Privacy Policy
This Privacy Policy applies to GoMDUS, products and services, including www.gomdus.com and any other websites, pages, features or content we own or operate, or that links to this Privacy Policy (collectively, the “Services”). When you use these Services, this Privacy Policy applies to your use.
If you have questions about our Privacy Policy, please contact us or call us at 888-536-2267. You should read our entire Privacy Policy to understand how we use your data, but if you only have a few minutes you can take a look at the summary below.
Privacy Highlights
-
Information We Collect. We generally collect the following information:
- Account Information: information we collect at registration, including your name, phone number, address and email address.
- Self-Reported Information: information you provide to us, such as ratings, survey answers, or preferences.
- Health Information: information you provide to us or our Medical Team, including information we generate about you, related to your physical, mental or other health conditions.
- Web-Behavior Information: information related to the ways in which you interact with the Services and the computer or device you use to access the Services.
-
How We Collect Your Information
- From You
- Through Your Use of the Services
- From Third Parties
- Via inferences we make
-
Your Choices. It’s your data, you’re in control.
- Communications. We provide you with choices about communications you receive from us.
- Access, Correction, and Portability: You can request access and correct information via your account settings, or by contacting us.
- Deletion: You can delete your GoMDUS account and data at any time by contacting us at privacy@gomdus.com.
- Sales, Sharing, and Targeted Advertising: You can opt-out of certain data sharing practices by visiting our Cookie Choices page.
Full Privacy Policy
The Medical Groups and Providers have adopted a Notice of Privacy Practices that describes how they use and disclose Protected Information. By accessing or using any part of the Service, you are acknowledging receipt of the Notice of Privacy Practices from your Medical Group and Provider(s).
By using the Service, you are agreeing that even if HIPAA does apply to GO MD USA, the Medical Groups, the Providers, the Labs, or the Pharmacies, any information that you submit to GO MD USA that is not intended and used solely for the provision of diagnosis and treatment by the Medical Group and Providers or prescription fulfillment by the Pharmacies or laboratory services by the Labs, is not considered Protected Information, and will only be subject to our Privacy Policy and any applicable state laws that govern the privacy and security of such information
-
Information We Collect
When we say “Personal Information” we mean information that either identifies you personally or is about you, and use this as a general term to refer to the different categories we describe in this section.
We may collect the following types of Personal Information:
- Account Information. Information such as your name, user ID, password, date of birth, billing address, payment information, or other contact information (e.g., email or phone number).
- Self-Reported Information. Information you choose to provide, such as ratings, survey answers, or preferences, to us.
- Health Information. Information related to your physical, mental or other health conditions.
- Web-Behavior Information. Information related to the ways in which you interact with and use the Services and the computer or device you use to access our Services, such as referring and exit pages and URLs, platform type, location, browser type, device ID, operating system, the number of clicks, domain names, landing pages, pages and content viewed and the order of those pages, the amount of time spent on particular pages, the date and time you used the Services, the frequency of your use of the Services, error logs, and other similar information. Web-Behavior Information may be collected via the use of cookies, web beacons, mobile device identifiers, and other technologies.
Aggregate Information. Aggregate Information is information that is stripped of identifying information, like your name or email, and is combined with that of other individuals, and analyzed as a whole, so no single individual can reasonably be identified. Aggregate Information is considered non-personal information for purposes of this Privacy Policy, and we may disclose it to others without limitation for any purpose, in accordance with applicable laws and regulations.
-
How We Collect Information
- From You: We collect information from you when you provide it to us directly, such as information provided during account registration or during a telehealth visit, through the messages you send us, or information you directly authorize to disclose to us from another entity, like lab test results.
- Through Your Use of The Services. We may collect information about you through your use of the Services, such as through service providers who use a variety of technologies and tools to collect such information, such as cookies, web beacons, and other technologies when you visit or interact with our Services. For more detail on how we use Web-Behavior Information, please see our Cookie Policy.
