Privacy Policy
Privacy Policy
Effective Date: August 19, 2026
Last Updated: August 19, 2026
OurDoctor.com ("OurDoctor," "we," "us," or "our") respects your privacy and is committed to protecting the personal, health, and other information entrusted to us.
OurDoctor.com is operated by Secure Medical, Inc. OurDoctor provides technology and administrative services that help users access telehealth services, including access to independent licensed healthcare professionals and other healthcare-related services.
This Privacy Policy explains what information we collect, how we use and disclose it, how we protect it, and the privacy choices and rights that may be available to you.
This Privacy Policy applies to OurDoctor.com, OurDoctor patient portals, applications, communications, telehealth-related administrative services, and other websites or services that link to this Privacy Policy, collectively referred to as the "Services."
1. Important Information About Medical Records and HIPAA
Some information collected through OurDoctor may constitute Protected Health Information ("PHI") under the Health Insurance Portability and Accountability Act of 1996 ("HIPAA") and applicable state health privacy laws.
OurDoctor facilitates access to independent physicians and other licensed healthcare professionals. Depending on the circumstances, those healthcare providers or affiliated professional medical entities may be HIPAA-covered entities, while Secure Medical, Inc. or OurDoctor may provide services to those entities as a business associate or service provider.
When HIPAA applies to information contained in your medical record, the collection, use, disclosure, and protection of that information will also be governed by the applicable healthcare provider's Notice of Privacy Practices ("NPP").
If there is a conflict between this Privacy Policy and an applicable HIPAA Notice of Privacy Practices regarding PHI, the applicable Notice of Privacy Practices will govern the use and disclosure of that PHI.
We do not sell PHI for advertising or marketing purposes.
2. Information We Collect
Depending on how you interact with OurDoctor, we may collect personal information, health information, payment information, employer or benefit information, device information, and communications.
Personal and Contact Information: This may include your name, mailing address, billing address, email address, telephone or mobile number, date of birth, gender or sex where relevant to healthcare services, account information, emergency contact information, dependent or family-member information, and employer, benefit-plan, or membership information where applicable.
Health and Medical Information: When you request or receive healthcare services, we may collect information including your medical history, current and previous health conditions, symptoms, allergies, medications, prescription information, treatment information, laboratory information, medical questionnaires, consultation information, communications with healthcare professionals, images or documents you submit, healthcare provider notes, pharmacy information, and other information relating to healthcare services provided to you.
Information you provide during a telehealth consultation may become part of your medical record.
Payment and Transaction Information: We may collect billing information, payment status, transaction information, subscription or membership information, and information concerning products or services purchased. Payment-card information may be processed directly by our payment processors, and OurDoctor may not receive or retain complete payment-card numbers.
Employer or Sponsored Benefit Information: If access to OurDoctor is provided or paid for by your employer, health benefit program, association, or another sponsoring organization, we may receive information such as your name, email address, employee or member identifier, eligibility status, dependent eligibility information, benefit level, and enrollment or termination information.
We may provide a sponsoring organization with information necessary to administer its program, including eligibility, enrollment status, billing information, or aggregated program utilization.
We do not provide an employer with your diagnosis, medical history, prescription information, physician communications, or other medical-record information merely because the employer pays for your OurDoctor benefit, except when specifically authorized by you or otherwise permitted or required by law.
Device and Website Information: When you use the Services, we may automatically collect information such as your IP address, browser type, device type, operating system, pages viewed, date and time of access, referring website, website interactions, cookie identifiers, session information, approximate geographic location derived from an IP address, and analytics or advertising identifiers where permitted.
Communications: We may collect communications you send to us through email, telephone, SMS or text messaging, customer-support systems, online forms, secure messaging, surveys, reviews, or feedback.
Calls may be monitored or recorded for quality assurance, training, security, or compliance purposes when permitted by law and with any notice or consent required by applicable law.
