HIPAA Privacy Policy

This is a template and must be reviewed and customized by qualified legal counsel before publication. It is provided to illustrate the structure and disclosures commonly expected for telehealth and pharmacy-adjacent platforms and is not legal advice.

1. Who We Are

Insert MD ("Insert MD," "we," "us," or "our") operates this website and the PepPal application (the "Services"). Insert MD is a service and technology platform that supports wellness businesses and coordinates between independent licensed providers and independently licensed pharmacies. Insert MD is not a medical provider, pharmacy, or covered entity that practices medicine or dispenses medication.

2. Scope of This Policy

This Policy explains how we collect, use, disclose, and protect information, including how we handle protected health information ("PHI") in accordance with the Health Insurance Portability and Accountability Act ("HIPAA"), where applicable. Where Insert MD acts as a business associate of a covered entity (such as an independent provider), we handle PHI consistent with applicable business associate agreements.

3. Information We Collect

Business contact information: name, business name, email, phone, and role provided through inquiry or demo forms.
Account information: credentials and settings for staff, providers, and clients who use our platform.
Health-related information: patient-reported intake information, consent records, and program details submitted to support clinical evaluation by independent providers.
Usage and device information: IP address, browser type, pages viewed, and similar analytics data.

4. How We Use Information

To provide, operate, and improve the Services and the PepPal app.
To facilitate coordination between clients, wellness businesses, independent providers, and licensed pharmacies.
To communicate with you about demos, onboarding, support, and program updates.
To comply with legal obligations and enforce our Terms.

5. How We Disclose Information

We may share information with: independent licensed providers and pharmacies to facilitate care and fulfillment; service providers (such as hosting and analytics vendors) bound by confidentiality obligations; and as required by law or to protect rights and safety. We do not sell PHI.

6. How We Protect Information

We maintain administrative, technical, and physical safeguards designed to protect information, including encryption in transit, access controls, and ongoing security review. No method of transmission or storage is 100% secure.

7. Your Rights

Depending on your jurisdiction and your relationship with a covered entity, you may have rights to access, amend, restrict, or request an accounting of disclosures of your PHI, and to file a complaint. Requests should be directed to the relevant covered entity (your provider) and/or to us at the contact below.

8. Cookies & Analytics

We use cookies and similar technologies to operate the site and understand usage. You can control cookies through your browser settings.

9. Children's Privacy

The Services are not directed to individuals under 18, and we do not knowingly collect information from minors.

10. Changes to This Policy

We may update this Policy from time to time. Material changes will be posted on this page with an updated effective date.

11. Contact Us

Insert MD
88 SW 7th St, Unit 1812, Miami, FL 33130, USA
Phone: 512-778-0376
Email: privacy@insertmd.com