Privacy Policy

Last Updated: March 24, 2026

This Privacy Policy describes how Medical 360 HC PLLC, doing business as StackMD (“Company,” “we,” “us,” or “our”), collects, uses, and protects your information when you visit our website, communicate with us, or receive services from us (collectively, the “Services”).

If you have questions about this policy, contact us at care@stackmdwellness.com.

Summary

  • We collect personal and health information only as needed to provide services.
  • We do not sell your personal information.
  • Health information is governed by HIPAA and our Notice of Privacy Practices.
  • We use cookies and third-party tracking tools to operate and improve our site.
  • If you opt in to SMS, you can opt out at any time by replying STOP.
  • You have rights regarding your information.

1. Who We Are

StackMD is a medical practice operating in New York, offering weight management, hormone optimization, IV therapy, pain management, sexual wellness, and related services. Services are provided in-office in Albertson, NY and via telehealth. The legal entity is Medical 360 HC PLLC DBA StackMD.

2. Information We Collect

Information You Provide

  • Name, address, phone number, and email
  • Account credentials
  • Billing and payment information
  • Health history and intake information
  • Communications with us via phone, email, or web forms

Information Collected Automatically

When you use our website, we may automatically collect:

  • IP address and approximate location
  • Device type and browser
  • Pages visited and time on site
  • Referring URLs
  • Data collected via cookies and similar tracking technologies

Health Information

Health and medical information you provide is Protected Health Information (PHI) under HIPAA and is handled in accordance with our Notice of Privacy Practices, available upon request.

3. Cookies and Tracking Technologies

We use cookies and third-party tools to operate, analyze, and improve our website and marketing. These may include:

  • Google Analytics — website traffic and behavior analysis
  • Meta (Facebook) Pixel — advertising performance and remarketing
  • GoHighLevel — CRM, appointment scheduling, and marketing automation
  • Other analytics or advertising platforms we may add from time to time

These tools may collect information about your browsing behavior on our site and, in some cases, across other websites. We use this data to understand how visitors use our site and to deliver relevant advertising.

You may limit cookie tracking through your browser settings or by using tools like the Google Analytics Opt-Out Browser Add-On or the Meta Ad Preferences manager. Note that disabling cookies may affect site functionality.

We do not respond to Do Not Track (DNT) browser signals at this time.

4. SMS and Text Message Communications

If you provide your mobile phone number and consent to receive text messages, we may send you:

  • Appointment reminders and confirmations
  • Follow-up care communications
  • Health program updates
  • Promotional messages related to our services

By providing your phone number and opting in, you consent to receive recurring automated text messages from StackMD. Message and data rates may apply. Message frequency varies.

You may opt out at any time by replying STOP to any message. Reply HELP for assistance. Opting out of SMS will not affect your ability to receive care.

We do not share your phone number with third parties for their own marketing purposes.

5. How We Use Your Information

We use the information we collect to:

  • Deliver and coordinate medical services
  • Communicate with you about your care and appointments
  • Process payments and manage billing
  • Operate and improve our website and systems
  • Send appointment reminders, care updates, and, where you have opted in, marketing communications
  • Meet legal, regulatory, and compliance obligations
  • Maintain the security and integrity of our systems

6. When We Share Information

We do not sell your personal information. We may share information with:

  • Licensed clinicians and care team members involved in your treatment
  • Pharmacies and laboratories fulfilling your prescriptions or orders
  • Technology vendors and service providers operating on our behalf (including our EMR, CRM, and billing platforms)
  • Payment processors
  • Legal authorities when required by law or to protect rights and safety
  • A successor entity in the event of a merger, acquisition, or sale of assets

All vendors with access to PHI are required to sign Business Associate Agreements (BAAs) as required by HIPAA.

7. Protected Health Information (PHI)

Your medical and health information is protected under the Health Insurance Portability and Accountability Act (HIPAA). PHI is used to provide and coordinate your care, process billing, operate our practice, and comply with legal requirements. Full details on how we handle health information are provided in our Notice of Privacy Practices, available upon request.

8. Data Retention

We retain personal information as long as necessary to provide services, meet legal obligations, and maintain required medical records. Medical records are retained in accordance with applicable New York State and federal healthcare laws.

9. Data Security

We maintain administrative, technical, and physical safeguards designed to protect your information from unauthorized access, disclosure, or misuse. No method of transmission or storage is completely secure. If you believe your information has been compromised, contact us immediately at care@stackmdwellness.com.

10. Your Rights

You may request:

  • Access to personal information we hold about you
  • Correction of inaccurate information
  • Deletion of non-medical personal data, where legally permissible

Health data rights are governed by HIPAA. To submit a request, contact us at care@stackmdwellness.com.

11. Telehealth Services

When you receive services via telehealth, your session may be conducted over a HIPAA-compliant video or phone platform. We do not record telehealth sessions without your consent. Technical data (connection quality, device type) may be collected by the platform provider.

12. Minors

Our services are intended for individuals 18 years of age and older. We do not knowingly collect personal information from minors. If you believe a minor has submitted information to us, contact us at care@stackmdwellness.com and we will remove it promptly.

13. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites and encourage you to review their policies independently.

14. Policy Updates

We may update this Privacy Policy periodically. The updated version will be posted on this page with a revised date. Continued use of our Services after updates constitutes acceptance of the revised policy. For material changes, we will make reasonable efforts to notify you directly.

15. Contact

For privacy-related questions, requests, or concerns:

Medical 360 HC PLLC DBA StackMD
care@stackmdwellness.com
516-324-2974
Albertson, NY

HIPAA Notice

Your health information is protected under federal law. For full details on your rights and how we handle medical information, please request a copy of our Notice of Privacy Practices.