Effective Date: 6/03/26
Better U, Inc. (“Better U,” “we,” “us,” or “our”) is firmly committed to protecting your privacy. This Privacy Policy explains how we collect, use, and disclose your personal information when you visit or use our website, https://www.betterucare.com (the “Platform”), utilize our services (“Services”), or otherwise interact with us. It also details your rights and choices regarding such information, including under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), the California Consumer Privacy Act as amended (“CCPA”), and other applicable laws.
Better U provides non-clinical administrative and operational services for independent medical practices, including Better U Clinical, P.A., Better U Clinical CA, ZF Medical New York, PC (to be renamed Better Now Medical NY, PC), Better Now Clinical NJ, PC, and affiliated professional corporations (together, the “Medical Groups”). Better U is not itself a medical practice and does not control the clinical judgment or care provided by the Medical Groups or their clinicians. The professional medical services are provided solely by the Medical Groups and their clinicians, and the non-clinical site services are provided by Better U.
For certain Services, Better U and/or the Medical Groups operate as a “covered entity” and/or “business associate” under HIPAA, and in those cases we handle your Protected Health Information (PHI) in accordance with HIPAA and applicable state law. If there is any conflict between this Privacy Policy and our HIPAA Notice of Privacy Practices with respect to PHI, the HIPAA Notice of Privacy Practices will control.
By accessing or using our Platform and Services, or by otherwise providing us with your personal information, you agree to this Privacy Policy. If you do not agree, please do not use our Platform or provide any personal information. We reserve the right to make changes to this Privacy Policy at any time. Any changes will be posted here, and we encourage you to review it regularly.
If you have any questions or comments about this Privacy Policy, please contact us via email at [email protected].
This Privacy Policy is incorporated into and is subject to our Terms of Service. Any personal information that you provide to Better U remains subject to this Privacy Policy, our Terms of Service, and, where applicable, the Medical Groups’ Notice of Privacy Practices.
Intended Audience
Our Platform and Services are directed only to individuals located in the United States. If you are located outside the United States, you should not use our Platform or submit personal information to us. If we become aware that we have collected personal information from someone outside the United States, we may delete it or take other steps as appropriate to address cross-border transfer requirements.
TABLE OF CONTENTS
HOW WE COLLECT YOUR PERSONAL INFORMATION
We may collect the following categories of personal information from or about you:
Account Information
When you register for or use our Platform or Services, we collect information such as your name, contact details, date of birth, government-issued identifiers as needed for identity verification, health information and medical background, information provided in intake forms and assessments, treatment responses, and communications with your care team. This includes information collected by the Medical Groups during intake, treatment, and follow-up care, which may be shared with Better U as necessary to operate and support the Services.
Device and Location Information
We automatically collect certain technical information about your device and how you interact with our Platform, which may include your IP address, device identifiers, browser type, operating system, general location (such as city or region), referring URLs, and pages viewed. We may use cookies, pixels, software development kits (SDKs), and similar technologies to understand your activity on the Platform and improve our Services. When this information is linked or reasonably linkable to you and relates to the provision of health-related Services, we treat it as PHI and/or sensitive personal information where required by law. Where required by state consumer health data laws, some of this information may be treated as “consumer health data,” and we will handle it in accordance with those laws and the “Additional Rights for Residents of Certain States (Consumer Health Data)” section below.
Payment Information
When you use our Services to make or receive payments, we collect payment details such as credit card numbers or other financial account information, which may be processed by third-party payment processors on our behalf.
Children’s Information
Our Services are intended for users 18 years and older. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected personal information from a person under 18, we will delete it and take any additional steps required under applicable law. Under California law, personal information from individuals under 16 may be treated as “sensitive personal information” and receive heightened protections.
Anonymous, De-Identified, and Aggregated Information
We may collect anonymous, de-identified, or aggregated information, such as overall usage data, clickstream data, and statistical information that does not directly identify you. We may use and retain such information for analytics, research, reporting, clinical quality improvement, and program development, in compliance with applicable law.
Social Networking Services (SNS)
If you register or log in via a third-party SNS account (e.g., Facebook, Google), we may collect information from that SNS (subject to your SNS privacy settings). This could include your name, email address, or any other information you make publicly available on or through that SNS.
Third-Party Information
If you provide personal information about a third party (e.g., an emergency contact), you must (a) notify that individual before sharing their information; (b) explain that their information will be processed as described in this Privacy Policy; and (c) obtain their consent if required by law.
WHY WE NEED TO COLLECT YOUR PERSONAL INFORMATION
To the extent permitted by applicable law, we may use your personal information to:
Provide Services
Operate and administer our Platform and deliver the Services or information you request, including telemedicine visits, care coordination, medication management, psychotherapy, integration coaching, and related support provided by the Medical Groups and their clinicians.
Manage Our Relationship
Respond to questions, comments, or customer service inquiries; provide updates, reminders, and notices related to appointments, treatment plans, and account activity.
Communicate Important Notices
Send information about changes to this Privacy Policy, our Terms of Service, Platform updates, or other administrative messages.
