Draft template — not final. This page is a starting scaffold modeled on standard telehealth/skincare policies. It must be reviewed and finalized by a healthcare attorney, and every [bracketed] item completed, before launch. Remove this notice once finalized.

Privacy & Notice of Privacy Practices

Effective date: [date]

This notice describes how medical information about you may be used and disclosed, and how you can access it. Please review it carefully. We strive to protect your information using the HIPAA framework as a guide, even where we may not be a HIPAA-covered entity for every interaction.

1. Our obligations

We work to maintain the privacy and security of your protected health information ("PHI") and will notify you of a breach of unsecured PHI to the extent required by law. We will not use or share your information other than as described here without your written authorization.

2. Information we collect

Account information you give us (name, email, shipping address, phone) and the health information you provide during a visit (your history, symptoms, photos, and messages with your provider).

3. How we use and share it

To treat you — your provider uses it to evaluate and care for you, and may share it with others involved in your care.
To run the practice — scheduling, quality review, and operations.
With vendors — service providers (such as a pharmacy or technology partner) who are required to safeguard your information.
For legal and safety reasons — to comply with law, respond to lawful requests, or address public-health and safety issues.

4. Your choices and authorization

Marketing, the sale of your information, and most sharing of psychotherapy notes require your written authorization, which you may revoke in writing at any time.

5. Your rights

Inspect and obtain a copy of your records.
Request a correction or amendment.
Request an accounting of certain disclosures.
Request restrictions or confidential communications.
Receive a paper or electronic copy of this notice.

6. Changes, complaints, and contact

We may update this notice and will post the current version here. To exercise a right, ask a question, or file a complaint, contact [privacy@earlismycat.com]. We will not retaliate for a complaint, and you may also complain to the U.S. Department of Health and Human Services. [Attorney to finalize state-specific privacy rights and contact details.]