WEBSITE PRIVACY POLICY
Effective Date: August 9, 2026 Last Updated: August 9, 2026
DEBORAH MD is operated by Deborah MD Concierge LLC (“DEBORAH MD,” “we,” “us,” or “our”). We respect your privacy and are committed to handling personal and health-related information responsibly.
This Website Privacy Policy explains how we collect, use, disclose, retain, and protect information when you visit DeborahMD.com, submit a consultation or contact request, request materials, communicate with us, or use our services.
INFORMATION WE MAY COLLECT
Information You Provide
We may collect information you voluntarily provide, including:
• Name • Email address • Telephone number • Preferred method of contact • Type and purpose of your inquiry • Consultation or contact-form responses • Scheduling preferences • General health, wellness, body-composition, longevity, skin, aesthetic, or related goals • Information related to speaking, media, partnerships, advisory work, or professional inquiries • Communications sent by email, telephone, text, website form, or another approved method • Requests for documents, media features, invitations, or other resources
Please do not submit medical records, photographs, laboratory reports, detailed medical histories, financial-account information, Social Security numbers, or other highly sensitive information through the general Contact form.
When sensitive information is needed, DEBORAH MD will provide instructions for submitting it through an appropriate secure process.
Information Collected During Services
If you are accepted for a Personalized Health Strategy Session or another healthcare service, we may collect information needed to prepare for and provide that service, including:
• Health and wellness history • Current concerns and goals • Medications and supplements • Nutrition and exercise information • Relevant medical history • Photographs, laboratory reports, or other materials you submit • Questionnaire responses • Session notes • Written recommendations and deliverables • Communications related to your service
This information may constitute protected health information under HIPAA and will be handled in accordance with applicable law and our Notice of Privacy Practices.
Payment Information
Payments may be processed by a third-party payment processor. DEBORAH MD may receive limited transaction information, such as your name, payment status, transaction date, service purchased, and amount paid. We generally do not receive or retain your complete payment-card number.
Information Collected Automatically
When you visit the website, certain technical information may be collected automatically, including:
• Internet Protocol address • Browser and device type • Operating system • Referring website or source • Pages viewed • Links selected • Date and time of access • General geographic region • Website interaction and performance information • Cookie or similar technology identifiers
HOW WE USE INFORMATION
We may use information to:
• Review and respond to consultation requests • Respond to speaking, media, partnership, advisory, event, and professional inquiries • Determine whether a requested service is appropriate • Communicate next steps • Schedule and administer appointments • Prepare for and provide agreed services • Deliver Personalized Strategy Summaries or other requested materials • Respond to requests for media features or the Press & Insights Collection • Process and confirm payments • Maintain business, professional, and healthcare records • Operate, maintain, secure, and improve the website • Understand website performance and visitor interaction • Detect and prevent fraud, misuse, and security incidents • Meet legal, professional, licensing, accounting, tax, insurance, and regulatory obligations • Protect the rights, safety, property, and legitimate interests of DEBORAH MD and others • Carry out another disclosed purpose with your consent
PROTECTED HEALTH INFORMATION
DEBORAH MD Concierge LLC is a HIPAA-covered healthcare provider.
Protected health information submitted through an approved intake, consultation, service, or secure communication process will be handled in accordance with HIPAA, applicable Florida law, our Notice of Privacy Practices, and our privacy and security policies.
Submitting a general website inquiry does not by itself establish a physician-patient relationship. Any professional relationship will be governed by the applicable service agreement, consent documents, intake requirements, and scope-of-service terms.
HOW INFORMATION MAY BE SHARED
Service Providers
We may share information with vendors that assist with:
• Website hosting • Form administration • Email and communications • Scheduling • Video conferencing • Payment processing • Secure document storage or delivery • Information technology • Cybersecurity • Accounting • Legal and professional support • Website analytics
When a vendor handles protected health information on our behalf, we will require appropriate safeguards and agreements when legally required.
Legal, Regulatory, and Safety Purposes
We may disclose information when reasonably necessary to:
• Comply with law, regulation, subpoena, court order, or legal process • Respond to a lawful licensing, governmental, or regulatory request • Protect an individual’s safety or legal rights • Investigate suspected fraud, misuse, unlawful activity, or a security incident • Exercise or defend legal claims • Meet professional, licensing, insurance, and recordkeeping obligations
Business Transactions
Information may be transferred in connection with a merger, acquisition, financing, restructuring, sale of assets, or similar transaction, subject to applicable law and appropriate safeguards.
