Privacy Policy

Helix Health and Wellness (“Helix Health and Wellness,” “Helix,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information and health information you provide to us.

This Privacy Policy explains how we collect, use, disclose, maintain, and protect information when you visit our website, use our online services, complete a medical intake, communicate with us, or receive telehealth services through Helix Health and Wellness.

Because Helix provides healthcare-related services, certain information we collect may constitute Protected Health Information (“PHI”) under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) and applicable federal and state privacy laws.

This Privacy Policy applies to information collected through our website, online intake forms, telehealth services, patient communications, and other services that link to or reference this Privacy Policy.

1. Information We Collect

Depending on how you interact with Helix, we may collect the following categories of information.

A. Personal Information

We may collect information such as:

• Full name
• Date of birth
• Mailing address
• Email address
• Telephone number
• Account or login information
• Billing and payment information
• Insurance information, when applicable
• Identification information necessary to verify your identity
• Information you voluntarily provide when contacting us

B. Health and Medical Information

When you request or receive healthcare services, we may collect information including:

• Medical history
• Current and previous medications
• Allergies
• Symptoms and health concerns
• Diagnoses and treatment information
• Weight, height, and other health measurements
• Laboratory or diagnostic information
• Information concerning prior treatments
• Information concerning medications requested or prescribed
• Information provided during medical intake
• Communications with healthcare providers
• Treatment plans and clinical notes
• Prescription-related information
• Other information reasonably necessary to evaluate and provide healthcare services

Health information may constitute PHI and may be subject to HIPAA and other applicable privacy laws.

C. Website and Technical Information

When you visit our website, we may automatically collect certain technical information, including:

• IP address
• Browser type
• Device type
• Operating system
• Approximate geographic location
• Pages visited
• Referring website
• Date and time of visits
• Website interaction information
• Cookies and similar technologies

We use this information to operate, secure, maintain, and improve our website and services.

2. How We Use Information

We may use personal information and health information for purposes permitted by applicable law, including:

Providing Healthcare Services

We may use information to:

• Review your medical intake
• Determine whether telehealth services are appropriate
• Evaluate your health information
• Communicate with healthcare providers
• Provide telehealth consultations or asynchronous medical evaluations
• Develop treatment plans
• Coordinate prescriptions
• Coordinate pharmacy services
• Monitor treatment
• Communicate with you regarding your care
• Maintain your medical record

Payment and Billing

We may use information to:

• Process payments
• Verify payment information
• Process refunds
• Communicate regarding billing
• Coordinate insurance or benefits when applicable

Healthcare Operations

We may use information for healthcare operations such as:

• Quality improvement
• Patient safety
• Staff and provider training
• Administrative activities
• Auditing
• Compliance
• Fraud prevention
• Business management
• Customer support
• System maintenance

Legal and Regulatory Compliance

We may use or disclose information when required or permitted by applicable law, regulation, court order, subpoena, or governmental request.

3. Protected Health Information and HIPAA

To the extent Helix is acting as a HIPAA covered entity or business associate, we will handle PHI in accordance with applicable HIPAA requirements.

HIPAA establishes national standards governing the privacy and security of protected health information and gives individuals certain rights concerning their medical information.

Uses and disclosures of PHI may include those necessary for:

• Treatment
• Payment
• Healthcare operations
• Public health activities
• Certain regulatory or legal requirements
• Fraud and abuse prevention
• Serious threats to health or safety
• Other purposes permitted or required by law

We will seek authorization when required by applicable law before using or disclosing PHI for purposes not otherwise permitted by law.

For additional information concerning your HIPAA rights and our permitted uses and disclosures of PHI, patients may request our applicable Notice of Privacy Practices.

4. Telehealth Privacy

Helix provides healthcare services using electronic communications and, depending on the service, may provide care through asynchronous medical intake, secure electronic communications, video, audio, messaging, or other remote technologies.

Telehealth involves certain privacy and security risks because information is transmitted electronically. We implement reasonable administrative, technical, and physical safeguards designed to protect information from unauthorized access, use, alteration, or disclosure.

HHS recommends appropriate safeguards for telehealth technology, including secure communications, access controls, authentication, and appropriate protections for electronic protected health information.

You should also take reasonable steps to protect your information, including:

• Using a private location for telehealth communications
• Using a password-protected device
• Keeping your device and operating system updated
• Avoiding public Wi-Fi when communicating sensitive health information
• Not sharing your account credentials
• Using secure patient communication channels when available

5. Information Shared With Healthcare Providers

Information you submit through our website, intake process, or other healthcare services may be reviewed by appropriately licensed healthcare professionals involved in your care.

Your information may be shared with healthcare providers when necessary to:

• Evaluate your medical history
• Determine whether treatment is appropriate
• Provide healthcare services
• Communicate about your treatment
• Monitor your care
• Prescribe or manage medications when clinically appropriate
• Coordinate healthcare services

Providers may make independent clinical decisions based on the information available to them.

6. Pharmacies and Healthcare Service Providers

When clinically or operationally necessary, we may disclose relevant information to pharmacies, laboratories, healthcare providers, technology providers, payment processors, and other service providers involved in providing or supporting healthcare services.

Where required by law, appropriate contractual safeguards, including Business Associate Agreements, may be used when third-party service providers handle PHI on our behalf.

