IPhealth.net and its affiliated companies (“Imperial Physician Health,” “IPhealth,” “we,” “us,” or “our”) place great importance on the privacy of individuals who use our website (“Site”), mobile applications, and related services (including IPhealth Prime services) (collectively, the “Services”).
This Privacy Statement (“Privacy Statement”) explains how we collect, use, and share information from individuals (“Members”) who use our Services. It also describes what information may be visible to other Members or physicians when using our Services. This Privacy Statement further informs you of your rights and choices regarding personal information and how you can contact us if you have any questions or concerns.
By using our Services, you agree to the collection, use, disclosure, and practices described in this Privacy Statement. In addition, your use of our Services is governed by our Terms of Use.
For the purposes of this Privacy Statement, “personal information” refers to any information that identifies, relates to, describes, or can reasonably be used to identify an individual, whether alone or combined with other information, such as name, email address, phone number, address, date of birth, or healthcare information. Personal information does not include anonymized data. “Protected Health Information” (“PHI”) has the meaning assigned under the Health Insurance Portability and Accountability Act (“HIPAA”) and is not treated as personal information under this Privacy Statement but is instead governed by our Notice of Privacy Practices below.
We may collect various types of information from you, your device, or about you and your device from a variety of sources, as described below.
You may browse many sections of our Site or applications without providing personal information. However, in certain parts of the Site, we may request personal information. When applicable, we will indicate whether and why you must provide your personal information and the consequences of not doing so. If you do not provide requested personal information, you may not be able to use certain parts of our Services if such information is required by law or is necessary to provide the Services.
We collect information you provide when creating an IPhealth account, including your name, email address, password, and date of birth. We also collect any additional optional profile information (“Profile”) you choose to provide, such as health goals, medications, medical conditions, location, and other data.
Profile information allows us to personalize your experience and helps IPhealth physicians provide appropriate treatment plans.
When you add a credit card or payment method to your profile or make purchases through our Services, we collect the payment card information or receive it from a third-party payment processor.
If you contact us directly, we may receive additional information such as your name, email address, phone number, communications content, attachments, and any other information you choose to provide.
If you subscribe to our newsletter, we will collect your email address.
When we send you emails, we may track whether you open them to help improve our Services.
If you apply for a job, you may submit contact details, a resume, and other application materials. We collect the information you provide, including education and employment history. If you apply via LinkedIn, we receive relevant information from LinkedIn.
When you use the Services, including the mobile app, and if you allow us, we may collect precise location data to connect you with local physicians, comply with regulations, and personalize your experience (e.g., recommending nearby pharmacies, doctors, or labs).
We may also infer your approximate location from your device or IP address.
We automatically receive information about the device and software you use to access our Services, such as IP address, browser type, operating system version, device identifiers, mobile advertising identifiers, carrier information, installed apps, and push notification tokens.
We automatically collect information about your interactions with the Services, such as pages viewed, content accessed, your posts, and timestamps.
We and third-party partners use cookies, pixel tags, and similar technologies to collect information over time and across different services.
For more details, see our Cookie Policy.
After each virtual consultation, physicians prepare a consultation summary (“Consult Summary”), which may include symptoms, diagnosis, and treatment details. These summaries become part of your Profile and are visible to physicians treating you through the Services.
If you link our Services to your social media accounts (e.g., Facebook, Twitter), we may receive information from those platforms depending on your privacy settings and permissions.
With your consent, IPhealth may use your medical record data to communicate with you or for aggregated, de-identified internal analysis and product development.
IPhealth uses collected information for the following purposes:
Operate, maintain, improve, and enhance the Services
Personalize your experience, provide relevant recommendations and health information
Understand usage patterns and develop new features
Build automated decision systems to classify symptoms or answer health questions (not used for marketing)
Connect you with appropriate physicians
Marketing and advertising (with consent where required)
Communication via email, SMS, push notifications, and phone
Facilitate transactions and payments
Integrate your social media account with your Profile
Fraud prevention, audits, quality assurance, safety, and security
Legal compliance
Provide additional notices at data collection points
Aggregate or de-identify data for business purposes
Promote products and services based on user interactions
We process personal information based on:
Consent
Contractual necessity
Legal obligations
Legitimate interests (e.g., product development, security)
We may share personal information as follows:
With affiliated entities for service-related purposes.
With third parties who assist with service delivery (e.g., prescription services, IT services, recruiters, shipping providers).
With third-party analytics providers to improve IPhealth’s services.
We may disclose information to comply with applicable laws, regulations, legal processes, or government requests.
