Privacy Policy

This notice explains how UNILOOP collects, uses, stores, and protects data for all clinics, merchants, providers, and patients using our platform and telehealth services. Last updated: June 2025.

What Data Do We Collect?

We collect only what is needed for secure telehealth delivery and legal compliance. This includes:

  • Clinic and merchant registration/contact info
  • Provider and pharmacy identification/documents
  • Patient information required for care (names, DOB, contact, health records, consents)
  • Usage and audit logs for compliance, safety, and fraud prevention

How Do We Use and Store Your Data?

  • Provide secure telehealth, pharmacy, and provider services per merchant request
  • Verify identity, prevent fraud, enforce compliance, and ensure safe access
  • Storage in encrypted, HIPAA-compliant data centers in the United States
  • Audit logs to track access or actions on health records for clinics/merchants and legal use

Cookies and Tracking

UNILOOP uses minimal strictly necessary cookies only (e.g., session ID, authentication). We do not allow targeting/advertising or marketing cookies for patients.

Consent and Patient Rights

  • You may request to view, correct, export, or delete your personal data at any time by contacting your merchant/clinic or UNILOOP directly.
  • All consents are logged transparently in the platform and can be reviewed by the patient or authorized provider.
  • You may opt out of non-essential communication at any time via your portal.

Third Party Sharing and Disclosures

We do not share your data with outside marketers, advertisers, or sellers. Health and contact data is only shared with third parties (e.g. pharmacies, providers, payer systems) as strictly needed for healthcare, per HIPAA/US law, or with explicit patient consent.

How We Protect Information

  • AES-256 encryption in transit and at rest
  • Regular audits of technical, security, and compliance controls
  • Dedicated US-only hosting, never offshore or cloud regions outside the US
  • Audit trails are kept for all access and changes

How to Contact for Privacy Issues

For privacy/data questions or deletion/correction requests, email privacy@uniloop.com. For HIPAA-specific issues, see our HIPAA Compliance page. We'll respond within 1 business day.