Privacy, in plain language.

Scope and clinical records

This policy describes how Mediwells LLC (“Mediwells,” “we,” or “us”) handles information associated with mediwells.com and administrative conversations about the site. The current website explains care options and the role of a Care Concierge. It has no medical questionnaire, patient account, checkout, or payment form.

A separate patient-care service may collect health history, create a medical record, arrange a clinical visit, or process an order. Review that service’s disclosures before entering information there. The applicable licensed provider’s HIPAA Notice of Privacy Practices explains that provider’s use of protected health information and your medical-record rights. This Mediwells website policy is not that notice and does not make Mediwells the clinical provider.

If the Mediwells site begins to collect intake, account, or payment information, we will revise this policy and provide any additional notices required for that collection before it begins.

Privacy during care

Mediwells is the patient-facing brand and provides website and administrative guidance. When clinical care is available through Mediwells, licensed clinicians of the treating medical practice make medical decisions. The treating practice must be identified during intake and is responsible for its clinical records and HIPAA duties. Mediwells LLC does not become your treating medical practice because you visit this website or speak with a Care Concierge.

Your rights over clinical information

When a participating medical practice holds your health information, you may ask that practice to see or receive a copy of your medical record, request a correction, ask for contact through a confidential method, request limits on certain uses or disclosures, and obtain an accounting of certain disclosures. You may ask for a paper copy of its privacy notice and designate a legally authorized representative. You may complain to the practice or the U.S. Department of Health and Human Services Office for Civil Rights without retaliation. Some requests have exceptions, fees, or response periods set by law.

How the treating practice may use information

The treating practice may use or share health information for treatment, payment, and health care operations, such as coordinating care, managing services, and billing. Law also permits or requires some disclosures for public health and safety, oversight, legal process, research under applicable safeguards, and other defined purposes. The practice must obtain authorization for uses that require it, such as most marketing, sale of protected health information, and most uses of psychotherapy notes; an authorization can generally be revoked for future uses. Your choices about sharing with family or others involved in your care should be communicated to the practice.

Who handles a request

The treating practice must protect clinical information, follow its own Notice of Privacy Practices, and provide legally required notice if a breach compromises that information. The patient-care flow must present that notice, identify the responsible practice and privacy contact, and collect any applicable telehealth or treatment-specific consent before care. Mediwells can help you find the correct support channel, but clinical-record requests and HIPAA complaints belong with the treating practice. The current mediwells.com website does not hold a patient chart.

Information we receive

Website requests

When a page loads, our hosting and security services may receive your IP address, browser and device type, requested page, referring page if sent by your browser, and request time. These technical details help deliver the page, detect abuse, and diagnose availability or security problems. We do not ask visitors to enter their health history on this website.

Messages and conversations

If you email Mediwells or speak with a Care Concierge outside this website, we may receive the name, contact details, question, and other information you choose to provide. The channel you use, such as email or phone, may also generate routine records of the communication. Please do not include sensitive medical details in an ordinary email or text. Use the patient-care service’s designated channel for clinical questions and health answers.

Information from other services

Following a link to another service does not itself send a health questionnaire from this site. If you choose to use a patient portal, clinician service, pharmacy, or payment service, that operator may collect information directly from you under its own notices. Any future exchange of patient information between Mediwells and a care partner must follow the applicable disclosures and agreements; this policy does not authorize an undisclosed transfer.

How we use information

We use technical request information to deliver the website, maintain its availability, investigate errors, and protect against misuse. We use information you give us in a conversation to respond, explain administrative next steps, route a question to the appropriate support channel, and keep a record of the interaction where needed.

We may also use information to comply with law, address a complaint, or protect our rights and the safety of visitors. We do not use health answers collected on a separate patient-care service for website advertising through this site. A Care Concierge does not use your website visit to decide whether treatment is medically appropriate.

