PRIVACY POLICY
Rei Direct Care & Wellness
Effective Date: October 28, 2026
Website: www.reidirectcare.com

1. Introduction
Rei Direct Care & Wellness ("we," "our," or "the Practice") respects your privacy and is committed to protecting the personal and health-related information you share with us.
We provide nurse practitioner-led telehealth medical and wellness services, including medical weight management, hormone therapy, primary and preventive care, and other medically appropriate wellness treatments.
This Privacy Policy explains how information is collected, used, disclosed, stored, and protected when you visit our website, schedule appointments, complete patient forms, communicate with our practice, or receive services through our digital platforms.
We handle protected health information in accordance with applicable federal and state privacy laws, including the Health Insurance Portability and Accountability Act (HIPAA), where applicable.

2. Information We Collect
Depending on how you interact with our website and services, we may collect:

Personal Information
Full name and date of birth
Email address and telephone number
Mailing or billing address
Appointment requests and contact information
Payment and transaction information

Health Information
Medical history and current health concerns
Medication and allergy information
Medical conditions and treatment history
Height, weight, and other health measurements
Laboratory results and clinical documentation
Patient intake forms and health questionnaires
Prescription and treatment-related information

Website and Technical Information
Our website and service providers may collect information such as IP addresses, browser types, device information, and website usage data, depending on the technologies enabled.

3. How We Collect Information
Information may be collected when you:
Visit our website or submit an inquiry
Request or schedule a telehealth appointment
Complete patient registration or intake forms
Participate in telehealth consultations
Communicate with our practice by telephone, email, text message, or patient portal
Make payments for healthcare services
Request prescriptions, refills, or laboratory testing

We use third-party healthcare technology providers, including CharmHealth for electronic health records and practice management and Jotform for applicable electronic forms. These platforms may process information on our behalf in accordance with their contractual obligations and applicable privacy laws.

4. How We Use Your Information
We use collected information for legitimate healthcare and business purposes, including:
Scheduling and managing appointments
Evaluating patients and providing medical care
Developing individualized treatment plans
Prescribing and coordinating medications
Ordering and reviewing laboratory testing
Maintaining medical records
Processing payments and managing billing
Responding to patient questions
Sending appointment and refill reminders
Supporting patient safety and continuity of care
Meeting legal, regulatory, and professional obligations

We do not sell patients' protected health information.
We do not use protected health information for advertising or marketing purposes without any authorization required by applicable law.

5. Sharing Information With Third Parties
We may disclose information when necessary and legally permitted for treatment, payment, healthcare operations, or other authorized purposes.

These recipients may include:
Healthcare Technology Providers: Electronic health record, telehealth, scheduling, and electronic form service providers.
Pharmacies: Licensed pharmacies and prescription fulfillment partners, including pharmacies accessed through Scripts.co, when needed to process and fulfill prescribed medications.
Laboratories: Authorized laboratory providers, including Quest Diagnostics and other laboratory partners, when testing is clinically appropriate.
Payment Processors: Authorized payment service providers for processing transactions.
Other Healthcare Professionals: Healthcare professionals involved in coordinating or providing patient care, as permitted by law.
Legal and Regulatory Authorities: Government agencies or other authorized entities when disclosure is required or permitted by law.

We limit disclosures as required by applicable privacy laws and use appropriate contractual safeguards with service providers when required.

6. HIPAA and Protected Health Information
Rei Direct Care & Wellness recognizes the importance of protecting patients' medical information.
Where HIPAA applies, protected health information is handled according to the HIPAA Privacy, Security, and Breach Notification Rules.
Our separate Notice of Privacy Practices explains patients' rights, permitted uses and disclosures of protected health information, and how patients may exercise those rights.
Additional state privacy protections may apply depending on the patient's location and the type of information involved.

7. Data Security
We use administrative, technical, and organizational safeguards designed to protect personal and health information against unauthorized access, alteration, disclosure, and loss.
Safeguards may include access controls, account authentication, secure healthcare technology systems, workforce confidentiality procedures, and appropriate vendor agreements.
No internet-based system can guarantee absolute security. We evaluate potential security incidents and provide notifications when required by applicable law.

8. Electronic Communications
Patients may receive communications related to appointments, intake requirements, prescriptions, follow-up care, billing, or practice operations.
Email and text messaging may present privacy risks, particularly when messages are transmitted outside secure patient portals.
We encourage patients to avoid sending sensitive medical information through unsecured communication channels.
Communication preferences and consent requirements are managed in accordance with applicable laws and practice procedures.

9. Payment Information
Rei Direct Care & Wellness operates as a direct-pay healthcare practice.
Payments may be processed through authorized third-party payment processors. Payment information is handled according to the applicable processor's security and privacy practices.
We collect and retain transaction records as necessary for billing, accounting, regulatory compliance, and legitimate business purposes.

10. Cookies and Website Analytics
Our website may use cookies or similar technologies necessary for website functionality, security, or understanding general website usage.
Where analytics or tracking technologies are used, we assess their compatibility with applicable healthcare privacy requirements.
We do not intentionally disclose protected health information to advertising or analytics providers without a legally permitted basis or required authorization.
Visitors may manage certain cookie preferences through their browser settings.

11. Patient Privacy Rights
Depending on applicable law, patients may have rights to:
Request access to their medical records
Request corrections to inaccurate information
Request restrictions on certain uses or disclosures
Request confidential communications
Obtain information about certain disclosures
Request a copy of the applicable Notice of Privacy Practices
Submit privacy complaints without retaliation
Additional rights may apply under federal or state privacy laws.
To exercise applicable rights, please contact our practice using the information below.

12. Information Retention
We retain medical records, billing information, and other business records for the periods required by applicable federal and state laws, professional obligations, and legitimate operational needs.
Information is securely maintained or disposed of according to applicable retention and security requirements.

13. Third-Party Websites
Our website may contain links to external services, including patient portals, scheduling tools, laboratories, pharmacies, and payment providers.
Third-party websites may maintain separate privacy policies and security practices.
We encourage visitors to review the privacy policies of external websites before providing information.

14. Children's Privacy
Our practice primarily provides healthcare services to adults.
Our website is not intended to knowingly collect personal information directly from children under 13 without appropriate parental consent or another lawful basis.
Where applicable, information concerning minors is handled in accordance with federal and state law.

15. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our services, technologies, business practices, or legal requirements.
Updates will be published on our website with a revised effective date.
Material changes affecting protected health information will be addressed in accordance with applicable notice and authorization requirements.

16. Contact Information
For questions about this Privacy Policy, privacy concerns, or requests involving personal information, please contact:
Rei Direct Care & Wellness
Attn: Privacy Officer
Email: reidirectcare@gmail.com
Phone: 608-658-2424
Website: www.reidirectcare.com
Wisconsin, United States

Patients who believe their HIPAA privacy rights have been violated may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights, where applicable.
We prohibit retaliation against individuals for making privacy complaints or exercising legally protected privacy rights.

Rei Direct Care & Wellness
Personalized Care. Wherever You Are.