Welcome

📝 Tolta Telehealth – Privacy Policy Effective Date: October 2025 Tolta Telehealth is committed to protecting your privacy and safeguarding your personal and medical information. This Privacy Policy explains how we collect, use, disclose, and protect your information when you access our website, communicate with us, or receive telehealth services. By using our website or telehealth services, you agree to the terms outlined in this Privacy Policy. 1. Information We Collect We may collect the following types of information: A. Personal Information Information that identifies you as an individual, including: Full name Date of birth Email address Phone number Home address (if applicable) Payment information (cash-pay only) B. Medical Information (PHI) Protected health information related to care, such as: Medical history Diagnoses and treatment plans Prescription information Lab results Notes from telehealth visits C. Technical Information Collected automatically through browser or device: IP address Device type Browsing activity on our website Cookies and analytics tools (non-identifying) 2. How We Use Your Information We may use your information to: Provide medical telehealth services Communicate with you about appointments or care Deliver prescriptions or lab requests Respond to medical questions Process payments Improve our website and patient experience Comply with medical and legal obligations We will only use your PHI for treatment, payment, or healthcare operations, as permitted under HIPAA law. 3. HIPAA Compliance Tolta Telehealth complies with federal and state privacy laws, including the Health Insurance Portability and Accountability Act (HIPAA). All medical information you provide is encrypted, securely stored, and used solely for the purpose of providing care. We do not sell, rent, or share Protected Health Information to advertisers or third parties. 4. Information Sharing We may share your information only in the following circumstances: With your consent With pharmacies, labs, or medical providers involved in your care To comply with legal or safety obligations With service providers who operate secure medical systems for us (confidentially and contractually bound) We do not sell patient lists or marketing data to third parties. 5. Data Security We use industry-standard safeguards to protect your personal and medical data, including: Encrypted communication Secure record storage HIPAA-compliant telehealth platforms Limited access controls While we take all reasonable precautions, no online system is 100% secure. You acknowledge this when using our services. 6. Cookies & Tracking Technologies Our website may use cookies or analytics tools to improve functionality and understand usage trends. These tools do not identify you personally. You may disable cookies in your browser settings at any time. 7. Children’s Privacy Our services are intended for patients age 18 and over. We do not knowingly collect information from children under 13. If we learn we have received information from a minor without consent, we will delete it. 8. Your Rights (HIPAA Consumer Rights) You have the right to: Access and request a copy of medical records Request correction of inaccurate information Request restrictions on sharing data Request confidential communication channels File a privacy complaint To exercise these rights, contact us at: total-ecare@toltahealth.org 9. Third-Party Links Our website may include links to external websites. We are not responsible for the privacy practices or content on those sites. 10. Policy Changes We may update this Privacy Policy as needed to reflect regulatory changes or improvements. Updates will be posted on this page with a revised effective date. 11. Contact Us About Privacy If you have questions about this Privacy Policy or your data rights, you may contact us: Tolta Telehealth Email: total-ecare@toltahealth.org Serving: New York State © 2025 Tolta Telehealth – All Rights Reserved