Privacy Policy

Effective Date: August 26, 2026

WellForm MD is committed to protecting your privacy and safeguarding the confidentiality of your personal and health-related information. This Privacy Policy outlines how we collect, use, share, and protect your data in compliance with the Health Insurance Portability and Accountability Act (HIPAA), federal communications regulations, and all applicable privacy laws.

We value your trust and transparency. This policy applies to all interactions with WellForm MD, including in-person visits, phone communications, electronic forms, website usage, and any third-party tools used for communication or services (such as scheduling software, payment processors, and electronic health record systems).

1. Information We Collect

We collect and retain the following categories of information to provide you with wellness, medical, and administrative services:

Personal Identifiers: Name, date of birth, contact information (email, phone), address, and billing details.

Medical Information: Health history, treatment records, physician notes, diagnostic data, and prescriptions.

Photographic/Visual Data: Images captured during treatment (e.g., before/after images, body composition scans) used for clinical documentation, treatment planning, and tracking progress. Separate, explicit consent will be obtained for any use of these images for marketing or promotional purposes.

Digital/Online Data: Information submitted through our website, appointment forms, chat widgets, cookies, IP addresses, device and browser information, advertising identifiers, referring pages, campaign information, and site usage behavior. Website analytics and advertising measurement are described in Section 5 below.

Communication Preferences: Opt-ins to receive marketing, educational, or reminder communications via SMS or email.

2. A2P 10DLC Messaging Compliance

WellForm MD is committed to adhering to the Application-to-Person (A2P) 10-Digit Long Code (10DLC) messaging guidelines established by the Cellular Telecommunications Industry Association (CTIA) and other relevant regulatory bodies. This section outlines our practices regarding A2P messaging, including user consent, message content, data privacy, and your rights.

A2P 10DLC refers to the use of standard 10-digit phone numbers to send SMS and MMS messages from businesses to consumers. WellForm MD uses A2P messaging for the following purposes:

Appointment reminders and confirmations

Transactional updates related to your care or account

Promotional and marketing communications (with your express consent)

Before sending A2P messages, we ensure that we have obtained your explicit consent. Consent may be collected through appointment forms, in-person interactions, checkboxes, or other opt-in mechanisms. You may opt out of receiving messages at any time.

To stop receiving SMS messages, reply “STOP” to any message.

For email communications, click the “Unsubscribe” link included in the email footer.

All messages sent by WellForm MD comply with CTIA guidelines and relevant laws. Our messages are clear, relevant, and sent in accordance with your preferences and consent. We limit promotional messaging to 4–6 messages per month, and you may opt out at any time.

We do not sell your mobile number or provide your contact details to third parties for their own marketing. We do not send names, email addresses, phone numbers, message content, or form responses to website analytics or advertising platforms. The separate collection and sharing of limited online activity data for the purposes described in Section 5 is governed by your Website Privacy Choices.

Your Rights and Choices

You have the right to:

Opt-In or Opt-Out of A2P messages at any time

Access or Correct your personal data

File a Complaint if you believe your rights have been violated

To exercise any of these rights or to request more information, please contact us using the information below:

3. How We Use and Share Your Information

Your data, including Protected Health Information (PHI), may be used or disclosed as permitted or required by law. We adhere to the “minimum necessary” principle, meaning we only use or disclose the minimum amount of your PHI required to achieve the intended purpose. Common uses include:

Treatment: Coordinating care with our clinical staff, referring providers, and other healthcare professionals involved in your care.

Operations: Internal analytics, staff training, quality improvement, scheduling, facility coordination, and business management activities. We may also share information with our Business Associates, who perform services on our behalf and are legally obligated to protect your information under specific agreements (Business Associate Agreements).

Payments: Billing, insurance claims, payment processing, and related financial services.

Legal Compliance: Responding to subpoenas, court orders, audits, public health disclosures, and other legal or regulatory requirements.

Marketing and Communication:

With your express consent, we may contact you via SMS or email regarding appointment reminders, confirmations, follow-ups, promotions, wellness tips, and service updates.

Message frequency may vary. Standard message and data rates may apply.

You may opt out of SMS communications at any time by replying “STOP” to any message. You may opt out of email communications by clicking the “Unsubscribe” link at the bottom of our emails.

4. Communication Consent and Your Rights

By providing your mobile number and/or email, you consent to receive automated operational communications via text message and email (e.g., appointment reminders, confirmations, follow-ups). With your express consent, you may also receive limited promotional messages.

We aim to send no more than 4–6 promotional SMS or email messages per month.

You have the right to:

Withdraw communication consent at any time

Specify your preferred method of communication (e.g., SMS only, email only)

Request that we refrain from sending marketing messages

To update your communication preferences, reply “STOP” to an SMS, click “Unsubscribe” in any email, or contact us using the information below.

5. Website Analytics and Advertising Measurement

On public pages, WellForm MD uses Google Tag Manager and Google Analytics and may use the Meta Pixel to understand website use, measure and attribute advertising, limit ad frequency, and create or measure advertising audiences.

These services may receive limited online activity data such as an IP address, device and browser information, cookies or advertising identifiers, the page viewed, referring page, campaign information, and standard page-view or interaction events.

WellForm MD does not intentionally send these services names, email addresses, phone numbers, contact or appointment form contents, questionnaire responses, appointment details, medical records, or user-provided health information. Automatic advanced matching and automatic form or page-content collection are disabled. Administrative, API, internal operations, and free-text search-results routes are excluded from measurement.

Google and Meta process information under their own privacy terms. Some privacy laws may describe advertising-related disclosures of online identifiers or activity data as a sale, sharing, or targeted advertising even when no money is exchanged. WellForm MD discloses this activity so you can make the choice described below.

Your Website Privacy Choices: You may opt out of non-essential website analytics and advertising measurement using the Website Privacy Choices control on this page. WellForm MD also honors an enabled Global Privacy Control signal in this browser. Your choice is stored on this browser and device, essential site functions remain available, and clearing browser data may reset the stored preference.