Your health information is treated as protected health information (PHI) and is used only for purposes like your clinical review, treatment, and related operations — not for marketing. The specifics of how your information may be used and disclosed, and the rights you have over it, are set out in our Notice of Privacy Practices and Privacy Policy, which are the authoritative documents for this topic.

What your health information is used for

Per the Notice of Privacy Practices, your health information may be used and disclosed for a limited set of purposes:

• Treatment — coordinating your care between your provider and the pharmacy filling your prescription.
• Payment — processing payment for the consultation and medication.
• Healthcare operations — quality review and organizational management related to your care.
• As required by law — when a disclosure is legally mandated.

Outside of these categories, your information isn't shared without your consent.

Your privacy rights

The Notice of Privacy Practices outlines specific rights you can exercise regarding your own health records:

| Right | What it lets you do | | --- | --- | | Access | Request a copy of your health information | | Amend | Request corrections to inaccurate information | | Restrict | Ask for limits on certain uses or disclosures | | Confidential communication | Request a specific way of being contacted | | Accounting of disclosures | Request a record of who your information was shared with |

You can exercise any of these by contacting privacy@getitprescribed.com, as listed in the Notice of Privacy Practices.

How website and account data is handled separately

Separately from clinical PHI, our Privacy Policy covers general website and account information — things like contact details submitted through forms, and technical data such as browser type and IP address collected automatically when you visit the site. That policy explains how this broader category of information may be used (for example, to respond to inquiries or improve the site) and disclosed (such as to service providers who support shipping or payment processing, or if legally required).

What this doesn't mean

Having privacy protections in place doesn't mean your information is never shared with anyone. It means disclosures are limited to the categories described above — treatment, payment, healthcare operations, legal requirements, or with your explicit consent — and are not sold or used for unrelated marketing without your permission, consistent with the Privacy Policy's stated practices.

If you have concerns

If you believe your privacy has not been handled according to these policies, the Notice of Privacy Practices explains that you can file a complaint. You can also review the full text of both documents any time — the Notice of Privacy Practices covers protected health information specifically, while the Privacy Policy covers the website and general account data. For questions about how a specific medication request is handled clinically, the how it works page walks through the process, and Our Standards describes the broader screening and privacy-forward approach applied to every request.

Related questions

Who can see my health information?

Consistent with the Notice of Privacy Practices, your information may be accessed by those involved in your treatment — such as your reviewing provider and the pharmacy filling your prescription — and used for payment or healthcare operations. It is not shared for marketing purposes without your consent.

Can I request a copy of my own records?

Yes. The Notice of Privacy Practices describes a right of access, letting you request a copy of your health information. Contact privacy@getitprescribed.com to start that request.

Is my information sold to third parties?

Our Privacy Policy states that information may be shared with third-party service providers who perform functions like shipping or payment processing, or as required by law, but it is not sold for unrelated marketing purposes.

What's the difference between the Notice of Privacy Practices and the Privacy Policy?

The Notice of Privacy Practices specifically addresses protected health information tied to your care. The Privacy Policy covers broader website and account data, such as information you submit through forms or automatically collected browsing data.

Sources

• PMC — Telemedicine, Privacy, and Information Security in the Age of COVID-19 — discusses privacy and security considerations specific to telehealth platforms.
• PMC — A Telehealth Privacy and Security Self-Assessment Questionnaire for Telehealth Providers — outlines standard privacy and security practices expected of telehealth services.
• PMC — Regulation and Compliance in Telemedicine: Viewpoint — background on the regulatory context, including privacy obligations, for telemedicine platforms.