Privacy Policy

Plain-language summary. We collect what we need to connect you with a licensed provider and, where appropriate, a licensed pharmacy. We use it to give you care and run our service. We do not sell your health information. You can ask to see, correct, or delete your information. The health records your provider creates are protected under HIPAA.

1Who this covers

This Privacy Policy describes how Second Season Health LLC ("Second Season," "we," "us") handles information when you visit secondseasonhealth.com, create an account, complete an assessment, or use our telehealth service. By using the service you agree to this policy and to our Terms of Service.

Second Season is a technology and administrative platform. Clinical care is provided by independent licensed providers, and medications are dispensed by independent licensed pharmacies. Sections below explain how information moves between us, your provider, and the pharmacy.

2Your health information and HIPAA

When a licensed provider reviews your information and treats you, the medical record they create is Protected Health Information under the Health Insurance Portability and Accountability Act (HIPAA). That information is handled under the provider's Notice of Privacy Practices, which describes your rights over your medical record and how it may be used and disclosed for treatment, payment, and health care operations. You may request a copy of the applicable Notice of Privacy Practices at any time.

Second Season handles certain health information on behalf of your provider and its pharmacy partners and, in that role, protects it under the safeguards required by law and under our agreements with them.

For counsel. Confirm the HIPAA structure: whether Second Season is a Business Associate of the provider group and pharmacies, the governing Notice of Privacy Practices, and the signed Business Associate Agreements. This section must match that structure exactly. [CONFIRM BAA STRUCTURE]

3What we collect

Information you give us

Identity and contact details, such as your name, date of birth, email, phone, and shipping address.
Health information you share in your assessment, such as symptoms, history, medications, allergies, and the photos or measurements a provider may request.
Payment information, which is processed by our payment provider. We do not store full card numbers on our own systems.
Messages you send to us or to your care team.

Information we receive from your care

Records and updates from your provider and pharmacy related to your treatment, prescriptions, and shipments.

Information collected automatically

Device and usage data, such as browser type, pages viewed, and general location inferred from your IP address, collected through cookies and similar tools. See Cookies and analytics.

4How we use it

To connect you with a licensed provider, support your assessment, and coordinate any treatment and shipping.
To process payments and manage your account, subscriptions, and refills.
To communicate with you about your care, orders, and service updates.
To operate, secure, troubleshoot, and improve our service.
To comply with law and to protect the rights and safety of our patients, our partners, and the public.
To send you marketing messages where permitted, which you can opt out of at any time.

We share information only as needed to provide the service and as described here:

Your providers. The independent provider group whose clinicians review your information and provide care, currently DrTelx.
Dispensing pharmacies. The licensed pharmacies that prepare and ship any prescribed medication, currently EPIQ Scripts, Foothills Pharmacy, and Emerald Compounding Pharmacy.
Service providers. Vendors that help us run the service under contract, such as our payment processor, telehealth and records platform, shipping partners, email provider, and analytics tools. [LIST ACTUAL VENDORS]
Legal and safety. When required by law, subpoena, or to protect rights and safety.
Business transfers. In connection with a merger, acquisition, or sale of assets, subject to this policy.

6We do not sell your health data

We do not sell your personal or health information, and we do not share your health information with third parties for their own advertising. If we ever change this practice we will update this policy and provide any choices the law requires before the change takes effect.

7Your choices and rights

Access and correction. You can request a copy of the information we hold about you and ask us to correct it.
Deletion. You can ask us to delete your information, subject to records we must keep by law, including medical and pharmacy records with legally required retention periods.
Marketing. You can opt out of marketing emails using the unsubscribe link or by contacting us. We will still send messages about your care and orders.
Medical records. Requests about your medical record are handled by your provider under HIPAA and its Notice of Privacy Practices.

Depending on where you live, you may have additional rights under state privacy law, including the right to know, delete, correct, and appeal, and to be free from discrimination for exercising those rights. To make a request, contact us using the details below. [ADD STATE-SPECIFIC RIGHTS LANGUAGE]

8Cookies and analytics

We use cookies and similar technologies to keep you signed in, remember your preferences, measure how the site is used, and improve it. You can control cookies through your browser settings. Some features may not work correctly if you disable them.

9How we protect it

We use administrative, technical, and physical safeguards designed to protect your information, including encryption in transit and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of a breach affecting your information, we will notify you as required by law.

10How long we keep it

We keep information for as long as needed to provide the service, meet our legal, tax, and regulatory obligations, resolve disputes, and enforce our agreements. Medical and pharmacy records are retained for the periods required by applicable law.

11Age requirement

Our service is for adults 18 and older. We do not knowingly collect information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.

12Changes to this policy

We may update this policy from time to time. When we do, we will change the date at the top and, for material changes, provide additional notice. Your continued use of the service after an update means you accept the revised policy.

13Contact us

Questions about this policy or your information:

Second Season Health LLC
[BUSINESS MAILING ADDRESS]
hello@secondseasonhealth.com

For questions about your medical record, contact your provider, who is the custodian of that record under HIPAA.