Privacy Policy & Notice of Privacy Practices
This Privacy Policy explains how StimSix Health & Vitality Clinic (“StimSix,” “we,” “us,” or “our”) collects, uses, and protects information when you visit http://www.stimsixhealth.com (the “Site”) or use our telehealth and wellness services (the “Services”). It also includes our Notice of Privacy Practices describing how we handle your protected health information under the Health Insurance Portability and Accountability Act (“HIPAA”).
If you do not agree with this Policy, please do not use the Site or Services.
Part 1 — Website Privacy Policy
1. Information we collect
Information you provide to us, such as when you complete an intake, create an account, or contact us: name, date of birth, contact details (email, phone, mailing address), account credentials, health and medical history you submit, payment information (processed by our payment processor), and any messages you send us.
Information collected automatically when you use the Site: IP address, device and browser type, pages viewed, referring pages, and similar analytics data, collected through cookies and comparable technologies.
Information from third parties, such as our telehealth platform partner, licensed providers, pharmacies, laboratories, and payment processors, to the extent needed to provide the Services.
2. How we use information
We use information to: provide and coordinate your care and the Services; verify identity and eligibility; process payments; communicate with you about your care, orders, and account; operate, secure, and improve the Site; comply with legal, regulatory, and accreditation obligations; and, where permitted, send you service-related or (with your consent where required) marketing communications.
Health information you provide in connection with the Services is handled as described in the Notice of Privacy Practices in Part 2 below.
3. How we share information
We share information with: licensed providers who evaluate and treat you; pharmacies that dispense and ship your prescriptions; laboratories where testing is involved; service providers that support our operations (e.g., hosting, telehealth platform, analytics, payment processing) under contracts that require them to protect the information; and authorities or others where required or permitted by law. We do not sell your personal or health information.
4. Cookies and analytics
The Site uses cookies and similar technologies for functionality, security, and analytics, including Google Analytics, the Meta (Facebook) Pixel, and standard WordPress tracking tools. These help us understand how the Site is used and measure our marketing. You can control cookies through your browser settings, and you can opt out of certain analytics and advertising tracking through Google’s and Meta’s opt-out tools and your device’s ad settings. Disabling some cookies may affect Site functionality. Some browsers offer a “Do Not Track” or Global Privacy Control signal; while we may not respond to every such signal, we honor the opt-out and privacy rights described in this Policy.
5. Data security
We maintain administrative, technical, and physical safeguards designed to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
6. Data retention
We retain information for as long as needed to provide the Services and to meet our legal, regulatory, medical-recordkeeping, and accreditation obligations, after which it is securely deleted or de-identified.
7. Your privacy choices and state rights
We offer the Services in all 50 states, and your rights may vary by where you live. Depending on your state, you may have rights to access, correct, delete, or restrict certain personal information, and to opt out of certain processing. California residents have rights under the CCPA/CPRA, and residents of other states may have similar rights under applicable law. To exercise these rights, contact us using the details in Section 10. We will not discriminate against you for exercising your rights.
Note: Health information covered by HIPAA is governed by Part 2 below; your HIPAA rights are described there.
8. Children’s privacy
The Services are intended for adults 18 and older. We do not knowingly collect information from anyone under 18. If you believe a minor has provided information, contact us and we will delete it.
9. Changes to this Policy
We may update this Policy from time to time. The “Last updated” date reflects the most recent version, and material changes will be posted on this page.
10. Contact us
2720 S 6100 W, Cedar City, Utah 84720, United States
Phone: +1 702-862-9955
Email: info@stimsixhealth.com
Part 2 — Notice of Privacy Practices (HIPAA)
StimSix Health & Vitality Clinic is committed to protecting the privacy of your protected health information (“PHI”) — information that identifies you and relates to your health, care, or payment for care. This Notice describes our privacy practices and your rights, as required by HIPAA.
How we may use and disclose your PHI without your authorization
For treatment. We may use and disclose your PHI to provide, coordinate, and manage your care — for example, sharing your intake and history with the licensed provider evaluating you, or with a pharmacy to fill and ship a prescription.
For payment. We may use and disclose your PHI to process payment for the Services — for example, to bill you or verify your payment method.
For health care operations. We may use and disclose your PHI to run our clinic — for example, quality review, provider oversight, training, and business management.
Business associates. We may share PHI with vendors that perform services on our behalf (such as our telehealth platform, hosting, and pharmacy partners) under written agreements requiring them to safeguard your PHI.
As required or permitted by law. We may use or disclose PHI when required by law and for public health activities, reporting of adverse events and product safety, health oversight, judicial or administrative proceedings, law enforcement in limited circumstances, to avert a serious threat to health or safety, for specialized government functions, and for workers’ compensation as permitted.
Uses and disclosures that require your written authorization
The following require your written authorization, which you may revoke at any time: most uses and disclosures for marketing, any sale of PHI, and other uses not described in this Notice.
Your rights regarding your PHI
You have the right to: inspect and obtain a copy of your PHI; request an amendment of PHI you believe is incorrect or incomplete; request an accounting of certain disclosures we have made; request restrictions on certain uses and disclosures; request confidential communications (e.g., contact at a specific address or number); receive a paper copy of this Notice on request; and be notified in the event of a breach of your unsecured PHI. To exercise any of these rights, contact our Privacy Officer below.
Our responsibilities
We are required by law to maintain the privacy of your PHI, provide you this Notice of our legal duties and privacy practices, follow the terms of the Notice currently in effect, and notify you if a breach occurs that may have compromised the privacy or security of your PHI.
Changes to this Notice
We reserve the right to change this Notice and to make the revised Notice effective for PHI we already have as well as any PHI we receive in the future. The current Notice will be posted on the Site with its effective date.
Complaints
If you believe your privacy rights have been violated, you may file a complaint with our Privacy Officer, or with the U.S. Department of Health and Human Services, Office for Civil Rights at https://www.hhs.gov/ocr/ or 1-877-696-6775. We will not retaliate against you for filing a complaint.
Privacy Officer / contact for more information
StimSix Health & Vitality Clinic
2720 S 6100 W, Cedar City, Utah 84720, United States
Phone: +1 702-862-9955 · Email: info@stimsixhealth.com