Notice of Privacy Practices
Effective November 7, 2026
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
PinkBridge PC (“we,” “us,” and “our”), together with any other professional practice that provides care to you through the PinkBridge platform and gives you this Notice, and its owners, directors, managers, employees, independent contractors, and workforce members who are involved in providing and coordinating health care, are all bound to follow the terms of this Notice of Privacy Practices and the duties outlined in it.
By law PinkBridge PC is required to: a) keep your protected health information private; b) give you this Notice of our legal duties and privacy practices with respect to your PHI; c) notify you if there is a breach of your unsecured PHI; and d) follow the terms of the Notice that is currently in effect.
What is the Notice of Privacy Practices?
The Notice of Privacy Practices explains how we fulfill our commitment to respect the privacy and confidentiality of your protected health information. This Notice explains how we may use and share your protected health information, the legal obligations we have regarding it, and your rights under federal and state laws.
We provide care online (“telehealth”). Our licensed providers review the information and photos you submit through the PinkBridge website and app, may communicate with you by message or video, and may prescribe treatment that is prepared by a licensed pharmacy.
In this Notice, the term “protected health information” (PHI) refers to individually identifiable information about you, which includes:
a) Information about your health and skin condition, including your questionnaire answers
b) Information about healthcare services and prescriptions you received in the past, or may receive in the future
c) Your address and demographics
d) Your contact phone number, email, etc.
e) Your photos
f) Your messages with your provider
PHI means individually identifiable health information, as defined by HIPAA, that is created or received by us and that relates to your past, present, or future physical or mental health or condition, the provision of health care to you, or payment for that care, and that identifies you or for which there is a reasonable basis to believe it can be used to identify you.
The members of PinkBridge PC will share PHI with each other for the purposes of treatment, payment, and healthcare operations, in compliance with the Health Insurance Portability and Accountability Act (“HIPAA”) and federal and state regulations.
How may we use and share your protected health information?
The following categories describe different ways that we may use and disclose your protected health information without your written authorization. Not every use or disclosure will be listed; however, all the ways we are permitted to use and disclose your information will fall within at least one of the following categories.
For treatment: We may use or disclose protected health information about you to provide, coordinate or manage your medical treatment. We may disclose your PHI to doctors, nurses, nurse practitioners, physician assistants, and other personnel involved in your clinical care. We share your prescriptions and the information needed to prepare, dispense and ship them with licensed pharmacies. We may share protected health information about you with other healthcare providers when needed for your care.
For payment: In order to receive payment for services we provide, we may use and share your protected health information with a payment processor or other third party.
For healthcare operations: We may use your protected health information to support our business activities and improve the quality and safety of our services. For example, we may use it to review the treatment and services that we gave you and to see how well our staff cared for you, to train our staff, for accreditation, and for healthcare contracting relating to our operations. We may use your PHI to create information that has been de-identified in accordance with HIPAA, which is no longer PHI.
To communicate with you: We may use your PHI to contact you about your care, such as check-in reminders, prescription and shipping updates, and treatment options that may be of interest to you.
Business Associates: We provide some services through contracts with business associates, who perform tasks that we have assigned to them. Our business associates include PinkBridge LLC, which provides the website, the software (including software that uses artificial intelligence to prepare draft plans for our providers to review), and administrative services, as well as companies that provide hosting, payment processing, communications, accounting, and legal services. To protect your health information, we require each business associate to appropriately safeguard it and to use it only as our contract allows.
Other Uses and Disclosures: We may use or disclose your PHI for any purpose required by law. For example, we may be required by law to use or disclose your PHI to respond to court orders.
We may disclose your PHI for public health activities, such as reporting adverse reactions to medications or problems with products to the FDA, and to meet special situations such as public health and safety investigations.
We may disclose your PHI to the proper authorities if we suspect abuse or neglect; we may also disclose your PHI if we believe you to be a victim of abuse, neglect, or domestic violence.