When we share information

Providers that host, deliver, or secure mediwells.com may process the technical information needed to perform those services. If you contact Mediwells, personnel and service providers who help answer or route your request may receive the relevant communication. We may disclose information when legally required, in response to valid process, or when reasonably necessary to investigate abuse or protect people and the site.

We do not operate a medical intake form on this site, and this site does not send health answers to advertising platforms. We do not treat a visit to mediwells.com as permission to share a medical record with a marketer. If a future program introduces a clinical referral, advertising technology, or another materially different data flow, the applicable notices and permissions must be addressed before it starts.

Text messages

If you agree to receive text messages from Mediwells, we use your mobile number only to send the messages you asked for, such as a link to your intake form, a booking page, or a secure payment link. We keep a record of your consent, including the date, time, and phone number, and of any opt-out.

We do not sell or share your mobile number or SMS consent with third parties or affiliates for their marketing or promotional purposes. Text messaging originator opt-in data and consent are not shared with any third parties, except service providers that deliver the messages for us.

Reply STOP to any message to opt out, or HELP for help. Our SMS terms explain the program in full.

Cookies and tracking

Mediwells uses ActiveProspect’s TrustedForm on mediwells.com to create a certificate documenting a website visit. TrustedForm records the page content, interactions such as clicks and scrolling, and technical details such as IP address, browser, device and timing information. ActiveProspect processes that information to create and display the certificate and its session replay. Read the TrustedForm privacy notice for more information.

Our integration treats form fields as sensitive by default. This marketing website has no medical questionnaire or payment form, and this integration does not record activity on the separate patient-care website. A website certificate does not by itself establish permission to call, text or email you. Our own integration does not set cookies, use local or session storage, or pass the certificate to another site through a link.

You can continue to read the website if JavaScript is disabled or TrustedForm is blocked by your browser. Your browser settings and extensions may provide additional controls over third-party scripts. Our hosting provider also processes routine request and security data needed to serve the site.

Your choices and rights

You can read this website without creating an account or submitting health information. You can decide whether to contact Mediwells or continue to a separate patient-care site. If you receive optional promotional messages from us, use the opt-out instructions in the message or email [email protected]; service or response messages may still be necessary for a request you made.

Depending on your location and the information involved, privacy law may allow you to ask what personal information we hold, request access, correction or deletion, or object to certain uses. Send a request to [email protected]. We may need to verify your identity and may retain information when law permits or requires it. We will explain a denial or available appeal process when applicable.

For a clinical record, including requests to access or amend it or restrict disclosures, contact the licensed provider or patient-care service identified during intake. The provider’s Notice of Privacy Practices explains those rights and where to send the request.

Security and retention

We take steps intended to protect information under our control, including using HTTPS for this website and limiting what the site asks visitors to submit. No internet service or email channel can guarantee absolute security. If you believe information sent to Mediwells was exposed or misdirected, contact us at the address below without repeating sensitive details in the initial message.

How long we keep information depends on why it was received, operational and security needs, and legal obligations. Website request data may be retained by hosting or security providers under their service settings. An administrative conversation may be kept long enough to resolve the request and meet applicable recordkeeping requirements. Medical-record retention is determined by the responsible clinical provider and applicable law, not this website policy.

Children and other sites

This informational site is intended for adults and is not designed to collect information directly from children. If you believe a child sent personal information to Mediwells through an administrative channel, contact us so we can review it.

Links may take you to patient-care, pharmacy, payment, or other independent websites. Their operators decide how those sites collect and use information. Review their privacy notices and terms before sharing information with them. We do not control those sites by linking to them.

Contact and changes

For website privacy questions, complaints, or requests about a Mediwells administrative interaction, email [email protected]. Use the patient-care service’s secure channel for medical questions and records. Please do not include sensitive medical details in an ordinary email.

We may revise this policy when the site or our practices change. We will post the revised text and update the date at the top; when law requires additional notice or consent, we will provide it. A clinical provider’s notice may change separately and should be reviewed at the point of care.