Privacy Policy & Cookie Notice

Last Updated: July 8, 2026

Virtue Medical Clinic (“we,” “our,” or “us”) operates the website virtuemedkc.com (the “Site”). We are a Direct Primary Care (DPC) practice committed to protecting the privacy, security, and confidentiality of your personal, digital, and health information. This Privacy Policy explains how we collect, use, disclose, and safeguard information gathered through our public website.

This Privacy Policy does not govern your clinical medical records. All Protected Health Information (“PHI”) created or maintained during patient care is governed by our HIPAA Notice of Privacy Practices (“NPP”), which is provided to all patients and posted on our Site.

1. HIPAA & Health Information

Health information submitted through our secure Patient Hub/Portal, electronic medical records (EMR) system, or during clinical care is protected under the Health Insurance Portability and Accountability Act (HIPAA) and applicable state laws.

This Privacy Policy applies only to information collected through the public website (virtuemedkc.com).

All PHI is handled exclusively within our HIPAA‑compliant systems and vendors with signed Business Associate Agreements (BAAs).

2. Information We Collect

A. Information You Voluntarily Provide

When you interact with our Site—such as requesting portal access, submitting contact forms, completing health assessments, or requesting prescription refills—we may collect:

Contact Information: First name, last name, email address, phone number.
Self‑Reported Health & Symptom Data: Physical, mental, and sexual health symptoms submitted through online assessments or screening forms.
Free‑Form Comments: Any medical history, goals, or personal context you voluntarily provide.

B. Information Collected Automatically

Our Site uses cookies and similar technologies to improve performance and security. Automatically collected data may include:

IP address, device identifiers, browser type
Pages visited, time spent on pages, referral URLs
Aggregate analytics metrics

No PHI is collected automatically.

3. Cookies, Analytics, and Advertising Technologies

A. Strictly Necessary Cookies

Our hosting provider (Wix) uses essential cookies to maintain security, load pages, and manage sessions. These cannot be disabled.

B. Marketing & Analytics Cookies

Our Site may use third‑party advertising and analytics tools, including:

Google DoubleClick
The Trade Desk (adsrvr.org)
Other performance‑measurement platforms

These tools track browsing behavior only on public pages and only with your explicit consent.

C. HIPAA Tracking Compliance

In accordance with HHS guidance:

All marketing, analytics, and advertising trackers are blocked by default.
No tracking technologies run on any page containing health assessments, symptom forms, or clinical intake questions.
No PHI is ever shared with advertising platforms.

D. Your Choices

You may:

Accept or reject non‑essential cookies
Change your preferences at any time
Opt out of targeted advertising where applicable

A detailed cookie table is available on our Cookie Banner.

4. How We Use Your Information

We use information collected through the public Site to:

Route appointment requests, form submissions, and refill requests to our secure portal
Review self‑reported symptoms to determine initial eligibility for clinic programs
Send newsletters or announcements to users who opt in
Improve website performance and user experience

We do not sell, rent, or share your personal information with data brokers or advertisers.

5. Third‑Party Links & External Platforms

Our Site contains links to external HIPAA‑compliant systems, including:

Patient Hub/Portal
Laboratory partners
Electronic forms and EMR systems

Once you leave virtuemedkc.com, your data is governed by the privacy and security policies of those respective platforms.

6. Security of Sensitive Data

We use administrative, technical, and physical safeguards to protect sensitive information submitted through our Site, including:

Encryption during transmission
Secure routing to clinical staff
Access controls and audit logging

Submitting medical information online carries inherent risks. You may always call our clinic to complete screenings by phone.

7. Business Associate Agreements (BAAs)

We maintain BAAs with all vendors that handle PHI, including our EMR and Patient Portal providers.

We do not transmit PHI to vendors that lack BAAs, including advertising platforms, analytics providers, or website‑hosting services.

8. Your Privacy Rights

Depending on your state of residence, you may have rights under laws such as the California Consumer Privacy Act (CCPA/CPRA), Colorado Privacy Act, Connecticut Data Privacy Act, and Virginia CDPA. These may include:

Right to know what personal data we collect
Right to request access or correction
Right to request deletion of non‑clinical data
Right to opt out of targeted advertising
Right to limit use of sensitive personal information

To exercise these rights, contact us at virtue@virtuemedkc.com.

Clinical PHI rights (access, amendments, restrictions, accounting of disclosures) are governed by HIPAA and detailed in our HIPAA Notice of Privacy Practices.

9. Data Retention

We retain non‑clinical website data only as long as necessary to fulfill the purposes described in this Policy or comply with legal obligations.

Clinical PHI retention follows federal and state medical‑record requirements.

10. Children’s Privacy

Our Site is not intended for children under 13. We do not knowingly collect personal information from children through the public website.

11. Changes to This Policy

We may update this Privacy Policy to reflect changes in our operations, technology, or legal requirements. Updates will be posted with a revised “Last Updated” date.

12. Contact Us

Virtue Medical Clinic

801 Northwest Saint Mary Drive, Suite 210

Blue Springs, MO 64014

Email: virtue@virtuemedkc.com

Phone: (816) 200-1533