Privacy Policy for Northstar Online Clinic

Effective Date: July 17, 2026
Last Updated: July 17, 2026

Northstar Online Clinic respects your privacy and is committed to protecting your personal and health information. This Privacy Policy explains how information may be collected, used, disclosed, and protected when you visit our website or use our telehealth services.

Northstar Online Clinic provides telehealth services to eligible adults physically located in Colorado, Maine, or New Hampshire at the time of care.

1. Information We Collect

Depending on how you interact with Northstar Online Clinic, we may collect:

Personal information

  • Name
  • Date of birth
  • Email address
  • Telephone number
  • Mailing address
  • Other information you voluntarily provide

Health information

When you request or receive care through our secure telehealth platform, information may include:

  • Medical history
  • Current symptoms
  • Medications
  • Allergies
  • Treatment information
  • Pharmacy information
  • Other information needed to evaluate and provide care

Payment information

Payments may be processed through Push Health or its payment-processing providers. Northstar Online Clinic does not directly store complete payment-card information submitted through those systems.

Website and technical information

Our website and service providers may automatically collect information such as:

  • IP address
  • Browser and device type
  • Pages viewed
  • Referring website
  • Date and time of visits
  • Cookie and analytics information
  • General website interaction data

2. How We Use Information

Information may be used to:

  • Respond to inquiries
  • Schedule and provide telehealth services
  • Evaluate symptoms and coordinate care
  • Communicate about appointments and treatment
  • Send prescriptions to a selected pharmacy when clinically appropriate
  • Process payments
  • Maintain clinical and business records
  • Comply with legal, licensing, and regulatory requirements
  • Protect the safety and security of patients, providers, and systems
  • Improve website performance and patient experience

3. Protected Health Information and HIPAA

Protected health information, commonly called PHI, is handled in accordance with applicable federal and state privacy requirements, including the Health Insurance Portability and Accountability Act when it applies.

Northstar Online Clinic may use or disclose PHI for treatment, payment, and healthcare operations and for other purposes permitted or required by law. Other uses or disclosures generally require written authorization from the patient.

Patients should submit medical histories, symptoms, medication information, and other sensitive health information through the secure Push Health platform. Standard email and ordinary website communications may not be appropriate for sending sensitive medical information.

4. When Information May Be Shared

Information may be disclosed to:

  • Healthcare professionals involved in treatment
  • Pharmacies receiving prescription orders
  • Laboratories or other healthcare organizations involved in care
  • Push Health and other service providers supporting telehealth, payment, communications, website hosting, security, or business operations
  • Government agencies, regulators, courts, or law enforcement when disclosure is required or permitted by law
  • Other parties authorized by the patient in writing

Service providers are expected to protect information and use it only for authorized purposes.

Northstar Online Clinic does not sell protected health information. Northstar Online Clinic does not sell personal information for monetary payment.

5. Website Hosting, Cookies, and Analytics

The Northstar Online Clinic website is hosted through Shopify. Shopify and approved website tools may use cookies and similar technologies to operate the website, understand traffic, remember preferences, maintain security, and improve performance.

Visitors may be able to manage certain cookie and data-sharing preferences through the website’s cookie banner or Your Privacy Choices page. Browser settings may also allow visitors to block or delete cookies, although some website features may not work properly afterward.

Shopify maintains its own privacy practices for information it processes through its platform.

6. Push Health

Northstar Online Clinic uses Push Health to support patient registration, secure communication, telehealth services, documentation, electronic prescribing, and payment processing.

Information submitted directly through Push Health is also governed by Push Health’s terms, consent documents, and privacy policy. Patients should review those documents before using the platform.

7. Data Security

Northstar Online Clinic uses reasonable administrative, technical, and organizational safeguards designed to protect personal and health information from unauthorized access, loss, misuse, alteration, or disclosure.

No website, email system, or electronic transmission can be guaranteed to be completely secure. Patients should avoid sending sensitive medical information through ordinary email and should use the secure patient platform for clinical communications.

8. Data Retention

Information is retained for as long as reasonably necessary to provide services, maintain legally required medical and business records, resolve disputes, enforce agreements, and comply with applicable healthcare, licensing, tax, and regulatory requirements.

Retention periods may vary depending on the type of information and applicable state or federal law.

9. Your Privacy Rights

Depending on the information involved and applicable law, patients may have the right to:

  • Request access to health records
  • Request a copy of health information
  • Request corrections to health information
  • Request confidential communications
  • Request limits on certain uses or disclosures
  • Request an accounting of certain disclosures
  • Receive a copy of applicable privacy notices
  • Authorize or revoke certain disclosures in writing
  • File a privacy complaint without retaliation

Some requests may be subject to legal limitations, identity verification, reasonable fees, or other requirements.

10. Children’s Privacy

Northstar Online Clinic’s services are intended for adults. The website is not designed to knowingly collect personal information directly from children under 13.

11. Third-Party Websites

The website may link to Push Health, pharmacies, payment services, or other third-party websites. Northstar Online Clinic does not control the privacy or security practices of independent third parties. Visitors should review the privacy policies of any external service they use.

12. Changes to This Policy

This Privacy Policy may be updated to reflect changes in services, technology, legal requirements, or privacy practices. Updates will be posted on this page with a revised effective date.

13. Contact Northstar Online Clinic

Questions, privacy requests, or complaints may be directed to:

Northstar Online Clinic
Privacy Contact: Ryan Foley, APRN
Email: ryan@northstaronlineclinic.com
Phone: 804-640-6030
Website: northstaronlineclinic.com

Please do not include sensitive medical information in ordinary email. Use the secure patient platform for clinical communications.

14. Filing a Federal Privacy Complaint

Patients who believe their health-information privacy rights have been violated may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights. Northstar Online Clinic will not retaliate against anyone for filing a complaint.

Complaint information is available through the HHS Office for Civil Rights.
Start Treatment Today