ZYP Medical, LLC

PRIVACY POLICY

Last Updated: October 08, 2026

This Privacy Policy explains how ZYP Medical, LLC ("ZYP," "we," "us," "our") collects, uses, shares, and protects personal information through ZYPmed.com (the "Site") and our Services, and the choices you have.

Important: Protected health information ("PHI") that ZYP collects to provide health care is governed by HIPAA and our Notice of Privacy Practices at www.ZYPmed.com/notice-of-privacy-practices. If this Privacy Policy and the Notice of Privacy Practices differ about PHI, the Notice of Privacy Practices controls.

1. Information We Collect

  • Identifiers: name, mailing address, email, phone number, date of birth, IP address, and account name.

  • Identity verification: a government-issued photo ID provided at intake.

  • Health information (PHI): medical history, medications, allergies, labs, vitals, visit notes, and pharmacy information. This is governed by HIPAA.

  • Personal characteristics: age, sex, and other characteristics, only as you provide them as part of your health history.

  • Commercial information: plans and services purchased and payment history. Card numbers are held by our payment processor, not by ZYP.

  • Website and device activity: pages viewed and interactions with public Site pages, collected through cookies. Public pages only.

  • Location: the state and city you report at each telehealth visit, and general location from your IP address. We do not collect precise GPS location.

  • Audio and video: limited. Telehealth video is not recorded unless you separately consent.

Information we do not collect:

  • Biometric identifiers, such as fingerprints, face geometry, or voiceprints.

  • Employment or education records, such as job history or school records.

  • Inferences or profiles that predict your behavior or preferences.

If you do not provide information needed to treat you, we may not be able to provide Services.

2. Where We Get Information

  • From you: intake forms, the Hint Health patient portal, Vagaro, telehealth visits, phone calls, texts, emails, and Site forms.

  • From others with your permission or as allowed by HIPAA: pharmacies, labs, prior or current treating providers, and prescription drug monitoring programs.

  • From cookies and similar technologies on public Site pages.

  • From our service providers who help us run the practice (for example, our EHR, payment processor, and messaging vendors).

3. How We Use Information

  • To verify your identity and physical location at each visit.

  • To evaluate, diagnose, treat, prescribe, order labs, and coordinate your care.

  • To process payments, receipts, and refunds.

  • To send appointment, refill, shipping, billing, and care messages, and clinic announcements.

  • To send marketing messages only if you opt in (texts) or have not unsubscribed (email).

  • To respond to questions, complaints, and legal claims.

  • To meet legal, regulatory, licensure, and DEA obligations.

  • To improve and secure the Site and our Services.

4. Communications: Text, Email, and Phone

Care and account messages. If you give us your mobile number and email, ZYP, its staff, and its service vendors may contact you by text, email, phone, and voicemail about appointments, refills and dosing, labs and care updates, shipping, billing, and clinic announcements such as hours, closures, contact changes, and policy updates. Some messages are sent automatically, and some may be prepared with automated or AI-assisted tools.

Marketing messages. ZYP sends marketing and promotional text messages only to people who give separate, express written consent by checking a marketing opt-in box. Consent to marketing texts is not a condition of buying any goods or services. You can unsubscribe from marketing email using the link in any marketing email.

Rates and frequency. Message frequency varies. Message and data rates may apply. ZYP does not charge for texts.

Opting out. Reply STOP to any ZYP text to stop texts. Reply HELP for help. After you opt out of texts, contact ZYP by phone at (402) 407-2847, by email at info@zypmed.com, melanie@zypmed.com, or josh@zypmed.com, or by secure message through your Hint Health account.

Unencrypted channels. Standard text and email are not encrypted. If you choose to receive them, you accept the risk that others could see them. You may ask us at any time to send health information only through secure Hint messaging, phone, or mail.

Accurate contact information. Keep your number and email current. ZYP is not responsible for messages sent to an outdated or reassigned number or address you did not update.

Your mobile number stays private. ZYP does not sell or share your mobile number or text-messaging opt-in data or consent with any third party for that party's marketing purposes.

5. How We Share Information

We share information only as needed to provide and run our Services:

  • with our provider, staff, and contractors who need it for your care or our operations;

  • with service providers that support our practice, such as our EHR and patient portal, telehealth, secure messaging and SMS vendors, pharmacies, laboratories, payment processor, fax service, shipping carriers, website host, and email service. Vendors that handle PHI sign HIPAA business associate agreements;

  • with professional advisors and insurers (for example, attorneys, accountants, and our malpractice carrier);

  • with people or organizations you authorize;

  • with government agencies, courts, or law enforcement when required by law, or to protect someone's health or safety; and

  • with a successor in a sale or merger of our practice, subject to HIPAA.

We do not sell personal information or PHI. We do not share PHI, phone numbers, or text-messaging data with advertising platforms. If we use advertising or analytics tools, they are limited to public marketing pages of the Site and never receive PHI.

6. Cookies, Analytics, and Advertising

Strictly necessary cookies keep the Site working. With your choice through our cookie banner, public marketing pages may also use analytics and advertising cookies (including retargeting cookies that show ZYP ads to people who visited our public pages). No advertising or analytics tracking runs on patient portal, appointment booking, intake, or other pages where health information is entered. We honor Global Privacy Control (GPC) signals as an opt-out of targeted advertising.

7. Your Privacy Choices {#privacy-choices}

You may:

  • Opt out of targeted advertising by turning on Global Privacy Control in your browser, rejecting advertising cookies in our cookie banner, or emailing josh@zypmed.com with the subject "Opt out of targeted advertising";

  • Stop marketing texts by replying STOP, and stop marketing email with the unsubscribe link;

  • Ask what personal information we have, request a copy, ask us to correct it, or ask us to delete it (we must keep medical records for the period required by law); and

  • Appeal a decision on your request by replying to our response with the subject "Privacy appeal."

We will not treat you differently for using these rights. Your HIPAA rights regarding your medical record are described in our Notice of Privacy Practices.

How to make a request: email josh@zypmed.com or call (402) 407-2847. We will verify your identity by matching your name, date of birth, and contact information on file. We use verification information only to verify your request. An authorized agent may submit a request with your signed permission.

8. How Long We Keep Information

We keep personal information as long as needed to provide Services and meet legal duties. Medical records are kept as required by the law of the state where you received care. We dispose of information securely when it is no longer needed.

9. How We Protect Information

We use administrative, technical, and physical safeguards, including access limited to people who need it, HIPAA-compliant vendors, and a HIPAA security program. We investigate suspected security incidents and notify you and regulators when required by law.

10. Children

The Site and Services are for adults only: 19 or older in Nebraska and 18 or older in every other state where we operate. We do not knowingly collect information from minors. If you believe a minor has given us information, contact info@zypmed.com and we will delete it as allowed by law.

11. Changes to This Policy

We may update this Policy by posting a new version with a new "Last Updated" date. For material changes, we will also notify current patients by email or secure message.

12. Contact Us

ZYP Medical, LLC — Attn: Privacy (Joshua Peterson, FNP-C) 11922 Standing Stone Dr, Suite 200, Gretna, NE 68028 Phone: (402) 407-2847 | Fax: (480) 739-0434 Privacy: josh@zypmed.com | General: info@zypmed.com

To receive this policy in another format, such as large print, contact us.