Privacy Policy

• Information you provide — such as your name, email address, phone number, mailing address, and anything you submit through forms, uploads, messages, appointment requests, newsletter sign-ups, job applications, or support requests. If we later offer payments or patient accounts, this may include account credentials and payment details.
• Information collected automatically — such as device and browser type, IP address, pages viewed, and usage activity, collected through cookies and similar technologies, subject to your choices (see Cookie Policy).
• Information from third parties — such as our service providers and integration partners, where they lawfully provide information to us.

Health and sensitive information. If you provide health-related or other sensitive information through the Service, we treat it as confidential and use it only to respond to you and provide the services you request, as permitted by law. Please do not include detailed medical information in general contact or newsletter forms. We do not sell sensitive information.

We use your information to provide, operate, secure, and improve the Service; to respond to requests and schedule appointments; to process transactions; to communicate with you and provide support; to evaluate job applications; to comply with our legal obligations; and to detect, prevent, and address fraud and abuse.

We may use artificial intelligence, machine learning, and other automated tools — including third-party AI services — to process, analyze, summarize, and generate content from the information you provide, for example to power features, respond to inquiries, and improve the Service. Where such tools are used to make or assist decisions that affect you, we maintain appropriate human oversight. We do not sell your personal information, and we do not permit third-party AI providers to use your data to train their public models except as needed to provide services to us. Protected health information is only shared with AI providers as HIPAA permits, under a business associate agreement where one is required.

We share your information with trusted third-party service providers who process it on our behalf — only to provide services to us, and under contractual confidentiality and security obligations. These providers may include, but are not limited to:

• Hosting and infrastructure (e.g., Vercel, Amazon Web Services)
• Database, authentication, and file storage (e.g., Supabase)
• Payment processing (e.g., Stripe)
• Email and SMS delivery providers
• Customer relationship management and communication platforms
• Analytics providers (e.g., Google Analytics, Microsoft Clarity)
• Artificial intelligence and machine-learning providers

We may update the specific providers we use as the Service evolves. We do not sell personal information.

If you apply for a position through our careers pages, we collect the details you submit — your name, contact information, any license or certification you list, your note, and your resume. We use this information only to consider you for employment. Your resume is stored securely, is not publicly accessible, and is reviewed only by our hiring team. We do not add applicants to marketing lists. You may ask us to delete your application at any time.

We use strictly necessary cookies to run the Service and, where permitted, analytics cookies (Google Analytics and Microsoft Clarity) to understand how it is used. We do not use advertising or retargeting cookies. Where the law requires your agreement first, analytics stay off until you allow them; in the United States you can opt out at any time, and we honor Global Privacy Control signals. Full details, including every cookie we set, are in our Cookie Policy.

Change your cookie settings

We retain your information for as long as needed to provide the Service and comply with our legal obligations. You may request access to, correction of, or deletion of your personal information by contacting us. When information is deleted, we remove it from our active systems and instruct our service providers to do the same, subject to limited retention required by law. Medical records are retained as required by North Carolina and federal law.

Depending on where you live, you may have rights to access, correct, delete, port, or restrict the use of your personal information, and to opt out of certain processing. To exercise these rights, contact us using the details below. You can unsubscribe from marketing emails at any time using the link in the email. Your rights regarding your medical records are described in our Notice of Privacy Practices.

We use reasonable administrative, technical, and physical safeguards designed to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

The Service is not directed to children under 13, and we do not knowingly collect personal information from them online. Care for minors is arranged by a parent or guardian, and their health information is protected as described in our Notice of Privacy Practices.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, provide additional notice.

Questions about this Privacy Policy or your information? Contact us at info@goodhealthnc.com or (919) 230-1626.