Privacy Policy

Last Updated: September 10, 2026

IAM (“IAM,” “we,” “us,” or “our”) operates a healthcare technology platform that connects patients with independent medical groups, providers, laboratories, and pharmacies (collectively, the “Services”). This Privacy Policy describes how IAM collects, uses, shares, stores, and protects information when you access our website at iamhrt.com, use our patient portal, engage in telehealth consultations, or otherwise interact with our Services.

This Privacy Policy is incorporated into and governed by IAM’s Terms and Conditions. Please read this policy carefully. By using the Services, you agree to the practices described here.

1. Information We Collect

We collect information in the following ways:

  • Information you provide directly. Your name, date of birth, contact details (email, phone, and address where required), billing information, account credentials, and other details you enter when creating an account or completing a form.
  • Health information (PHI). Information you share during telehealth consultations, intake questionnaires, lab orders, and prescription requests, including medical history, symptoms, medications, and lab results.
  • Payment information. Billing and payment details processed through Tebra and Stripe. We do not store full card numbers.
  • Usage and technical information. Device type, IP address, browser type, pages viewed, and interaction data collected through cookies and similar technologies.
  • Communications. Messages you send through the patient portal, email, or support channels.

2. How We Use Information

We use information to:

  • Provide, operate, maintain, and improve the Services.
  • Facilitate telehealth consultations and coordinate care with Provider(s), Medical Group(s), Labs, and Pharmacies.
  • Process prescriptions, lab orders, payments, and shipments.
  • Communicate with you about appointments, orders, account matters, and support.
  • Send marketing messages and updates where you have consented, subject to your opt-out rights.
  • Monitor usage, diagnose issues, and enhance security.
  • Comply with legal, regulatory, and contractual obligations.

3. How We Share & Disclose Information

We share information only as needed to provide the Services and as permitted or required by law:

  • Medical Group(s), Provider(s), Labs, and Pharmacies. To deliver care, process lab tests, and dispense prescriptions.
  • Service providers and business associates. Such as Tebra, Google Workspace, and other vendors who support the platform, under appropriate data protection and HIPAA agreements.
  • Payment processors. To process transactions.
  • As required by law. When disclosure is required by law, regulation, court order, or to protect the rights, safety, and property of IAM, our users, or others.
  • With your consent. When you direct us to share information.

We do not sell your personal information or PHI.

4. HIPAA & Protected Health Information

IAM operates as a technology platform and, where applicable, a business associate in connection with the independent Medical Group(s) that provide care through the Services. We are committed to safeguarding Protected Health Information (“PHI”) in accordance with the Health Insurance Portability and Accountability Act (“HIPAA”) and its implementing regulations.

  • We maintain a Business Associate Agreement (BAA) with Google Workspace to support HIPAA-compliant data management.
  • PHI is used and disclosed only as permitted to provide the Services, or as otherwise permitted or required by law.
  • We apply administrative, physical, and technical safeguards to protect PHI.
  • In the event of a breach of unsecured PHI, we will follow applicable notification requirements.

For information about the privacy practices of the health care providers who treat you, please refer to their own notices of privacy practices.

5. Your Rights & Choices

Depending on your relationship with the Services, you may have the right to:

  • Access and request a copy of the personal information we hold about you.
  • Request correction of inaccurate information.
  • Request deletion of information, subject to legal and operational retention requirements.
  • Opt out of marketing communications and marketing text messages.
  • Manage cookies and tracking preferences through your browser and device settings.

To exercise these rights, contact us through our Contact Form.

6. Data Retention

We retain personal information and PHI for as long as necessary to provide the Services, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. Retention periods may vary based on the type of data and applicable legal requirements.

7. Security

We use appropriate administrative, technical, and physical safeguards to protect information against unauthorized access, use, disclosure, alteration, or destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

8. Cookies & Tracking Technologies

Our website uses cookies and similar technologies to enhance user experience, remember preferences, and understand usage. You may disable cookies through your browser settings; however, doing so may affect certain features and functionality.

9. Minors

The Services are intended for individuals 18 years of age or older. We do not knowingly collect personal information from children under 18. If you believe a minor has provided us with personal information, contact us through our Contact Form and we will take steps to delete it.

10. Third-Party Links & Services

The Services may contain links to third-party websites and services, including those of our partners. We are not responsible for the privacy practices or content of those third parties. We encourage you to review their policies.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted with a new “Last Updated” date. Your continued use of the Services after changes are posted constitutes acceptance of the updated policy.

12. Contact

For questions about this Privacy Policy, contact us through our Contact Form.

13. Governing Law

This Privacy Policy is governed by the laws of the State of Delaware, without regard to conflict-of-laws principles.

Menu