HIPAA Compliance

Our commitment

WeightLossMedication.US is committed to protecting the privacy and security of your health information. Where applicable, we handle protected health information (PHI) in accordance with the Health Insurance Portability and Accountability Act (HIPAA) and its implementing regulations.

This page summarizes how we approach HIPAA compliance. It works alongside our Privacy Policy and any Notice of Privacy Practices provided to you.

What is protected health information

Protected health information includes individually identifiable information about your health, the care you receive, and payment for that care. Examples include your medical history, treatment details, and information shared during consultations.

How we safeguard your information

We apply administrative, physical, and technical safeguards designed to protect PHI. This includes limiting access to those who need it to provide your care, using security measures to protect data in transit and at rest, and training relevant personnel on privacy and security responsibilities.

We work with clinicians, pharmacies, and service providers under arrangements intended to ensure they also protect your information consistent with HIPAA, including business associate agreements where applicable.

Uses and disclosures of your information

We use and disclose PHI to provide treatment, obtain payment, and conduct healthcare operations, and otherwise as permitted or required by law. We do not sell your PHI. Certain uses and disclosures require your authorization, which you may revoke as provided by law.

Your rights under HIPAA

Subject to applicable law, you generally have the right to access and obtain a copy of your health records, to request corrections, to request restrictions on certain uses and disclosures, to request confidential communications, and to receive an accounting of certain disclosures. To exercise these rights, contact us at contact@weightlossmedication.us.

You also have the right to file a complaint if you believe your privacy rights have been violated, without fear of retaliation.

Breach notification

In the event of a breach of unsecured PHI, we will provide notification as required by HIPAA and applicable law.

Contact and complaints

If you have questions about our HIPAA practices or wish to exercise your rights or file a complaint, contact us at contact@weightlossmedication.us. You may also have the right to file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights.

Business associates and service providers

Providing telehealth care involves trusted partners, such as dispensing pharmacies, technology vendors, and payment processors, who may handle protected health information on our behalf. Where these partners meet the definition of a business associate under HIPAA, we enter into business associate agreements that legally obligate them to safeguard your information, use it only for permitted purposes, and report any breach. We select such partners with care and hold them to privacy and security standards consistent with our own. This layered approach means your information remains protected not only within our organization but across the network of providers who help deliver your care.

We do not authorize business associates to use your protected health information for their own marketing or to sell it, and their obligations to protect your data continue for as long as they hold it.

Minimum necessary standard

A core principle of HIPAA, and of our own practice, is the minimum necessary standard: when using or disclosing protected health information for most purposes, we limit it to the least amount of information needed to accomplish the task. A staff member assisting with a shipping question, for example, does not need access to your full clinical history, and our access controls reflect that. By restricting information to what each role genuinely requires, we reduce the risk of unnecessary exposure and reinforce that your sensitive data is seen only by those who need it to serve you. This principle guides how we design access permissions and how we train the people who work with your information.

Electronic health information and security

Because our care is delivered through technology, much of your protected health information exists in electronic form, and securing it is a continuous priority. We apply technical safeguards intended to protect electronic protected health information, including measures to control access, protect data as it travels over networks and as it is stored, and maintain the integrity of records against improper alteration or destruction. We also maintain practices for monitoring and responding to potential security events. While no electronic system can be guaranteed perfectly secure, our objective is to apply safeguards consistent with HIPAA's Security Rule and to improve them as technology and threats evolve.

We encourage you to do your part as well by protecting your account credentials, using secure devices and networks when accessing your information, and notifying us promptly if you suspect unauthorized access to your account.

Notice of privacy practices

Where applicable, you may be provided with a Notice of Privacy Practices that describes in greater detail how your protected health information may be used and disclosed, and your rights with respect to that information. That notice, together with this page and our Privacy Policy, forms the basis of our commitments to you regarding your health information. If you would like a copy of the applicable notice or have questions about its contents, contact us at contact@weightlossmedication.us and we will assist you. We may update our privacy practices over time, and we will make the current notice available as required by law.

Your role in protecting your information

Protecting your health information is a partnership. You can help by keeping your contact information accurate so sensitive communications reach you and not someone else, by choosing strong and unique credentials for any account, by being cautious about sharing your health details over unsecured channels, and by letting us know right away if you believe your information has been compromised or accessed without your authorization. When you exercise your rights, such as requesting confidential communications through a particular method, we will accommodate reasonable requests consistent with HIPAA. Together, these practices help keep your protected health information as secure as possible throughout your care.

Permitted uses and disclosures in detail

HIPAA permits certain uses and disclosures of protected health information without your specific authorization, and understanding these helps clarify how your information supports your care. We use your information for treatment, meaning the clinicians and pharmacies involved in your care can access what they need to evaluate, prescribe, dispense, and follow up. We use it for payment, such as processing charges and providing documentation of services. And we use it for healthcare operations, which include quality review, training, and the administrative work that keeps care running. Beyond these, the law allows disclosure in specific circumstances, such as when required by law, for public health activities, or to prevent a serious threat to health or safety. We do not use or disclose your protected health information for purposes outside what the law permits without your authorization.

Where an authorization is required, you provide it knowingly, and you may revoke it in writing at any time, with the revocation applying going forward.

Accounting of disclosures

You have the right, subject to certain exceptions defined by law, to receive an accounting of certain disclosures of your protected health information that we have made. This accounting generally excludes disclosures made for treatment, payment, and healthcare operations, as well as disclosures you authorized, but it provides a record of certain other disclosures so you can understand how your information has been shared. To request an accounting, contact us at contact@weightlossmedication.us, and we will respond in accordance with applicable law, including any limits on the time period covered and the frequency of free requests.

Requesting restrictions and confidential communications

You may request that we restrict how your protected health information is used or disclosed for treatment, payment, or healthcare operations. While we are not always required to agree to a requested restriction, we will consider reasonable requests and will honor those we are obligated to honor under the law. You may also request that we communicate with you about your health information in a particular way or at a particular location, for example by a specific email address or phone number, and we will accommodate reasonable requests for confidential communications. To make either type of request, contact us at contact@weightlossmedication.us with the specifics of what you are asking for.

Updates to our privacy practices

We may revise our HIPAA practices and any associated Notice of Privacy Practices to reflect changes in law, technology, or our operations. When we make a material change, we will update the relevant materials and make the current version available as required, with the effective date indicated. The practices in effect at the time of a particular use or disclosure govern that use or disclosure. We encourage you to review our current privacy materials periodically so you remain informed about how your protected health information is handled and what rights you have.

Questions about this policy

If you have questions about this policy, contact us at contact@weightlossmedication.us.