Privacy Policy

Privacy Policy

Effective Date: July 16, 2025

Tough Luck Med Kits LLC (“Company,” “we,” “our,” or “us”) respects your privacy and is committed to protecting the personal and health information you share with us. This Privacy Policy explains how we collect, use, disclose, and protect your information—including information governed by the Health Insurance Portability and Accountability Act (HIPAA).

1. Scope

This Privacy Policy applies to information collected through our website, associated  applications, and services, including telehealth consultations, kit purchases, prescription services, and digital communication channels.

2. Information We Collect

a. Personal Information

We may collect the following:

• Name, mailing address, email address, and phone number
• Date of birth, gender, and identity documents (if required)
• Payment information (processed securely by third-party providers)

b. Health Information (PHI)

If you engage in telehealth services or request medical kits, we may collect Protected Health Information (PHI), including:

• Medical history and current symptoms
• Diagnoses and treatment plans
• Prescription data
• Consultation notes from licensed healthcare providers

c. Technical & Usage Information

When you use our website or app, we collect:

• IP address, browser type, device info
• Cookies,  session logs, and geolocation (if enabled)
• Analytics data (via Google Analytics, Facebook Pixel, and Instagram tracking)

3. How We Use Your Information

We use your information to:

• Provide and manage your care through our telehealth platform
• Deliver products (such as medical kits) and support your orders
• Comply with federal and state medical documentation requirements
• Communicate prescriptions, and service updates
• Improve website functionality, personalization, and user experience
• Analyze trends using tools like Google Analytics
• Send marketing emails or targeted ads on Facebook and Instagram (with your consent)

You can opt out of marketing at any time.

4. HIPAA Compliance – Notice of Privacy Practices

As a provider of healthcare-related services, Tough Luck Med Kits LLC complies with the Health Insurance Portability and Accountability Act of 1996 (HIPAA). PHI is only used or disclosed as permitted by law.

a. Permitted Uses and Disclosures

We may use your PHI for:

• Treatment: Coordinating or managing healthcare and consultations
• Payment: Billing you for services rendered
• Healthcare Operations: Quality assessments, audits, and training

b. Disclosures Requiring Authorization

We will not disclose your PHI for:

• Marketing not related to your care
• Sale of medical information
• Non-healthcare-related purposes

...unless you provide written authorization, which you may revoke at any time.

c. Your HIPAA Rights

You have the right to:

• Access and request a copy of your PHI
• Request corrections to your medical records
• Receive a list of disclosures
• Request restrictions on certain uses or disclosures
• File a complaint with our Privacy Officer or the U.S. Department of Health and      Human Services (HHS)

5. Cookies and Tracking Technologies

We use cookies and tracking pixels to improve performance and personalize content.

Technologies used include:

• Google Analytics: Tracks website behavior to help us optimize layout and messaging.
• Facebook Pixel: Enables remarketing on Facebook/Instagram.
• Instagram Insights: Allows performance review of IG traffic.

You can disable cookies through your browser settings. Use of our website constitutes consent to cookie use.

6. Information Sharing

We do not sell your personal or health information. We may share it as follows:

• With healthcare providers who deliver your treatment
• With third-party vendors who process payments, provide cloud storage, or      support communication (under binding contracts)
• As required by law, such as in response to subpoenas or public health reporting
• During business transitions, such as mergers, acquisitions, or reorganizations

7. Data Security

We implement administrative, physical, and technical safeguards to protect personal and health data. This includes:

• Encryption of PHI in transit and at rest
• Secure HIPAA-compliant storage for telehealth records
• Role-based access controls and routine audits

Despite our efforts, no system is 100% secure. We encourage users to protect their accounts and report any suspected breaches.

8. Data Retention

We retain personal and health information for as long as necessary to:

• Provide services
• Comply with state and federal health laws
• Fulfill legal obligations

Medical records may be kept for at least 7 years, or longer if required by law.

9. Your Privacy Rights

Depending on your jurisdiction (e.g., Utah, Idaho, Wyoming, etc.), you may:

• Access or delete your personal data
• Correct inaccuracies
• Object to or restrict certain processing
• Withdraw consent for marketing or data sharing

To make a request, contact us at info@toughluckmedkits.com.

10. Children’s Privacy

Our services are not directed to children under 18 without verified parental consent. If we become aware that we’ve collected data from a minor without appropriate consent, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted here with an updated effective date. If material changes are made, we will notify you on our website.

12. Contact Us

For questions about this Privacy Policy, to exercise your rights, or to report a concern:

Tough Luck Med Kits LLC
Attn: Privacy Officer
182 S 1450 E, Hyrum, Utah 84319
Email: info@toughluckmedkits.com
Phone: 435-554-8129