Questions you post publicly may be visible to other users. Do not include personal information in public posts.
Based on your actions, information may be shared with social networks.
We do not rent or sell your personal information for third-party marketing without your permission.
Physicians you consult with can see your profile information, including real name and health data.
Information may be transferred during corporate transactions.
We may transfer personal information internationally, including to the United States. We comply with applicable laws and Privacy Shield principles.
We take commercially reasonable administrative, technical, and physical safeguards to protect personal information. However, no electronic transmission is completely secure.
We retain personal information only as long as necessary to fulfill the purposes outlined in this Statement unless the law requires a longer retention period.
Manage sharing preferences
Edit or delete optional profile information
Modify health records
Request deletion of public content
Unsubscribe from marketing communications
Manage notifications
Request account deactivation
Exercise EU/Swiss privacy rights (access, correction, deletion, restriction, portability, objection)
We do not knowingly collect personal information from children under 13. Parents may contact us if they believe a child has provided information.
We use Google Analytics, Google Maps, and Google reCAPTCHA. Their respective terms and privacy policies apply.
Links to third-party sites are not governed by this Privacy Statement.
Email: service@iphealth.net
We may update this Privacy Statement and will post changes on this page.
Last Updated: December 30, 2024
This notice describes how your medical information may be used and disclosed, and how you can access this information. Please read it carefully.
If you use IPhealth Prime services to receive virtual on-demand care from a physician, the data generated during these visits may constitute “Protected Health Information” (“PHI”) as defined under the Health Insurance Portability and Accountability Act (“HIPAA”). PHI is information created or maintained by certain entities (including healthcare providers) that relates to:
(a) your past, present, or future physical or mental health or condition;
(b) the provision of healthcare to you; or
(c) payment for such healthcare,
and that identifies you or could reasonably be used to identify you.
IPhealth healthcare providers (“IPhealth Providers”) are required by law to maintain the privacy and security of your PHI and to provide you with this Notice of Privacy Practices (“Notice”), which explains their obligations and your rights regarding PHI.
Unless you tell us otherwise in writing, we may use and disclose your PHI only as permitted under this Notice. If you change your mind, you may notify us at any time.
If a breach occurs that may compromise the privacy or security of your PHI, we will promptly notify you.
IPhealth Providers will follow this Notice for as long as it is in effect. They reserve the right to change the terms of this Notice at any time. Any changes will apply to all PHI they maintain, including PHI created or received before the revised Notice becomes effective. The new Notice will be posted on the IPhealth website and made available in the IPhealth application, and paper copies will be provided upon request.
For more information, visit:
https://www.hhs.gov/hipaa/for-individuals/notice-privacy-practices/index.html
IPhealth Providers may use or disclose your PHI for treatment, payment, and healthcare operations, as permitted under HIPAA. Examples include, but are not limited to:
Consulting with other healthcare providers
Obtaining prior medical records
Treating you during a virtual visit
Coordinating follow-up care
Using or disclosing PHI to your health insurance plan
Processing claims or payment for services provided to you
Quality assessment and improvement activities
Developing clinical guidelines
Case management and care coordination
Evaluating provider performance
IPhealth may conduct these activities directly or engage third-party “business associates” who, by contract, agree to comply with HIPAA.
IPhealth Providers may use or disclose your PHI when you provide written authorization that meets HIPAA requirements.
You may revoke your authorization in writing at any time.
IPhealth Providers may use or disclose PHI when required to do so by federal, state, or local laws.
Yes, IPhealth Providers may use or disclose your PHI in other ways—usually to support public interests—after meeting specific legal requirements. Examples include:
IPhealth Providers may share PHI to:
Prevent or control disease
Assist with product recalls
Report adverse drug reactions
Report suspected abuse, neglect, or domestic violence
Prevent or reduce serious threats to health or safety
We may use or share PHI for certain types of health research.
We may share PHI with organ procurement organizations.
Some states have stricter laws than HIPAA. When applicable, IPhealth Providers will follow the more restrictive law.
For example, certain states require written permission to disclose:
substance abuse treatment records
HIV-related information
IPhealth Providers will never use or disclose your PHI for marketing purposes or sell your PHI without your written consent, except where permitted by HIPAA.
You have the following rights under HIPAA:
You may request to view or obtain an electronic or paper copy of your medical record and other health information we maintain.
We will provide the information within 30 days.
A reasonable, cost-based fee may apply.
You may also direct us to share your PHI with a family member, friend, or another individual involved in your care.
You may request that we correct PHI you believe is inaccurate or incomplete.
