Notice of Privacy Practices

Our Commitment to Your Privacy

UTIDoc ("we," "us") is required by law to maintain the privacy and security of your health information, to provide you this notice of our legal duties and privacy practices, and to notify you if a breach of your unsecured health information occurs. We apply the safeguards of the HIPAA Privacy and Security Rules and Florida's medical-records confidentiality law (Fla. Stat. §456.057) as binding practice for all patient records.

How We May Use and Disclose Your Health Information

• Treatment: The licensed physician reviewing your visit uses your intake information to evaluate, diagnose, and treat you, and to transmit your prescription electronically to your chosen pharmacy.
• Payment: We process the flat visit fee and issue refunds. Your payment card is handled by our payment processor; we never send your health information to it.
• Health care operations: We may use your information for quality review, auditing access to your record, and improving our service. Internal operational reporting uses only de-identified data.
• Required by law: We disclose information when required by federal or Florida law, court order, or to prevent a serious threat to health or safety.
• Public health and oversight: We may report to public health authorities or health oversight agencies as legally required.

Any use or disclosure not described in this notice will be made only with your written authorization, which you may revoke at any time. We never sell your health information, and we do not use it for marketing.

Your Rights

You have the right to:

• Access - receive a copy of your medical record, generally within 30 days of request
• Amendment - request correction of information you believe is inaccurate or incomplete
• Accounting of disclosures - receive a list of certain disclosures we have made of your information
• Restriction requests - ask us to limit how we use or share your information (we are not required to agree except where the law provides)
• Confidential communications - ask us to contact you in a specific way or at a specific address
• Paper copy - receive a paper copy of this notice on request
• Breach notification - be notified if your unsecured health information is compromised

To exercise any of these rights, email support@utidoc.com.

How We Protect Your Information

• Your identifiable health information is stored exclusively in a dedicated encrypted medical-records vault, separate from our application platform
• All data is encrypted in transit (TLS) and at rest (envelope encryption with managed keys)
• Every access to your record is captured in a tamper-evident audit trail retained for 6 years
• Access is limited to your reviewing physician and essential authorized staff, with automatic session timeouts
• Medical records are retained for 7 years, exceeding Florida's 5-year requirement
• No third-party advertising trackers or analytics run on any page of our service

Complaints

If you believe your privacy rights have been violated, you may file a complaint with us at support@utidoc.com or with the U.S. Department of Health and Human Services Office for Civil Rights. We will never retaliate against you for filing a complaint.

Changes to This Notice

We reserve the right to change this notice and make the revised notice effective for information we already hold. The current notice, with its effective date, is always available on this page.

Contact

Privacy Officer - UTIDoc
Email: support@utidoc.com