OPTIMUM HEALTH MD, PLLC

WEBSITE & CONSUMER PRIVACY POLICY

Effective Date: September 2, 2026
Last Updated: September 2, 2026

Optimum Health MD, PLLC (“Optimum Health MD,” “we,” “us,” or “our”) respects your privacy.

This Website & Consumer Privacy Policy describes how we collect, use, disclose, retain, and protect information obtained through optimumhealthmd.com, online forms, appointment requests, electronic communications, and other consumer-facing digital services.

This Policy is separate from our HIPAA Notice of Privacy Practices.

1. INFORMATION WE MAY COLLECT

Depending upon how you interact with us, we may collect:

• name;
• contact information;
• email address;
• telephone number;
• account credentials;
• appointment information;
• payment-related information;
• communications;
• IP address;
• browser and device information;
• website activity;
• approximate location;
• cookies and similar identifiers;
• information submitted through online forms; and
• information voluntarily provided by you.

If information relates to healthcare and is maintained as PHI, our HIPAA Notice of Privacy Practices may also apply.

2. HEALTH-RELATED WEBSITE INFORMATION

We recognize that individuals may submit information concerning health conditions, medications, weight, symptoms, or healthcare interests through websites or forms.

We seek to minimize unnecessary collection of sensitive information through public-facing Website technologies.

You should use the secure patient portal rather than ordinary website forms, email, or SMS when a secure method is available for sensitive medical information.

3. HOW WE USE INFORMATION

We may use information to:

• provide and coordinate services;
• respond to inquiries;
• schedule appointments;
• administer memberships;
• process payments;
• communicate with users;
• operate and secure the Website;
• prevent fraud and abuse;
• improve Website functionality;
• analyze Website performance;
• maintain records;
• comply with law;
• enforce agreements; and
• perform other lawful business functions.

4. SERVICE PROVIDERS

We may use vendors for:

• hosting;
• scheduling;
• electronic health records;
• telehealth;
• communications;
• payment processing;
• analytics;
• security;
• identity verification;
• customer support;
• legal/compliance functions; and
• other business operations.

Examples may include Tebra, payment providers, laboratories, pharmacies, cloud providers, communications providers, and approved technology providers.

5. PAYMENT INFORMATION

Payment transactions may be processed by third-party payment providers.

We generally do not maintain complete payment-card information when that information is maintained directly by a third-party payment processor.

Payment providers may have separate privacy policies.

6. COOKIES AND ANALYTICS

The Website may use cookies, pixels, tags, logs, analytics tools, and similar technologies.

These technologies may help us understand Website traffic, functionality, security, and performance.

Because healthcare-related Website interactions can potentially reveal sensitive interests, we seek to configure analytics and advertising technologies in a manner that minimizes unnecessary collection and disclosure.

7. ADVERTISING

Optimum Health MD does not intend to sell patient health information or share patient health information with third parties for targeted advertising.

We will not make representations such as “zero tracking” or “zero data sharing” when third-party technical services necessarily process information.

8. THIRD-PARTY LINKS

Our Website may link to third-party websites.

We are not responsible for the privacy practices of third-party websites.

You should review their policies before providing information.

9. EMAIL AND TEXT COMMUNICATIONS

If you provide your telephone number or email address, we may use those channels for administrative communications, appointment information, service-related messages, and other permitted communications.

SMS and email may present privacy risks.

Message and data rates may apply depending on your carrier.

You may be able to opt out of certain non-essential communications, subject to legally permitted and clinically necessary communications.

10. SECURITY

We maintain reasonable administrative, physical, and technical safeguards appropriate to the information and risks involved.

No Internet-based system is completely secure.

11. RETENTION

We retain information for periods reasonably necessary to fulfill the purposes described in this Policy, comply with legal obligations, maintain business records, resolve disputes, and enforce agreements.

Medical records are retained according to applicable healthcare-record requirements rather than solely according to ordinary Website-retention practices.

12. AI TECHNOLOGY

Optimum Health MD may use approved AI technologies for administrative, documentation, research, operational, or other authorized functions.

The Practice will determine which systems are approved and what categories of information may be processed.

We do not treat all AI services as automatically appropriate for PHI.

Where PHI is involved, applicable HIPAA, contractual, security, and Business Associate requirements will be evaluated.

13. YOUR PRIVACY RIGHTS

Depending on where you live and the nature of the information involved, you may have rights concerning access, correction, deletion, restriction, portability, objection, or other processing of personal information.

Healthcare information may be subject to specialized federal and state laws and exemptions.

The Practice will evaluate requests under the law applicable to the information and the individual’s relationship with the Practice.

14. CALIFORNIA

California residents may have rights under applicable California privacy and medical-information laws.

Because healthcare information is subject to specialized legal regimes and certain exemptions may apply, not every provision of a general consumer privacy law necessarily applies to every patient record.

15. NEW YORK

New York residents retain rights provided by applicable New York privacy, medical-information, and consumer-protection laws.

16. CONNECTICUT

Connecticut residents retain rights provided by applicable Connecticut privacy and healthcare laws.

17. VIRGINIA

Virginia residents retain rights provided by applicable Virginia privacy and healthcare laws.

18. CHILDREN

The Website is not directed toward children under 18.

We do not knowingly seek to collect personal information from individuals under 18 through the general Website.

Clinical services for minors, if ever offered, will be governed by separate requirements and consent procedures.

19. CHANGES TO THIS POLICY

We may update this Policy periodically.

Changes become effective when posted unless otherwise stated.

The “Last Updated” date will identify the most recent revision.

20. CONTACT

Optimum Health MD, PLLC
3979 Albany Post Road #626
Hyde Park, NY 12538
Telephone: (475) 285-1751
Website: optimumhealthmd.com