Privacy Policy
This Privacy Notice for Yuvaan LLC, doing business as Specialty Wellness, Koteshwara Nadipalli, PLLC, doing business as Specialty Primary Care and Wellness (“we,” “us,” or “our”), describes how and why we access, collect, store, use, and/or share (“process”) your personal information when you:
- Visit our website at https://www.myspecialtymd.com/, or any other website of ours that links to this Privacy Notice
- Visit or contact our offices in The Colony, Texas, or Frisco, Texas, or use our online patient portal
- Engage with us in other related ways, including scheduling, marketing, advertising, or events
This Notice covers our website, marketing, and business operations. It does NOT cover Protected Health Information (“PHI”) we create or receive as your health care provider once you become a patient. PHI is governed by the Health Insurance Portability and Accountability Act (“HIPAA”) and described in our separate HIPAA Notice of Privacy Practices, posted at our offices, on our website, and provided to every patient at their first visit.
Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have questions, contact us at info@myspecialtymd.com.
1. What Information Do We Collect?
Personal information you disclose to us
We collect personal information that you voluntarily provide when you request an appointment, register on our patient portal, express interest in our services, or otherwise contact us. The personal information we collect may include:
- Names, phone numbers, and email addresses
- Mailing and billing addresses
- Patient portal usernames and passwords
- Contact and appointment preferences
- Debit/credit card numbers and insurance information
- Date of birth and gender, where provided for scheduling or insurance purposes
- A general reason for your appointment or health concern you choose to share with us before becoming a patient
All personal information you provide must be true, complete, and accurate, and you must notify us of any changes.
Information collected automatically
When you visit the Site, our vendors and we automatically collect limited technical information, including your IP address, browser and device type, pages viewed, referring pages, and approximate location (via the Google Maps Platform APIs). We use this information to operate the Site, secure it, and measure the performance of our marketing campaigns (see Section 5).
Information from third parties
We do not purchase personal information about you from third-party data brokers. Our advertising partners, such as Meta and Google, may share limited campaign performance and audience-matching data with us as part of the paid advertising services we use to reach prospective patients.
2. How Do We Process Your Information?
In Short: We process your information to provide and administer our Services, communicate with you, market our practice, prevent fraud, and comply with the law.
We process your personal information for the following purposes:
- To facilitate account creation and authentication for our online patient portal, and to keep your account in working order
- To respond to your inquiries and provide support regarding appointments and services
- To send appointment reminders and confirmations
- To develop and display targeted advertising for our practice to prospective and existing patients
- To evaluate and improve our Services, marketing campaigns, and patient experience
- To comply with legal, regulatory, and Texas Medical Board recordkeeping obligations
- To detect, investigate, and prevent fraudulent or unauthorized activity
We process your information based on your consent, our legitimate business interests in operating the Practice, the performance of the services you request, and compliance with applicable law.
3. Sensitive Information and Health Data
In short, your medical information as a patient is PHI governed by HIPAA. Limited pre-treatment health details you share through the Site may constitute sensitive personal data under Texas law and are collected only with your consent.
Health-related information you provide to us as part of your care, including medical history, diagnoses, treatment, and records created during treatment, is Protected Health Information regulated by HIPAA, not by this Notice. That information, and your rights regarding it, is described in our HIPAA Notice of Privacy Practices (Section 11).
Before you become a patient, certain limited health-related details you voluntarily share with us through the Site, such as a general “reason for visit” on an appointment request or contact form, may be considered “sensitive personal data” under the Texas Data Privacy and Security Act (TDPSA). We collect this information only with your consent (submitting the form constitutes consent) and use it solely to respond to your inquiry or schedule your visit. We do not use this pre-treatment information for targeted advertising and do not sell it. You may withdraw consent at any time (Section 15).
4. When and With Whom Do We Share Your Personal Information?
- Service Providers. We share information with vendors who support our Site, scheduling, patient portal (e.g., AdvancedMD), payment processing, and marketing, under contracts limiting their use of your information to the services they provide us.
- Google Maps Platform APIs. We may share your information with Google Maps Platform APIs (e.g., Google Maps API, Places API). Google Maps uses GPS, Wi-Fi, and cell towers to estimate your location. GPS is accurate to about 20 meters, while Wi-Fi and cell towers help improve accuracy when GPS signals are weak, like indoors. This data helps Google Maps provide directions, but it is not always perfectly precise.
- Advertising Platforms. We work with Meta (Facebook/Instagram) and Google Ads to run and measure paid marketing campaigns. These platforms may process information (such as hashed contact details or device identifiers) to match our patients/prospects to advertising audiences and to measure ad performance.
- Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business.
- Legal Obligations. We may disclose information as required by law or court order, or to protect the rights, property, or safety of our patients, staff, or the public.