7. Service Providers and Business Associates

We may use third-party companies to help operate our business and provide services. These companies may provide services such as:

• Website hosting
• Telehealth technology
• Patient management
• Electronic medical records
• Scheduling
• Payment processing
• Customer support
• Communications
• Data storage
• Security
• Information technology
• Pharmacy coordination
• Analytics and website functionality

When required by HIPAA or other applicable laws, we require appropriate privacy and security protections from vendors that process protected health information on our behalf.

8. Marketing Communications

If you voluntarily provide your contact information, we may use it to communicate with you regarding:

• Your account
• Your healthcare services
• Appointments
• Treatment-related matters
• Orders
• Billing
• Customer service
• Other service-related communications

Where permitted by applicable law and where you have provided appropriate consent, we may also send promotional or marketing communications.

You may unsubscribe from promotional email communications by using the unsubscribe mechanism included in the communication.

Certain healthcare-related communications may still be sent even if you opt out of marketing communications because they are necessary to provide services or administer your account.

9. Text Messages and Telephone Communications

If you provide a telephone number and consent to receive text messages or telephone communications, Helix may contact you regarding services, appointments, account information, healthcare communications, or other purposes permitted by applicable law.

Message and data rates may apply.

You may opt out of certain text communications by following the instructions provided in the applicable message.

Opting out of certain communications may affect our ability to communicate with you about services you have requested.

10. Cookies and Similar Technologies

Our website may use cookies, pixels, tags, analytics technologies, and similar tools to operate the website, remember preferences, understand website usage, improve functionality, and help maintain website security.

Some technologies may be provided by third-party service providers.

Depending on the technology and applicable law, information collected through these technologies may include:

• IP address
• Device information
• Browser information
• Website activity
• Referring URLs
• Pages viewed
• General geographic information
• Interaction information

We take steps designed to prevent inappropriate disclosure of protected health information through website technologies.

Because healthcare information is particularly sensitive, we evaluate website tracking and analytics technologies with consideration for applicable privacy laws and HIPAA requirements.

11. Third-Party Websites and Services

Our website may contain links to third-party websites, applications, pharmacies, healthcare providers, payment processors, or other services.

This Privacy Policy does not govern the privacy practices of third parties that we do not control.

You should review the privacy policies of third-party services before providing personal or health information to them.

12. Information Security

We maintain administrative, technical, and physical safeguards designed to protect personal information and PHI from unauthorized access, acquisition, use, alteration, or disclosure.

Security measures may include:

• Access controls
• Authentication procedures
• Encryption where appropriate
• Password protections
• System monitoring
• Administrative policies
• Employee and contractor controls
• Security assessments
• Vendor security requirements
• Physical security measures

No internet transmission, electronic storage system, website, or communication method can be guaranteed to be completely secure.

Accordingly, while we take reasonable measures to protect your information, we cannot guarantee absolute security.

13. Data Breaches

If we determine that a breach involving personal information or PHI has occurred and notification is required by applicable federal or state law, we will provide notice in accordance with the applicable legal requirements.

HIPAA includes specific requirements concerning notification of certain breaches involving unsecured protected health information.

14. Your Privacy Rights

Depending on applicable federal and state law, you may have rights concerning your personal information and/or PHI.

These rights may include the right to:

• Request access to certain information
• Request a copy of your medical records
• Request correction of inaccurate information
• Request restrictions on certain uses or disclosures
• Request confidential communications
• Request information regarding certain disclosures
• Request a copy of applicable privacy practices
• Withdraw certain authorizations where permitted
• File a privacy complaint

HIPAA provides individuals with rights to access and obtain copies of their health information and, in certain circumstances, request corrections.

Some rights may be subject to legal limitations.

15. How to Exercise Your Privacy Rights

To submit a privacy-related request, please contact:

Helix Health and Wellness
Email: cs@helixhealthandwellness.com

Please include enough information for us to identify you and understand the nature of your request.

For requests involving medical records or PHI, we may need to verify your identity before processing the request.

16. Complaints

If you believe your privacy rights have been violated, you may contact Helix Health and Wellness using the contact information above.

You also have the right to file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights if you believe your HIPAA privacy rights have been violated.

We will not retaliate against you for filing a privacy complaint.

17. Children’s Privacy

Our services are intended for adults unless expressly stated otherwise.

We do not knowingly collect personal information from children in violation of applicable law.

If you believe a child has submitted personal information to us without appropriate authorization, please contact us.

18. Retention of Information

We retain personal information and health information for as long as reasonably necessary to provide services, maintain appropriate medical and business records, comply with legal and regulatory obligations, resolve disputes, enforce agreements, and protect our rights.

Medical records may be retained for periods required by applicable federal and state law.

Different categories of information may be retained for different periods.

19. State Privacy Laws

Certain states provide residents with additional privacy rights.

Where applicable, Helix will comply with state privacy laws governing personal information and health information, including laws concerning access, deletion, correction, opt-out rights, sensitive personal information, and other applicable consumer privacy rights.

State healthcare privacy laws may impose requirements that are more protective than federal law. Where required, Helix will apply the more protective applicable standard.

20. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our services, technology, legal requirements, or privacy practices.

When we make changes, we will update the “Last Updated” date at the top of this Privacy Policy.

Your continued use of our website or services after an updated Privacy Policy becomes effective constitutes acknowledgment of the updated policy, to the extent permitted by applicable law.

21. Contact Us

If you have questions, concerns, or requests concerning this Privacy Policy or the privacy of your information, please contact:

Helix Health and Wellness
Email: cs@helixhealthandwellness.com

Last updated: August 27, 2026
© 2026 Helix Health and Wellness. All rights reserved.