3. Consumer Health Data
Certain state laws regulate health-related information even when that information is not PHI under HIPAA.
Depending on the Services you use, consumer health data may include information concerning health conditions, symptoms, diagnoses, treatments, medications, prescription requests, healthcare services sought or received, reproductive or sexual health information, mental or behavioral health information, measurements or health-related characteristics, and information that could reasonably identify or infer a consumer's health status.
We may collect consumer health data directly from you, healthcare providers involved in your care, pharmacies, laboratories, benefit sponsors when applicable, and service providers acting on our behalf.
We use this information as reasonably necessary to provide the Services you request, coordinate healthcare, administer your account, process payments, provide customer service, maintain records, protect against fraud, comply with law, and operate our healthcare platform.
We do not sell consumer health data.
We do not use consumer health data for targeted advertising without any consent or authorization required by applicable law.
4. How We Use Information
We may use information to create and maintain your account, verify your identity, determine eligibility for Services, connect you with licensed healthcare professionals, facilitate telehealth consultations, create and maintain healthcare and administrative records, facilitate prescriptions when prescribed by a healthcare professional, coordinate with pharmacies, process payments, administer memberships and subscriptions, administer employer-sponsored programs, provide customer service, communicate about appointments and Services, send transactional notifications, prevent fraud and unauthorized account use, maintain security, improve our Services, perform analytics, comply with legal requirements, respond to lawful requests, exercise or defend legal rights, and maintain business and financial records.
We may also use contact information to send marketing communications when permitted by applicable law and consistent with your communication preferences.
Medical treatment decisions are made by the licensed healthcare professional responsible for your care.
5. When We May Disclose Information
Healthcare Professionals: Information may be provided to physicians, medical groups, nurses, clinicians, and other healthcare professionals involved in providing or coordinating your care.
Pharmacies: If a healthcare professional prescribes medication, information necessary to process and dispense the prescription may be provided to the pharmacy you select or an appropriate pharmacy participating in the Services.
Laboratories and Healthcare Providers: Information may be provided to laboratories, diagnostic providers, and other healthcare organizations when necessary to provide healthcare services.
Service Providers: We may use vendors that provide website hosting, cloud infrastructure, electronic medical-record technology, telehealth technology, customer support, payment processing, identity verification, fraud prevention, cybersecurity, communications, email delivery, SMS delivery, analytics, scheduling, or data storage.
These providers may access information only as reasonably necessary to perform services for us and may be subject to contractual, legal, or regulatory privacy and security obligations.
Employers and Benefit Sponsors: When an employer or another organization sponsors your access to OurDoctor, we may disclose information necessary for enrollment, eligibility, billing, and benefit administration.
Medical information will not be disclosed to an employer simply because the employer sponsors the Services unless you authorize the disclosure or the disclosure is otherwise permitted or required by law.
Legal and Regulatory Purposes: We may disclose information when reasonably necessary to comply with applicable law, respond to a subpoena, court order, warrant, or lawful governmental request, protect patients or others from serious threats to health or safety, investigate fraud, protect legal rights, enforce agreements, or respond to regulatory authorities.
PHI will only be disclosed as permitted by HIPAA and other applicable health privacy laws when those laws apply.
Business Transactions: Information may be transferred as part of a merger, acquisition, financing, restructuring, reorganization, sale of assets, or similar business transaction, subject to applicable privacy and health-information laws.
6. We Do Not Sell Medical Information
OurDoctor does not sell your medical records, PHI, or consumer health data.
We also do not sell personal information in exchange for money.
Some privacy laws define "sale" or "sharing" more broadly and may classify certain transfers involving advertising or analytics technologies as a sale or sharing even when no money changes hands.
Where applicable, we provide mechanisms allowing users to opt out of activities classified as a sale, sharing, or targeted advertising under applicable law.
7. Cookies and Tracking Technologies
OurDoctor and its service providers may use cookies, pixels, tags, local storage, analytics technologies, and similar technologies.
