Privacy policy
Last updated: TODO
Draft — not reviewed by counsel
This is a structural template to work from, not legal advice and not a finished policy. A healthcare attorney must review and complete it before launch. Remove this banner by passing reviewed once that is done.
This policy covers information collected through stakthealth.com. Health information you share during care is covered separately by our Notice of Privacy Practices.
Information we collect
TODO: list what this site actually collects. At minimum, describe analytics data, cookies, and anything submitted through forms. If the site collects nothing beyond standard server logs, say so plainly — that is a selling point.
How we use information
TODO: describe each purpose. Be specific rather than listing every conceivable use.
Analytics and tracking
TODO: this section carries real regulatory risk. Standard advertising pixels on a healthcare site can transmit protected health information to third parties and have been the basis of significant enforcement actions and settlements. Before adding any analytics or advertising tag, confirm with counsel what is permissible and whether a business associate agreement is required.
How we share information
TODO: name the categories of third parties — hosting, scheduling, and payment processors — and confirm which have signed business associate agreements.
Your choices and rights
TODO: cover applicable state privacy rights. If you serve California, Colorado, Connecticut, Texas, Virginia, or Washington residents, each carries its own requirements, and Washington's My Health My Data Act is unusually broad for health-adjacent businesses.
Data retention and security
TODO: describe retention periods and safeguards.
Children
TODO: state your policy on users under 13 and under 18.
Contact us
Questions about this policy: hello@stakthealth.com