Privacy Policy

Important notice regarding text messaging data

JROSEWELLNESS PLLC (“JRose Wellness,” “we,” “us,” or “our”) DOES NOT share customer opt-in information, including phone numbers and consent records, with any affiliates or third parties for marketing, promotional, or any other purposes unrelated to providing our direct services. All text messaging originator opt-in data is kept strictly confidential.

1. Information we collect

We collect the following types of information:

Information you send through our contact and appointment request form

• Your name and email address
• Your phone number, if you give one (it is required only if you ask us to call or text you back)
• The reason you are reaching out, chosen from a short list (for example, a self-pay appointment request or a billing question)
• How you would like us to get back to you (phone call, email, or text message)
• An optional message
• Which page of the website the form was sent from

Other personal information

• Name, email address, phone number, and mailing address when you call, email, or text us, or become a patient
• Payment and insurance information needed to schedule and bill for your care
• Opt-in records and timestamps for all communication channels (SMS, email, etc.)

Non-personal information

• IP address, browser type, device information
• Website usage patterns and analytics (see section 6)
• Cookies and similar technologies

Customer communication

• Records of inquiries and service requests
• Appointment details and preferences
• Service history and feedback

2. How we use your information

We use collected data for:

• Providing and improving our services
• Responding to your questions and scheduling appointments
• Processing transactions and payments
• Communicating with you about your inquiries and appointments
• Enhancing website functionality and user experience
• Ensuring security and fraud prevention
• Maintaining records of your communication preferences and consent

3. SMS messaging & compliance

Text message program terms & conditions

By opting into our SMS messaging services, you agree to receive text messages related to our services, including appointment reminders, customer support, and important updates. You can opt in on our text message opt-in page. The full program terms are in our SMS Terms.

Opt-in & consent

• You will only receive messages if you have explicitly opted in
• We maintain timestamped records of all opt-in actions
• You must be 18 years or older to participate in our SMS program
• Consent to receive text messages is not a condition of receiving care
• We comply with the Telephone Consumer Protection Act (TCPA) and all applicable laws

Opt-out instructions

• You can cancel SMS notifications at any time by replying “STOP”
• You will receive a final confirmation message, and no further messages will be sent unless you re-opt in
• All opt-out requests are processed immediately

Message frequency & content

• Message frequency varies based on your interactions with our business
• Messages will be directly related to the services you have requested
• We do not send promotional content without specific consent

Help & support

• Reply “HELP” for assistance, or contact us at jrosewellnesspllc@gmail.com or (914) 916-6376

Carrier information

• Message and data rates may apply
• Carriers are not liable for delayed or undelivered messages
• Supported carriers include AT&T, Verizon, T-Mobile, and most regional carriers

SMS data protection statement

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

We implement strict data protection measures to safeguard your SMS opt-in information and consent records.

4. Information sharing & disclosure

We do not sell, rent, or trade personal information or Protected Health Information. We may share information with:

Healthcare operations

• Other healthcare providers involved in your care for treatment coordination purposes
• Health insurance companies and third-party payers for billing and claims processing
• Healthcare clearinghouses as necessary for payment processing

Service providers

• Third-party vendors who assist in our operations (for example, the systems that receive our phone calls, text messages, and website form messages, payment processing, appointment scheduling, and electronic health records) under Business Associate Agreements where required
• SMS aggregators and providers solely for the purpose of delivering messages you’ve consented to receive
• All service providers are contractually obligated to maintain confidentiality, security, and HIPAA compliance where applicable

Booking platforms

If you book with insurance through Alma or Headway, those platforms collect and handle your information under their own privacy policies.

Legal requirements

• When required by law, regulation, or legal process
• To public health authorities as required or permitted by law
• For health oversight activities, judicial proceedings, or law enforcement purposes as permitted by HIPAA

Business transfers

• In case of mergers, acquisitions, or sale of assets
• In such cases, your data remains protected under the terms of this policy and applicable law

All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties, excluding aggregators and providers of the Text Message services.

5. Data security

We implement and maintain reasonable security measures to protect your personal information:

• Encryption of sensitive data in transit and at rest
• Secure access controls and authentication mechanisms
• Regular security reviews and updates
• Data protection training for anyone who handles your information
• Breach notification protocols in accordance with applicable laws
• Secure backup systems and disaster recovery procedures

Despite these measures, no method of transmission over the Internet or electronic storage is 100% secure. We strive to use commercially acceptable means to protect your personal information but cannot guarantee absolute security.

6. Cookies & analytics

We may use cookies and similar technologies to:

• Analyze site traffic and how visitors use the site
• Remember your preferences
• Improve website functionality and user experience

Google Analytics

This website may use Google Analytics, a web analytics service from Google. When it does, it uses cookies to tell us which pages are visited, how visitors reach the site, and general information about the device, browser, and approximate location (such as city or region). We use these reports only to understand and improve the website. What you type into our contact form is not sent to Google Analytics. Google handles this information under its own privacy policy.

You may control cookies through your browser settings, or opt out of Google Analytics with the Google Analytics opt-out browser add-on. Disabling cookies may limit your ability to use certain features of our website.

7. Your rights & choices

You have the right to:

• Access, update, or delete your personal information
• Opt out of any marketing emails by clicking “unsubscribe” in those emails
• Opt out of SMS messages by replying “STOP”
• Request information on how we process your data
• Withdraw consent at any time for future communications
• Lodge a complaint with a supervisory authority if you believe your rights have been violated

To exercise these rights, please contact us using the information in section 10.

8. Privacy, HIPAA & health information

For privacy-related inquiries, please refer to this Privacy Policy at www.jrosewellness.com/privacy-sms or contact us.

As a healthcare provider, we are committed to protecting your Protected Health Information (PHI) in accordance with the Health Insurance Portability and Accountability Act (HIPAA).

• SMS is not a fully encrypted communication method. We minimize the amount of health information included in text messages to protect your privacy.
• We will not include detailed medical records, diagnoses, lab results, or other sensitive clinical data in SMS messages.
• By opting in, you acknowledge that standard SMS messages may be intercepted or read by unauthorized parties due to the nature of wireless communications, and you accept this risk for the convenience of receiving appointment-related text messages.
• Your consent to receive SMS messages is separate from and does not replace any HIPAA authorizations or medical consent forms.
• Website forms and regular email are not a secure way to share medical information. Please share health details with Jessica during your visit instead.
• We comply with the Telephone Consumer Protection Act (TCPA), HIPAA, CTIA guidelines, and all applicable federal and state regulations regarding SMS communications and health information.

9. Changes to this Privacy Policy

We may update this policy periodically. The latest version will always be available on our website with the effective date. For significant changes, we will notify you by email or through a notice on our website.

10. Contact us

If you have questions about this Privacy Policy or how your information is handled, contact us at:

To file a HIPAA complaint, you may also contact:

By using our website and services, you consent to this Privacy Policy. This policy does not replace or modify the informed consent process for medical treatment or our HIPAA Notice of Privacy Practices.