These technologies may be used to operate our website, keep users logged in, maintain security, remember preferences, understand website performance, detect fraud, measure website traffic, improve the Services, and measure advertising performance where permitted.
You may be able to control non-essential cookies through our cookie-management tools or your browser settings.
Where required by applicable law, we honor recognized browser-based privacy signals such as Global Privacy Control ("GPC") for requests to opt out of sale or sharing.
We take additional precautions concerning technologies used on authenticated patient pages and areas where medical information is collected.
8. SMS and Text Messaging Privacy
If you provide your mobile telephone number, we may send transactional communications relating to account activity, appointment reminders, telehealth consultations, customer service, orders, prescriptions, benefit information, or security notifications.
If you separately consent to promotional SMS or MMS communications, we may also send marketing messages.
Consent to marketing text messages is not a condition of purchasing goods or services.
Message frequency may vary. Message and data rates may apply.
You may opt out of marketing text messages at any time by replying STOP. You may reply HELP for assistance.
We do not sell or share mobile telephone numbers, SMS opt-in information, or text-message consent with third parties for their own marketing or promotional purposes.
We may provide mobile information to telecommunications providers and service providers as necessary to operate our messaging program.
Opting out of promotional messages does not prevent us from sending non-marketing communications necessary to provide requested healthcare or account services where permitted by law.
9. Email Communications
We may send transactional emails concerning your account or Services.
Where permitted, we may also send marketing or educational communications.
You may unsubscribe from marketing emails by using the unsubscribe instructions contained in the message.
Even if you unsubscribe from marketing communications, we may continue sending important administrative, security, account, healthcare, billing, or transactional communications.
10. Security
We maintain administrative, technical, and physical safeguards designed to protect personal and health information against unauthorized access, loss, misuse, alteration, or disclosure.
Depending on the information and Services involved, safeguards may include encryption, authentication controls, access restrictions, secure transmission, security monitoring, logging, employee access controls, vendor security requirements, and incident-response procedures.
No internet, telecommunications, or electronic storage system can be guaranteed to be completely secure. You should protect your account password and notify us immediately if you believe your account has been compromised.
11. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including healthcare, business, contractual, legal, accounting, regulatory, fraud-prevention, and security purposes.
Medical records are retained according to applicable federal and state medical-record retention requirements and the requirements applicable to the healthcare professional responsible for the record.
OurDoctor's current general standard is to archive personal information and electronic medical records associated with use of OurDoctor for seven years, subject to longer retention periods where required by applicable law, professional requirements, litigation holds, or contractual obligations.
Certain information may remain in backups or archival systems for a limited additional period.
12. Children and Minors
The Services are not directed to children for independent use.
Individuals under the age required to consent to healthcare in their jurisdiction may use applicable Services only through a parent, legal guardian, or other legally authorized person, except where applicable law permits a minor to independently consent to particular healthcare services.
We process information concerning minors in accordance with applicable medical privacy, consent, and parental-access laws.
13. Your Privacy Rights
Depending on where you live and the type of information involved, you may have the right to confirm whether we process your personal information, request access to personal information, obtain certain specific pieces of personal information, request correction of inaccurate information, request deletion of certain information, obtain a portable copy of certain information, withdraw consent where applicable, opt out of certain targeted advertising, opt out of sale or sharing of personal information, limit certain uses of sensitive personal information, obtain information concerning certain recipients of your information, and appeal the denial of certain privacy requests.
You may exercise applicable privacy rights without unlawful discrimination or retaliation.
These rights are subject to legal exceptions. For example, we may be unable to delete medical records that healthcare providers are legally required to maintain.
Different procedures may apply when you are exercising rights concerning PHI under HIPAA.
14. California Privacy Rights
California residents may have additional rights under the California Consumer Privacy Act, as amended ("CCPA").
Subject to applicable exceptions, California residents may have rights to know what categories of personal information we collect, the sources of that information, the purposes for which information is collected and used, categories of recipients receiving information, and specific pieces of personal information maintained about them.
