Privacy Policy

Introduction

Thrive Medical Weight Loss ("we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or communicate with us.

As a healthcare provider, we are committed to complying with the Health Insurance Portability and Accountability Act (HIPAA) and other applicable federal and state privacy laws. Please read this policy carefully to understand our practices regarding your personal and health information.

Information We Collect

Personal Information

We may collect the following types of personal information:

• Contact information (name, email address, phone number, mailing address)
• Demographic information (date of birth, gender)
• Payment and billing information
• Account credentials

Protected Health Information (PHI)

In connection with providing medical services, we collect health information including:

• Medical history and current health conditions
• Medications and allergies
• Weight, height, and other physical measurements
• Lab results and diagnostic information
• Treatment plans and progress notes
• Insurance information

Technical Information

When you visit our website, we automatically collect:

• IP address and device information
• Browser type and version
• Pages visited and time spent on our site
• Referring website addresses

How We Use Your Information

We use your information for the following purposes:

• Healthcare Services: To provide, coordinate, and manage your weight loss treatment and related healthcare services
• Communication: To contact you about appointments, treatment updates, and respond to your inquiries
• Payment Processing: To process payments and manage your account
• Legal Compliance: To comply with legal obligations and regulatory requirements
• Quality Improvement: To improve our services and patient experience
• Marketing: With your consent, to send you information about our services and health tips

Disclosure of Your Information

We may share your information in the following circumstances:

• Treatment: With other healthcare providers involved in your care
• Payment: With insurance companies and payment processors as necessary
• Healthcare Operations: For quality assessment, training, and compliance activities
• Legal Requirements: When required by law, court order, or government regulation
• Business Associates: With third-party service providers who assist in our operations and have signed HIPAA-compliant agreements
• With Your Authorization: For any other purpose with your explicit written consent

We do not sell your personal information to third parties.

Your HIPAA Rights

Under HIPAA, you have the following rights regarding your protected health information:

• Right to Access: You may request copies of your health records
• Right to Amend: You may request corrections to your health information
• Right to an Accounting: You may request a list of disclosures we have made of your health information
• Right to Request Restrictions: You may request limitations on how we use or disclose your information
• Right to Request Confidential Communications: You may request that we communicate with you in a specific way or location
• Right to a Paper Copy: You may request a paper copy of this Privacy Policy

To exercise any of these rights, please contact us using the information provided below.

Notice to California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: You may request that we disclose what personal information we have collected about you, including the categories and specific pieces of information, the sources, the business purposes for collecting it, and the categories of third parties with whom we share it
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions such as completing a transaction, complying with a legal obligation, or maintaining security
• Right to Correct: You may request that we correct inaccurate personal information we maintain about you
• Right to Opt-Out: You have the right to opt out of the sale or sharing of your personal information. We do not sell your personal information to third parties
• Right to Limit Use of Sensitive Information: You may request that we limit the use of your sensitive personal information to only what is necessary to provide our services
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights, including by denying services, charging different prices, or providing a different quality of service

You may also designate an authorized agent to submit a request on your behalf by providing written authorization. To exercise any of these rights, please contact us at info@thrivewm.org or call (562) 695-0900. We will verify your identity before processing your request and respond within 45 days as required by law.

Data Security

We implement appropriate technical and organizational measures to protect your personal and health information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Secure access controls and authentication
• Regular security assessments and audits
• Employee training on privacy and security practices
• Business associate agreements with third-party vendors

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including to provide our services, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. Medical records are retained in accordance with applicable federal and state healthcare record retention requirements.

When personal information is no longer required for these purposes, we securely delete or de-identify it. If deletion is not immediately possible due to technical constraints, we will isolate the information from further processing until deletion is feasible.

Data Breach Notification

In the event of a data breach that compromises the security of your personal or health information, we will promptly investigate the incident and take appropriate steps to contain and mitigate any harm. We will notify affected individuals and relevant regulatory authorities within 72 hours of discovering the breach, or as otherwise required by applicable law.

Notifications will include a description of the breach, the types of information involved, the steps we are taking to address the incident, and recommendations for protecting yourself. For breaches involving protected health information, we will comply with all HIPAA breach notification requirements.

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyze website traffic. You can control cookie settings through your browser preferences. Note that disabling cookies may affect certain website functionality.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a minor, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on our website and updating the "Last Updated" date. We encourage you to review this policy periodically.

Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about our privacy practices, please contact us:

If you believe your privacy rights have been violated, you also have the right to file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights.