Privacy Policy

1. Please Read Carefully

This Privacy Policy describes how LPMD of CA PC ("JellyMed") collects, uses, discloses, and protects your information when you visit www.swellcare.health or use our services through the patient portal at https://patients.swellcare.health. Your privacy is important to us. This Policy is designed to comply with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and other applicable US privacy laws. By using our website and services, you consent to the practices described in this Policy.

2. Scope

This Privacy Policy applies to:

• Visitors and users of https://jellymed.health/
• Individuals registering for or receiving care through our patient portal at https://patients.swellcare.health, which is securely powered and hosted by Healee, a HIPAA-compliant platform under a Business Associate Agreement (BAA) with Swell
• All information submitted through digital intake forms, chats, video consultations, and secure messaging with our medical providers

3. Types of Information We Collect

a. Personal Information

• Full name, date of birth, contact information
• State and location (for licensure compliance)
• Billing and payment details (via secure processor)

b. Protected Health Information (PHI)

• Symptoms, medical history, medications, allergies
• Photos, documents, or chat responses you submit
• Clinical notes, diagnoses, and prescriptions issued

c. Technical Information

• IP address and device information
• Site usage patterns (via cookies and analytics)
• Browser type and referral URLs

We collect this data directly from you, from your use of the Site, and through the Healee platform when you engage with your provider.

4. How We Use Your Information

We use your data to:

• Deliver secure telemedicine consultations
• Identify you and confirm your eligibility for care
• Facilitate prescriptions, if clinically appropriate
• Communicate with you via secure messaging or email
• Provide customer support and follow-ups
• Process payments for services rendered
• Maintain accurate medical records
• Comply with legal, regulatory, and security obligations
• Improve our services and technology infrastructure

We do not sell your information to third parties.

5. Patient Portal and Secure Communication

JellyMed.Health delivers care via a secure, HIPAA-compliant patient portal, operated by our technology partner Healee. This white-labeled platform is accessible at https://patients.swellcare.health and supports:

• Encrypted chat-based consultations
• Intake forms and prescription workflows
• Clinical messaging with your provider
• Secure storage of health records

Healee is bound by a signed BAA and may access your data only for technical administration under HIPAA regulations. All data entered into the portal is encrypted and audit-logged.

6. How We Share Your Information

We may share your data only as permitted by HIPAA and other applicable laws:

• With your assigned or requested healthcare provider
• With Healee, our patient portal provider, for secure platform operations
• With pharmacies or labs to fulfill care plans
• With regulatory authorities when legally required
• With payment processors (e.g. Square) for transaction processing
• With technology vendors who support secure infrastructure (under signed BAAs)

Your data is never sold or shared for advertising purposes.

7. Payment Information & Cash-Pay Model

JellyMed.Health operates on a 100% cash-pay model. We do not accept insurance, Medicare, Medicaid, or any third-party payers. All services must be paid in full at the time of booking.

• We use Square, a PCI-DSS compliant payment processor.
• No financial information is stored on our servers.
• Refunds may only be issued before a consultation begins, or if a provider determines your case is not appropriate for telehealth.

8. Your Rights Under HIPAA

If you are a patient receiving care through our platform, you have the right to:

• Access your medical records
• Request amendments to your records
• Receive an accounting of disclosures
• Request restrictions on certain uses or disclosures
• Request confidential communications
• File a complaint with the U.S. Department of Health & Human Services

To exercise these rights, email us at privacy@jellymed.health

9. Data Retention

We retain PHI and user data in accordance with federal and state medical record retention laws. If you no longer wish to use our services and would like your account or data removed (where allowable), please submit a request in writing.

10. Data Security

We take extensive precautions to safeguard your information:

• All communications are encrypted (TLS/SSL)
• PHI is stored securely using HIPAA-compliant cloud infrastructure
• Access is limited to authorized personnel only
• Audit trails, automatic logouts, and breach monitoring are in place

Despite best efforts, no system is 100% immune to cyber threats. We encourage users to protect their own login credentials.

11. Cookies and Website Analytics

Our main website uses cookies and Google Analytics to measure site usage and improve functionality. These tools may collect:

• Non-identifiable browsing data
• Referring website URLs
• Device type and region

You can opt out by adjusting your browser settings. No PHI is shared with analytics providers.

12. Children's Privacy

JellyMed is committed to protecting the privacy of all users, including minors. Our services are primarily intended for individuals aged 18 and older. However, we also provide care to minors under 18 years of age with documented parental or legal guardian consent, in accordance with applicable federal and state laws. We do not knowingly collect personal information from children under the age of 18 without verified parental consent, in compliance with the Children's Online Privacy Protection Act (COPPA) and HIPAA. When a minor engages with our services under a parent or guardian's supervision:

• We require a signed Parental Consent Form for Medical Treatment
• The minor's personal and health information is treated as Protected Health Information (PHI) and safeguarded under HIPAA
• Only authorized individuals, such as the parent/guardian or healthcare provider, may access or request updates to the minor's records

If we discover that a child under 18 has submitted information without proper consent, we will delete that information promptly and take steps to ensure compliance. If you are a parent or guardian and believe that your child's information has been collected in error or without your authorization, please contact us immediately at privacy@jellymed.health

13. Third-Party Websites

Our site may contain links to external websites or platforms (e.g., LinkedIn, pharmacies, social media). This Privacy Policy does not govern those third-party platforms. You should review their privacy policies before interacting with them.

14. International Users

Our services are available only to users physically located in the United States. If you are accessing the Site from outside the U.S., you do so at your own risk and consent to data transfer to the United States.

15. Updates to this Policy

We reserve the right to update this Privacy Policy at any time. All changes will be posted here, and your continued use of the Site will indicate your acceptance of those changes.

16. Contact Us

If you have any questions, concerns, or requests about this Privacy Policy or your data, please contact:

JellyMed by SWELL Medical
LPMD of CA PC
6800 Bird Road, Unit 650
Miami, FL 33155
(910) 644-8373
privacy@jellymed.health