Privacy Policy

Last Updated: August 13, 2026

​

Flexup Wellness PLLC (“Flexup Wellness,” “we,” “us,” or “our”) respects your privacy and is committed to protecting personal and health information entrusted to us.

This Privacy Policy describes how information may be collected, used, stored, and disclosed when you visit flexupwellness.com, communicate with Flexup Wellness, schedule or receive services, or otherwise interact with our practice.

Because Flexup Wellness provides healthcare services, certain information collected in connection with your care may also be protected by the Health Insurance Portability and Accountability Act (“HIPAA”), applicable Massachusetts law, and other healthcare privacy requirements. Where applicable, our handling of Protected Health Information (“PHI”) is also governed by our Notice of Privacy Practices.

​

1. Scope of This Privacy Policy

This Privacy Policy applies to information collected through:

• The Flexup Wellness website;

• Appointment and service inquiries;

• Patient registration and intake;

• In-person healthcare services;

• Telehealth services;

• Our electronic medical record system;

• Secure patient communications;

• Telephone calls and text messages;

• Email communications;

• Payment and transaction systems;

• Forms, questionnaires, and assessments;

• Health-monitoring programs and devices when applicable; and

• Other interactions with Flexup Wellness.

Some third-party websites, laboratories, pharmacies, payment processors, supplement platforms, or other services may maintain their own privacy policies. Information provided directly to those organizations may be governed by their respective privacy practices.

​

2. Information We Collect

Depending upon how you interact with Flexup Wellness, we may collect several categories of information.

​

Personal Information

This may include:

• Name;

• Date of birth;

• Mailing address;

• Email address;

• Telephone number;

• Emergency contact information;

• Payment and billing information; and

• Other identifying or contact information you provide.

• ​

Health Information

When you become a patient or seek healthcare services, we may collect information necessary to evaluate and provide care, including:

• Medical history;

• Current and previous medical conditions;

• Symptoms;

• Medications and supplements;

• Allergies;

• Family and social history;

• Mental and behavioral health information when relevant to your care;

• Laboratory and diagnostic results;

• Vital signs and other health measurements;

• Nutrition, exercise, sleep, and lifestyle information;

• Information obtained from health-monitoring devices when applicable;

• Treatment plans and clinical recommendations;

• Prescriptions;

• Clinical communications; and

• Other information relevant to your healthcare.

Health information that meets the legal definition of Protected Health Information is handled in accordance with applicable healthcare privacy laws and our Notice of Privacy Practices.

​

3. Electronic Medical Records — Malla

Flexup Wellness uses Malla as its electronic medical record (“EMR”) platform.

Malla provides technology used to securely maintain and manage patient information, clinical documentation, health records, and other information related to patient care.

Malla is used by Flexup Wellness as part of our HIPAA-compliant healthcare operations and maintains safeguards designed for the storage and handling of Protected Health Information.

Information contained within your medical record may include medical history, clinical notes, medications, laboratory results, treatment recommendations, communications, forms, and other information related to your care.

Access to patient records is limited to authorized individuals who require access for treatment, healthcare operations, payment, or other legally permitted purposes.

​

4. Secure Communications — Spruce Health

Flexup Wellness uses Spruce Health (“Spruce”) for secure healthcare communications, including patient telephone calls, text messaging, and other communications.

Spruce is designed for HIPAA-compliant healthcare communication and provides safeguards for communications involving Protected Health Information.

When communicating with Flexup Wellness through Spruce, information may become part of your clinical record when appropriate.

Patients should use the communication methods designated by Flexup Wellness when discussing sensitive medical information.

Electronic communications should not be used for medical emergencies. If you believe you are experiencing a medical emergency, call 9-1-1 or seek immediate emergency medical care.

​

5. Telehealth

Flexup Wellness provides healthcare through both in-person and telehealth appointments.

Telehealth may involve the electronic transmission of health information, including video, audio, secure messages, documents, photographs, laboratory results, and other information necessary to provide care.

Flexup Wellness uses technology and administrative practices intended to protect the confidentiality and security of telehealth communications.

Although reasonable safeguards are used, no electronic communication system can be guaranteed to be completely free from security risks.

Patients are also responsible for taking reasonable steps to protect their privacy during telehealth encounters, including using secure devices and networks and participating from an appropriately private location when possible.

​

6. Website Information

When you visit flexupwellness.com, certain information may be collected automatically, including:

• IP address;

• Browser type;

• Device information;

• Operating system;

• Pages visited;

• Time spent on the Website;

• Referring websites; and

• General website usage information.

This information may be used to maintain, secure, analyze, and improve the Website.

Website analytics information is separate from your clinical medical record unless it is intentionally submitted through a healthcare-related function and incorporated into your record.

​

7. Cookies and Similar Technologies

The Website may use cookies and similar technologies to help the Website function, understand how visitors use the Website, remember preferences, and improve performance.

You may restrict or disable cookies through your browser settings. Doing so may affect the functionality of certain portions of the Website.

We do not intentionally use tracking technologies to disclose Protected Health Information to advertising companies for targeted advertising.

​

8. Information You Provide

We may collect information you voluntarily provide when you:

• Contact Flexup Wellness;

• Request an appointment;

• Complete intake forms or questionnaires;

• Register for services;

• Communicate with us;

• Participate in telehealth;

• Purchase a service or product;

• Submit health information;

• Participate in a health-monitoring program; or

• Otherwise interact with the practice.

