- Scope
- Information we collect
- Public quiz and health information boundaries
- How we use information
- Sharing and service providers
- Cookies, analytics, and advertising
- Email and SMS
- Your choices and rights
- Security and retention
- Contact
1. Scope
This Privacy Policy explains how Meds.Studio, LLC collects, uses, shares, and protects information when you visit our public website, submit a form, take the public quiz, request an account setup, or interact with related public services.
2. Information we collect
- Contact information, such as name, email address, phone number, and state.
- Public quiz responses limited to broad symptom interests, goals, timing, and recommendation labels.
- Account request details, such as your requested next step and general routing preferences.
- Device, usage, cookie, analytics, advertising, UTM, and referral information from marketing pages.
- Payment and transaction metadata if you purchase a plan or related service, excluding detailed medical history.
- Protected intake, health history, clinical notes, prescriptions, and lab information only through approved protected workflows where available.
3. Public quiz and health information boundaries
The public quiz and public forms are designed to collect non-PHI lead and preference information. Please do not submit detailed medical history, diagnoses, medication lists, lab results, medical records, contraindications, or urgent clinical questions through public website forms. Detailed clinical information belongs in the protected follow-up workflow.
4. Health information and HIPAA
Some information collected in connection with clinical services may be protected health information under HIPAA or other privacy laws. Where HIPAA applies, PHI should be collected, stored, used, and disclosed through HIPAA-appropriate systems and approved clinical workflows. Marketing tools should receive only high-level lead, routing, and segment labels, not detailed health answers.
5. How we use information
- To operate the website, quiz, contact, account request, and support workflows.
- To route non-PHI leads and segment labels to CRM and marketing systems.
- To help users move toward protected intake, clinician review, and care coordination where available and appropriate.
- To send administrative, transactional, and marketing communications where permitted.
- To improve website performance, content, analytics, security, and user experience.
- To comply with legal, security, fraud-prevention, and recordkeeping obligations.
6. Sharing information
We may share information with vendors and service providers that help operate the website, CRM, analytics, email/SMS, payment, security, portal, and clinical workflows. Vendors that handle PHI must have appropriate HIPAA obligations, such as a Business Associate Agreement, where required. We do not sell PHI.
7. Cookies, analytics, and advertising
Marketing pages may use cookies, pixels, analytics tools, and advertising tags. These tools should not be placed on protected portal or clinical intake pages where PHI may be present. A cookie banner and preference center should be configured before paid traffic is scaled.
8. Email and SMS
We may send administrative or marketing messages if you provide contact information and consent where required. SMS and standard email are not appropriate for detailed PHI unless sent through an approved HIPAA-appropriate communication tool. You may opt out of marketing communications as described in the message or by contacting us.
9. Your choices and rights
You may request access, correction, deletion, opt-out, or communication preference changes where applicable. Rights may vary by state and by whether the information is handled as PHI, consumer data, account data, or marketing data.
10. Security and retention
We use reasonable administrative, technical, and organizational safeguards. No system is perfectly secure. Information is retained as needed for business, legal, clinical, security, and compliance purposes.
11. Children
Meds.Studio is intended for adults and is not directed to children under 18.
12. Changes
We may update this Privacy Policy as our services, vendors, legal requirements, or operational workflows change. The updated version will be posted on this page.
