HIPAA

Notice of Privacy Practices

Effective: July 4, 2026

This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.

Who we are

Teck Wellness operates a platform that qualifies patients for GLP-1 metabolic programs and routes qualified patients to independently licensed clinics. When we handle your Protected Health Information (PHI), we act as a Business Associate to those clinics under HIPAA.

How we may use and disclose PHI

Treatment: We share qualifying information with the clinic you consent to be matched with so they can evaluate your case.
Payment: Aggregate, de-identified metrics may be used for clinic payouts. PHI is not shared with payment processors.
Operations: Internal quality assurance, audit logging, and platform security.
As required by law: Public health, court orders, or law enforcement when compelled.

Your rights

Right to access and receive a copy of your PHI.
Right to request amendments to inaccurate PHI.
Right to an accounting of disclosures.
Right to request restrictions on certain uses and disclosures.
Right to request confidential communications.
Right to a paper copy of this notice on request.
Right to file a complaint with us or with the U.S. Department of Health & Human Services (HHS) Office for Civil Rights without retaliation.

Our safeguards

Encryption in transit (TLS 1.2+) and at rest (AES-256).
Role-based access with Row Level Security at the database layer.
Audit logging of every PHI read and write, including actor, action, target, timestamp, and IP address.
Business Associate Agreements with every clinic partner and PHI-touching subprocessor.
Session inactivity timeout after 30 minutes.
Automatic lockout after repeated failed login attempts.

Contact

Privacy Officer, Teck Wellness · admin@teckwellness.com

To file a complaint with HHS Office for Civil Rights, visit hhs.gov/ocr/privacy.