Privacy Policy

Eleva MD (“Eleva MD,” “we,” “our,” or “us”) is committed to protecting your privacy and safeguarding your personal and health information. This Privacy Policy explains how we collect, use, disclose, and protect information when you access our website, patient portal, telehealth services, and related digital platforms (collectively, the “Services”).

Eleva MD is a physician-supervised telehealth service. We operate with the same standards of confidentiality, security, and integrity expected of in-person medical care.


1. Scope of This Privacy Policy

This Privacy Policy applies to:

This Policy does not replace or supersede our HIPAA Notice of Privacy Practices, which governs how protected health information (“PHI”) is handled under applicable healthcare laws.


2. Information We Collect

A. Personal Information

We may collect identifying information, including:

B. Health & Medical Information (PHI)

When you seek care, we collect health information necessary for clinical evaluation and treatment, including:

This information is collected solely for the purpose of providing physician-supervised medical care.

C. Technical & Usage Information

We automatically collect limited technical data, such as IP address, device and browser type, log data, usage patterns, cookies, and similar technologies to maintain platform security and performance.


3. How We Use Your Information

We use your information to:

Eleva MD does not sell your personal or health information.


4. Medical Care & Physician Oversight

All medical decisions are made by licensed physicians operating under applicable state laws. Information you provide is reviewed as part of a legitimate clinical workflow and is not evaluated by automated decision-making systems in isolation.

Your data is used to support individualized medical judgment, not generalized recommendations.


5. Sharing & Disclosure of Information

A. Healthcare & Operational Partners

B. Service Providers

We use vetted third parties for secure data hosting, payment processing, and customer support systems. These providers access information only to perform services on our behalf and are bound by confidentiality obligations.

C. Legal & Regulatory Requirements

We may disclose information if required to comply with applicable laws, court orders, lawful government requests, or to protect patient safety, rights, or integrity of care.


6. HIPAA & Health Information Protections

Eleva MD complies with applicable federal and state privacy laws, including HIPAA where applicable.

Protected Health Information is access-restricted, stored in HIPAA-aligned systems, and shared only for treatment, payment, or healthcare operations.


7. Data Security

We maintain administrative, technical, and physical safeguards designed to protect your information, including encrypted data transmission, access controls, secure hosting environments, and role-based access.

While no system can guarantee absolute security, Eleva MD takes reasonable and industry-appropriate measures to protect your information.


8. Cookies & Tracking Technologies

We use cookies and similar technologies to enable core site functionality, improve performance, and understand aggregate usage trends. You may manage cookie preferences through your browser settings.


9. Data Retention

We retain personal and health information only as long as necessary to provide medical care, meet legal and regulatory obligations, and resolve disputes.


10. Your Privacy Rights

Depending on your location, you may have the right to access, correct, or request deletion of your personal information where legally permitted. Requests may be subject to identity verification and medical record retention laws.


11. Children’s Privacy

Eleva MD Services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors.


12. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Updates will be posted on this page with a revised effective date. Continued use of the Services constitutes acceptance of the updated Policy.