Privacy Policy

CuraTrim (“we,” “us,” or “our”) is committed to protecting your privacy and the security of your personal and health information. This Privacy Policy describes how we collect, use, share, and protect information when you visit curatrim.com, use our telehealth coordination services, or communicate with us.

This policy applies to our website and general business operations. Your protected health information (PHI) collected as part of medical care is governed separately by our HIPAA Notice of Privacy Practices .

Who We Are

CuraTrim is a technology platform that connects patients with independent licensed healthcare providers and licensed pharmacies. CuraTrim is not a medical practice and does not provide medical advice, diagnosis, or treatment. All clinical decisions are made independently by licensed providers .

Information We Collect

Information you provide directly:

  • Name, email address, phone number, and date of birth

  • Shipping and billing address

  • Health-related information you voluntarily share in consultation forms, including medical history, weight, height, BMI, and medication history

  • Payment information (processed securely through our third-party payment processors; we do not store full card numbers)

Information collected automatically:

  • Browser type, device type, IP address, and pages visited

  • Cookies and similar tracking technologies used to improve website functionality and understand traffic patterns

Information from third parties:

  • If you are referred by another provider or platform, we may receive basic referral information

How We Use Your Information

We use the information we collect to:

  • Respond to inquiries and coordinate access to telehealth consultations

  • Determine eligibility for services through our partner providers

  • Coordinate pharmacy fulfillment and prescription processing

  • Process payments for services rendered

  • Send appointment reminders and follow-up communications

  • Improve our website, services, and patient experience

  • Comply with applicable legal and regulatory obligations

We do not sell your personal information to third parties. We do not use your information for advertising or marketing purposes beyond communicating directly with you about our own services, unless you have provided explicit consent .

How We Share Your Information

We may share your information only in the following limited circumstances:

Service providers: We work with third-party vendors, including telehealth platforms, scheduling software, payment processors, electronic health records systems, and licensed pharmacies. These vendors access information only as needed to perform services on our behalf and are contractually required to protect it .

Healthcare coordination: We may disclose information to licensed healthcare providers involved in your care, pharmacies fulfilling your prescriptions, and laboratories if applicable .

Legal requirements: We may disclose information if required by law, subpoena, court order, or government authority, or to protect the rights and safety of our patients or the public .

With your consent: We will share information with others only when you have given us explicit permission to do so .

HIPAA & Health Information

Certain health-related information you provide may be considered Protected Health Information (PHI) under HIPAA. When applicable, we protect your health information in compliance with HIPAA requirements. Your health information is used only for treatment, payment, and healthcare operations unless otherwise permitted or required by law. We do not use or disclose health information for marketing without your written authorization .

California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to:

  • Know what personal information we collect and how it is used

  • Request deletion of your personal information (subject to legal and medical record retention exceptions)

  • Correct inaccurate personal information

  • Opt out of the sale or sharing of your personal information (we do not sell personal information)

  • Limit the use of sensitive personal information

To exercise these rights, contact us at the information below. We will respond within 45 days .

Cookies

Our website uses cookies to support basic functionality and analytics. You may adjust your browser settings to refuse cookies, though some features of the website may not function properly as a result .

Data Security

We take reasonable administrative, technical, and physical safeguards to protect your personal information from unauthorized access, use, or disclosure. These include encrypted data storage and transmission, access controls, and secure clinical systems with role-based access for authorized personnel only . However, no method of electronic transmission or storage is completely secure. If you have concerns about the security of your information, please contact us directly .

Data Retention

We retain personal and health information only for as long as required by clinical governance standards, legal and regulatory requirements, and professional record-keeping obligations. Medical records are retained securely in line with applicable healthcare retention guidelines .

Children's Privacy

Our website is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13 without verifiable parental consent. If you are a parent or guardian seeking services on behalf of a minor, please contact us directly .

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will post the revised policy on this page with an updated effective date. We encourage you to review this page periodically