Please avoid submitting sensitive health information through ordinary email or other communication channels when a secure communication option provided by Flexup Wellness is available.

​

9. How We Use Information

Information may be used to:

• Provide and coordinate healthcare;

• Evaluate symptoms and health concerns;

• Develop individualized treatment recommendations;

• Maintain medical records;

• Communicate with patients;

• Schedule and manage appointments;

• Provide telehealth services;

• Order and review laboratory testing;

• Coordinate with laboratories, pharmacies, specialists, and other healthcare providers;

• Prescribe medications when clinically appropriate;

• Provide supplement, nutrition, and lifestyle recommendations;

• Process payments;

• Provide Letters of Medical Necessity or related documentation when clinically appropriate;

• Administer Flexup Wellness programs and Partnerships;

• Improve our services;

• Maintain and secure our Website and technology;

• Comply with professional and legal obligations; and

• Carry out other purposes permitted by applicable law.

• ​

10. Disclosure of Information

Flexup Wellness does not sell patient medical information.

We may disclose information when necessary or permitted for healthcare and business operations, including to:

• Healthcare professionals involved in your care;

• Laboratories;

• Pharmacies;

• Healthcare technology providers;

• Electronic medical record providers;

• Secure communication providers;

• Payment processors;

• Contractors and service providers supporting Flexup Wellness;

• Government agencies or regulatory authorities when legally required; and

• Other parties when authorized by you or permitted or required by law.

When required by HIPAA, vendors that handle Protected Health Information on behalf of Flexup Wellness are expected to maintain appropriate safeguards and contractual protections, including Business Associate Agreements when applicable.

​

11. Marketing and Sale of Information

Flexup Wellness does not sell Protected Health Information or patient medical records.

We do not provide your medical information, telephone number, or email address to unrelated third parties for their independent marketing purposes without authorization where authorization is required by law.

We may communicate directly with patients regarding Flexup Wellness services, programs, educational information, or practice updates as permitted by law. You may opt out of promotional communications where applicable.

​

12. Laboratories, Pharmacies and Other Healthcare Providers

Flexup Wellness may share information with laboratories, pharmacies, healthcare professionals, or other organizations when necessary to coordinate your care and when permitted by applicable law.

These organizations may maintain separate records and privacy practices.

Flexup Wellness is not responsible for the independent privacy practices of third parties once information has been lawfully transmitted to them.

​

13. Payment Information

Flexup Wellness may use third-party payment processors to process payments for consultations, programs, Partnerships, products, and other services.

Payment processors may collect information such as your name, billing address, credit or debit card information, and transaction details.

Flexup Wellness does not necessarily store complete payment-card information on its own systems. Payment information maintained by third-party processors is subject to their security and privacy practices.

​

14. Data Security

Flexup Wellness uses reasonable administrative, technical, and physical safeguards intended to protect personal and health information from unauthorized access, use, alteration, or disclosure.

These safeguards may include HIPAA-compliant electronic medical record and communication systems, access controls, secure authentication, encryption, workforce privacy practices, and other security measures appropriate to the nature of the information.

No electronic system can guarantee absolute security. Flexup Wellness continually evaluates its privacy and security practices as technology and regulatory requirements evolve.

​

15. Your Health Information Rights

Depending upon applicable law, patients may have rights concerning their health information, including rights to:

• Request access to medical records;

• Request copies of certain health information;

• Request corrections or amendments;

• Request restrictions on certain uses or disclosures;

• Request confidential communications;

• Receive information concerning certain disclosures; and

• Obtain a copy of the Flexup Wellness Notice of Privacy Practices.

Certain rights may be subject to legal exceptions or procedural requirements.

Requests regarding medical records or Protected Health Information should be directed to Flexup Wellness using the contact information below.

​

16. Email and Text Communications

Email and text messaging can carry privacy risks.

Flexup Wellness uses Spruce for secure patient calls and text communications when appropriate. However, patients may sometimes initiate communications through ordinary email, telephone, or other channels.

By providing contact information and communicating through these methods, you acknowledge that electronic communications may carry inherent security risks.

Whenever possible, sensitive clinical information should be communicated using the secure methods designated by Flexup Wellness.

​

17. Children

Flexup Wellness services are generally intended for adults 18 years of age or older, unless otherwise expressly agreed.

The Website is not intended to knowingly collect personal information from children in violation of applicable law.

​

18. Third-Party Websites

The Flexup Wellness Website may contain links to third-party websites, applications, pharmacies, laboratories, supplement providers, or other resources.

Flexup Wellness does not control and is not responsible for the privacy practices of independent third parties. You should review their privacy policies before providing personal information.

​

19. Retention of Information

Flexup Wellness retains medical records and other information for the periods required by applicable federal and Massachusetts laws, professional requirements, and legitimate business needs.

Information may continue to be retained after a patient stops receiving services when required for medical-record retention, legal compliance, billing, dispute resolution, or other lawful purposes.

​

20. Changes to This Privacy Policy

Flexup Wellness may update this Privacy Policy periodically to reflect changes in our services, technology, business practices, or legal obligations.

The current version will be identified by the “Last Updated” date displayed at the beginning of this policy.

Material changes will be communicated or posted as required by applicable law.

​

21. Contact Flexup Wellness

Questions regarding this Privacy Policy, your information, or our privacy practices may be directed to:

Flexup Wellness PLLC
Email: contact@flexupwellness.com

Requests involving medical records or Protected Health Information may require identity verification before information can be released.