Privacy Policy

Last updated: July 2026

Effective date: [EFFECTIVE DATE]

This document is a working draft prepared for internal review. It must be reviewed and approved by qualified healthcare counsel before publication.

This Privacy Policy explains how [ORIGINS LEGAL ENTITY NAME] (“Origins Health,” “we,” “us,” or “our”) collects, uses, discloses, and protects information when you visit originshealth.com, create an account, complete a medical questionnaire, or use our telehealth services. Origins Health is a direct-to-consumer telehealth company that operates entirely online. We have no physical clinic. By using our website and services, you agree to the practices described in this Policy.

Information We Collect

Information you provide

Account details such as your name, email address, phone number, shipping and billing address, and date of birth.
Health information you submit through the medical questionnaire, including medical history, medications, symptoms, allergies, relevant conditions, and other clinical details.
Payment information processed by our third party payment processors. We do not store full card numbers on our own systems.
Communications you send to our support team.

Information collected automatically

Device and browser information, IP address, and general location.
Usage data such as pages viewed, links clicked, and time spent on the site.
Cookies and similar technologies used to operate the site, remember preferences, and measure performance.

How We Use Information

To provide telehealth services, including routing your questionnaire to a licensed physician for review.
To process orders, subscriptions, payments, and shipping.
To communicate with you about your account, orders, renewals, and support requests.
To operate, secure, and improve our website and services.
To comply with legal, regulatory, and recordkeeping obligations.

How We Share Information

We do not sell your personal information. We share information only as needed to deliver our services and as permitted or required by law, including with:

Licensed physicians and clinical staff who review your questionnaire and manage your care.
Licensed compounding pharmacy partners that prepare and ship your medication.
Service providers that support payment processing, hosting, analytics, customer support, and communications, under contracts that limit their use of your information.
Government agencies, regulators, or others when required by law or to protect rights, safety, and the integrity of our services.

HIPAA Notice of Privacy Practices

This section describes how protected health information (“PHI”) about you may be used and disclosed and how you can access this information. Please review it carefully. The physicians and covered entities that provide clinical services through Origins Health are committed to protecting your PHI in accordance with the Health Insurance Portability and Accountability Act (“HIPAA”) and applicable state law.

How your medical questionnaire is collected

Your medical questionnaire and related clinical information are collected and stored through a HIPAA-compliant platform. Access is limited to the licensed physicians, clinical staff, and authorized personnel who need the information to provide your care. We maintain administrative, technical, and physical safeguards designed to protect your PHI.

How we may use and disclose PHI

For treatment. To evaluate your questionnaire, form a physician-patient relationship where appropriate, prescribe and manage therapy, and coordinate with pharmacy partners.
For payment. To bill and collect payment for services and products.
For healthcare operations. To support quality, compliance, recordkeeping, and administration of services.
As required or permitted by law. Including public health, safety, and legal process.

Your rights regarding PHI

The right to request access to and a copy of your PHI.
The right to request corrections or amendments to your PHI.
The right to request restrictions on certain uses and disclosures.
The right to request confidential communications by a specific means or location.
The right to receive an accounting of certain disclosures.
The right to receive a paper copy of this notice on request.
The right to file a complaint if you believe your privacy rights have been violated, without fear of retaliation.

Contact for privacy requests

To exercise any of these rights, or to ask questions about how your PHI is handled, contact our Privacy Officer at [PRIVACY OFFICER CONTACT] or [SUPPORT EMAIL]. You may also write to us at [MAILING ADDRESS]. You may file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights.

Data Retention and Security

We retain personal and health information for as long as needed to provide services and meet legal, medical, and regulatory recordkeeping requirements. We use reasonable safeguards to protect your information, but no method of transmission or storage is fully secure.

Your Choices

You may update your account information or contact support to correct your details.
You may opt out of marketing communications at any time. Service and clinical messages may still be sent.
You may adjust cookie preferences through your browser settings.
Depending on your state, you may have additional rights to access, delete, or limit use of your personal information.

Children’s Privacy

Our services are intended only for adults 18 years of age and older. We do not knowingly collect information from anyone under 18.

Changes to This Policy

We may update this Policy from time to time. Material changes will be posted on this page with a new “Last updated” date.

Contact Us

[ORIGINS LEGAL ENTITY NAME]
[MAILING ADDRESS]
Email: [SUPPORT EMAIL]
Phone: [SUPPORT PHONE]