- From Third Parties. We may obtain additional information about you from third parties, such as marketers, partners, researchers, and others. We may combine information that we collect from you with information about you that we obtain from such third parties and information derived from any Services we provide. We may use third-party website analytics services in connection with the Services, including, for example, to note mouse clicks, mouse movements, scrolling activity and text that you type into the Website or App.
- GoMDUS: We may infer new information from other data we collect, including using automated means to generate information about your likely preferences or other characteristics.
-
How We Use Information
We use your information to:
- Provide, develop, maintain, operate, improve, enhance, administer, protect, and troubleshoot our Services and your experience with them, including developing new product tools and features;
- Operate our business, including billing, accounting, and improving our internal operations;
- Track and analyze trends and usage of the Services;
- Communicate with you, including customer support, reminders about your telehealth appointment, prescription-related notifications, to inform you of our Services, and other offers and information that we believe may be of interest to you;
- Customize and tailor your experience of the Services;
- Provide cross-context behavioral or targeted advertising (learn more in our Cookie Policy and Cookie Choices page);
- Secure our systems, prevent fraud and protect the security of GoMDUS systems;
- Enhance the security and safety of our Services;
- Verify your identity and prevent, detect, and investigate fraud and other potentially illegal or prohibited activities;
- Enforce, investigate, and report conduct violating our Terms of Service and other policies that govern your use of the Services; and
- Comply with our licensing, legal, and regulatory obligations.
-
How We Disclose Information
We may disclose your Personal Information as follows:
- As Directed by You. When you direct us to disclose Personal Information, we will do so on your behalf.
- Service Providers. GoMDUS may disclose your Personal Information with other companies and contractors that work with, or on behalf of, GoMDUS to provide products and services. For example, some of the types of service providers and contractors include: payment processors, order fulfillment, marketing and analytics, cloud storage, IT and security vendors. For example, we use Google Analytics on our website to help us understand how users interact with our website; you can learn how Google collects and uses information at www.google.com/policies/privacy/partners. Learn more about what third party analytics and advertising partners we use on our site in our Cookie Policy.
- Healthcare Providers and Pharmacies. GoMDUS may disclose your Personal Information to provide the Services to you, for purposes such as treatment, running our healthcare operations, processing payments, pharmacy fulfillment services, and quality assurance reviews under the direction and on behalf of our medical partners.
- As Required by Law, To Prevent Harm and/or in the Public Interest. We may disclose your Personal Information in response to legal demands such as subpoenas or court orders, or to comply with applicable laws and regulations. We may also share this information to protect and defend our legal rights, or to prevent or investigate illegal activities and fraud.
- Business Transfers. We may disclose your Personal Information with other business entities in connection with the sale, assignment, merger or other transfer of all or a portion of GoMDUS’s business to such business entity. This Privacy Policy will apply to your Personal Information as transferred to the new entity.
- Affiliates. We may disclose information with entities within the GoMDUS Inc. family of companies.
-
Your Privacy Choices
We believe you should be in control of your Personal Information. You can make the following choices by emailing us at privacy@gomdus.com:
- Communications: You can choose whether we may contact you (such as through email, in-product notifications, push notifications, or text messages) for promotional purposes, or certain transactional messages, such as appointment or prescription notifications. Except as required to provide you the Services you requested, you can also ask that we stop sending SMS/text messages by replying “STOP”. You can also click “unsubscribe” at the bottom of promotional email communications.
- Access: You can access and download your Personal Information processed by GoMDUS.
- Correction: You can correct certain account information, such as email address or phone number associated with your account. You can also make these changes in your account settings.
- Deletion: You can delete your GoMDUS account at any time. Please keep in mind we are required to retain certain limited information for legal and regulatory purposes, such as information that is part of your medical record.
-
Your Rights With Respect to Health Information
In accordance with state and federal laws, you have certain rights related to your Health Information. These rights and any authorized uses of your health information can be found in GoMDUS's Notice Regarding Information in Your Medical Record.
-
Children’s Privacy
GoMDUS is not intended for children under 18 and we do not intentionally collect Personal Information from anyone under 18 years of age.