Analytics and Market Research
Improve our Platform and Services, analyze trends, perform quality assessment, and gather demographic information about our user base, including through de-identified or aggregated data where appropriate. This may include analysis related to clinical outcomes, quality improvement, and program development.
Marketing, Advertising, and Analytics
We use certain third-party tools, including those provided by Google, Meta (Facebook and Instagram), and Impact, to help us measure the effectiveness of our marketing, understand how users find and interact with our Platform, and improve our outreach to people who may benefit from our Services. These tools may collect or receive identifiers (such as IP address and cookie or device identifiers), information about your browser and device, general location information, and information about your interactions with our Platform (such as pages viewed, links clicked, or forms submitted) so that we can understand which advertising and marketing efforts are most effective. We do not permit these tools to access or receive your PHI from within our clinical workflows, medical records systems, or patient portals, and we do not use PHI to create advertising audiences. We take steps to limit what information is shared with these third parties, and we require them to use the information they receive from us only to provide services to Better U and not for their own independent purposes, except as otherwise described in their privacy policies.
Personalize Experiences
Tailor our communications and permitted marketing to you based on your activity on our Platform or geographic location, while respecting your choices and applicable law.
Prevent Unlawful or Harmful Activities
Detect and prevent fraud, abuse, security issues, or other potentially harmful activities; protect our rights and the rights, property, and safety of others.
Comply With Legal Obligations
Comply with applicable laws, regulations, legal processes, and law enforcement or regulatory requests, including healthcare, privacy, and consumer protection laws.
Security and Risk Management
Conduct security monitoring, cybersecurity reviews, and privacy or risk assessments for processing activities that may present a significant risk to individuals, as required or recommended by law or regulators.
TO WHOM WE DISCLOSE YOUR PERSONAL INFORMATION
We do not “sell” your personal information in exchange for money. However, we do disclose certain personal information to third-party partners, including online advertising and analytics providers such as Google, Meta, and Impact, in ways that may be considered a “sale” or “sharing” for cross-context behavioral advertising under the CCPA and similar state laws. This may include limited identifiers and information about your interactions with our Platform (for example, that you visited our website or viewed certain pages) so that we can measure and improve our marketing and outreach. We do not disclose your PHI or detailed information about your diagnosis or treatment to these partners for advertising purposes. You have the right to opt out of such “sales” and “sharing” as described in the “Annex for California Residents” and any other applicable state privacy notices.
However, we may disclose personal information as follows:
Service Providers
We share information with companies that help us operate our Platform, provide Services, or assist with functions such as hosting, analytics, customer support, communications, and marketing. These entities are contractually obligated to keep your personal information confidential and may only use it as necessary to provide services on our behalf. Where PHI is involved, we enter into business associate agreements when required by HIPAA.
This includes advertising, attribution, and analytics providers such as Google, Meta, and Impact that help us measure and improve our marketing, subject to your rights to opt out of “sales” and “sharing” where required by law.
Medical Groups and Healthcare Providers
We share information with the Medical Groups (Better U Clinical, P.A., Better U Clinical CA, ZF Medical New York, PC (to be renamed Better Now Medical NY, PC), Better Now Clinical NJ, PC, and affiliated professional corporations) and with other medical professionals involved in your care, including pharmacies, labs, and integration coaches, so they can provide, coordinate, and manage your treatment.
Compliance with Law and Safety
We may disclose information when required to comply with a legal or regulatory obligation, a judicial order, or a request by a government authority, or when we believe in good faith that disclosure is necessary to protect your safety or the safety, rights, or property of others.
Business Transactions
In the event of a merger, acquisition, restructuring, financing, sale of assets, or other business transaction, personal information may be transferred to one or more third parties as part of that transaction, subject to applicable law and, where PHI is involved, subject to HIPAA successor entity requirements and continuity of protections for your PHI.
De-Identified or Aggregated Data
We may share de-identified or aggregated information that does not identify you with third parties for analytics, research, quality improvement, or reporting purposes.
With Your Consent
We may share your information with third parties if you consent to additional disclosures, including where separate written authorization is required under HIPAA for certain uses or disclosures of PHI (such as some marketing or the sale of PHI).
HOW LONG WE RETAIN YOUR PERSONAL INFORMATION
We retain your personal information only as long as is reasonably necessary to fulfill the purposes outlined in this Privacy Policy and as required by law.
Medical Records (PHI)
We are legally obligated to maintain medical records for at least 10 years, and in some jurisdictions or for certain types of records, longer. We retain PHI as required by federal and state recordkeeping laws, professional standards, and payer requirements.
Other Records
Other data, such as routine business records, logs, or backups, may be retained for an appropriate period based on operational requirements, contractual obligations, risk management, or legal obligations (e.g., tax, accounting, or auditing).
CRM Data
We respect your preferences regarding how we use your non-medical Customer Relationship Management (CRM) data. While we may need to retain records of prior communications and interactions for legal, compliance, security, and operational reasons, you can choose to opt out of receiving future marketing or non-essential communications from us at any time. To update your preferences or opt out of future communications, please contact us at [email protected] or use any unsubscribe or preference-management tools included in our messages.
