Skip to main content

If this is a medical emergency, call 911.

INTEGRATEDHealth Clinic
ENES

Privacy Policy

Effective date: October 22, 2026. This policy explains what information Integrated Health Clinic collects through its website and patient accounts, how we use it, and the choices you have.

1. About this policy

This policy applies to our website and to the patient services available through it. Health information that we create or receive as your healthcare provider is also protected by HIPAA and is described in our Notice of Privacy Practices. If the two documents differ on how your health information is used, the Notice of Privacy Practices controls.

2. Information we collect

We collect only the information we need to provide care and operate the service:

  • Account information. Your email address and sign-in credentials when you create an account.
  • Health information. The answers you give in the GLP-1 health questionnaire, and any information you share with your care team during visits or in secure messages, including attachments you upload.
  • Appointment and visit information. Appointment requests and scheduling details. For visits billed to insurance, insurance and visit information is kept in the electronic health record.
  • Payment information. When you pay, Stripe collects your card details directly. We receive confirmation of the payment and the plan purchased. We never see or store your card number.
  • Communications. Messages you send us, and the dates and times of notices we send you.
  • Technical information. Our hosting provider processes basic technical data, such as your IP address and browser type, in standard server logs needed to deliver and secure the site.
  • Aggregate website statistics. We count visits to public pages in aggregate. This does not use cookies or visitor identifiers.

3. How we use your information

We use your information to:

  • create and secure your account;
  • review your questionnaire and provide, coordinate and document your care;
  • process payments and bill insurance for services;
  • schedule appointments and communicate with you, including secure messages and email notices;
  • protect the service against fraud and misuse, and keep records required by law; and
  • understand, in aggregate, how the website is used so that we can improve it.

Email notices tell you that something is waiting for you in your account, such as a new message. They never include the content of your messages or your health information.

4. Service providers we use

We rely on a small number of companies to operate the service. They process information only to provide their service to us:

  • Supabase provides sign-in, our database and file storage, including message attachments. Data is stored in the United States.
  • Vercel hosts the website and keeps the standard server logs described above.
  • Stripe processes payments made through Stripe Checkout, in U.S. dollars.
  • Resend sends our email notices. Notices do not contain message content.
  • CharmHealth provides our electronic health record and is used for visits billed to insurance.

We require providers that handle health information on our behalf to protect it as the law requires. We may also disclose information when the law requires it, for example in response to a valid legal request, or as described in our Notice of Privacy Practices.

5. What we do not do

  • We do not sell your personal information.
  • We do not use advertising trackers, advertising cookies, social media pixels or session-recording tools on this website.
  • We do not include message content or health details in email notices, web addresses or payment records.

6. Cookies

We use only the cookies needed to keep you signed in and to protect your session. We do not set cookies for advertising or tracking, and our website statistics do not rely on cookies.

7. How we protect information

We use safeguards designed for health information, including:

  • encryption in transit (HTTPS) between your device and our services;
  • database rules that limit access to the minimum each person needs, so that your messages and attachments are visible only to you and your care team;
  • two-factor authentication for our staff console;
  • audit logs of staff access to records; and
  • hosting of our database and files in the United States.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please choose a strong, unique password and sign out on shared devices. If we learn of a breach that affects your information, we will notify you as the law requires.

8. How long we keep information

We keep information for as long as needed to provide care and as required by Florida and federal law. Medical records are subject to legal retention requirements, so a request to delete your account may not allow us to delete your health records right away. When information is no longer needed, we delete it or remove identifying details.

9. Your choices and rights

You may ask us to:

  • give you access to, or a copy of, your information and health records;
  • correct information that is inaccurate or incomplete;
  • change how we contact you; or
  • delete information that we are not required to keep.

To make a request, contact us using the details below. We may need to confirm your identity first. For your health records, your rights under HIPAA are described in our Notice of Privacy Practices.

10. Children

Our services are for adults 18 years of age and older. We do not knowingly collect information from children. If you believe a child has given us information, please contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. The effective date at the top shows when it was last changed. If we make a significant change, we will take reasonable steps to let you know, such as a notice on the website.

12. How to contact us

For questions or requests about this policy or your information, please contact us:

Integrated Health Clinic, +1 786 291 1273 · [email protected] · Fax +1 (305) 402-0852