Consumer Health Data Privacy Policy

This policy is published by Mahavir Health Services LLC, doing business as TeleDirectMD (“TeleDirectMD,” “we,” or “us”). It explains how we handle consumer health data and the rights that residents of Washington, Nevada, Connecticut and California have under their state laws. It is separate from our Privacy Policy and our Notice of Privacy Practices.

Your medical record is covered by HIPAA. Information in your medical record from a TeleDirectMD visit is protected health information under HIPAA and is handled as described in our Notice of Privacy Practices. The state laws below mainly cover health-related information outside the medical record, such as information collected through our website.

1. What consumer health data is

“Consumer health data” is personal information that identifies, or could reasonably be linked to, you and describes your past, present or future physical or mental health. Depending on the state, it can include information inferred from what you do online, for example that you viewed a page about a particular condition.

2. Consumer health data we collect

• Information you give us before a visit, such as the reason for your visit, symptoms, medications and allergies entered in our intake and scheduling forms.
• Website activity, such as the condition and treatment pages you view and whether you click a booking button, collected through cookies and similar tools.
• Device and technical information, such as IP address, browser and device type, which can be linked to the activity above.

We collect this information from you directly and from your browser or device when you use our website.

3. Why we collect and use it

• To schedule and provide the telehealth visit you request, and to bill for it
• To operate, secure and fix our website
• To understand how visitors use our website and to measure our advertising
• To comply with law

4. Who we share it with

• Service providers (processors) that help us run the practice, such as scheduling, intake forms, payment processing, secure email and electronic health record vendors. They may use the data only to provide their services to us.
• Analytics and advertising measurement providers, currently Google (Google Analytics and Google Ads), which receive website activity data described in section 2.
• Government authorities or others when required by law.

To request the names and contact information of the third parties and affiliates with whom we have shared your consumer health data, contact us as described in section 7.

We do not sell consumer health data. We do not use geofencing around health care facilities to track or message people.

5. Your rights

Washington residents (My Health My Data Act, RCW 19.373)

• Confirm whether we collect, share or sell your consumer health data, and access that data
• Get a list of all third parties and affiliates with whom we have shared or sold it, with their contact information
• Withdraw consent you have given us to collect or share it
• Have it deleted, including from our processors and third parties we shared it with
• Appeal our decision on your request

Nevada residents (Senate Bill 370, 2023)

• Confirm whether we collect, share or sell your consumer health data, and get a list of the third parties with whom we have shared it
• Ask us to stop collecting, sharing or selling it
• Have it deleted

Connecticut residents (Connecticut Data Privacy Act, including its consumer health data provisions)

• Confirm whether we process your personal data, and access, correct, delete or get a portable copy of it
• Opt out of the sale of personal data, targeted advertising and certain profiling
• Appeal our decision on your request

California residents

Medical information we hold as your health care provider is protected by the Confidentiality of Medical Information Act (Cal. Civ. Code § 56 et seq.) and HIPAA. Where the California Consumer Privacy Act applies, you may request to know, correct or delete personal information, and opt out of its sale or sharing for cross-context behavioral advertising.

We will not discriminate against you for exercising any of these rights.

6. Limiting website tracking

You can block or delete cookies in your browser settings, and you can opt out of Google Analytics with Google’s browser add-on. You can also ask us to delete website activity data linked to you using the contact details below.

7. How to make a request

Email contact@teledirectmd.com with the subject line “Consumer Health Data Request,” or call (678) 956-1855. Tell us your state of residence and what you are asking for. We will verify your identity before acting on a request, and an authorized agent may submit a request for you where state law allows.

We respond within 45 days. If we need more time, we will tell you within that period, and we may extend once by up to 45 more days where the law allows.

Appeals. If we deny your request in whole or in part, you can appeal by replying to our decision with the word “Appeal.” We will respond to your appeal in writing within 45 days and explain our decision. If you are not satisfied, you may contact your state attorney general: Washington (atg.wa.gov), Nevada (ag.nv.gov), Connecticut (portal.ct.gov/ag) or California (oag.ca.gov).

8. Changes to this policy

We may update this policy. The effective date above shows when it last changed. If we make a material change to how we collect, use or share consumer health data, we will post the updated policy here and, where required, ask for your consent.

9. Contact

TeleDirectMD (Mahavir Health Services LLC)
Phone: (678) 956-1855
Email: contact@teledirectmd.com