De-Identified and Aggregated Data
We may retain de-identified or aggregated information indefinitely, in compliance with applicable law, as it does not identify you.
If you have questions about specific retention periods for certain data, please contact us at [email protected].
HOW WE PROTECT YOUR PERSONAL INFORMATION
We implement appropriate administrative, technical, and physical measures designed to protect your personal information against unauthorized or unlawful processing and accidental loss, destruction, or damage. Data collected via our Platform is stored on secure servers, and we use safeguards such as access controls, encryption in transit and at rest where appropriate, secure development practices, and workforce training to reduce the risk of data breaches. For PHI, we maintain safeguards consistent with the HIPAA Security Rule, including risk analyses and ongoing risk management.
No Mobile (SMS) Information Sharing with Third Parties
We do not disclose, sell, or rent your mobile phone number or mobile device identifiers to third parties for their own marketing purposes. We may share your mobile number with service providers who help us deliver SMS messages (such as appointment reminders or security alerts), but they may only use it to provide those services on our behalf.
Mobile Privacy and SMS Communications
By providing your mobile number, you consent to receive SMS messages from Better U, including appointment reminders and important notifications related to your care or account.
We do not condition medical treatment or care on your consent to receive marketing SMS messages. Operational SMS (such as appointment reminders or security alerts) may be necessary to use certain features, but you can opt out of marketing SMS at any time.
5A. COOKIES, ANALYTICS, AND TRACKING TECHNOLOGIES
We and our service providers may use cookies, pixels, SDKs, web beacons, log files, and similar technologies (“Tracking Technologies”) to operate the Platform, remember your preferences, measure performance, and understand how users interact with our Services. Some Tracking Technologies are necessary for core functionality (such as security, authentication, and session management), while others help us analyze usage trends or improve our Services.
When Tracking Technologies collect information in connection with your use of our health-related Services and such information is linked or reasonably linkable to you, we treat that information as PHI and/or sensitive personal information where required by law. We do not permit Tracking Technologies to be used in a way that would result in an impermissible disclosure of PHI to third parties under HIPAA, and we use business associate agreements or de-identification approaches when required by HIPAA and regulator guidance.
You may manage certain cookies and similar technologies through your browser settings or device controls. If you disable or reject certain cookies, some features of the Platform may not function properly.
Advertising and measurement tools
We use certain cookies, pixels, and similar technologies provided by partners such as Google, Meta, and Impact to understand which advertisements or marketing efforts lead people to visit our Platform or take certain actions (for example, submitting a form or scheduling a consultation). These tools help us measure campaign performance and improve how we present information about Better U to prospective clients. The information collected through these tools may be considered a “sale” or “sharing” of personal information or “targeted advertising” under some state privacy laws. We do not allow these tools to be used to access or disclose your PHI from our clinical systems for advertising purposes. We do not deploy Meta Pixel, Google Ads tags, or similar third-party advertising pixels within our patient portals, electronic medical record interfaces, or other authenticated areas used to receive clinical care, nor do we configure these tools to collect or receive information about your specific diagnosis, treatment, or medications. You can learn more about how to control cookies and online advertising by adjusting your browser settings, using built-in platform tools (such as Google’s Ad Settings and Meta’s Ad Preferences), and exercising your opt-out rights described in the Annex for California Residents and other applicable state notices.
CHILDREN’S PRIVACY PROTECTION
Our Platform and Services are not directed to individuals under 18 years of age. We do not knowingly collect information from anyone under 18. If you believe we have collected personal information from a minor, please contact us so that we may delete it and take any other steps required by applicable law.
CONTROLLING YOUR PERSONAL INFORMATION
Certain rights described in this section apply differently to PHI governed by HIPAA and to personal information governed by consumer privacy laws such as the CCPA. Where a state privacy law would conflict with HIPAA, we will apply the law that affords you the greater protection or right, consistent with legal requirements.
Depending on where you live, you may also have the right to opt out of our use of your personal information for targeted advertising or of any “sale” or “sharing” of your personal information as those terms are defined under applicable state laws. You can exercise these rights by contacting us at [email protected] or using any “Your Privacy Choices” or browser-based opt-out signals we support, as described in the Annex for California Residents and other applicable state notices.
Access and Correction
You may request details about the personal information we hold about you, including how it has been used or disclosed during the applicable lookback period required by law, by contacting us at [email protected]. We may need to verify your identity (and, where permitted, the authority of your authorized agent) before fulfilling your request.
We will make every effort to respond to your request within the timeframes required by applicable law. Where we are unable to do so, we will inform you of the reason for any delay.
If any of your information is inaccurate, incomplete, or out of date, please update it through your account settings or by contacting us. Providing us with accurate information helps ensure we continue to give you the best possible service.
Medical Records Retention & Amendments
10-Year Retention Requirement
We have a legal obligation to maintain medical records for at least 10 years and, in some cases, longer. Therefore, we cannot permanently delete your medical records upon request if they contain PHI.
Amendments
You have the right to request an amendment or correction to your medical records if you believe the information is incorrect, inaccurate, or incomplete. We will evaluate amendment requests in accordance with HIPAA and other applicable laws. If we deny a requested amendment, we will provide a written explanation and instructions on how you may submit a statement of disagreement, which we will include in your record as required by law.
