Privacy Policy

1. Introduction

This Privacy Policy explains how GOTMD247 ("GOTMD247," "we," "us," or "our") collects, uses, discloses, and safeguards information when you visit our website, use our mobile application, or receive services through our telehealth platform (collectively, the "Services").

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described here, please do not use the Services.

Entity Information: GOTMD247 is operated by [PLACEHOLDER — TO BE REVIEWED AND APPROVED BY GOTMD247 LEGAL COUNSEL: insert full legal business entity name, state of formation, and registered business address].

2. Information We Collect

We may collect the following categories of information:

Information You Provide Directly:

• Contact information (name, email address, phone number, mailing address)
• Account credentials
• Health history, symptoms, and other information shared during intake or a visit
• Payment and billing information
• Communications you send to our support team or care providers

Information Collected Automatically:

• Device and browser information
• IP address and approximate location
• Usage data (pages visited, features used, time spent on the Services)
• Log data related to app and website performance

Information From Third Parties:

• Information from pharmacies, labs, or other providers involved in coordinating your care, where applicable
• Information from payment processors related to transaction completion

3. Protected Health Information (PHI)

Certain information you share with GOTMD247 — including your health history, symptoms, diagnoses, treatment plans, and communications with your care providers — may constitute Protected Health Information (PHI).

GOTMD247 has implemented administrative, technical, and physical safeguards intended to protect the confidentiality of PHI. [PLACEHOLDER — TO BE REVIEWED AND APPROVED BY GOTMD247 LEGAL COUNSEL: insert confirmed language describing GOTMD247's HIPAA status, Business Associate Agreements with vendors handling PHI, and whether a separate Notice of Privacy Practices applies. This section must not assert HIPAA compliance until legal and security teams have confirmed that status in writing.]

4. How Information Is Used

We may use the information we collect to:

• Facilitate and coordinate your virtual visits and ongoing care
• Communicate with you about appointments, your account, and your care plan
• Process payments and manage billing
• Improve, maintain, and secure our Services
• Comply with applicable legal, regulatory, and recordkeeping obligations
• Respond to your questions and support requests
• Send administrative or service-related communications

We do not use PHI for marketing purposes without your authorization, except as may be permitted or required by applicable law. [PLACEHOLDER — TO BE REVIEWED AND APPROVED BY GOTMD247 LEGAL COUNSEL: confirm marketing-use practices and authorization mechanisms.]

5. Cookies & Tracking Technologies

The Services may use cookies, pixels, and similar tracking technologies to:

• Recognize returning users and maintain login sessions
• Understand how the Services are used
• Improve website and app performance
• Support analytics and, where applicable, advertising measurement

You can typically manage cookie preferences through your browser settings. [PLACEHOLDER — TO BE REVIEWED AND APPROVED BY GOTMD247 LEGAL COUNSEL: confirm whether a cookie consent banner, cookie preference center, or "Do Not Sell/Share My Personal Information" mechanism is required based on applicable state privacy laws (e.g., California, Colorado, Virginia) and insert final cookie category list and vendor names.]

6. Third-Party Services

We may work with third-party vendors and service providers to operate the Services, including but not limited to:

• Cloud hosting and infrastructure providers
• Payment processors
• Pharmacy networks and laboratory partners involved in fulfilling your care
• Communication and video-visit technology providers
• Analytics providers

These third parties are provided access to information only as necessary to perform their functions. [PLACEHOLDER — TO BE REVIEWED AND APPROVED BY GOTMD247 LEGAL COUNSEL: insert confirmed list of material third-party processors and, where applicable, a statement regarding Business Associate Agreements.]

We do not sell your Protected Health Information. [PLACEHOLDER — TO BE REVIEWED AND APPROVED BY GOTMD247 LEGAL COUNSEL: confirm whether any non-PHI data (e.g., aggregated or de-identified data, marketing/analytics cookies) is shared or sold in a manner requiring disclosure under applicable state privacy law.]

7. Data Security

GOTMD247 uses administrative, technical, and physical safeguards designed to protect information from unauthorized access, use, or disclosure. These may include encryption in transit and at rest, access controls, and routine security review practices.

No method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security of your information. [PLACEHOLDER — TO BE REVIEWED AND APPROVED BY GOTMD247 LEGAL COUNSEL: insert confirmed description of actual security measures, certifications, or audits, if any, and breach notification procedures consistent with applicable law.]

8. Data Retention

We retain information for as long as necessary to provide the Services, comply with legal and regulatory obligations (including medical recordkeeping requirements), resolve disputes, and enforce our agreements.

[PLACEHOLDER — TO BE REVIEWED AND APPROVED BY GOTMD247 LEGAL COUNSEL: insert specific retention periods for medical records and other data categories, consistent with applicable state medical recordkeeping requirements.]

9. User Rights

Depending on your state of residence, you may have certain rights regarding your information, which may include the right to:

• Access a copy of your information or medical records
• Request correction of inaccurate information
• Request deletion of certain information, subject to legal and recordkeeping exceptions
• Opt out of certain uses of your information, such as marketing communications
• Receive an accounting of certain disclosures

To exercise these rights, contact us using the information in Section 13 below. [PLACEHOLDER — TO BE REVIEWED AND APPROVED BY GOTMD247 LEGAL COUNSEL: insert state-specific rights language (e.g., CCPA/CPRA for California residents) and the verification process for rights requests.]

10. Children's Privacy

The Services are not directed to individuals under the age of [PLACEHOLDER — TO BE REVIEWED AND APPROVED BY GOTMD247 LEGAL COUNSEL: confirm minimum age and any pediatric care policy]. We do not knowingly collect personal information from children without appropriate parental or guardian consent where required by law.

If you believe a child has provided us with personal information without appropriate consent, please contact us using the information in Section 13.

11. International Users

The Services are intended for use by individuals located in the United States. [PLACEHOLDER — TO BE REVIEWED AND APPROVED BY GOTMD247 LEGAL COUNSEL: confirm whether the Services are available to users outside the United States and, if so, insert applicable international data transfer language.]

12. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the updated policy on this page and revise the "Last Updated" date above. Material changes may be communicated through additional notice, such as email or an in-app notification. [PLACEHOLDER — TO BE REVIEWED AND APPROVED BY GOTMD247 LEGAL COUNSEL: confirm notice method and effective-date mechanics for material changes.]

13. Contact Information

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

• Email: [PLACEHOLDER — TO BE REVIEWED AND APPROVED BY GOTMD247 LEGAL COUNSEL]
• Phone: [PLACEHOLDER — TO BE REVIEWED AND APPROVED BY GOTMD247 LEGAL COUNSEL]
• Mailing Address: [PLACEHOLDER — TO BE REVIEWED AND APPROVED BY GOTMD247 LEGAL COUNSEL]
• Privacy Officer / Point of Contact (if applicable): [PLACEHOLDER — TO BE REVIEWED AND APPROVED BY GOTMD247 LEGAL COUNSEL]