-
State and Region-Specific Information
Specific privacy rights may apply to you depending on your state or region.
United States Residents
If you are a resident of California, Virginia, or Colorado, you have certain rights under the California Consumer Privacy Act (CCPA), the California Privacy Rights Act, the Colorado Privacy Act (CPA) and the Virginia Consumer Data Protection Act (VCDPA) (collectively known as "U.S. State Data Protection Laws"). These laws may be amended or replaced from time to time, and any implementing regulations. In case of any discrepancies between this section and the rest of the Privacy Policy, the terms of this section shall prevail.
Your Rights
As a U.S. State Resident, you have the following rights under the U.S. State Data Protection Laws:
- The right to know what Personal Information we collect, use, disclose, or sell.
- The right to receive a copy of your Personal Information.
- The right to correct inaccurate Personal Information.
- The right to delete your Personal Information.
- The right to receive your Personal Information in a portable and, if technically feasible, in a readily usable format.
- The right to opt out of targeted advertising, the sale or sharing of your Personal Information with third parties, and/or profiling that produces legal or similarly significant effects.
- The right to limit the use and sharing of sensitive Personal Information, such as information that reveals your racial or ethnic origin, religious beliefs, mental or health conditions or diagnosis, sex life or sexual orientation, citizenship or immigration status, genetic data, precise geolocation, or as defined in applicable U.S. State Data Protection Laws.
- The right not to be discriminated against for exercising your privacy rights.
Note: For more information, please see our Cookie Choices page.
To exercise your privacy rights and choices under U.S. State Data Protection Laws, please follow the instructions below. Please note that these rights are not absolute and GoMDUS may have limitations or exemptions as allowed by U.S. State Data Protection Laws. We may also deny your request if the information is not covered under U.S. State Data Protection Laws, for example, information protected by the California Confidentiality of Medical Information Act (CMIA).
- To request access to your Personal Information (your "Right to Know"), you may email us at privacy@gomdus.com with the subject line "Access Request." You can make this request up to two times in a 12-month period.
- To request deletion of your Personal Information, you may email us at privacy@gomdus.com with the subject line "Deletion Request." However, in some cases we may be required by law to retain certain information, such as medical records.
- To request correction of your Personal Information, you may email us at privacy@gomdus.com with the subject line "Correction Request."
- To verify your identity, we may require additional information such as your login and password or valid government identification.
- You can also exercise your rights through an authorized agent. In this case, we will require you to verify your identity and confirm that you have given permission for the agent to submit the request on your behalf. To designate an agent for your privacy rights, email us at privacy@gomdus.com with the subject line "Agent Designation."
- We will respond to your request within 45 days, and in more complex cases, we may extend our response time by another 45 days. If you are not satisfied with our action on your privacy request or inquiry, you can contact us at privacy@gomdus.com
GoMDUS uses cookies and other tracking technologies for targeted or cross-context behavioral advertising, which require your Web-Behavior Information to function. According to the CCPA, this use of your data for cross-context behavioral advertising may be considered a "sale" or "sharing" of personal information. We allow advertising providers to collect identifiers (such as IP addresses, cookie IDs, and mobile IDs), activity data (such as browsing, clicks, and app usage), device data, and geolocation data through our sites and apps when you use our online service. In the past 12 months, these categories of personal information may have been "sold" or "shared" as defined under CCPA. We do not have actual knowledge of selling or sharing personal information of users under the age of 16.
GoMDUS respects your privacy by responding to Global Privacy Control (GPC) signals sent by your browser or mobile device. A GPC is a signal that notifies us of your privacy preferences, such as whether you want us to drop cookies on your device. You can check your GPC preferences in the settings or extensions of your browser or mobile device, or learn more about GPC. Additionally, you can opt-out of cross-context behavioral or targeted advertising any time via our Cookie Choices page.
GoMDUS will not discriminate against you for exercising any of your privacy rights and choices.
