Legal
Privacy Policy
Last updated September 1, 2026. This policy covers the shewellrx.com website. Your health information is governed by our separate Notice of Privacy Practices under HIPAA.
1. The short version
This website collects almost nothing about you. Your health information lives only in our HIPAA compliant patient portal, is used to treat you and run the practice, and is never sold or used for advertising. Your rights over it are described in our Notice of Privacy Practices.
2. What this website collects
Browsing shewellrx.com does not require an account. The guided start on our booking page asks about your concern and a few safety questions; it runs entirely in your browser, stores nothing, and sends nothing to us or to anyone else. We do not use advertising pixels or cross site tracking on any page. Like most websites, our hosting provider, Cloudflare, receives standard technical data such as your IP address, browser type, and the pages requested, which it uses to deliver the site securely and to defend against abuse. If you email us, we receive what you send; please do not include detailed health information in email. Any analytics we add in the future will be configured without cookies that track you across other sites, and this policy will be updated first.
3. What the patient portal collects
When you book a visit you create an account in our patient portal, operated for us by OptiMantra under a signed Business Associate Agreement. There we collect identity and contact details, your location at the time of visits, payment information handled by our payment processor, your intake questionnaire and consent forms, your medical history, clinical notes from your visits, prescriptions, laboratory orders and results, and messages you exchange with our team. This information is protected health information under HIPAA.
4. How we use and share health information
We use and disclose your health information for treatment (caring for you, coordinating with your pharmacy, laboratory, or a specialist we refer you to), for payment (processing the fees you pay and, at your request, preparing receipts you may submit to a health plan), and for health care operations (quality review, training, and running the practice). We may contact you about appointments, follow up, and services we offer that relate to your care. We disclose information when the law requires it, for example to report certain conditions to public health authorities, to comply with a valid court order, or to prevent a serious threat to health or safety. Any other use or disclosure, including for marketing to third parties or any sale of your information, requires your written authorization, which you may revoke at any time. We never sell health information and never share it with advertisers.
5. Who else sees your information
Vendors that handle information on our behalf, such as OptiMantra for records and video, our payment processor for card transactions, and pharmacies and laboratories you choose, receive only what they need and are bound by contract and law to protect it. We do not upload patient information to email marketing platforms or advertising tools.
6. Your rights under HIPAA
You have the right to receive a copy of your medical record, usually within thirty days; to request corrections to your record; to request that we communicate with you in a particular way or at a particular place; to request limits on certain uses and disclosures; to receive a list of certain disclosures we have made; to obtain a paper copy of this notice; and to file a complaint with us or with the United States Department of Health and Human Services Office for Civil Rights at hhs.gov/ocr. We will never retaliate against you for filing a complaint. To exercise any right, message us through the portal or write to [email protected].
7. How we protect information
Records are stored in encrypted systems with access limited to the clinicians and staff who need them, protected by unique logins and audit logging. Video visits are encrypted and not recorded. No system is perfectly secure, and if a breach of your unsecured health information ever occurs we will notify you as the law requires.
8. How long we keep information
New Jersey requires physicians to retain medical records for at least seven years from the last visit, and longer for some records. We retain records for at least that period and then dispose of them securely. Website technical logs held by our hosting provider are retained for short periods according to its policies.
9. Children
Our services are for adults. We do not knowingly collect information from anyone under eighteen through this website. Care for minors is not offered through SheWellRX.
10. Changes and contact
We may update this policy as our practice or the law changes. The current version is posted here with its effective date, and material changes will be presented in the portal. Our privacy contact is [email protected].