We may disclose your PHI if authorized by law to a government oversight agency conducting an audit, investigation, or civil or criminal proceeding. We may disclose your PHI in the course of a judicial or administrative proceeding (e.g., to respond to a subpoena or discovery request), and to law enforcement as required by law. We may disclose your PHI to prevent a serious threat to health or safety.
Uses that require your written authorization: We will not use or disclose your PHI for marketing, and we will not sell your PHI, without your written authorization. We will not let anyone access your PHI through a Health Information Exchange, or any other means, without your consent, except in an emergency or unless you direct us otherwise. In any other situation not covered by this Notice, we will ask for your written authorization before using or disclosing your PHI. If you choose to authorize a disclosure, you may revoke that authorization at any time, except to the extent that we have already relied on it, by notifying us in writing at PinkBridge PC, 251 W 30th Street, FL 5, New York, NY 10001.
Some state laws give additional protection to certain types of health information. When those laws apply and are more protective than HIPAA, we follow them.
You have a right to:
Inspect and obtain a copy, in electronic or paper form, of PHI that may be used to make decisions about you and your treatment, for as long as we maintain this information in our records. To inspect or obtain a copy of your health information, please submit your request in writing. We will respond to your request within 10 days. We may charge a reasonable, cost-based fee.
Request that PHI that we maintain about you be amended or corrected. We are not obligated to make all requested amendments but will give each request careful consideration and will tell you in writing if we deny it and why. To be considered, your amendment request must be in writing, signed by you or your representative, and state the reasons for the request.
Ask us to restrict or limit the protected health information we use and share about you. You may request restrictions on certain of our uses and disclosures of your PHI for treatment, payment, healthcare operations, disclosures made to persons involved in your care, and disclosures for disaster relief purposes. For example, you may request that we do not disclose your PHI to your spouse. Your request must describe in detail the restrictions you are requesting. We are not required to agree to your request, but will attempt to accommodate reasonable requests. If you pay for a service in full yourself, you may ask us not to share information about that service with your health plan, and we will agree unless the law requires us to share it.
Receive an accounting of certain disclosures we have made of your PHI. Examples of disclosures we are required to account for include those made pursuant to valid legal process, or for law enforcement purposes. To be considered, your accounting request must be in writing and signed by you or your representative. The first accounting in any 12-month period is free; we may charge a reasonable, cost-based fee for each subsequent accounting you request within the same 12-month period.
Obtain a list of individuals or entities that have received your PHI from PinkBridge PC, subject to limits permitted by law.
Ask us to communicate with you about medical matters in a certain way or at a specific location. We will agree to reasonable requests.
Choose someone to act for you, such as a person with your medical power of attorney or your legal guardian.
Be notified if your protected health information is improperly disclosed or accessed. You will be notified within 60 days of our discovery if your unsecured PHI has been disclosed to or accessed by a person who was not authorized to receive it.
Obtain a paper or electronic copy of this Notice at any time, even if you have agreed to receive it electronically.
File a complaint if you believe your privacy rights have been violated. You can complain to us using the contact information below, or to the U.S. Department of Health and Human Services, Office for Civil Rights, by sending a letter to 200 Independence Avenue, S.W., Washington, D.C. 20201, calling 1-877-696-6775, or visiting www.hhs.gov/ocr/privacy/hipaa/complaints/. We will not retaliate against you for filing a complaint.
Changes to this Notice
PinkBridge PC is required by law to follow the terms of this Notice or any change to it that is in effect. We reserve the right to change our practices and this Notice at any time and to make the new Notice effective for all PHI we maintain. When significant changes occur, we will post the new Notice on our website and make it available in your account. You may receive a copy of the current Notice at any time upon request.
If you have any questions or want to exercise your rights, please contact our Privacy Officer at contact@pinkbridge.com, by phone at 212-906-4406, or by mail at PinkBridge PC, Attn: Privacy Officer, 251 W 30th Street, FL 5, New York, NY 10001.