1. Introduction
This Privacy Policy describes how your personal and health information may be collected, used, and disclosed by our telehealth platform and affiliated medical groups. It applies to our website, mobile applications, and all related services (collectively, the "Services").
This Notice of Privacy Practices ("Notice") also outlines how your protected health information (PHI) may be used and disclosed, and how you can access this information.
PLEASE REVIEW IT CAREFULLY.
2. Who We Are
Oak Hard, a brand of Scaling Telehealth LLC, and its subsidiaries ("we," "us," or "our") own and operate the Services. Our platform connects patients with licensed healthcare providers for telehealth consultations, prescription services, and related healthcare solutions.
We work with licensed medical groups and pharmacies to deliver care, including:
Medical group:
- ZiraMedical. An independent telehealth medical group whose providers are licensed in the states where we offer care.
Pharmacy partners: licensed in the states where they dispense, accredited by the National Association of Boards of Pharmacy (NABP), board-certified, and LegitScript-approved.
- EPIQ Scripts
465 W President George Bush Hwy, Suite 240, Richardson, TX 75080
(214) 478-8564 - Foothills Pharmacy
4545 E Chandler Blvd, Suite 100, Phoenix, AZ 85048
(480) 496-4444 - Emerald Compounding Pharmacy
5325 Primrose Lake Cir, Suite A, Tampa, FL 33647
(347) 861-5152
These organizations are responsible for providing clinical services and prescription fulfillment.
3. HIPAA Compliance Statement
We are committed to protecting your personal and health information in accordance with the Health Insurance Portability and Accountability Act of 1996 ("HIPAA") and applicable state laws.
- While Oak Hard is not itself a HIPAA-covered entity, our affiliated medical groups and providers are covered entities.
- We may serve as a business associate to those entities.
- We are required by law to maintain the privacy and security of your protected health information.
- We will let you know promptly if a breach occurs that may have compromised your information.
- We must follow the duties and privacy practices described in this notice and provide you with a copy of it.
- We will not use or share your information other than as described here unless you give us written permission.
4. Information We Collect
We may collect the following information:
- Personal Information: Name, date of birth, email, phone, address, payment details, ID verification
- Protected Health Information (PHI): Medical conditions, medications, treatment history, lab results
- Usage Information: IP address, browser type, session logs, and interaction data across our website and services
5. How We Use and Disclose Your Health Information
We may use or disclose your PHI for the following purposes:
a. Treatment — To provide and coordinate your care with medical providers, pharmacies, and specialists.
b. Payment — To bill you or your insurer for care provided.
c. Healthcare Operations — For quality improvement, training, customer support, regulatory compliance, and service enhancements.
6. Other Permitted Uses and Disclosures
We may also share your health information:
- To comply with legal and public health obligations
- For approved health research
- To report abuse, neglect, or domestic violence
- To prevent or reduce serious threats to health or safety
- For organ donation purposes
- With medical examiners or funeral directors
- For workers' compensation, law enforcement, national security, or government agency requirements
- In response to court orders, subpoenas, or legal claims
7. Your Rights
You have the right to:
- Access: Request a copy of your medical records or PHI
- Correct: Request corrections if you believe data is inaccurate
- Confidential Communication: Request we contact you in a specific way or location
- Restrict Use: Request limits on how your info is used or shared (we may not always agree)
- Accounting of Disclosures: Request a record of disclosures (excluding treatment/payment/operations)
- Paper Copy: Request a paper copy of this policy, even if you agreed to digital delivery
- Notification of Breach: Be notified if your PHI is compromised
- File a Complaint: Without fear of retaliation
8. Your Choices
You have the right to tell us how to handle certain types of health information.
You can decide if we:
- Share info with family or friends involved in your care
- Share data in disaster relief situations
- Contact you for fundraising efforts (you can opt out at any time)
We will never share your information without written permission for:
- Marketing purposes
- Sale of your information
- Most sharing of psychotherapy notes
9. Exercising Your Rights
To exercise any of these rights, contact our Privacy Officer:
- Email: support@oakhard.com
- Contact form: our Contact page, subject "Privacy Policy Question"
We will respond in accordance with federal and state laws.
10. Choose Someone to Act for You
If someone has legal authority (e.g., medical power of attorney or guardianship), they can act on your behalf. We will confirm their legal authority before taking action.
11. State-Specific Privacy Rights
California (CCPA/CPRA):
You also have the right to:
- Know what personal data we collect or sell
- Request deletion or correction
- Opt out of sale of personal information
- Not be discriminated against for exercising your rights
Other States:
Residents of Virginia, Colorado, Connecticut, and Utah may have similar rights. Contact us for a tailored explanation.
12. Information Security
We use industry-standard security measures to protect your data, including:
- Encryption of data in transit and at rest
- Role-based access control
- Secure login and authentication systems
- Staff training on HIPAA and privacy practices
- Signed Business Associate Agreements (BAAs)
13. Changes to This Privacy Policy
We may change this policy at any time, and the changes will apply to all information we hold. The latest version will always be available on our website. You may also request a printed copy.
14. Complaints
If you believe your privacy rights have been violated, you can:
Contact our Privacy Officer:
- Email: support@oakhard.com
- Contact form: our Contact page, subject "Privacy Complaint"
Or file a complaint with the U.S. Department of Health and Human Services:
Office for Civil Rights, U.S. Department of Health and Human Services
200 Independence Avenue, S.W.
Washington, D.C. 20201
www.hhs.gov/ocr/privacy/hipaa/complaints/
Phone: 1-877-696-6775
We will never retaliate against you for filing a complaint.
15. Contact Information
For questions, corrections, requests, or complaints about this Privacy Policy or your health information, contact our Privacy Officer:
- Email: support@oakhard.com
- Mail: Scaling Telehealth LLC d/b/a Oak Hard, 8 The Green, Suite B, Dover, Delaware 19901
You may also write to us at the address on our Contact page.