Sharing your health information with a telehealth provider requires trust. GLP3 Weight Loss takes that trust seriously. Here’s exactly how we protect your data, what standards we follow, and what rights you have over your personal health information.
HIPAA Compliance
GLP3 operates under the Health Insurance Portability and Accountability Act (HIPAA) — the federal standard for protecting sensitive patient health information in the United States. This means:
- Your medical records are encrypted both in transit (when sent between systems) and at rest (when stored).
- Access is restricted to authorized healthcare providers and staff who need your information to provide care.
- Audit trails track who accesses your records and when.
- Business associate agreements are in place with every third-party vendor that touches your health data (pharmacies, telehealth platforms, payment processors).
Telehealth Security
All physician consultations occur over encrypted, HIPAA-compliant video platforms. This means:
- Your video sessions are not recorded unless you provide explicit consent.
- Session data is transmitted using AES-256 encryption — the same standard used by banks and government agencies.
- No third party can intercept or view your consultation.
- Physician notes from your visits are stored in a HIPAA-compliant electronic health record system.
What Information We Collect
To provide medical care, GLP3 collects:
- Medical information: Health history, current medications, allergies, lab results, weight, vital signs, and treatment notes.
- Personal information: Name, date of birth, address, phone number, and email for identity verification and communication.
- Insurance information: If applicable, for coverage verification and billing.
- Payment information: Credit card or HSA/FSA details for program fees. Payment processing is handled by PCI-DSS compliant processors — GLP3 does not store full credit card numbers.
What We Never Do With Your Data
- We never sell your health information. Period. Your medical data is not a product.
- We never share your information with advertisers or marketing platforms.
- We never use your health data for purposes unrelated to your care without your explicit written consent.
- We never send your information outside the United States for processing or storage.
When We Share Information (and Why)
HIPAA permits sharing your health information in specific circumstances — all related to your care or legal requirements:
- Your pharmacy: To fill your prescriptions. The pharmacy receives only the information necessary for fulfillment.
- Insurance companies: When you authorize us to bill your insurance or submit prior authorizations.
- Other healthcare providers: If your physician refers you to a specialist or you request records be sent to another provider.
- As required by law: In rare cases, such as court orders, public health emergencies, or mandatory reporting obligations.
In all cases, the minimum necessary information is shared — not your full record.
Your Rights
Under HIPAA and applicable state laws, you have the right to:
- Access your records: Request a copy of your medical records at any time.
- Request corrections: If you believe your records contain errors, you can request amendments.
- Know who’s accessed your data: Request an accounting of disclosures — a log of who has received your health information.
- Restrict disclosures: Request limitations on how your information is shared, though some restrictions may not be feasible if they interfere with your care.
- Secure communications: Request that we contact you through specific channels (e.g., email only, no phone calls).
Website and Digital Privacy
Beyond medical data, our website follows standard digital privacy practices:
- SSL encryption: All website traffic is encrypted via HTTPS.
- Cookie usage: We use essential cookies for site functionality and analytics cookies to understand how visitors use our site. No health information is stored in cookies.
- Analytics: We use anonymized analytics to improve our website. Analytics data cannot be linked back to individual patients.
- No retargeting with health data: We do not use your health information for advertising retargeting. If you see GLP3 ads online, it’s from general marketing — not because we shared your health status with ad platforms.
How to Contact Us About Privacy
If you have questions about your data privacy, want to exercise your HIPAA rights, or need to report a concern:
- Contact our care team through the Contact page
- Reference our full Privacy Policy for complete legal terms
Your health information is yours. We’re custodians of it while we provide your care, and we take that responsibility seriously.
Read Full Privacy Policy | Contact Us
Disclaimer: This summary is informational. For complete legal terms governing data handling, refer to our Privacy Policy. HIPAA regulations and state privacy laws may provide additional protections depending on your location.