Withdrawal of Consent
If you wish to withdraw consent to the processing of your personal information for any of the purposes described in this Privacy Policy, or request deletion of your personal data (where feasible), please contact us. Note that if you withdraw consent or request deletion of certain personal information (other than medical records we are legally required to retain and communications), we may not be able to continue providing some or all of our Services, and we will not be liable for any consequences resulting from our inability to provide such Services.
LINKS AND THIRD PARTIES
Our Platform may contain links to websites or resources controlled by third parties, and such third parties may independently collect data about you, including via their own cookies or tracking technologies. We are not responsible for the privacy practices or content of such third-party websites. We encourage you to review the privacy policies of any website you visit.
CONTACT US
If you have any questions, concerns, or complaints about our Privacy Policy, data protection practices, or our compliance with applicable data protection laws, you may contact our Data Protection Officer at:
Better U, Inc.
Attn: Data Protection Officer
1317 Edgewater Dr #735
Orlando FL 32804
Email: [email protected]
ANNEX FOR CALIFORNIA RESIDENTS
California Consumer Privacy Act (CCPA)
Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, “CCPA”), California residents have certain rights regarding their personal information, subject to exceptions. These rights generally apply to personal information that is not PHI or otherwise exempt under the CCPA.
These rights include:
Opt Out of Sale or Sharing
Under the CCPA, some of our disclosures of personal information to third-party advertising, analytics, and measurement partners (such as Google, Meta, and Impact) may be considered a “sale” or “sharing” of your personal information for cross-context behavioral advertising. You have the right to direct us not to sell or share your personal information for these purposes. You can exercise this right by contacting us at [email protected] with “Do Not Sell or Share My Personal Information” in the subject line, or by using any other method we make available (such as a “Your Privacy Choices” link or recognizing browser-based opt-out signals where required by law). We will honor your opt-out request as required by the CCPA and other applicable state laws.
Request to Know
You can request specifics about how we have collected, used, and disclosed your personal information for the period required by the CCPA (which may extend beyond the preceding 12 months, for example to January 1, 2023).
Request to Delete
Subject to certain exceptions, you can request that we delete your personal information from our records.
Request to Correct
You may request that we correct inaccurate personal information we maintain about you.
Right to Limit Use and Disclosure of Sensitive Personal Information
You may request that we limit our use and disclosure of your sensitive personal information (such as precise geolocation, certain health-related information, and data about individuals under 16) to what is necessary to provide requested Services and as otherwise permitted by law.
If you wish to exercise these rights, please contact us at [email protected] with “CCPA” in the subject line, or by using any other method we may make available. We will confirm receipt of your request within the timeframe required by law and respond within 45 days or notify you if an extension is needed. We may ask for certain information to verify your identity (and, where applicable, the authority of your authorized agent). We will not discriminate against you for exercising your CCPA rights.
We do not sell your personal information in exchange for money. However, as described above, our use of certain third-party advertising, analytics, and measurement tools may be considered a “sale” or “sharing” of personal information for cross-context behavioral advertising under the CCPA. In the preceding 12 months, we have “sold” or “shared” identifiers (such as IP address and online identifiers) and internet or other electronic network activity information (such as browsing or usage data) to our advertising and analytics partners (including Google, Meta, and Impact) for marketing and measurement purposes. California residents may opt out of such “sales” and “sharing” at any time using the methods described in this Annex.
Additional Rights for Certain States (Consumer Health Data)
Certain U.S. state laws (for example, Washington’s My Health My Data Act and Nevada’s Consumer Health Data Privacy Law) provide additional rights and protections for “consumer health data,” which may include information about your past, present, or future physical or mental health status, attempts to seek health care services, or inferences drawn from your use of health-related websites or apps. To the extent these laws apply to Better U, we do not sell your consumer health data, and we do not use consumer health data for targeted advertising. We design our use of tracking technologies so that information about your visits to our public, informational pages is not treated or configured as a disclosure of consumer health data for advertising purposes. Residents of these states may have additional rights to confirm whether we collect, share, or sell their consumer health data, to access or delete such data, and to withdraw consent to certain processing. To exercise these rights, please contact us at [email protected], and we will respond in accordance with applicable law.
HIPAA NOTICE OF PRIVACY PRACTICES
THIS SECTION DESCRIBES HOW PROTECTED HEALTH INFORMATION (“PHI”) ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
Under HIPAA, we are required by law to maintain the privacy of your PHI, provide you with this Notice of our legal duties and privacy practices, and notify you in the event of a breach affecting your PHI. We will follow the privacy practices described in this Notice while it is in effect.
We reserve the right to change our privacy practices and this Notice at any time, provided the changes are permitted by law. When we make a significant change, we will post the updated Notice clearly on our Platform and make it available upon request.
Certain types of PHI, such as mental health records, psychotherapy notes, substance use disorder treatment records, and information relating to reproductive or sexual health, may be subject to additional federal or state protections. We will handle such information in accordance with those heightened requirements, which may further limit when and how we can disclose it, even for treatment, payment, or healthcare operations.