What We Collect
As stated in our Privacy Policy, we collect Personal Information for a variety of purposes while adhering to privacy principles. The categories of Personal Information and terms used below are defined in the CCPA for California residents and may include certain key definitions from our Privacy Policy. Some of the categories below require specific consent and do not necessarily reflect all the types of information we may collect about you. Some Personal Information in this category may overlap with other categories.
In the last twelve (12) months, we have collected the following categories of Personal Information from our customers:
- Identifiers: Information such as your name, display name, address, online identifier, IP address, email address, username or other similar identifiers from Account Information, Web-Behavior Information, and demographic information.
- Personal information categories listed in the California Customer Records provisions: Information such as your name, address, phone number, employment or education from Account Information (including payment information) or Self-Reported Information.
- Characteristics of protected classifications under California or federal law: Information such as your age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, and genetic information (including familial genetic information) from Account Information, Health Information, and Self-Reported Information.
- Commercial information: Information such as products or Services purchased, obtained, or considered, survey responses regarding past purchasing history, other purchasing or consuming histories or tendencies from Self-Reported Information.
- Audio, electronic, visual, thermal, olfactory, or similar information: Information such as photos you provide to us to verify your identity before beginning a virtual visit or provided through other engagement on our website from Self-Reported Information.
- Professional or employment-related information: Information such as education, household income, occupation, and other professional information from Self-Reported Information, collected when you apply for a job with GoMDUS, fill out a survey, or otherwise engage with us.
- Biometric information: Information such as physiological, behavioral, and biological characteristics that can be used to establish an individual’s identity from Self-Reported Information when you choose to disclose it to us.
- Internet or other electronic network activity information: Web-Behavior Information, such as data generated from your use of our Services and collected through log files, cookies, web beacons, and similar technologies, including browser type, domains, page views, how long you spent on a page or feature of the website or other data about your engagement with our Services.
- Geolocation data: Web-Behavior Information that includes the identification or estimation of physical location or movement.
- Inferences drawn from other personal information: We may infer or draw conclusions based on analyses of facts, evidence, or another source of information or data.
- Sensitive personal information: Health Information, certain Account Information and Self-Reported Information may be considered “sensitive”. This includes data that reveals your social security number, driver's license, state identification card, passport number, account log-in, financial account, debit card, credit card number with any required security or access code, password, or credentials allowing access to your account, precise geolocation, racial or ethnic origin, religious or philosophical beliefs, union membership, mail, email and/or text messaging contents, and genetic data.
How We Use Your Personal Information
As defined under the CPRA for California residents, GoMDUS may use Personal Information listed above for the following purposes or as directed by you:
- Providing Services: To provide our Services to you, including maintaining or servicing your account, providing customer service, processing or fulfilling orders and transactions, and more.
- Audit: Auditing related to a current interaction and concurrent transactions or compliance with applicable laws or standards.
- Security and Integrity: Detecting security incidents, maintaining integrity, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity.
- Debugging: Identifying and repairing errors that impair existing intended functionality.
- Transient Use: Short-term, transient use, including, but not limited to, nonpersonalized advertising shown as part of your current interaction with our business, provided that your Personal Information is not disclosed to another third party and is not used to build a profile about you or otherwise alter your experience outside the current interaction.
- Advertising and Marketing: To provide advertising and marketing to you, including cross-context behavioral advertising. Check out our Cookie Choices for more information on how we use your Cookie and Web-Behavior Information for cross-context behavioral advertising.
- Product Research and Development: Internal research that GoMDUS performs to improve and develop its products and services.
- Quality Assurance and Product Improvement: Activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by GoMDUS, and otherwise to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by GoMDUS.
If you have given explicit consent, we may share your Personal Information for commercial purposes with third parties, as outlined in the consent document. In the past 12 months, we have shared your Personal Information with service providers, contractors, and third-party marketing and advertising companies for the purpose of providing our services, detecting and preventing security incidents, performing services on our behalf, and other purposes allowed by CCPA. We will not use or disclose sensitive Personal Information for any purpose other than those permitted by CCPA, such as performing our services, detecting and preventing security incidents, and performing services on our behalf.
Individuals Located in the United Kingdom
This section applies to individuals located in the United Kingdom (“UK”).
