reporting required under Florida law)
- Improve the quality, safety, and effectiveness of our telehealth services through internal quality review
- Respond to patient inquiries and provide clinical and administrative support
- Detect and prevent fraud, unauthorized access, and misuse of our platform
- Send health-related educational content — you may opt out at any time by contacting us
4. How We Share Your Information
We do not sell your personal information or PHI to third parties for marketing or commercial purposes. We share your information only in the following circumstances:
Licensed Healthcare Providers
Your PHI is shared with the licensed physicians and nurse practitioners on our platform who are directly involved in your care. All providers are bound by HIPAA, state medical board regulations, and professional ethical obligations.
Pharmacies
With your consent, we transmit prescription information to your designated pharmacy. For compounded medications — including GLP-1 therapies, Vitamin B12 supplementation, and other weight loss treatments — relevant clinical information is shared with licensed compounding pharmacies to fulfill your prescription.
Laboratories
If lab work is ordered as part of your care (e.g., for hormone therapy or thyroid optimization), necessary clinical information is shared with the designated laboratory to process your order.
Payment Processors (GoDaddy Payments & Stripe)
We share billing information with our payment processors to complete transactions. These processors are contractually prohibited from using your information for any other purpose and maintain their own security standards.
Clinical Communications (Secure Email & Fax)
We use secure email and fax services to transmit intake information and clinical communications to our care team. Fax transmissions to pharmacies and other providers use secure fax protocols.
Analytics (Google Analytics 4)
We use Google Analytics 4 with IP anonymization enabled to understand how patients navigate our website. Analytics tracking is activated only after you accept our cookie consent banner. We never transmit PHI, clinical intake data, or identifiable patient information to analytics services.
Legal & Regulatory Requirements
We may disclose information as required by law, court order, subpoena, or government regulation, including mandatory public health reporting obligations under Florida law and federal HIPAA regulations.
Business Transfers
In the event of a merger, acquisition, or sale of assets, patient information may be transferred to the successor entity, subject to the same HIPAA protections and privacy obligations described in this Policy.
5. Data Security & HIPAA Safeguards
We implement the administrative, physical, and technical safeguards required by HIPAA to protect your PHI and personal information:
- Encrypted data transmission (TLS/SSL) for all website communications and patient form submissions
- Secure storage of health records and clinical intake data with access controls
- PHI access limited to authorized clinical and administrative personnel only
- Secure fax transmission for prescription and clinical communications to pharmacies and labs
- Regular security assessments and workforce HIPAA compliance training
- Google Analytics 4 with IP anonymization — analytics never receives PHI or clinical data
While we take every reasonable precaution, no system is 100% secure. If you believe your information has been compromised, contact us immediately at [email protected]. We will notify affected patients of any breach as required by HIPAA's Breach Notification Rule.
6. Medical Records Retention
We retain your medical records and PHI in accordance with Florida state law and applicable federal regulations. Florida law requires medical records to be retained for a minimum of five (5) years from the date of service, or longer where required by other applicable law. Payment and billing records are retained as required by applicable tax and financial regulations.
7. Cookies & Tracking Technologies
Our website uses the following types of cookies:
- Essential cookies — Required for the website to function (session management, security). Always active and cannot be disabled.
- Analytics cookies (Google Analytics 4) — Activated only after you accept our cookie consent banner. Uses IP anonymization. Declining these cookies does not affect your ability to use our Services or receive care.
You may manage cookie preferences through your browser settings or our cookie consent banner at any time.
8. Your HIPAA Privacy Rights
As a patient of a HIPAA-covered telehealth provider, you have important rights regarding your PHI — including the right to access your records, request amendments, request restrictions on use, request confidential communications, receive an accounting of disclosures, and file complaints without retaliation.
For a complete description of your HIPAA rights and our obligations as a covered entity, please review our HIPAA Notice of Privacy Practices. To exercise any right, contact us at [email protected].
9. Children's Privacy
Our telehealth Services are intended exclusively for adults aged 18 and older. We do not knowingly collect personal information or PHI from individuals under the age of 18. If you believe a minor has submitted information through our Services, please contact us immediately at [email protected] so we can remove it promptly.
10. Florida Privacy Rights & Applicable Law
As a Florida-based telehealth provider, we comply with the Florida Information Protection Act (FIPA), Florida Statute § 456.47 (telehealth practice standards), and Florida Department of Health regulations governing the practice of medicine via telehealth. Florida patients have the right to access their medical records under Florida Statute § 456.057. This Policy is governed by the laws of the State of Florida.
11. Changes to This Policy
We reserve the right to update this Privacy Policy at any time. Material changes will be posted on this page with an updated effective date. Continued use of our Services after changes are posted constitutes your acceptance of the updated Policy. We encourage you to review this page periodically.
12. Contact Us
For questions about this Privacy Policy, to exercise your privacy rights, or to report a concern:
To file a HIPAA complaint with the federal government:
U.S. Department of Health and Human Services — Office for Civil Rights
hhs.gov/ocr | 1-800-368-1019
We will not retaliate against you for filing a complaint.