How We May Use and Disclose Your PHI
Treatment: We use and disclose PHI to provide, coordinate, or manage your health care, such as sharing information with specialists involved in your treatment.
Payment: We use and disclose PHI to obtain payment for services we provide to you (e.g., billing, claims management).
Healthcare Operations: We use and disclose PHI for business operations such as quality assessment, staff training, licensing activities, accreditation, and compliance.
Required by Law: We disclose PHI when required by federal, state, or local law.
Law Enforcement & Legal Proceedings: We may disclose PHI in response to a court order, subpoena, or other lawful process, consistent with legal requirements.
Worker’s Compensation: We may disclose PHI to comply with worker’s compensation or similar laws.
National Security & Military Activity: We may disclose PHI to authorized federal officials or military authorities under certain circumstances.
Health Oversight Activities: We may disclose PHI to government oversight agencies for audits, investigations, or inspections.
Coroners & Medical Examiners: We may release PHI to identify a deceased person or determine the cause of death.
We design our use of online tracking technologies so that visits to public, informational pages about our Services are not treated or configured as disclosures of PHI, and we do not permit tracking technologies to collect information that would identify you as receiving care for a specific condition for advertising purposes.
Other uses and disclosures permitted or required by HIPAA may apply and will be carried out in accordance with the law.
Other Uses and Disclosures
Your written authorization is required for certain uses and disclosures of PHI, including (but not limited to) most uses and disclosures of psychotherapy notes (if any), certain marketing communications, and the sale of PHI. You can revoke your authorization in writing at any time, except to the extent we have already relied on it.
Nothing in the general Privacy Policy for our Platform limits your rights under HIPAA or expands our rights to use or disclose your PHI beyond what HIPAA permits. In the event of a conflict, HIPAA and this HIPAA Notice of Privacy Practices govern our use and disclosure of PHI.
Your HIPAA Privacy Rights
Right to Access: You have the right to inspect and obtain copies of your PHI (with limited exceptions), including in electronic form where required.
Right to an Accounting of Disclosures: You have the right to request an accounting of certain disclosures made of your PHI.
Right to Request Restrictions: You may request restrictions on certain uses or disclosures of your PHI. We are not always required to agree, except where disclosures are made to a health plan for payment or operations and you have paid for the service out of pocket in full, in which case we must agree to your requested restriction in most circumstances.
Right to Request an Amendment: If you believe your PHI is incorrect or incomplete, you may request an amendment. We may deny the request in certain circumstances, but we will explain why in writing and inform you of your right to submit a statement of disagreement.
Right to Request Confidential Communications: You can request that we communicate with you about health matters in a certain way or at a certain location (for example, at a different mailing address or via a secure portal).
Right to Notification of a Breach: You will receive notice if a breach occurs that compromises the privacy or security of your PHI, as required by law.
Right to a Paper Copy: You have the right to a paper copy of this Notice at any time, even if you agreed to receive it electronically.
Complaints
If you believe your privacy rights have been violated or disagree with a decision we made about your PHI, you may file a complaint with us at:
Better U, Inc.
Attn: Data Protection Officer
1317 Edgewater Dr #735
Orlando FL 32804
Email: [email protected]
Welcome to Better U — a provider of holistic mental health solutions. This Privacy Notice explains how Better U, Inc. (“Better U”) collects, uses, discloses, and otherwise processes personal data in connection with our website https://www.betterucare.com/, the Better U app, as well as any specific product, service, or application that references or links to this Privacy Notice (the “Services”). We may also choose or be required by law to provide different or additional disclosures relating to the processing of personal data about residents of certain countries, regions, or states. Please refer to the Region-Specific Disclosures section below for additional disclosures that may be applicable to you.
This Privacy Notice does not address our privacy practices relating to Better U job applicants, employees and other employment-related individuals, nor data that is not subject to applicable data protection laws (such as deidentified or publicly available information). This Privacy Notice is also not a contract and does not create any legal rights or obligations not otherwise provided by law.
Our Role in Processing Personal Data
Data protection laws sometimes differentiate between “controllers” and “processors” of personal data. A “controller” determines the purposes and means (the why and how) of processing personal data. A “processor,” which is sometimes referred to as a “service provider,” or a “business associate” under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), processes personal data on behalf of a controller subject to the controller’s instructions.
This Privacy Notice describes our privacy practices where we are acting as the controller of personal data. However, this Privacy Notice does not cover or address how our customers may process personal data when they use our services, or how we may process personal data on their behalf in accordance with their instructions when we are acting as their processor.
For example, we provide non-clinical administrative and operational servives to independent medical practices, including Better U Clinical, P.A., Better U Clinical CA, ZF Medical New York, P.C., Better Now Clinical N.J., PC, and affiliated professional corporations (together, the “Medical Groups”). Better U is not itself a medical practice and does not control the clinical judgment or care provided by the Medical Groups or their clinicians. The professional medical services are provided solely by the Medical Groups and their clinicians, and the non-clinical site services are provided by Better U, acting as a business associate under HIPAA. When we act in this capacity, we process your protected health information (“PHI”) in accordance with the terms of a business associate agreement with the Medical Group that is providing you with treatment, and not in accordance with this Privacy Notice.
