Privacy Policy

TELEHEALTH & WEBSITE PRIVACY POLICY

Effective Date: 07/26/2026
Last Updated: 07/31/2026

At Mind Milk MD (“we,” “us,” or “our”), we are dedicated to protecting your privacy and ensuring
the security of your health information. This Privacy Policy explains how we collect, use, and
protect information when you visit our website at mindmilkmd.com or use our telehealth
services.

Please note that this policy specifically addresses online interactions and telehealth platform
usage. For detailed information regarding how your Protected Health Information (PHI) is
handled under the Health Insurance Portability and Accountability Act (HIPAA), please review
our Notice of Privacy Practices.

1. INFORMATION WE COLLECT
   We collect information in the following ways when you interact with our website and telehealth
   portal:
   ● Information You Provide Directly: When requesting appointments, registering for virtual
   care, filling out intake forms, or contacting us, we may collect personal details such as your
   name, email address, phone number, mailing address, date of birth, and health-related
   details required for care.
   ● Telehealth Interaction Data: Audio, video, and text data transmitted during encrypted
   telehealth consultations are used solely for medical care, record-keeping, and clinical
   administration in accordance with HIPAA standards.
   ● Technical and Usage Information: Like most websites, we automatically collect basic
   device and browsing information, including IP addresses, browser types, operating
   systems, referring pages, and access timestamps.
2. HOW WE USE YOUR INFORMATION
   We use the collected information to:
   ● Provide, schedule, and deliver telehealth consultations and medical care.
   ● Process billing and communicate with you regarding appointments or medical inquiries.
   ● Ensure technical functionality and security of our online portal.
   ● Comply with legal and regulatory obligations.
3. PROTECTION OF HEALTH INFORMATION (HIPAA COMPLIANCE)
   Your medical records and health data are classified as Protected Health Information (PHI)
   under federal law.
   ● We maintain administrative, physical, and technical safeguards designed to prevent
   unauthorized access, use, or disclosure of PHI.
   ● Telehealth visits are conducted using HIPAA-compliant communication platforms
   equipped with end-to-end encryption.
   ● We do not sell, rent, or trade your personal information or PHI to third parties for
   commercial or marketing purposes.
4. SERVICE PROVIDERS AND BUSINESS ASSOCIATES
   We may share necessary information with trusted third-party service providers (such as secure
   electronic health record systems, telehealth technology platforms, and billing vendors). All such
   vendors are bound by strict Business Associate Agreements (BAAs) and HIPAA compliance
   requirements to safeguard your data.
5. COOKIES AND TRACKING
   Our website may use standard cookies or session tools to optimize user navigation and ensure
   secure log-in sessions. You can set your browser to refuse cookies; however, doing so may
   disable certain features of our secure patient portal.
6. PATIENT RIGHTS
   Depending on applicable state and federal laws (including HIPAA), you have the right to:
   ● Request access to or copies of your medical records.
   ● Request amendments or corrections to your medical information.
   ● Receive an accounting of disclosures of your health information.
   ● Request confidential communications via preferred contact methods.
7. CONTACT US
   If you have questions about this Privacy Policy or wish to exercise your privacy rights, please
   contact our Privacy Officer:
   Cox and Cox, LLC
   Attn: Privacy Officer
   Address: 2733 N Power Road , Ste 102, Unit 495
   Email: DrLucia@mindmilkmd.com
   Phone: 480-360-1907