Part 1: Notice of Privacy Practices
MedCline Wellness PLLC: Notice of Privacy Practices
Effective date: October 6, 2026
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
Our commitment to your privacy
MedCline Wellness PLLC ("MedCline Wellness," "we," "us") is a telehealth practice providing care to patients in Massachusetts, Connecticut, Vermont, and Maine. We are required by law to protect the privacy of your protected health information (PHI). PHI is information that identifies you and relates to your past, present, or future health, the care you receive, or payment for that care.
We are required by law to:
Maintain the privacy and security of your PHI.
Give you this notice of our legal duties and privacy practices.
Follow the terms of the notice currently in effect.
Notify you promptly if a breach occurs that may have compromised the privacy or security of your information.
How we use and disclose your health information
For treatment. We use your information to evaluate you, prescribe medication, and coordinate your care. For example, we send your prescription electronically to a licensed pharmacy, order laboratory tests from LabCorp or Quest Diagnostics, and may share information with your other healthcare providers.
For payment. We use your information to bill and collect payment for our services and for medications dispensed to you. For example, we send invoices for visits and medications through our secure practice management system, and we share the information a pharmacy needs to fill and ship your prescription.
For healthcare operations. We use your information to run our practice, improve the quality of care, train staff, and meet legal and licensing requirements. For example, we may review records to evaluate our clinical protocols.
With business associates. We work with companies that perform services for us, such as our electronic health record and telehealth platform, electronic prescribing service, and payment processor. These companies must sign a Business Associate Agreement and are required by law to protect your information.
Appointment reminders and care communications. We may contact you by phone, email, text message, or secure portal message to remind you of appointments, tell you a prescription or refill has been sent, share lab results, or tell you about treatment options related to your care.
With people involved in your care. If you agree, or if you do not object when given the chance, we may share information with a family member, friend, or other person you identify who is involved in your care or in paying for it.
Other uses and disclosures permitted or required by law
We may use or share your information without your written authorization in the following situations, as permitted or required by federal and state law:
As required by law, including federal, state, or local law.
Public health activities, such as preventing disease, reporting adverse reactions to medications, and reporting product recalls.
Reporting abuse, neglect, or domestic violence to government authorities where required or permitted by law.
Health oversight activities, such as audits, investigations, and licensure actions by state boards of nursing or other agencies.
Lawsuits and legal proceedings, in response to a court or administrative order, or a subpoena that meets legal requirements.
Law enforcement, for limited purposes as permitted by law.
To avert a serious threat to the health or safety of you, another person, or the public.
Coroners, medical examiners, and funeral directors, as authorized by law.
Organ and tissue donation, if you are an organ donor.
Research, when approved through a privacy review process that protects your information.
Specialized government functions, such as military, national security, and protective services, as authorized by law.
Workers' compensation, as authorized by state law.
To the U.S. Department of Health and Human Services, when it requests information to determine our compliance with HIPAA.
Uses that require your written authorization
We will not do the following without your written authorization:
Use or disclose your information for marketing purposes.
Sell your information.
Share psychotherapy notes, if any exist.
Any other use or disclosure not described in this notice will be made only with your written authorization. You may revoke an authorization in writing at any time, except to the extent we have already acted on it.
Stronger state protections
Some state laws in Massachusetts, Connecticut, Vermont, and Maine give certain information greater protection than federal law. This may include HIV and AIDS-related information, genetic testing results, mental health information, substance use treatment records, and sexual and reproductive health information. When state law is more protective, we follow state law.
Your rights regarding your health information
You have the following rights. To use any of them, contact our Privacy Officer using the information at the end of this notice.
Right to inspect and get a copy of your records. You may ask to see or get a paper or electronic copy of your medical and billing records. We will respond within 30 days. We may charge a reasonable, cost-based fee as permitted by law.
Right to request a correction. If you believe information in your record is incorrect or incomplete, you may ask us to correct it. We may deny your request, but we will tell you why in writing within 60 days.
Right to request confidential communications. You may ask us to contact you in a specific way (for example, only by email or only at a certain phone number) or at a specific address. We will agree to all reasonable requests.
Right to request restrictions. You may ask us to limit how we use or share your information for treatment, payment, or operations. We are not required to agree, except in one case: if you pay for a service or item in full out of pocket, you may ask us not to share information about it with your health plan, and we will agree unless a law requires us to share it.
Right to an accounting of disclosures. You may ask for a list of the times we shared your information in the six years before your request, who we shared it with, and why. The list will not include disclosures for treatment, payment, or healthcare operations, or those you authorized. We provide one accounting a year free of charge.
Right to a paper copy of this notice. You may ask for a paper copy of this notice at any time, even if you agreed to receive it electronically.
Right to choose someone to act for you. If you have given someone medical power of attorney, or if someone is your legal guardian, that person can exercise your rights and make choices about your health information.
Right to be notified of a breach. You will be notified if a breach occurs that compromises your unsecured health information.