As a result, we recommend referring to the privacy notice or notice of privacy practices of the customer/Medical Group with which you have a relationship for information on how they engage processors, like us, to process personal data and/or PHI on their behalf.
Our Collection and Use of Personal Data
The categories of personal data we collect depend on how you interact with us and our services. For example, you may provide us your personal data directly when you contact us to make inquiries about our Services.
We also collect personal data automatically when you interact with our websites and other services and may also collect personal data from other sources and third parties.
Personal Data Provided by Individuals
We collect the following categories of personal data individuals provide us:
If you choose to contact us, we may need additional information to fulfill the request or respond to your inquiry. We may provide additional privacy disclosures where the scope of the request we receive or personal data we require fall outside the scope of this Privacy Notice. In that case, the additional privacy disclosures will govern how we may process the information you provide at that time.
Personal Data Automatically Collected
We, and our third-party partners, automatically collect information you provide to us and information about how you access and use our Services when you engage with us. We typically collect this information through the use of a variety of our own and our third-party partners’ automatic data collection technologies, including (i) cookies or small data files that are stored on an individual’s computer and (ii) other, related technologies, such as web beacons, pixels, embedded scripts, mobile SDKs, location-identifying technologies and logging technologies. Information we collect automatically about you may be combined with other personal information we collect directly from you or receive from other sources.
We, and our third-party partners, use automatic data collection technologies to automatically collect the following data when you use our services or otherwise engage with us:
All of the information collected automatically through these tools allows us to improve your customer experience. For example, we may use this information to enhance and personalize your user experience, to monitor and improve our Services, to offer communications features such as live and automated chat, and to improve the effectiveness of our products, services, offers, advertising, communications and customer service. We may also use this information to: (a) remember information so that you will not have to re-enter it during your visit or the next time you visit the site; (b) provide custom, personalized content and information, including targeted content and advertising; (c) identify you across multiple devices; (d) provide and monitor the effectiveness of our services; (e) monitor aggregate metrics such as total number of visitors, traffic, usage, and demographic patterns on our website; (f) diagnose or fix technology problems; and (g) otherwise to plan for and enhance our services. Monitoring and recording of interactions. To enhance your experience, support clinical quality, and maintain the security of our services, we may log, monitor, and record your interactions with Better U. This includes activity on our websites and mobile applications, form submissions, chat and messaging tools, and communications with our care team, such as phone and video calls. We may work with carefully selected service providers to support these functions, and they are contractually required to protect your information and use it only as permitted by this Privacy Policy and applicable law. By using our services, you consent to this monitoring and recording as described in this Privacy Policy.
For information about the choices you may have in relation to our use of automatic data collection technologies, please refer to the Your Privacy Choices section below.
Personal Data from Other Sources and Third Parties
We may receive the same categories of personal data as described above from the following sources and other parties:
Additional Uses of Personal Data
In addition to the primary purposes for using personal data described above, we may also use personal data we collect to:
Our Disclosure of Personal Data
We disclose or otherwise make available personal data in the following ways:
Your Privacy Choices
The following privacy choices are made available to all individuals with whom we interact. You may also have additional choices regarding your personal data depending on your location or residency. Please refer to our Region-Specific Disclosures below for information about additional privacy choices that may be available to you.
Communication Preferences
Withdrawing Your Consent
Where we have your consent for the processing of your personal data (e.g., when you opt in to receive certain types of marketing communications from us), you may withdraw your consent by following the instructions provided when your consent was requested or by contacting us as set forth in the Contact Us section below.
Automatic Data Collection Preferences
Certain of our Services may provide you the ability to adjust your preferences regarding our use of automatic data collection technologies. For example, there is a “Cookie Preferences” manager inside of the cookie consent banner that allows you to adjust your preferences regarding certain automatic data collection technologies on the specific website you are visiting for the specific device and browser you are using at that time (which means you will need to change your preferences on each device and browser you use to interact with the specific website you are visiting).
Where a Better U-specific preference manager or privacy setting is not available, you may be able to utilize third-party tools and features to further restrict our use of automatic data collection technologies. For example, (i) most browsers allow you to change browser settings to limit automatic data collection technologies on websites, (ii) most email providers allow you to prevent the automatic downloading of images in emails that may contain automatic data collection technologies, and (iii) many devices allow you to change your device settings to limit automatic data collection technologies for device applications. Please note that blocking automatic data collection technologies through third-party tools and features may negatively impact your experience using our services, as some features and offerings may not work properly or at all. Depending on the third-party tool or feature you use, you may not be able to block all automatic data collection technologies or you may need to update your preferences on multiple devices or browsers. We do not have any control over these third-party tools and features and are not responsible if they do not function as intended.
