Privacy Policy

MetaOrthopedics, PLLC (“MetaOrtho,” “we,” “us,” or “our”) operates the website metaortho.com and related telehealth services. This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you visit our website, use our services, or interact with us.

By using our website or services, you agree to the collection and use of information as described in this policy.

Information we collect

Personal information you provide

• Contact information: name, email address, phone number, mailing address
• Health information: medical history, current medications (including GLP-1 prescriptions), symptoms, lab results, DEXA scan data, and other health-related information you share during consultations
• Account information: login credentials, communication preferences
• Payment information: credit card or other payment details (processed by our third-party payment processor, Stripe; we do not store full payment card numbers)
• Waitlist information: email address and marketing consent when you join our waitlist

Information collected automatically

• Device and browser information (type, operating system, browser version)
• IP address and approximate geographic location
• Pages visited, time spent on pages, referring URLs
• Cookies and similar tracking technologies (see “Cookies” section below)

Information from third parties

• Analytics data from Google Analytics (GA4) and Google Tag Manager
• Advertising platform data from Google Ads and Meta (Facebook/Instagram) for campaign measurement

How we use your information

We use your information to:

• Provide telehealth consultations and musculoskeletal care services
• Process waitlist signups and send you updates about our launch
• Send transactional emails (appointment confirmations, lab results, care plan updates)
• Send marketing communications (newsletter, health education content) — only with your consent, and you may unsubscribe at any time
• Process payments for services rendered
• Improve our website and services through analytics
• Comply with legal obligations, including HIPAA requirements
• Respond to your inquiries and provide customer support

Health information (HIPAA)

MetaOrtho is a HIPAA-covered entity. Your protected health information (PHI) is subject to our Notice of Privacy Practices (available at metaortho.com/hipaa), which describes in detail how we may use and disclose your health information. In the event of any conflict between this Privacy Policy and our HIPAA Notice, the HIPAA Notice governs with respect to PHI.

Information sharing and disclosure

We do not sell your personal information. We may share your information with:

• Healthcare providers involved in your care (e.g., referring physicians, lab partners like Quest Diagnostics or Labcorp, DEXA imaging centers)
• Service providers who assist our operations: Supabase (database), Resend (transactional email), Customer.io (marketing email), Vercel (website hosting), Stripe (payments), Healthie (EHR platform)
• As required by law, regulation, or legal process
• To protect our rights, privacy, safety, or property

All service providers who handle PHI have signed Business Associate Agreements (BAAs) as required by HIPAA.

Cookies and tracking

We use:

• Essential cookies: site authentication, session management
• Analytics cookies: Google Analytics (GA4) to understand site usage
• Advertising cookies: Google Ads and Meta Pixel for ad campaign measurement and optimization

You can control cookies through your browser settings. Disabling cookies may affect site functionality.

We use Google Tag Manager to manage analytics and advertising tags. For information on Google’s data practices, visit policies.google.com/privacy.

Data retention

• Waitlist data: retained until you unsubscribe or request deletion
• Health records: retained for a minimum of 7 years after last date of service (or longer as required by state law)
• Website analytics: retained per Google Analytics default retention periods
• Marketing data: retained until you unsubscribe

Your rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your information (subject to legal retention requirements)
• Opt out of marketing communications at any time
• Request a copy of your health records

To exercise these rights, contact us at info@metaortho.com.

California residents

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete, and the right to opt out of the sale of personal information. We do not sell personal information.

Data security

We implement administrative, technical, and physical safeguards to protect your information, including:

• Encryption in transit (TLS/SSL) and at rest
• Access controls and authentication
• Regular security assessments
• HIPAA-compliant infrastructure and vendor agreements

No method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Children’s privacy

Our services are not directed to individuals under 18. We do not knowingly collect information from children under 18. If we learn we have collected information from a child under 18, we will delete it promptly.

Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website with a new “Last updated” date. Your continued use of our services after changes constitutes acceptance.

Contact us

MetaOrthopedics, PLLC
3096 Chapel Woods Cove
Germantown, TN 38139
Email: info@metaortho.com