Legal
Privacy Policy
Last updated: September 21, 2026
1. Introduction
NJ Health Now ("we," "us," or "our") operates the website located at https://njhealthnow.com and provides telehealth services to patients in Arkansas, Colorado, Arizona, Florida, Washington, and Texas. We are committed to protecting the privacy and security of your personal information and protected health information ("PHI") in accordance with the Health Insurance Portability and Accountability Act of 1996 ("HIPAA"), the Health Information Technology for Economic and Clinical Health Act ("HITECH"), and all applicable state privacy laws.
This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website or use our telehealth services. Please read this policy carefully. If you disagree with its terms, please discontinue use of our site and services.
2. Information We Collect
2.1 Personal Information You Provide
- Name, date of birth, and contact details (email address, phone number, mailing address)
- State of residence and telehealth eligibility information
- Health history, symptoms, medications, and other clinical information submitted through our intake forms
- Payment information (processed securely through our payment processor; we do not store full card numbers)
- Communications you send us via contact forms, email, or chat
2.2 Automatically Collected Information
- IP address, browser type, operating system, and device identifiers
- Pages visited, time spent on pages, and referring URLs
- Cookies and similar tracking technologies (see Section 7)
2.3 Protected Health Information (PHI)
When you use our telehealth services, we may create, receive, maintain, or transmit PHI as defined under HIPAA. PHI is subject to additional protections described in our Notice of Privacy Practices, which is provided to patients separately and is available upon request at [email protected].
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and improve our telehealth services and website
- Schedule appointments and process intake forms
- Communicate with you about your care, appointments, and account
- Process payments and prevent fraud
- Comply with legal and regulatory obligations, including HIPAA
- Send administrative notices and service-related communications
- Analyse website usage to improve user experience (using aggregated, de-identified data)
- Respond to your enquiries and provide customer support
We do not sell your personal information or PHI to third parties. We do not use PHI for marketing purposes without your explicit written authorisation.
4. Disclosure of Your Information
We may share your information in the following circumstances:
- Healthcare Operations: With licensed providers, pharmacies, laboratories, and other healthcare entities involved in your treatment, as permitted by HIPAA.
- Business Associates: With vendors and service providers who assist us in operating our platform (e.g., electronic health record systems, payment processors, telehealth platforms) under HIPAA-compliant Business Associate Agreements.
- Legal Requirements: When required by law, court order, or governmental authority, or to protect the rights, property, or safety of NJ Health Now, our patients, or others.
- Public Health Activities: As required by applicable public health laws and regulations.
- With Your Consent: For any other purpose with your explicit written authorisation, which you may revoke at any time.
5. Data Security
We implement administrative, technical, and physical safeguards designed to protect your information from unauthorised access, use, or disclosure, consistent with HIPAA Security Rule requirements. These measures include:
- Encryption of data in transit (TLS/HTTPS) and at rest
- Access controls limiting PHI access to authorised personnel only
- Regular security assessments and staff training
- Audit logging of access to electronic PHI
No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. In the event of a breach affecting your PHI, we will notify you as required by HIPAA and applicable state law.
6. Data Retention
We retain medical records and PHI for a minimum of seven (7) years from the date of service, or longer as required by applicable state law (e.g., Arkansas requires retention for ten years for certain records). Non-clinical personal information is retained for as long as necessary to fulfil the purposes described in this policy or as required by law.
7. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to enhance your browsing experience, analyse site traffic, and understand how visitors use our site. You can control cookie settings through your browser preferences. Disabling cookies may affect the functionality of certain features on our website.
We do not use tracking technologies to collect PHI. Any analytics data collected is aggregated and de-identified before use.
8. Your Rights
Depending on your state of residence, you may have the following rights:
- Access: Request a copy of the personal information or PHI we hold about you.
- Correction: Request correction of inaccurate or incomplete information.
- Deletion: Request deletion of your personal information, subject to our legal and regulatory retention obligations.
- Restriction: Request restriction of certain uses or disclosures of your PHI.
- Accounting of Disclosures: Request a list of certain disclosures of your PHI made in the past six years.
- Opt-Out of Marketing: Opt out of any marketing communications at any time by contacting us or using the unsubscribe link in our emails.
To exercise any of these rights, please contact us at [email protected] or call (501) 313-0833. We will respond within 30 days.
9. Children's Privacy
Our services are intended for adults aged 18 and older. We do not knowingly collect personal information from individuals under the age of 18 without verifiable parental consent. If you believe we have inadvertently collected information from a minor, please contact us immediately at [email protected].
10. State-Specific Rights
Patients in certain states have additional privacy rights under state law:
- Colorado: Colorado Privacy Act (CPA) rights including access, correction, deletion, portability, and opt-out of targeted advertising.
- Arizona: Arizona's data breach notification law requires notification within 45 days of discovery of a qualifying breach.
- Florida: Florida Digital Bill of Rights rights for consumers, including access, correction, deletion, and portability.
- Washington: Washington My Health MY Data Act provides additional protections for consumer health data beyond HIPAA.
- Texas: Texas Data Privacy and Security Act (TDPSA) rights including access, correction, deletion, portability, and opt-out.
- Arkansas: Arkansas Personal Information Protection Act notification requirements apply in the event of a data breach.
To exercise any state-specific rights, please contact us using the details in Section 12.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the updated policy on this page with a revised "Last updated" date. For material changes affecting your PHI, we will provide additional notice as required by HIPAA. Your continued use of our services after any changes constitutes your acceptance of the updated policy.
12. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact our Privacy Officer:
If you believe your privacy rights have been violated, you also have the right to file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights at hhs.gov/ocr. We will not retaliate against you for filing a complaint.
NJ Health Now — Privacy Officer
Email: [email protected]
Phone: (501) 313-0833
Fax: (844) 481-3315
Website: https://njhealthnow.com