At Your Direction
We may disclose information when you request or authorize us to do so.
SALE AND ADVERTISING USE
DEBORAH MD does not sell or rent personal information or protected health information.
We do not authorize health information submitted through consultation or intake processes to be used for targeted or cross-context behavioral advertising.
COOKIES AND SIMILAR TECHNOLOGIES
The website and its service providers may use cookies, analytics tools, or similar technologies to:
• Enable essential website functions • Maintain website security • Remember preferences • Measure website traffic and performance • Understand website navigation • Diagnose technical problems
Your browser may allow you to block, delete, or limit cookies. Some website functions may not operate properly when cookies are disabled.
Tracking and advertising technologies will not knowingly be placed on secure intake forms or pages collecting protected health information unless they have been appropriately evaluated and authorized.
EMAIL AND TEXT COMMUNICATIONS
Email and text messaging may not always be completely secure.
By providing your contact information and communicating electronically, you acknowledge that:
• Messages may pass through third-party networks • Someone with access to your device or account may view them • Sensitive health information should not be sent unless you have been instructed to use that method • Routine scheduling and administrative information may be communicated electronically
You may request another reasonable communication method when available.
THIRD-PARTY WEBSITES AND SERVICES
The website may contain links to publications, social-media platforms, payment processors, scheduling tools, video platforms, partner organizations, and other third-party services.
DEBORAH MD does not control and is not responsible for their privacy, security, content, availability, or practices. Your interactions with third parties are governed by their policies and terms.
DATA RETENTION
We retain information for as long as reasonably necessary to:
• Fulfill the purpose for which it was collected • Provide requested services • Maintain appropriate healthcare and business records • Meet legal, regulatory, licensing, tax, accounting, insurance, and contractual obligations • Resolve disputes • Enforce agreements • Protect system security and integrity
Retention periods may vary depending on the information and applicable requirements.
DATA SECURITY
We use reasonable administrative, technical, and organizational safeguards designed to protect information from unauthorized access, use, alteration, loss, or disclosure.
No website, electronic-storage system, email system, or internet transmission can be guaranteed to be completely secure.
YOUR PRIVACY REQUESTS
Depending on applicable law and the nature of the information, you may request:
• Access to certain information • Correction of inaccurate information • Deletion of certain information • Information about how information has been used or disclosed • Withdrawal of consent previously provided • Changes to certain communication preferences
These rights may be subject to healthcare-record, legal, licensing, security, and retention requirements.
Submit privacy requests to:
Subject line:
Privacy Request
We may need to verify your identity before processing a request.
CHILDREN’S PRIVACY
The public website is intended for adults and is not directed to children under 18.
A parent or legal guardian should contact DEBORAH MD before submitting information concerning a minor.
VISITORS OUTSIDE THE UNITED STATES
DEBORAH MD is based in the United States. Information submitted through the website may be processed and stored in the United States.
The availability and scope of healthcare services may depend upon your physical location and applicable professional licensing requirements.
RELATIONSHIP TO OUR NOTICE OF PRIVACY PRACTICES
This Website Privacy Policy addresses information collected through the public website and related business interactions.
Our Notice of Privacy Practices explains how protected health information may be used and disclosed, your HIPAA rights, and our legal responsibilities.
If there is a conflict concerning protected health information, the Notice of Privacy Practices and applicable law will control.
CHANGES TO THIS POLICY
We may update this Website Privacy Policy to reflect changes in our services, technology, operations, or legal obligations.
The revised version will be posted with an updated “Last Updated” date.
CONTACT
DEBORAH MD Operated by Deborah MD Concierge LLC
Email: [email protected] Telephone: (239) 397-0353 Website: DeborahMD.com
NOTICE OF PRIVACY PRACTICES
Effective Date: August 9, 2026
Your Information. Your Rights. Our Responsibilities.
This Notice describes how medical information about you may be used and disclosed, how you may access that information, and the rights you have regarding your protected health information.
Please review it carefully.
This Notice applies to health care services provided by Deborah MD Concierge LLC, operating under the DEBORAH MD brand.
YOUR RIGHTS
When it comes to your health information, you have certain rights. We are responsible for helping you exercise those rights.