- International Transfers: GoMDUS processes Personal Information globally, which may involve transferring, storing and processing your Personal Information in the U.S. and other countries outside of where you live. We rely on legal bases, such as consent, fulfillment of agreements, and legal mechanisms like standard contractual clauses, to legally transfer your Personal Information internationally.
- Our relationship with you: We are the "controller" of your Personal Information, meaning we determine the purposes and means of processing it when using our Services.
- Legal bases for processing Personal Information from the UK: We process your Personal Information based on your consent, to fulfill legal obligations, to carry out our obligations arising from any contracts we have with you, or for our legitimate interests to protect our property, rights, or safety of GoMDUS, our customers, or others. You can find more information on how we process your Personal Information in Sections 1 through 4 of our Privacy Policy.
- Privacy Rights: You have the right to access, delete, correct, withdraw consent, and receive your Personal Information in a portable format. You also have the right to object or restrict the processing of your Personal Information. To exercise these rights, please contact us at privacy@gomdus.com. In some cases, your ability to access or control your Personal Information may be limited as per applicable laws.
- Complaints or Questions: If you believe that we have violated your rights, we encourage you to contact us to address your concerns or dispute informally. Contact information is Data Protection Officer GoMDUS Limited, Tetbury Place, The Business Design Center London N1 0QH privacy@gomdus.com. You also have the right to lodge a complaint with the UK Information Commissioner’s Officer.
-
Changes to this Privacy Policy
The Privacy Policy may be updated periodically and changes will be notified through methods such as email, in-app notifications, or on a website page. The "Last Updated" date is provided on the policy to help you stay informed of any changes. Minor updates or changes that do not greatly impact individual privacy rights may be made at any time without prior notice.
-
How to Contact Us
You can also contact us by emailing at privacy@GoMDUS.com, calling us at 888-536-2267, or sending a letter to GoMDUS, Inc. at the address provided.
GoMDUS
Notice Regarding Information in Your Medical Record
Summary:
This Notice Regarding Information in Your Medical Record Notice (“Notice”) applies to GoMDUS and explains how GoMDUS uses, protects, and shares the information contained in the records of the healthcare services we provide to you (your "Medical Record"). It's important to note that your Medical Record only contains a limited amount of Personal Information, such as demographic information (such as your name, address, gender, or age), diagnosis, or communications with a provider. This Notice applies to all Medical Records created, controlled, or otherwise maintained by GoMDUS. The terms used in this Notice have the same meaning as our Privacy Policy and Terms of Use.
We encourage you to read the entire Notice, but here are the key highlights:
How We Use or Disclose Your Medical Record:
- To provide treatment
- To provide Services
- To comply with your instructions
- As required by law
- To disclose threats to health or safety
- To comply with public health reporting requirements
You Can:
- Get a copy of your Medical Records
- Request corrections to your Medical Record if it is inaccurate or incomplete
- Request to limit sharing or use of your Medical Record
- Tell us how you want us to disclose information with family or others involved in your care
- Delete your Account
Full Notice Regarding Information in Your Medical Record
Our Pledge Regarding Your Medical Record
Your health care treatment is personal to you and we understand the importance of protecting your Medical Record. This Notice applies to all Medical Records we create, control, or maintain, and outlines the ways your information in those records are used or disclosed, and what your choices are.
What is a Medical Record
Please note, your Medical Record contains only a limited set of Personal Information that relates to the health care we provide to you. For example, it may include demographic information, diagnosis, or communications with a provider.
To understand how all your Personal Information is handled by GoMDUS, please review our Privacy Policy. To the extent there are any conflicts between the Privacy Policy and this Notice related to your Medical Record, this Notice will govern.
In some circumstances, your Medical Record could have additional information about your health that we give special consideration to protecting. Examples of this information include, but are not limited to, psychotherapy or mental health notes, results related to sexually transmitted infection(s) (“STI”), or genetic information. We require additional authorization from you before we use or disclose that information.
How We Use and Disclose Your Medical Record
The following categories describe ways that we may use or disclose your Medical Record.