We have not disclosed, sold, or shared personal information to third parties for a business or commercial purpose in the preceding twelve (12) months, and we do not intend to sell personal information in the future.
5. Do We Use Cookies and Other Tracking Technologies?
We use cookies and similar tracking technologies (such as web beacons and pixels) to collect information when you interact with the Site. Some of these technologies help us maintain security, prevent crashes, save your preferences, and support basic site functions. We also permit third parties and service providers to use tracking technologies for analytics and advertising, including tailoring advertisements to your interests and measuring campaign performance.
Specifically, we use Google Tag Manager, Google Analytics, and Google Ads remarketing, and, where enabled, the Meta Pixel/Conversions API.
Google Analytics: We may share your information with Google Analytics to track and analyze use of the Services, including Remarketing with Google Analytics. To opt out of being tracked by Google Analytics, visit tools.google.com/dlpage/gaoptout. You can opt out of Google Analytics Advertising Features through Ads Settings (adssettings.google.com). Other opt-out options include optout.networkadvertising.org and networkadvertising.org/mobile-choice. For more on Google’s privacy practices, see policies.google.com/privacy.
To the extent these tracking technologies are deemed a “sale” or “sharing” (including targeted advertising) under Texas law, you may opt out as described in Section 10.
6. How Long Do We Keep Your Information?
- Patient medical records (governed by our HIPAA Notice of Privacy Practices): at least 7 years from the date of last treatment for adult patients, and until age 21 or 7 years from last treatment, whichever is later for patients who were minors, consistent with Texas Medical Board rules (22 Tex. Admin. Code § 165.1)
- Website inquiries, appointment requests, and marketing data from individuals who do not become patients: up to 24 months from your last interaction with us, unless you ask us to delete it sooner
- Billing and financial records: generally, 7 years, as required by applicable tax and accounting law
When we have no ongoing legitimate business need to process your personal information, we will delete or anonymize it, or, if not possible (e.g., stored in backup archives), securely store and isolate it from further processing until deletion is possible.
7. How Do We Keep Your Information Safe?
We have implemented appropriate and reasonable technical and organizational security measures designed to protect the personal information we process, consistent with HIPAA Security Rule requirements for PHI and industry-standard practices for other personal information. However, no electronic transmission or storage technology can be guaranteed to be 100% secure, so we cannot promise that unauthorized third parties will never compromise our security. Transmission of information to and from the Site is at your own risk.
8. What Are Your Privacy Rights?
Withdrawing your consent
If we rely on your consent to process your personal information, you may withdraw it at any time by contacting us using the details in Section 15. This will not affect the lawfulness of processing before withdrawal.
Opting out of marketing communications
You can unsubscribe from marketing and promotional communications at any time using the unsubscribe link in our emails or by contacting us. We may still send service-related messages necessary to administer your account or respond to your requests.
Account information
If you would like to review, change, or terminate your patient portal account, you can log in to your account settings or contact us to request account termination. We may retain some information to prevent fraud, troubleshoot issues, or comply with legal requirements.
Cookies
Most browsers accept cookies by default. You can set your browser to remove or reject cookies; doing so may affect certain Site features.
9. Controls for Do-Not-Track Features
Most web browsers and some mobile operating systems include a Do-Not-Track (“DNT”) feature you can activate to signal a preference not to have your online activity monitored. No uniform technology standard for recognizing DNT signals has been finalized, so we do not currently respond to DNT signals or similar mechanisms. Texas law requires us to disclose how we respond to DNT signals; because no industry or legal standard exists for honoring them, we do not respond to them at this time. If a standard is adopted that we must follow, we will update this Notice.
10. Do Texas Residents Have Specific Privacy Rights? (TDPSA)
Categories of Personal Information We Collect
We have collected the following categories of personal information in the past twelve (12) months:
| Category | Examples | Collected? |
|---|---|---|
| A. Identifiers | Name, postal address, phone number, unique personal identifier, IP address, email address, patient portal username | YES |
| B. Protected classification characteristics | Date of birth, gender, and other demographic data provided for scheduling and insurance purposes | YES |
| C. Commercial information | Transaction history, payment information, insurance/billing details | YES |
| D. Biometric information | Fingerprints, voiceprints | NO |
| E. Internet or network activity | Browsing behavior on the Site, pages viewed, interactions with our ads, collected via cookies/pixels | YES |
| F. Geolocation data | Approximate device location (via Google Maps Platform APIs) | YES |
| G. Audio, electronic, visual, or similar information | Call recordings or images created in connection with our business activities | YES |
| H. Professional or employment information | Business contact details, job applications | NO |
| I. Education information | Student records, directory information | NO |
| J. Inferences | Interest or engagement profiles built by advertising platforms (e.g., Meta, Google) from your interactions with our ads | YES |
| K. Sensitive personal information | Health/medical details you share with us before becoming a patient (e.g., “reason for visit”); once you are a patient, this becomes Protected Health Information governed by HIPAA, not this table. | YES (with consent) |
Sources of Personal Information
See Section 1, “What Information Do We Collect?” for the sources of the personal information above.