Targeted Advertising Preferences
We engage third parties to help us facilitate targeted advertising designed to show you personalized ads based on predictions of your preferences and interests developed using personal data we maintain and personal data our third-party partners obtain from your activity over time and across nonaffiliated websites and other services. The data we and our third-party partners use for purposes of facilitating targeted advertising, as well as to provide advertising-related services such as reporting, attribution, analytics, and market research, are primarily collected through the use of a variety of automatic data collection technologies, including cookies, web beacons, pixels, embedded scripts, mobile SDKs, location-identifying technologies and logging technologies. We may share a common account identifier (such as a hashed email address or user ID) with our third-party advertising partners to help link the personal data we and our third-party partners collect to the same person, or otherwise target advertising to an individual on a third-party website or platform.
In addition to taking the steps set forth in the Automatic Data Collection Preferences section above, you may be able to further exercise control over the advertisements that you see by leveraging one or more targeted advertising opt-out programs. For example:
Please note that when you opt out of receiving interest-based advertisements through one of these programs, this does not mean you will no longer see advertisements from us or on our services. Instead, it means that the online ads you do see from relevant program participants should not be based on your interests. We are not responsible for the effectiveness of, or compliance with, any third parties’ opt-out options or programs or the accuracy of their statements regarding their programs. In addition, program participants may still use automatic data collection technologies to collect information about your use of our services, including for analytics and fraud prevention as well as any other purpose permitted under the applicable advertising industry program.
Modifying or Deleting Your Personal Data
If you have any questions about reviewing, modifying, or deleting your personal data, you can contact us directly at [email protected]. We may not be able to modify or delete your personal data in all circumstances.
Partner-Specific Preferences
Certain of our third-party providers and partners offer additional ways that you may exercise control over your personal data, or automatically impose limitations on the way we can use personal data in connection with the services they provide:
Children’s Personal Data
Our services are not directed to, and we do not intend to, or knowingly, collect or solicit personal data from children under the age of 18. If an individual is under the age of 18, they should not use our services or otherwise provide us with any personal data either directly or by other means. If a child under the age of 18 has provided personal data to us, we encourage the child’s parent or guardian to contact us to request that we remove the personal data from our systems. If we learn that any personal data we collect has been provided by a child under the age of 18, we will promptly delete that personal data.
Security of Personal Data
We have implemented reasonable physical, technical, and organizational safeguards that are designed to protect your personal data. However, despite these controls, we cannot completely ensure or warrant the security of your personal data.
Retention of Personal Data
We will usually retain the personal data we collect about you for no longer than reasonably necessary to fulfil the purposes for which it was collected, and in accordance with our legitimate business interests and applicable law. However, if necessary, we may retain personal data for longer periods of time as required under applicable law or as needed to resolve disputes or protect our legal rights.
To determine the appropriate duration of the retention of personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of personal data and if we can attain our objectives by other means, as well as our legal, regulatory, tax, accounting, and other applicable obligations.
Once retention of the personal data is no longer reasonably necessary for the purposes outlined above, we will either delete or deidentify the personal data or, if that is not possible (for example, because personal data has been stored in backup archives), we will securely store the personal data and isolate it from further active processing until deletion or deidentification is possible.
Third-Party Websites and Services
Our services may include links to third-party websites, plug-ins, applications and other services. Except where we post, link to or expressly adopt or refer to this Privacy Notice, this Privacy Notice does not apply to any personal data practices of third parties. To learn about the personal data practices of third parties, please visit their respective privacy notices.
Region-Specific Disclosures
We may choose or be required by law to provide different or additional disclosures relating to the processing of personal data about residents of certain countries, regions or states. Please refer below for disclosures that may be applicable to you:
Updates to This Privacy Notice
We may update this Privacy Notice from time to time. When we make changes to this Privacy Notice, we will change the date at the beginning of this Privacy Notice. If we make material changes to this Privacy Notice, we will notify individuals by email to their registered email address, by prominent posting on this website or our other platforms, or through other appropriate communication channels. All changes shall be effective from the date of publication unless otherwise provided.
Contact Us
If you have any questions or requests in connection with this Privacy Notice or other privacy-related matters, please send an email to [email protected].
ADDITIONAL UNITED STATES PRIVACY DISCLOSURES
These disclosures supplement the information contained in our Privacy Notice by providing additional information about the privacy rights available to individual residents of certain states in the United States and our personal data processing practices relating to those individuals. For a detailed description of how we collect, use, disclose, and otherwise process personal data, please read our Privacy Notice.
Nevada Residents
If you are a resident of the state of Nevada in the United States, you have the right to opt out of the sale of your personal data. Although we do not currently sell personal data of Nevada residents (as defined under Nevada law), you may submit a request to opt-out of the sale of your personal data by emailing us at [email protected].
California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Jersey, New Hampshire, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia Residents
If you are a resident of the state of California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Jersey, New Hampshire, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia in the United States the following supplementary disclosures apply to you.
Personal Data Disclosures, Sales and Targeted Advertising
We disclose all of the categories of personal data we collect to the categories of recipients set forth in the Our Disclosure of Personal Data section of our Privacy Notice. Our disclosure of personal data to the following categories of third parties qualifies as the sale of personal data or the sharing or processing of personal data for the purpose of displaying advertisements that are selected based on personal data obtained or inferred over time from an individual’s activities across businesses or distinctly-branded websites, applications, or other services (otherwise known as “targeted advertising” or “cross-context behavioral advertising”) under certain privacy laws:
Depending on your state of residency and subject to certain legal limitations and exceptions, you may be able to limit or opt-out of the sale of personal data or the processing of personal data for purposes of targeted advertising (as described in the Your Additional U.S. Privacy Choices section below).
