Privacy Policy

1. Information We Collect

When you use UTIDoc, we collect the following information to provide you with medical care:

• Personal information: Full name, email address, phone number, date of birth
• Health information: Symptoms, medical history, current medications, drug allergies, pregnancy status
• Payment information: Processed securely by Stripe - we do not store your credit card details
• Pharmacy information: Name and address of your selected pharmacy
• Usage data: Pages visited, status check frequency, and session information for service improvement

2. How We Use Your Information

Your information is used to:

• Facilitate physician evaluation and clinical decision-making
• Send your prescription electronically to your pharmacy
• Communicate with you about your visit status, prescription readiness, and follow-up care
• Process payments and issue refunds when applicable
• Improve our service quality and patient outcomes
• Comply with legal and regulatory requirements

3. How Your Health Information Is Protected

We apply the safeguards of the HIPAA Privacy and Security Rules and Florida's medical-records confidentiality law (Fla. Stat. §456.057) as binding practice for all patient records. Key protections include:

• Your identifiable health information is stored exclusively in a dedicated, encrypted medical-records vault - separate from the application platform, which holds only de-identified case data
• All data is encrypted in transit (TLS) and at rest (envelope encryption with managed keys)
• Access is restricted to your reviewing physician and essential authorized staff, with automatic 15-minute session timeouts
• Every access to your record is captured in a tamper-evident audit trail retained for 6 years

For a complete description of how your health information may be used and your rights, see our Notice of Privacy Practices.

4. Information Sharing

We share your information only as necessary to provide care:

• Physicians: Board-certified physicians on our platform review your clinical information to make treatment decisions
• Pharmacies: Your prescription and necessary patient information are transmitted electronically to your selected pharmacy
• Payment processor: Stripe processes your payment securely. We do not have access to your full card number
• Legal requirements: We may disclose information when required by law, court order, or to protect the safety of individuals

We do not sell, rent, or trade your personal or health information to third parties for marketing purposes.

5. Data Retention

We retain medical records for 7 years, exceeding Florida's 5-year requirement. Access audit records are retained for 6 years. Payment records are retained for accounting and tax purposes. If you leave the intake before submitting, no personal or health information is stored - we keep only an anonymous record of which step was reached.

6. Your Rights

You have the right to:

• Access: Request a copy of the health information we have about you
• Correction: Request corrections to inaccurate health information
• Accounting of disclosures: Request a list of parties we have shared your PHI with
• Restriction requests: Request restrictions on certain uses of your information
• Confidential communications: Request that we communicate with you through specific channels

To exercise these rights, contact us at support@utidoc.com.

7. Cookies, Trackers and Analytics

We use essential cookies for site functionality only. No third-party advertising trackers, analytics scripts, pixels, or session-recording tools run on any page of our service - this is technically enforced by our site's Content Security Policy. Internal service metrics are aggregated and contain no health information.

8. Text Messages (SMS)

If you check the optional text-message box at checkout, UTIDoc may send text messages about your visit to the phone number you provide, such as follow-up check-ins and a request to review your experience. You will receive up to 3 messages per visit. Message and data rates may apply. Reply STOP at any time to opt out, or HELP for help, or contact support@utidoc.com. Texts never include details of your diagnosis or prescription. Agreeing to receive texts is not a condition of receiving care. We do not share your mobile number or text-messaging consent with third parties or affiliates for marketing purposes.

9. Security

We implement industry-standard security measures including encryption in transit and at rest, a dedicated encrypted vault for medical records, cryptographically signed access tokens, role-based access controls, automated security alerting, and continuous access auditing. While no system is completely secure, we are committed to protecting your information using best-in-class practices.

10. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated effective date. We encourage you to review this page regularly.

11. Contact Us

For privacy-related questions, concerns, or to exercise your rights:

Email: support@utidoc.com

If you believe your privacy rights have been violated, you also have the right to file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights.