Privacy Policy

Eleva MD (“Eleva MD,” “we,” “our,” or “us”) is committed to protecting your privacy and safeguarding your personal and health information. This Privacy Policy explains how we collect, use, disclose, and protect information when you access our website, patient portal, telehealth services, and related digital platforms (collectively, the “Services”).

Eleva MD is a physician-supervised telehealth service. We operate with the same standards of confidentiality, security, and integrity expected of in-person medical care.


1. Scope of This Privacy Policy

This Privacy Policy applies to:

This Policy does not replace or supersede our HIPAA Notice of Privacy Practices, which governs how protected health information (“PHI”) is handled under applicable healthcare laws.


2. Information We Collect

A. Personal Information

We may collect identifying information, including:

B. Health & Medical Information (PHI)

When you seek care, we collect health information necessary for clinical evaluation and treatment, including:

This information is collected solely for the purpose of providing physician-supervised medical care.

C. Technical & Usage Information

We automatically collect limited technical data, such as IP address, device and browser type, log data, usage patterns, cookies, and similar technologies to maintain platform security and performance.


3. How We Use Your Information

We use your information to:

Eleva MD does not sell your personal or health information.


4. Medical Care & Physician Oversight

All medical decisions are made by licensed physicians operating under applicable state laws. Information you provide is reviewed as part of a legitimate clinical workflow and is not evaluated by automated decision-making systems in isolation.

Your data is used to support individualized medical judgment, not generalized recommendations.


5. Sharing & Disclosure of Information

A. Healthcare & Operational Partners

B. Service Providers

We use vetted third parties for secure data hosting, payment processing, and customer support systems. These providers access information only to perform services on our behalf and are bound by confidentiality obligations.

C. Legal & Regulatory Requirements

We may disclose information if required to comply with applicable laws, court orders, lawful government requests, or to protect patient safety, rights, or integrity of care.


6. HIPAA & Health Information Protections

Eleva MD complies with applicable federal and state privacy laws, including HIPAA where applicable.

Protected Health Information is access-restricted, stored in HIPAA-aligned systems, and shared only for treatment, payment, or healthcare operations.


7. Data Security

We maintain administrative, technical, and physical safeguards designed to protect your information, including encrypted data transmission, access controls, secure hosting environments, and role-based access.

While no system can guarantee absolute security, Eleva MD takes reasonable and industry-appropriate measures to protect your information.


8. Cookies & Tracking Technologies

We use cookies and similar technologies to enable core site functionality, improve performance, and understand aggregate usage trends. You may manage cookie preferences through your browser settings.


9. Data Retention

We retain personal and health information only as long as necessary to provide medical care, meet legal and regulatory obligations, and resolve disputes.


10. Your Privacy Rights

Depending on your location, you may have the right to access, correct, or request deletion of your personal information where legally permitted. Requests may be subject to identity verification and medical record retention laws.


11. Children’s Privacy

Eleva MD Services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors.


12. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Updates will be posted on this page with a revised effective date. Continued use of the Services constitutes acceptance of the updated Policy.


13. SMS / Text Message Communications

A. Opt-In and Consent

Eleva MD offers an SMS text messaging program to provide patients and users with order confirmations, prescription updates, shipping notifications, physician care communications, and related health service alerts. By providing your mobile phone number and checking the opt-in consent box on our health intake form or checkout page at eleva.md, you expressly consent to receive recurring automated text messages from Eleva MD at the mobile number provided. Consent is not a condition of purchase or use of our services.

B. Message Frequency

Message frequency varies based on your order activity, prescription status, and care plan. You may receive messages related to order confirmations, shipment tracking, prescription readiness, physician follow-ups, and account or appointment reminders. Typical users receive between 2 and 8 messages per month.

C. Message and Data Rates

Message and data rates may apply depending on your mobile carrier and service plan. Eleva MD is not responsible for any fees charged by your mobile carrier in connection with receiving SMS messages.

D. How to Opt Out

You may opt out of receiving SMS messages from Eleva MD at any time by replying STOP to any message you receive from us. After opting out, you will receive a single confirmation message and no further messages will be sent. To re-enroll, reply START or re-enter your consent on our website.

E. Help and Support

For help with our SMS program, reply HELP to any message or contact us at support@eleva.md. Additional information about our services is available at eleva.md.

F. No Sharing of SMS Opt-In Data

Your mobile phone number and SMS opt-in consent data will never be shared, sold, rented, or disclosed to any third parties, affiliates, or lead generators for marketing or promotional purposes. This restriction applies regardless of any other data sharing practices described in this Privacy Policy. All other data practices described herein exclude text messaging originator opt-in data and consent, which is governed solely by this section.   'No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted.'