Changes to this notice
We reserve the right to change this notice. Changes will apply to all information we hold about you. The new notice will be posted on our website and available upon request.
Complaints
If you believe your privacy rights have been violated, you may file a complaint with us by contacting our Privacy Officer. You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights, at hhs.gov/ocr/complaints, by calling 1-877-696-6775, or by writing to 200 Independence Avenue S.W., Washington, D.C. 20201.
We will not retaliate against you for filing a complaint.
Contact our Privacy Officer
Laura Cline, DNP, FNP-BC, Privacy Officer MedCline Wellness PLLC [95 Surrey Street Boston, MA. 02135] Phone: 617-608-7730 Email: [admin@medclinewellness.com]
Part 2: Website Privacy Policy
MedCline Wellness PLLC: Website Privacy Policy
Last updated: October 6, 2026
1. Scope of this policy
This Website Privacy Policy explains how MedCline Wellness PLLC collects, uses, and protects information when you visit our website. Health information you provide as a patient, including through our patient portal, intake forms, telehealth visits, and prescriptions, is protected health information. It is governed by our Notice of Privacy Practices (above) and by the Health Insurance Portability and Accountability Act (HIPAA).
2. Information we collect
Information you give us. When you use a contact form, sign up for email updates, or request information, we collect what you provide, such as your name, email address, phone number, and message.
Information collected automatically. When you visit our website, we and our service providers may automatically collect technical information, such as your IP address, browser type, device type, pages visited, time spent on pages, and the website that referred you.
Booking and patient portal. Appointment booking, intake forms, and the patient portal are hosted by Practice Better, a HIPAA-compliant platform that has signed a Business Associate Agreement with us. Information you enter there is protected health information and is handled under our Notice of Privacy Practices.
3. Cookies, analytics, and advertising
Our website uses cookies and similar technologies to operate the site, understand how visitors use it, and measure the effectiveness of our advertising. We currently use:
Squarespace cookies needed to operate and secure the website.
Google Analytics to understand website traffic and usage in aggregate.
Google Ads conversion tracking to measure the results of our advertising.
[Meta (Facebook) Pixel — include only if installed]
We do not use these tools on our patient portal, booking, or intake pages, and we do not share health information with advertising or analytics companies. We do not use information about your health conditions or treatment to target advertising.
You can control cookies through your browser settings, decline non-essential cookies through our cookie banner, and opt out of Google Analytics using the Google Analytics Opt-out Browser Add-on. We honor Global Privacy Control (GPC) browser signals as a request to opt out of targeted advertising.
4. How we use information
We use the information collected through our website to:
Respond to your questions and requests.
Send updates or educational content you have asked to receive.
Operate, maintain, secure, and improve our website.
Measure the effectiveness of our advertising.
Comply with legal obligations.
5. How we share information
We share website information only with service providers that help us operate our website and business, such as our website host, email provider, and analytics providers, and only as needed for them to provide those services. We may also disclose information when required by law or to protect our rights and the safety of others.
We do not sell your personal information, and we do not share your consumer health data with third parties for their own marketing purposes.
6. Consumer health data
Some states, including Connecticut, provide additional protection for "consumer health data," meaning information that identifies a person's physical or mental health status and is not covered by HIPAA. We collect consumer health data through our website only when you voluntarily provide it, such as in a contact form message, and use it only to respond to you. We do not sell consumer health data, and we do not use geofencing around healthcare facilities.
7. Your privacy rights
Depending on where you live, you may have the right to:
Know what personal information we have collected about you and access a copy of it.
Correct inaccurate personal information.
Delete personal information we collected through our website.
Opt out of targeted advertising, the sale of personal information, and profiling.
Withdraw any consent you have given us.
We extend these rights to all website visitors regardless of their state of residence. To make a request, contact us using the information below. We will verify your identity before responding and will respond within 45 days. We will not discriminate against you for exercising your rights. If we deny your request, you may appeal by replying to our decision, and we will respond to your appeal within 60 days.
These rights apply to information collected through our website. Your rights regarding your medical records are described in our Notice of Privacy Practices.
8. Email and text messages
If you agree to receive emails or text messages from us, you can unsubscribe at any time using the link in any email or by replying STOP to any text message. Messages related to your care, such as appointment reminders, may continue while you are a patient.
9. Data security and retention
We use administrative, technical, and physical safeguards to protect information, including encryption and access controls. No method of transmission over the internet is completely secure. We keep website information only as long as needed for the purposes described in this policy or as required by law. Medical records are retained as required by state law.
10. Children's privacy
Our website and services are intended for adults 18 and older. We do not knowingly collect personal information from children under 13.
11. Links to other websites
Our website may link to other websites, such as pharmacy, laboratory, or educational sites. We are not responsible for the privacy practices of those websites.
12. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top shows when it was last changed.
13. Contact us
MedCline Wellness PLLC Attn: Privacy Officer [95 Surrey Street Boston, MA. 02135] Phone: 617-608-7730 Email: [admin@medclinewellness.com]