California residents may also have rights to request correction or deletion of certain information, opt out of sale or sharing, limit certain uses of sensitive personal information, and receive equal service and pricing when exercising privacy rights.
OurDoctor does not sell PHI or medical records.
To the extent our use of particular online technologies constitutes "sharing" for cross-context behavioral advertising under California law, California residents may exercise applicable opt-out rights.
We honor qualifying Global Privacy Control signals as required by applicable law.
Certain PHI and medical information may be exempt from some provisions of the CCPA because it is regulated under HIPAA or other medical privacy laws.
15. Washington and Other Consumer Health Data Rights
Residents of jurisdictions with consumer health privacy laws, including Washington State, may have additional rights regarding consumer health data that is not otherwise regulated as PHI under HIPAA.
Subject to applicable law, these rights may include confirming whether we collect consumer health data, accessing consumer health data, obtaining information concerning certain parties with whom consumer health data has been shared, withdrawing consent, requesting deletion of consumer health data, and appealing certain decisions concerning a request.
OurDoctor does not sell consumer health data.
Requests concerning consumer health data may be submitted using the privacy contact information provided below.
16. HIPAA Rights
When HIPAA applies to your PHI, you may have rights including the right to inspect and obtain a copy of your medical information, request corrections to your medical information, request restrictions on certain uses or disclosures, request confidential communications, obtain an accounting of certain disclosures, obtain a paper or electronic copy of the applicable Notice of Privacy Practices, and file a privacy complaint.
Please review the applicable healthcare provider's Notice of Privacy Practices for the complete description of HIPAA rights and instructions for exercising them.
You will not be retaliated against for exercising your HIPAA privacy rights.
17. How to Submit a Privacy Request
You may submit privacy questions or requests by contacting:
OurDoctor.com / Secure Medical, Inc.
5801 S. McClintock Drive, Suite 107
Tempe, Arizona 85283
Telephone: 1-888-755-6337
Website: OurDoctor.com/contactus/
When required, we may ask you to verify your identity before processing a privacy request.
You may also use an authorized agent where permitted by applicable law. We may request documentation demonstrating the agent's authority to act for you.
18. Data Breach Notification
If personal or health information is involved in a security incident, we will investigate the incident and provide notifications when required by applicable federal or state law.
Depending on the type of information and our role in handling that information, notification requirements may arise under HIPAA, state data-breach laws, consumer health privacy laws, or other applicable regulations.
19. Third-Party Websites and Services
Our Services may contain links to websites, pharmacies, healthcare providers, laboratories, payment providers, or other third-party services.
Their privacy practices may differ from ours.
This Privacy Policy does not govern a third party's independent collection or use of information. You should review the privacy policy of any third-party website or service you use.
20. International Users
OurDoctor's healthcare Services are primarily intended for individuals located in the United States.
If you access our website from outside the United States, information may be processed and stored in the United States and other locations in which our service providers operate, subject to applicable law.
Availability of medical services depends on your physical location and applicable healthcare licensing and telemedicine requirements.
21. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our Services, technology, privacy practices, legal requirements, or regulatory guidance.
When we make changes, we will update the "Last Updated" date at the top of this Privacy Policy.
If required by law, we will provide additional notice or obtain consent before materially changing how we use previously collected information.
22. Contact Us
Questions, concerns, complaints, or privacy requests may be directed to:
OurDoctor.com
Secure Medical, Inc.
5801 S. McClintock Drive, Suite 107
Tempe, Arizona 85283
Phone: 1-888-755-6337
Website: OurDoctor.com/contactus/
If your concern relates specifically to medical-record privacy or the practices of a participating healthcare professional, we may direct the request to the healthcare provider or medical group responsible for the applicable medical record.
OurDoctor is committed to maintaining the confidentiality of personal and health information and using that information responsibly in connection with the healthcare services our patients request.