- For Treatment. We disclose your Medical Record in the course of providing medical treatment or in coordinating or managing any Services you’ve received or requested. For example, we may disclose your Medical Record with members of our Medical Team involved in your care to provide an additional consult or to fill a prescription.
- For Providing Services. We may use and disclose your Medical Record to carry out our business operations and be able to provide the Services to you. These uses or disclosures are related to things like billing or fulfilling prescriptions, quality of care, compliance activities, administrative purposes, contractual obligations, grievances, or legal obligations. For example, we may use information in your Medical Record to review the treatment and services provided or to evaluate the performance of the staff and contractors caring for you.
- To Comply with Your Instructions. We will disclose your Medical Record as directed by you. For example, if you choose to disclose your Medical Records with a third party available on the Services, we will do so with your consent.
- As Required by Law. We will disclose your Medical Record when required to do so by federal, state, or local law. In certain circumstances, GoMDUS may be required by law to comply with a valid court order, subpoena, or search warrant for a Medical Record. As permitted under applicable law, we will provide notice to you prior to sharing your Medical Record.
- Disclosure for Threats to Health and Safety. In certain circumstances, we are required to disclose your Medical Record to help protect you or someone else’s health and/or safety. For example, we may ask local law enforcement to perform a health and welfare check if, in our provider’s professional judgment, a welfare check is necessary.
- Public Health Reporting Requirements. We are required to report certain test results, like STI or positive COVID tests, to health agencies for public health purposes.
Special Considerations
In certain situations, some sensitive information in your Medical Record will not be used or disclosed without your written authorization, unless required by law. Some examples of types of information that need specific authorization:
- Genetic Information. This is any information about your individual genotype, including results of any genetic test.
- Psychotherapy Notes. We do not create psychotherapy notes in your Medical Record since mental health counseling is not a part of our medical team’s depression and anxiety care.
- STI Test Results. This is information related to any sexually transmitted infection(s) you experience. For more information on what we are required to report, please see the FAQ.
- HIV/AIDS Results. This is information related to any HIV or AIDS test results.
Control of Your Medical Record
You have control over your Medical Record. You can request the following by contacting the Health Care Compliance Team at the address below.
- Copy of your Medical Record. With certain exceptions, you may receive copies of your Medical Record, which may include information such as your diagnosis, provider notes, and treatment plan.
- Correction. If you believe that information in your Medical Record is incorrect or incomplete, you may ask us to correct the information.
- List of Disclosures. You may request a list of certain third parties we have disclosed your Medical Record with in the past 12 months.
- Request Us to Limit How We Use or Disclose Your Medical Record. You can request that we limit how we disclose your Medical Record with your family members or others involved in your care. If you provide any written authorization to disclose your Medical Record, you are free to revoke your authorization at any time in writing. After receiving the request, we will stop any further use or sharing of your Medical Record, except in cases where we have already acted based on your previous permission. We are unable to undo any disclosure already made with your permission.
- Request Confidential Communications. You can request that we communicate with you about your appointments or other health care matters in a specific way. We’ll do our best to accommodate your reasonable request but may be unable to if it causes significant operational or administrative burdens.
- Account Deletion: As mentioned in our Privacy Policy, you are free to delete your account at any time. We may retain all or part of your Medical Record after you close your account for a limited period of time as required by law, contractual obligations, as necessary for the establishment, exercise or defense of legal claims, audit and/or compliance purposes.
In some circumstances, we may not be able to accommodate your request if it conflicts with our legal obligations, the request is manifestly unfounded or excessive, or it affects our ability to provide the Services.
Contact Us
If you have any questions about how we use or disclose your Medical Records, please contact us at: Email: privacy@GoMDUS.com
Changes to this Notice
We reserve the right to change and make updates to this Notice from time to time. These changes will be effective for all Medical Records that we maintain and control. We will post our most current version of this document on our website. Whenever material changes to this Notice are made, we will provide you with notice before the modifications are effective, such as by posting a notice on our website or sending a message to the email address associated with your account.