Privacy Policy
Effective Date: July 16, 2026
Last Updated: July 16, 2026
New Life Heal (“we,” “us,” or “our”) operates a concierge telehealth wellness and medical practice serving patients in Texas and Iowa, along with a patient mobile application. We are committed to protecting the privacy and security of your personal and medical information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (newlifeheal.com), use our mobile application, or engage with our telehealth and medical services.
Please read this Privacy Policy carefully. By accessing or using our website, mobile application, or services, you acknowledge that you have read, understood, and agree to be bound by all the terms outlined in this Privacy Policy.
1. Information Collected
We may collect personal and non-personal information from you in a variety of ways when you interact with our website, mobile application, and clinical services. The information we may collect includes:
Personal and Contact Information
•Full name
•Date of birth
•Mailing and billing address
•Email address
•Phone number
•Payment and billing information
Health and Medical Information
•Health history and medical records
•Medical questionnaires and intake forms
•Laboratory results and diagnostic reports
•Weight, biometrics, and progress tracking data
•Current and past medications
•Treatment plans and provider notes
•Appointment history
•Secure messages and communications with providers
Technical and Usage Information
•Device information (e.g., mobile device ID, model, and manufacturer)
•Browser type and operating system
•IP address
•Website and mobile app analytics (e.g., pages viewed, time spent, navigation paths)
•Cookies and tracking technologies
•Push notification preferences
2. How Information Is Used
We use the information we collect for various business and healthcare purposes, including:
•Medical Treatment and Telehealth: To provide medical care, telehealth consultations, treatment plans, and wellness coaching.
•Scheduling: To manage in-clinic and telehealth appointment bookings, confirmations, and reminders.
•Prescription Management: To process medication requests, prescribe treatments, and coordinate with pharmacy partners for refills.
•Billing and Payments: To process transactions, manage subscriptions, and handle billing inquiries.
•Communication: To send administrative information, health notifications, secure messages, and respond to customer support requests.
•Quality Improvement: To analyze usage trends, improve our website and mobile application functionality, and enhance patient care.
•Regulatory Compliance: To comply with legal obligations, medical board requirements, and state and federal laws.
3. HIPAA and Protected Health Information (PHI)
As a healthcare provider, we are committed to maintaining the privacy and security of your Protected Health Information (PHI) in accordance with the Health Insurance Portability and Accountability Act (HIPAA) and applicable state laws.
•Protection of PHI: We implement strict administrative, physical, and technical safeguards to protect your PHI from unauthorized access, use, or disclosure.
•Business Associates: We may share your PHI with third-party vendors (Business Associates) who perform services on our behalf. These Business Associates are legally bound by HIPAA to protect your PHI.
•Secure Storage and Access: Patient records and communications are stored in secure, encrypted environments with access restricted to authorized personnel only.
4. Third-Party Services
We may share your information with trusted third-party service providers who assist us in operating our practice, website, and mobile application. These third parties include:
•GoHighLevel: For patient relationship management, marketing, and communications.
•Stripe: For secure payment processing and subscription management.
•Twilio: For SMS messaging, appointment reminders, and communications.
•Fullscript: For supplement dispensing and management.
•Rupa Health: For laboratory test ordering and result management.
•Laboratory Partners: For processing diagnostic tests and providing results.
•Pharmacy Partners: For fulfilling and delivering prescribed medications.
•Secure Cloud Hosting Providers: For secure data storage and app infrastructure.
We only share the minimum necessary information required for these vendors to perform their specific services.
5. Patient Rights
You have certain rights regarding your personal and medical information, including:
•Access Records: The right to request a copy of your medical records and personal information.
•Correct Information: The right to request corrections to any inaccurate or incomplete information in your file.
•Request Deletion: The right to request the deletion of your personal data, subject to legal and regulatory data retention requirements for medical records.
•Contact the Practice: The right to contact us regarding any privacy concerns or requests.
•File Privacy Complaints: The right to file a complaint with us or with the Secretary of the Department of Health and Human Services if you believe your privacy rights have been violated.
6. Security
We implement industry-standard security measures to protect your data, including:
•Encryption: Data is encrypted both in transit and at rest.
•Authentication: Secure login processes and access controls are required for patient accounts on our mobile application and portal.
•Secure Transmission: We use secure protocols (e.g., HTTPS) for all data transmission.
•Data Retention: We retain medical records and personal information for the duration required by applicable state and federal laws.
•Incident Response: We maintain protocols to promptly identify, address, and report any potential data security incidents.
7. Cookies and Analytics
Our website and mobile application use cookies, tracking pixels, and similar analytics tools to enhance user experience, analyze site traffic, and understand user behavior. These tools collect non-identifiable technical data. You can adjust your browser settings to refuse cookies, though some features of our platform may not function properly as a result.
8. Children’s Privacy
Our services, website, and mobile application are intended for adults. We do not knowingly collect personal information from children under the age of 18 without verifiable parental consent. If we become aware that we have collected information from a child without such consent, we will take steps to delete the information in compliance with the Children’s Online Privacy Protection Act (COPPA).
9. State Privacy Laws
We operate and provide services in Texas and Iowa. We comply with applicable state privacy laws, including specific medical privacy and data protection regulations governing healthcare providers and telehealth services in these jurisdictions.
10. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal information, please contact us at:
New Life Heal
Phone: (432) 878-4660
Website: newlifeheal.com
Address: 5001 Sergeant Bluff Rd, Suite 50, Sioux City, IA 51106
Clinic Location: Cedar Park, TX (Serving the greater Austin area)