Privacy Policy

1. Information We Collect

We collect the following types of information:

A. Personal Information

Information that identifies or can be used to identify you:

• Name
• Date of birth
• Phone number
• Email address
• Mailing address
• Payment information
• Emergency contact information

B. Health Information (Protected Health Information – PHI)

Collected as part of care delivery:

• Medical history
• Current symptoms or conditions
• Medication and treatment information
• Lab results
• Clinical notes
• Telehealth session data
• Ketamine treatment information (as allowed under federal and state law)

This information is protected under HIPAA and applicable state laws.

C. Technical & Usage Data

Automatically collected when using our website or telehealth portal:

• IP address
• Device information
• Browser type
• Cookies and tracking pixels
• Pages visited and activity logs

D. Appointment & Service Data

• Scheduling details
• Communications with providers
• Consent forms and treatment authorizations

2. How We Use Your Information

We use your information for the following purposes:

• To provide medical evaluation, treatment, and follow-up care
• To deliver telehealth services
• To prescribe and manage ketamine therapy (troche, ODT, nasal spray)
• To schedule appointments and manage your account
• To verify identity and comply with controlled-substance regulations
• To process payments and billing
• To improve website performance and user experience
• To comply with legal, regulatory, and clinical documentation requirements
• To send updates, receipts, clinical instructions, or health-related communications

We do not sell your information.

3. HIPAA Compliance

As a healthcare provider, Bravely Balanced complies with:

• The Health Insurance Portability and Accountability Act (HIPAA)
• 42 CFR Part 2 when applicable
• State-specific medical privacy and telehealth laws

Your PHI is used or disclosed only:

• For treatment, payment, and healthcare operations
• As authorized by you in writing
• As required by law (court orders, public health reporting, etc.)

4. How We Share Information

We may share your information in the following situations:

A. With Licensed Medical Professionals

For evaluation, treatment, prescribing, and clinical oversight.

B. With Third-Party Service Providers

Strictly for operational needs, such as:

• Telehealth platforms
• Electronic medical records (EMR) systems
• Pharmacy partners
• Labs
• Payment processors
• Secure messaging platforms

All medical partners are bound by HIPAA and confidentiality agreements.

C. With Your Authorization

You may authorize us to share information with specific individuals or entities.

D. Legal Requirements

We may disclose information to:

• Comply with state/federal laws
• Respond to subpoenas
• Report adverse events or required public health data
• Prevent fraud, abuse, or threats to safety

5. Cookies & Tracking Technologies

We use cookies and tracking tools to:

• Improve website speed and performance
• Analyze site usage
• Personalize user experience
• Provide secure login to patient portals

You may disable cookies in your browser settings, but functionality may be limited.

6. Data Security

We implement administrative, physical, and technical safeguards, including:

• Encrypted telehealth sessions
• Encrypted EMR and PHI storage
• Secure payment processing
• Access controls and authentication systems
• Routine monitoring for security vulnerabilities

However, no platform is 100% immune to breaches. You use the Services at your own risk, but we take security extremely seriously.

Data Retention

We retain your personal and health information only as long as necessary to provide care, comply with legal and regulatory recordkeeping requirements (including medical record retention under Florida law and federal controlled-substance rules), resolve disputes, and enforce our agreements. Medical records are retained per applicable Florida statutory periods; non-medical account data is deleted or de-identified when no longer needed or upon your lawful request, except where retention is required by law.

Breach Notification

Consistent with HIPAA, the HITECH Act, and the Florida Information Protection Act, we will notify affected individuals and the appropriate authorities without unreasonable delay if a breach of unsecured protected health information or personal information occurs, as required by law. This Privacy Policy and our Notice of Privacy Practices work together; in the event of any conflict, the Notice of Privacy Practices controls for uses and disclosures of PHI.

7. Your Rights

Depending on your jurisdiction, you may have rights to:

• Access your medical records
• Request corrections to PHI
• Request restrictions on disclosures
• Request confidential communications
• Obtain an accounting of disclosures
• Request deletion of non-medical personal information
• Receive a paper or electronic copy of this Policy

Requests can be sent to: privacy@bravelybalanced.com

8. Minors

We do not provide Services to individuals under 18 without valid consent from a parent or legal guardian. We do not knowingly collect data from minors without proper authorization.

9. Controlled Substances (Ketamine)

Due to federal and state regulations, we may collect, retain, or disclose additional information for:

• Prescription monitoring programs (PDMP)
• Provider verification
• Safety and compliance reviews
• DEA reporting requirements

You consent to these requirements as part of receiving controlled-substance-related care.

10. Third-Party Websites

Our website may include links to external sites. We are not responsible for their content or privacy practices.

11. Changes to This Privacy Policy

We may update this Policy periodically. Any changes will be posted on our website with the updated effective date. Continued use of our Services after changes constitutes acceptance.

12. Contact Us

For questions, requests, or concerns about your privacy or this Policy: