top of page

Privacy Policy

Last Updated: July 14, 2026

Virtue Medical Clinic (“we,” “our,” or “us”) operates the website virtuemedkc.com (the “Site”). We are a Direct Primary Care (DPC) practice committed to protecting the privacy, security, and confidentiality of your personal, digital, and health information. This Privacy Policy explains how we collect, use, disclose, and safeguard information gathered through our public website.

This Privacy Policy does not govern your clinical medical records. All Protected Health Information (“PHI”) created or maintained during patient care is governed by our HIPAA Notice of Privacy Practices (“NPP”), which is provided to all patients and posted on our Site.

1. HIPAA & Health Information

Health information submitted through our secure Patient Hub/Portal, electronic medical records (EMR) system (Atlas.MD), or during clinical care is protected under the Health Insurance Portability and Accountability Act (HIPAA) and applicable state laws.

This Privacy Policy applies only to information collected through the public areas of the website (virtuemedkc.com). All PHI is handled exclusively within our HIPAA-compliant systems and with vendors that have signed Business Associate Agreements (BAAs).

2. Information We Collect

A. Information You Voluntarily Provide

When you interact with our Site—such as requesting portal access, submitting contact forms, completing health assessments, symptom screenings, or requesting prescription refills—we may collect:

  • Identity & Contact Information: First name, last name, date of birth, email address, phone number.

  • Self-Reported Health & Symptom Data: Physical, mental, and sexual health symptoms or other details submitted through online assessments or screening forms (this information is treated as PHI once received and routed securely).

  • Free-Form Comments: Any medical history, goals, or personal context you voluntarily provide.

B. Information Collected Automatically

Our Site uses cookies and similar technologies for essential functionality, security, and basic site performance and analytics provided by our hosting platform (Wix). Automatically collected data may include:

  • IP address, device identifiers, and browser type

  • Pages visited, time spent on pages, and referral URLs

  • Aggregate site usage metrics collected through Wix Analytics

No PHI is collected automatically through public pages. However, if you access or submit a health-related form on this Site, please see Section 4 regarding how that information is handled separately.

3. Cookies and Similar Technologies

Our Site uses cookies deployed by our hosting platform (Wix). These include:

  • Strictly necessary cookies — used for security (including CSRF protection via XSRF-TOKEN), server session management, and page rendering. These cookies are required for the Site to function and cannot be disabled.

  • Performance and analytics cookies — Wix places cookies (such as svSession and bSession) that support site stability and help us understand aggregate visitor behavior. This data is processed by Wix on our behalf and used to power Wix Analytics, which we use internally to review general site traffic and performance.

We do not independently deploy third-party advertising, marketing, or behavioral tracking technologies on this Site. No tracking pixels, ad networks, or data brokers are used.

In accordance with U.S. Department of Health and Human Services (HHS) guidance on online tracking technologies, we configure our site to prevent tracking technologies from collecting or transmitting PHI. We have enabled Wix’s PHI protection features and maintain a signed Business Associate Agreement (BAA) with Wix. Health intake forms and patient-facing pages on this Site are not connected to advertising or analytics platforms in a manner that would disclose PHI to third parties.

4. How We Use Your Information

We use information collected through the public Site to:

  • Route appointment requests, form submissions, and refill requests to our secure systems.

  • Review self-reported symptoms to determine initial eligibility or prepare for clinical intake.

  • Send newsletters or announcements to users who opt in.

  • Improve website performance and user experience.

We do not sell, rent, or share your personal information with data brokers or advertisers.

5. Third-Party Links & External Platforms

Our Site may contain links to third-party websites, resources, and platforms for your convenience.

  • HIPAA-Compliant External Systems: We link to external HIPAA-compliant systems, including our EMR’s Patient Hub/Portal, laboratory partners, and other EMR systems. When you access these platforms, your data is governed by the privacy and security policies of those respective platforms. We maintain Business Associate Agreements (BAAs) where required.

  • Non-HIPAA-Compliant External Resources: Links to non-HIPAA-compliant external websites (such as educational resources, articles, or general health information on our Patient Resources page) are provided for informational purposes only. Once you leave virtuemedkc.com and click on these links, we have no control over the privacy practices, security, or content of those external sites. We encourage you to review the privacy policy of any third-party site you visit. Virtue Medical does not share or transmit your medical records or clinical data with these informational resources, and your interactions on those external sites are subject entirely to their own terms and tracking practices.

6. Security of Sensitive Data

We use administrative, technical, and physical safeguards to protect sensitive information submitted through our Site, including encryption during transmission, secure routing to clinical staff, access controls, and audit logging.

Submitting medical information online carries inherent risks. You may always call our clinic at (816) 200-1533 to complete screenings by phone. You may also complete screenings in-person at the clinic during open hours.

7. Business Associate Agreements (BAAs)

We maintain BAAs with all vendors that handle PHI, including our EMR and Patient Portal providers. We do not transmit PHI to vendors that lack BAAs.

8. Data Breach Notification

In the event of a breach of personal information as defined under Missouri law (RSMo § 407.1500), we will notify affected individuals without unreasonable delay, consistent with applicable law and in coordination with law enforcement where required.

9. Your Privacy Rights

Depending on your state of residence, you may have rights under applicable laws. These may include the right to know what personal data we collect, request access or correction, request deletion of non-clinical data, or limit use of sensitive personal information.

To exercise these rights for public website data, contact us at virtue@virtuemedkc.com. Clinical PHI rights (access, amendments, restrictions, accounting of disclosures) are governed by HIPAA and detailed in our HIPAA Notice of Privacy Practices.

10. Data Retention

We retain non-clinical website data only as long as necessary to fulfill the purposes described in this Policy or comply with legal obligations. Clinical PHI retention follows federal and state medical-record requirements.

11. Children’s Privacy

Our Site is not intended for persons under 18. We do not knowingly collect personal information from children through the public website.

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in our operations, technology, or legal requirements. Updates will be posted with a revised “Last Updated” date. Continued use of the Site after changes constitutes acceptance of the updated Policy.

13. Contact Us

Virtue Medical Clinic

801 Northwest Saint Mary Drive, Suite 210

Blue Springs, MO 64014

Email: virtue@virtuemedkc.com

Phone: (816) 200-1533

bottom of page