How We Use and Share Personal Information
See Section 2, “How Do We Process Your Information?” and Section 4, “When and With Whom Do We Share Your Personal Information?”
Will your information be shared with anyone else?
We may disclose your personal information to our service providers under a written contract. We have not disclosed, sold, or shared personal information to third parties for a business or commercial purpose in the preceding twelve (12) months, and we will not sell or share personal information belonging to Site visitors, patients, or other consumers in the future.
Your Rights
Under the TDPSA, you have the right to:
- Right to know whether we are processing your personal data
- Right to access your personal data
- Right to correct inaccuracies in your personal data
- Right to request deletion of your personal data
- Right to obtain a portable copy of the personal data you previously shared with us
- Right to non-discrimination for exercising your rights
- Right to opt out of processing your personal data for targeted advertising, the sale of personal data, or profiling that produces legal or similarly significant effects
How to Exercise Your Rights
To exercise these rights, contact us by emailing info@myspecialtymd.com or by writing to the addresses in Section 15. You may designate an authorized agent to make a request on your behalf; we may deny a request from an agent who does not provide proof of valid authorization.
Request Verification
Upon receiving your request, we will verify your identity using the information in your request or, if necessary, request additional information for verification and security purposes. If submitted through an authorized agent, we may require written, signed permission from you before processing the request.
Response Time
We will respond to a verifiable consumer request within 45 days of receipt. If needed, we may take one 45-day extension and will notify you of the extension and the reason for it within the initial 45-day period.
Appeals
If we decline to take action on your request, you may appeal by emailing info@myspecialtymd.com with “Privacy Appeal” in the subject line. We will inform you in writing of any action taken or not taken in response to your appeal, including a written explanation of the reasons for the decision, within 60 days of receiving the appeal. If your appeal is denied, you may submit a complaint to the Texas Attorney General at texasattorneygeneral.gov/consumer-protection/file-consumer-complaint/consumer-privacy-rights.
Protected Health Information we hold as your health care provider is regulated by HIPAA and is exempt from the TDPSA; requests concerning PHI should be made under our HIPAA Notice of Privacy Practices (Section 11).
11. Protected Health Information and HIPAA
In Short: Your medical records and treatment information are governed by HIPAA and our separate HIPAA Notice of Privacy Practices, not by this website Privacy Notice.
As a health care provider, we are required by HIPAA to maintain the privacy of your Protected Health Information and to provide you with a HIPAA Notice of Privacy Practices describing how we may use and disclose it, and your rights regarding it (including rights to access, amend, and receive an accounting of disclosures). Our current HIPAA Notice of Privacy Practices is posted at both of our office locations, available on our website, and provided to every patient at their first visit. If you have questions about your medical records or PHI, please contact our Privacy Officer using the details in Section 15.
12. AI-Assisted Tools and Automated Interactions
If we use an artificial intelligence system to interact with you on the Site, for example, a chatbot or automated scheduling assistant, we will disclose that you are interacting with an automated system rather than a person, before or at the start of that interaction. We do not use AI to make automated decisions that produce legal or similarly significant effects about you (such as decisions about your care) without human review.
13. Children’s Privacy
The Site is intended for adults. We do not knowingly collect personal information directly from children under 13 through the Site, consistent with the Children’s Online Privacy Protection Act (COPPA). If your child is a patient (for example, for a school or sports physical), please submit appointment or intake information on their behalf as their parent or legal guardian.
14. Do We Make Updates to This Notice?
We may update this Privacy Notice from time to time. The updated version will be indicated by a revised “Last Updated” date at the top of this Notice. If we make material changes, we will notify you by prominently posting a notice on the Site or by directly notifying you. We encourage you to review this Notice periodically.
15. How Can You Contact Us About This Notice?
Specialty Primary Care and Wellness
The Colony: 3800 Main St., Ste. 100, The Colony, TX 75056
Frisco: 11583 Independence Parkway, Suite 450, Frisco, TX 75035
Phone: 972-887-7779 | Fax: 972-688-6191
Email: info@myspecialtymd.com
16. How Can You Review, Update, or Delete the Data We Collect from You?
Under applicable law, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correction of inaccuracies, or deletion. You may also withdraw consent to our processing of your personal information. These rights may be limited by applicable law. To make a request, email info@myspecialtymd.com or write to us at the addresses above; for requests concerning your medical records or PHI, contact our Privacy Officer under our HIPAA Notice of Privacy Practices instead.