Get a Copy of Your Medical Record
You may ask to see or receive an electronic or paper copy of your medical record and other protected health information we maintain about you.
We will generally provide a copy or summary within 30 days of receiving your request. We may charge a reasonable, cost-based fee as permitted by law.
Ask Us to Correct Your Medical Record
You may ask us to correct health information that you believe is inaccurate or incomplete.
We may deny a request in certain circumstances, but if we do, we will explain the reason in writing, generally within 60 days.
Request Confidential Communications
You may ask us to communicate with you in a particular way, such as by telephone, email, or another reasonable method, or to send communications to a different address.
We will accommodate reasonable requests.
Ask Us to Limit What We Use or Share
You may ask us not to use or disclose certain health information for treatment, payment, or health care operations.
We are not always required to agree to a requested restriction. If we agree, we will follow the restriction except when disclosure is necessary to provide emergency treatment or is otherwise required by law.
If you pay for a health care service or item completely out of pocket, you may ask us not to disclose information about that service to your health plan for payment or health care operations. We will honor that request unless disclosure is required by law.
Receive an Accounting of Certain Disclosures
You may ask for a list of certain disclosures of your protected health information made during the six years before your request.
The accounting generally will not include disclosures for treatment, payment, or health care operations, disclosures you specifically authorized, or certain other disclosures excluded by law.
We will provide one accounting during any 12-month period without charge. We may charge a reasonable, cost-based fee for additional requests within the same 12-month period.
Get a Copy of This Notice
You may request a paper copy of this Notice at any time, even if you agreed to receive it electronically.
The current Notice is also available at DeborahMD.com.
Choose Someone to Act for You
If you have given another person legal authority to act for you, such as through a medical power of attorney or legal guardianship, that person may exercise your privacy rights and make choices about your health information.
We will verify that person’s authority before taking action on your behalf.
File a Privacy Complaint
If you believe your privacy rights have been violated, you may contact:
Privacy Officer: Dr. Deborah Houk DEBORAH MD / Deborah MD Concierge LLC Email: [email protected] Telephone: (239) 397-0353 Website: DeborahMD.com
You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights.
We will not retaliate against you for filing a complaint.
YOUR CHOICES
For certain types of health information, you may tell us how you would like that information to be shared.
Family, Friends, and Others Involved in Your Care
You may tell us whether we may share relevant health information with family members, close friends, caregivers, or others involved in your care or payment for your care.
If you are unable to communicate your preference, we may share information when permitted by law and when we reasonably believe doing so is in your best interest.
We may also disclose information when necessary to prevent or lessen a serious and imminent threat to health or safety.
Marketing
We will not use or disclose your protected health information for marketing purposes when HIPAA requires your written authorization.
General communications about DEBORAH MD that are not based on your protected health information are governed separately by our Website Privacy Policy and applicable marketing laws.
Sale of Protected Health Information
We do not sell your protected health information.
Any use or disclosure that would constitute a sale of protected health information under HIPAA would require your written authorization unless an exception under law applies.
Psychotherapy Notes
If we ever maintain psychotherapy notes as defined by HIPAA, most uses and disclosures of those notes would require your written authorization except where otherwise permitted or required by law.
Fundraising
DEBORAH MD does not currently use protected health information to solicit fundraising contributions.
If this practice changes, this Notice will be updated as required by law.
HOW WE MAY USE AND SHARE YOUR HEALTH INFORMATION
HIPAA permits or requires us to use and disclose your protected health information in certain circumstances without obtaining a separate written authorization from you.
Treatment
We may use your health information and share it with other health care professionals involved in your care.
For example, we may provide relevant health information to another physician or health professional when necessary to coordinate or support your care.
Health Care Operations
We may use and disclose health information to operate our practice and support the quality and administration of our services.
This may include activities such as:
• Coordinating services • Maintaining clinical and business records • Quality assessment and improvement • Professional review • Compliance activities • Credentialing • Legal and accounting services • Information technology and security • Practice management
Payment
We may use and disclose health information to obtain or process payment for health care services when applicable.
This may include communicating with you, a payment processor, a health plan, or another responsible party as permitted by law.
Business Associates
We may share protected health information with third parties that perform services on our behalf when those services require access to protected health information.
When HIPAA requires it, we enter into a Business Associate Agreement requiring those parties to appropriately safeguard protected health information.
