Privacy Practices

ACT 2 Health supports access to online health services. In providing those services, health and personal information may be handled by ACT 2 Health and by licensed healthcare professionals, pharmacies, laboratories, technology providers, payment processors, and other service providers involved in care or platform operations.

Different participants may have separate duties under federal or state law. This notice does not replace a privacy notice issued by a healthcare professional or another regulated entity. When a more specific notice applies to particular information, that notice controls for that information.

Health information may include information that identifies you and relates to your health, symptoms, medical history, treatment, prescriptions, laboratory testing, communications with a care team, payment for health services, or other information created or received in connection with your care.

Information collected through general website browsing, cookies, analytics, advertising tools, and similar technologies is addressed in the separate website Privacy Policy.

Health information may be used or shared as permitted by applicable law for purposes such as:

• Providing, coordinating, and supporting evaluation, treatment, follow-up care, laboratory services, prescriptions, pharmacy fulfillment, and patient support.
• Processing payment, confirming eligibility for services, managing transactions, and addressing billing questions.
• Operating and improving services, including quality review, care coordination, security, fraud prevention, training, auditing, and administrative functions.
• Communicating with you about your care, account, orders, appointments, test results, safety information, or service-related updates.
• Working with vendors and service providers that perform functions on behalf of ACT 2 Health or a healthcare professional, subject to appropriate privacy and security obligations.
• Meeting legal, regulatory, public health, safety, law-enforcement, oversight, reporting, or judicial requirements when disclosure is permitted or required by law.
• Preventing or responding to a serious and imminent threat to health or safety when permitted by law.

Health information will not be used or disclosed for a purpose prohibited by applicable law. Additional authorization will be requested when the law requires permission for a use or disclosure not otherwise allowed.

Depending on the law that applies and the entity maintaining the information, you may have rights to:

• Request access to or a copy of certain health information.
• Request correction of information you believe is inaccurate or incomplete.
• Request that communications be sent in a particular way or to a particular location.
• Request limits on certain uses or disclosures, although not every request can be granted.
• Request a record of certain disclosures when required by law.
• Receive a paper or electronic copy of an applicable privacy notice.
• Withdraw an authorization for future use or disclosure when the use or disclosure depends on that authorization.
• File a privacy complaint without retaliation.

A request may need to be directed to the healthcare professional, pharmacy, laboratory, or other entity that maintains the record. Reasonable identity verification may be required before a request is completed.

Administrative, technical, and physical safeguards are used to protect information against unauthorized access, use, alteration, or disclosure. Access is limited to individuals and service providers who need the information for an authorized purpose. No electronic system or method of transmission can be guaranteed to be completely secure.

If a privacy or security incident occurs, notice will be provided when required by applicable law.

Electronic communications may involve risks, including delayed delivery, interception, device access by another person, or messages sent to an outdated email address or telephone number. You are responsible for keeping contact information current, protecting account credentials, and using a private device or location when reviewing sensitive information.

Do not use routine website messages, email, text messages, or a patient portal for a medical emergency. Call 911 or seek immediate emergency care.

Questions, privacy requests, or complaints may be submitted through the Contact page on the ACT 2 Health website. A complaint may also be submitted to the government agency responsible for enforcing the privacy law that applies. You will not be denied care or retaliated against for raising a good-faith privacy concern.

Privacy practices may be updated to reflect changes in services, technology, or applicable law. The current version will be posted on the website. Updated practices apply as permitted by law to information maintained at the time of the change and to information received afterward.