Please note we do not sell the personal data of individuals we know to be less than 16 years of age or share such information for targeted advertising purposes.
Sensitive Personal Data
We do not request or encourage you to provide any sensitive personal data to us. In circumstances where you choose to disclose such information, for example in a free-text communication to us, we will only use or disclose that sensitive personal data where reasonably necessary and proportionate for the purposes of providing products and performing services you have requested, verifying and improving the products and services we provide, detecting security incidents, fraud, and other illegal actions, ensuring the physical safety of natural persons, performing services on behalf of the business, or short-term transient use. We only collect and process sensitive personal data without the purpose of inferring characteristics about the relevant individual, and we do not sell sensitive personal data or process or otherwise share sensitive personal data for the purpose of targeted advertising.
Deidentified Information
We may at times receive, or process personal data to create, deidentified information that can no longer reasonably be used to infer information about, or otherwise be linked to, a particular individual or household. Where we maintain deidentified information, we will maintain and use the information in deidentified form and not attempt to reidentify the information except as required or permitted by law.
Automated Decision-Making and Profiling
We do not conduct automated processing of personal data for the purposes of evaluating, analyzing, or predicting an individual’s personal aspects in furtherance of decisions that produce legal or similarly significant effects. As a result, we do not provide a right to exercise control over such forms of automated decision-making and profiling.
Your Additional U.S. Privacy Choices
Depending on your state of residency and subject to certain legal limitations and exceptions, you may be able to exercise some or all of the following rights:
Depending on your state of residency, you may also have the right to not receive retaliatory or discriminatory treatment in connection with a request to exercise the above rights. However, the exercise of the rights described above may result in a different price, rate or quality level of product or service where that difference is reasonably related to the impact the right has on our relationship or is otherwise permitted by law.
Submitting Privacy Rights Requests
Please submit a request specifying the right you wish to exercise by:
To exercise your right to opt-out as it relates to the use of cookies and related technologies that involve the sale of personal data or the use of personal data for targeted advertising purposes, please click the “Cookie Settings” in the cookies consent banner adjust your preferences accordingly. If you are visiting our site with the Global Privacy Control enabled, any cookies that constitute sales or are used for targeted advertising should already be turned off automatically in our cookie preference manager. Please note this opt-out tool is website, device, and browser specific, so you will need to change your preferences on each device and browser you use to interact with the specific website you are visiting. In addition, you can follow the other steps set forth in the Automatic Data Collection Preferences and Targeted Advertising Preferences sections of the Your Privacy Choices section of our Privacy Statement to further exercise control over automatic data collection technologies.
Before processing your request to exercise certain rights (including the Right to Know, Access & Portability, Correction, and Deletion), we will need to verify your identity and confirm you are a resident of a state that offers the requested right(s). In order to verify your identity, we will generally either require the successful authentication of your account, or the matching of sufficient information you provide us to the information we maintain about you in our systems. As a result, we require requests submitted through our online form and toll-free number to include first and last name, email address, phone number, state of residency and/or the date of your last transaction with us.
In certain circumstances, we may decline or limit your request, particularly where we are unable to verify your identity or locate your information in our systems, or where you are not a resident of one of the eligible states.
Submitting Authorized Agent Requests
In certain circumstances, you are permitted to use an authorized agent to submit requests on your behalf through the designated methods set forth above where we can verify the authorized agent’s authority to act on your behalf. In order to verify the authorized agent’s authority, we generally require evidence of either (i) a valid power of attorney or (ii) a signed letter containing your name and contact information, the name and contact information of the authorized agent, and a statement of authorization for the request. Depending on the evidence provided and your state of residency, we may still need to separately reach out to you to confirm the authorized agent has permission to act on your behalf and to verify your identity in connection with the request.
Appealing Privacy Rights Decisions
Depending on your state of residency, you may be able to appeal a decision we have made in connection with your privacy rights request. All appeal requests should be submitted by replying to the communication resolving your original request.
Additional California-Specific Disclosures
The following disclosures only apply to residents of the State of California.
California Categories of Personal Data
California law requires we provide disclosures to you about what personal data we collect by reference to the enumerated categories of personal data set forth within California law. To address this obligation, we have identified the relevant enumerated California personal data category for the personal data described in the Our Collection and Use of Personal Data section of our Privacy Notice below:
California’s “Shine the Light” Law
California's "Shine the Light" law (Civil Code Section §1798.83) provides certain rights to California residents that have an established business relationship with us with regard to the disclosure of certain types of personal information to third parties for their direct marketing purposes. It is company policy that we do not disclose personal information to third parties for their direct marketing purposes if a consumer has exercised their right to opt out. To opt out of having your personal information disclosed to third parties for their direct marketing purposes, please follow the instructions for opting out of targeted advertising and personal data sales (above).