We may deny your request, but if so, you will receive a written explanation within 60 days.
You may request that we contact you in a specific way (e.g., home phone or office phone) or send mail to another address.
We will accommodate all reasonable requests.
You may ask us not to use or share PHI for treatment, payment, or healthcare operations.
We are not required to agree, and may decline if it affects your care.
If you pay for a service in full out-of-pocket, you may request that we do not disclose PHI related to that service to your health plan.
We must honor this request unless a law requires disclosure.
You may request a list (an “accounting”) of PHI disclosures made in the past six years, excluding disclosures for treatment, payment, or healthcare operations.
One list per year is free; additional lists may incur a reasonable fee.
You may request a paper copy at any time, even if you previously agreed to receive it electronically.
If you have a legally authorized representative—such as someone with medical power of attorney or a legal guardian—that person may exercise your rights on your behalf.
If you believe your rights have been violated, you may file a complaint:
Email: service@iphealth.net
200 Independence Avenue, S.W.
Washington, D.C. 20201
Phone: 1-877-696-6775
Online: https://www.hhs.gov/hipaa/filing-a-complaint/what-to-expect/index.html
We will not retaliate against you for filing a complaint.
You may contact IPhealth for any of the following reasons:
Request a copy of this Notice
Request a copy of your medical records
Request an amendment to your records
File a complaint
Appoint a representative
Exercise any other rights described above
Contact Information:
Email: service@iphealth.net
IPhealth Office Address:
1145 19th St NW #608
Washington, DC 20036
USA
Below is the complete English translation of your Privacy Shield Statement, which governs EU-U.S. and Swiss-U.S. data transfers.
IPhealth, Inc. and its affiliates (“IPhealth,” “we,” “us,” or “our”) respect your privacy. This Privacy Shield Statement (“Privacy Shield Statement”) describes the standards and procedures we follow when processing personal information transferred from the European Economic Area (“EEA”) or Switzerland to the United States under the EU-U.S. and Swiss-U.S. Privacy Shield Frameworks.
IPhealth has certified and adheres to the Privacy Shield Principles (“Principles”).
More information: www.privacyshield.gov
Our certification: www.privacyshield.gov/list
“Personal information” refers to any data relating to an identified or identifiable individual, including name, address, telephone number, email address, and healthcare information.
“Processing” includes collection, use, storage, consultation, or disclosure of personal information.
This Statement supplements the IPhealth Privacy Statement. If there is a conflict between this Statement and the Privacy Shield Principles, the Principles govern.
We act as:
When we collect personal information directly through our websites (including IPhealth.net), mobile apps, or in connection with relationships with partners, customers, and vendors.
When we process personal information on behalf of Members based on their instructions, such as personal data stored in the Doctor AI application.
In these cases, Members are the data controllers, and our responsibilities are defined by contracts.
IPhealth commits to following all Privacy Shield Principles for personal information received from the EEA or Switzerland.
Our Privacy Statement and this Privacy Shield Statement describe our data practices for personal information received from Europe.
Members control the type of information shared and the purposes for processing.
Members may opt out if:
their personal information is used for purposes materially different from the original reason it was collected, or
their personal information is transferred to a third party acting as a data controller.
For sensitive information, Members must opt in before such use or transfer.
We may transfer personal information to third parties acting as data controllers or agents.
We comply with the Principles’ “Onward Transfer” rules.
If a third-party agent processes personal information in a manner inconsistent with the Principles, we remain liable unless we prove we were not responsible for the harm.
We take reasonable and appropriate measures to protect personal information from loss, misuse, unauthorized access, disclosure, alteration, or destruction.
We limit personal information to what is relevant for processing purposes and take reasonable steps to ensure accuracy and completeness.
We retain personal information only as long as necessary unless law requires longer retention.
Members may access, correct, amend, or delete their personal information unless the burden or cost is unreasonable or another exception applies.
We regularly review our compliance with these Principles.
IPhealth is subject to the investigatory and enforcement authority of the U.S. Federal Trade Commission (FTC).
We may disclose information to public authorities when required by law.
If Members have complaints, they may contact:
Email: data.privacy@IPhealth.net
If unresolved, disputes may be referred to EU or Swiss data protection authorities, or to JAMS (Judicial Arbitration and Mediation Services).
In some cases, binding arbitration may be available.
This Privacy Shield Statement may be updated as required by the Privacy Shield Framework. The “Last Updated” date will be adjusted accordingly.
Email: service@iphealth.net
Address: 1145 19th St NW #608, Washington, DC 20036