OTHER USES AND DISCLOSURES PERMITTED OR REQUIRED BY LAW
We may also use or disclose health information in circumstances permitted or required by federal or state law.
Public Health and Safety
We may disclose health information for legally permitted public-health and safety activities, including:
• Preventing or controlling disease • Reporting certain communicable diseases • Assisting with product recalls • Reporting adverse reactions to medications • Reporting suspected abuse, neglect, or domestic violence when permitted or required • Preventing or reducing a serious threat to health or safety
Health Oversight
We may disclose health information to health oversight agencies for activities authorized by law, including audits, investigations, inspections, licensing, and disciplinary proceedings.
Compliance With Law
We will disclose health information when federal or state law requires us to do so.
We may also provide information to the U.S. Department of Health and Human Services when necessary for the Department to determine our compliance with HIPAA.
Research
Health information may be used or disclosed for research only when the requirements and protections required by applicable law have been satisfied.
Organ and Tissue Donation
When applicable, we may disclose health information to organizations involved in organ, eye, or tissue donation and transplantation.
Coroners, Medical Examiners, and Funeral Directors
We may disclose health information to a coroner, medical examiner, or funeral director when permitted or required by law.
Workers’ Compensation
We may disclose health information as permitted or required for workers’ compensation or similar programs.
Law Enforcement and Government Requests
We may disclose protected health information to law enforcement officials or government authorities when HIPAA and other applicable law permit or require us to do so.
This may include certain:
• Law-enforcement requests • Health-oversight activities • Judicial or administrative proceedings • Military or national-security functions • Protective-service activities
Lawsuits and Legal Proceedings
We may disclose protected health information in response to a valid court or administrative order or other lawful legal process, subject to applicable privacy protections.
SUBSTANCE USE DISORDER RECORDS
Federal law provides additional protections for certain substance use disorder patient records governed by 42 CFR Part 2.
To the extent DEBORAH MD receives or maintains records that are protected by Part 2, those records will be handled in accordance with the additional protections required by federal law.
In particular, Part 2-protected records generally may not be used or disclosed in a civil, criminal, administrative, or legislative investigation or proceeding against you unless the use or disclosure is permitted by your written consent or by a qualifying court order and subpoena.
If Part 2-protected information is ever proposed to be used for fundraising communications, you will receive the notice and choices required by applicable law.
USES AND DISCLOSURES REQUIRING YOUR WRITTEN AUTHORIZATION
For uses and disclosures not otherwise permitted or required by law, we will obtain your written authorization.
This includes circumstances in which HIPAA requires authorization for:
• Certain marketing activities • The sale of protected health information • Most uses and disclosures of psychotherapy notes, if applicable • Other uses or disclosures not otherwise permitted by HIPAA
If you provide written authorization, you may revoke it in writing at any time.
Revocation will not affect uses or disclosures that were already made in reliance on your authorization.
OUR RESPONSIBILITIES
Deborah MD Concierge LLC is required by law to:
• Maintain the privacy and security of your protected health information • Follow the privacy practices described in the Notice currently in effect • Provide you with a copy of this Notice • Notify affected individuals when required following a breach of unsecured protected health information • Use and disclose protected health information only as permitted or required by law or authorized by you • Respect the privacy rights available to you under applicable federal and state law
We take these responsibilities seriously and use administrative, technical, and organizational safeguards designed to protect health information.
FLORIDA AND OTHER PRIVACY PROTECTIONS
Certain health information may be subject to privacy protections under Florida law or other federal law that are more restrictive than HIPAA.
When another applicable law provides greater privacy protection or requires your specific authorization before disclosure, we will follow that law.
CHANGES TO THIS NOTICE
We may change the terms of this Notice and our privacy practices.
Changes may apply to all protected health information we maintain, including information created or received before the change.
If we make a material change, we will revise this Notice as required by law.
The current Notice will be available:
• On DeborahMD.com • Upon request • Through our patient or intake process when applicable
QUESTIONS OR PRIVACY REQUESTS
For questions about this Notice, requests regarding your protected health information, or concerns about our privacy practices, contact:
Dr. Deborah Houk Privacy Officer DEBORAH MD Operated by Deborah MD Concierge LLC
Email: [email protected] Telephone: (239) 397-0353 Website: DeborahMD.com