Privacy Policy
Effective Date of Notice: September 1, 2021
Revised: September 29, 2026
The Well MD ("we", "us", "our") respects your privacy. This Privacy Policy explains what information our website, www.thewell-md.com (the "Site"), collects, how we use it, who we share it with and the choices you have.
Looking for how we handle your medical information as a patient? This policy covers the Site only. How medical information about you may be used and disclosed under HIPAA is described in our Notice of Privacy Practices.
1. Information we collect
Information you give us
The Site has two forms, the Contact Us form and the Partner With Us form. When you use them, we collect what you type: your name, email address, mobile number (optional), a subject or your organization (optional) and your message. Both forms include a hidden field used only to detect automated spam submissions, and a bot check provided by Cloudflare (see section 4).
Please do not include personal health information in these forms. They are for general enquiries and are not encrypted end to end. For questions about your care, prescriptions or symptoms, call us at +1 (864) 387-7409 or use your patient portal.
Information collected automatically
When you browse the Site, some information is collected automatically:
- Google Analytics. We use Google Analytics 4 to understand how visitors use the Site: the pages viewed, how you arrived (for example, from a search engine), your browser and device type, and an approximate location derived from your IP address. Google sets cookies (such as _ga) to recognise your browser across visits. We do not use Google Analytics for advertising, and we do not link analytics data to your name.
- Server and security logs. Our web server records standard technical information such as your IP address, the pages requested and the time of the request, and uses your IP address briefly in memory to limit repeated form submissions and protect the Site from abuse. We do not keep a separate record of your IP address beyond these routine logs.
Information collected by services we link to
Several parts of the Site link to services run by other companies. When you enroll in a membership, pay for services, book an appointment or use the patient portal, you are on Hint Health's platform. When you schedule a free Meet & Greet, you are using Microsoft Bookings. Information you enter there is collected by those companies under their own privacy policies, and by us as your healthcare provider under our Notice of Privacy Practices.
2. How we use your information
- To respond to your enquiries and partnership requests, using the contact details you provide.
- To understand which pages and services visitors are interested in, and to improve the Site.
- To keep the Site secure, prevent spam and abuse, and diagnose technical problems.
- To comply with legal obligations and enforce our Terms and Conditions.
We do not sell or rent your personal information, and we do not use information collected on the Site for targeted advertising. We do not send marketing email to people who contact us through the Site.
3. Cookies and how to opt out
The only cookies the Site itself sets are those used by Google Analytics. The embedded Google Map on our Contact page and the Cloudflare bot check on our forms may also set their own cookies when they load. You can control cookies in your browser settings, and you can stop Google Analytics from collecting your data on any website by installing Google's browser add-on at tools.google.com/dlpage/gaoptout. Blocking cookies does not affect your ability to use the Site.
Some browsers send a "Do Not Track" signal. There is no common standard for how websites should respond, and the Site does not change its behaviour when it receives one.
4. Who we share information with
We share information only with the service providers that operate the Site on our behalf, and only for the purposes described in this policy:
- Resend: delivers contact-form messages to our practice mailbox.
- Microsoft 365: hosts our practice email, where your message is received and stored.
- Railway: hosts the Site in the United States.
- Google: provides Google Analytics, Google Fonts and the map embedded on the Contact page. Loading fonts or the map sends your IP address to Google.
- jsDelivr: a content delivery network that serves the icon font used on the Site, and receives your IP address when it loads.
- Cloudflare: provides Turnstile, the bot check on our contact forms. It analyses browser signals and your IP address to tell people from automated software. It does not identify you by name.
We may also disclose information if required by law, subpoena or court order, or where we reasonably believe it is necessary to protect the rights, property or safety of The Well MD, our patients or others.
5. Links to other websites
The Site links to other websites and services, including Hint Health, Microsoft Bookings, our social media pages (LinkedIn, Facebook, Instagram, YouTube and TikTok), Google Maps and the manufacturers of some products we use. Those sites have their own privacy policies and we are not responsible for their practices. We encourage you to read their policies before providing any information.
6. How we protect information
The Site is served over HTTPS, uses modern browser security headers, validates and rate-limits form submissions, screens them for automated spam, and is kept up to date. No method of transmitting or storing information is completely secure, and ordinary email is not encrypted end to end, which is why we ask you not to send health information through the Site.
7. How long we keep information
- Messages sent through our forms are kept in our practice mailbox for as long as needed to respond to you and to keep normal business records, after which they are deleted.
- Google Analytics data is retained according to our Google Analytics settings, and is aggregated so that it does not identify you.
- Server logs are kept for a short period by our hosting provider for security and troubleshooting.
8. Your choices and rights
You may ask us to tell you what information we hold about you from your use of the Site, to correct it, or to delete it, by contacting us using the details below. We will respond within a reasonable time and may need to verify your identity first. Requests about your medical record are handled under our Notice of Privacy Practices, which describes the rights you have under HIPAA.
9. Children
The Site is not directed to children under 13 and we do not knowingly collect personal information from them through the Site. If you believe a child has provided us with information through the Site, please contact us and we will delete it.
10. Changes to this policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with a new Revised date. We encourage you to review this page periodically.
11. Contact us
If you have questions about this Privacy Policy or our data practices, please contact us:
The Well MD
30 Parkway Commons Way, Greer, SC 29650, USA
Phone: +1 (864) 387-7409
Email: info@thewell-md.com