Website Privacy Policy

1. Who We Are

This website is operated by Lynn Urgent Care and Woburn Urgent Care (collectively, "the Practice," "we," "us," or "our"). We provide urgent care and telemedicine services to patients in Massachusetts.

2. Information We Collect

Information You Provide Directly

When you contact us through our website (e.g., booking forms, contact forms, the symptom checker):

• Name, email address, phone number, date of birth
• Insurance information (when requested)
• Reason for visit / health concerns you share
• Other information you voluntarily provide

Information Collected Automatically

• IP address & approximate location
• Device type, browser, operating system
• Pages visited, time on pages, links clicked
• Referring website

3. How We Use Information

• To respond to inquiries and schedule appointments
• To improve our website and user experience
• To send appointment reminders and follow-up communications
• To analyze website traffic patterns
• To comply with applicable laws and regulations
• To protect against fraud and security threats

4. How We Share Information

We do not sell your personal information. We may share with:

• Service providers: athenahealth (EHR & telehealth platform), hosting providers, analytics services — all bound by confidentiality and HIPAA obligations where applicable
• Legal requirements: When required by court order, subpoena, or applicable law
• Healthcare partners: With your consent, for continuity of care

Any Protected Health Information (PHI) you share is also covered by our Notice of Privacy Practices under HIPAA, which provides additional federal protections.

5. Cookies & Tracking

Our website uses cookies and similar tracking technologies for:

• Essential cookies: Required for the website to function
• Analytics cookies: Help us understand how visitors use the site (Google Analytics or similar)
• Functional cookies: Remember your preferences

You can control cookies through your browser settings.

6. Third-Party Services

Our website integrates with several third-party services:

• athenahealth — patient portal, telehealth platform, online scheduling (governed by athenahealth's privacy practices and our Business Associate Agreement)
• Google Fonts — typography display
• Google Maps (if embedded) — location services

We are not responsible for the privacy practices of third-party services. Please review their respective privacy policies.

7. Data Security

We use reasonable technical and administrative measures including HTTPS/TLS encryption, access controls, and regular security reviews. No method of transmission over the internet is 100% secure, however, and we cannot guarantee absolute security.

8. Data Retention

We retain website data only as long as necessary for the purposes described. Medical records are retained per Massachusetts state law (minimum 7 years for adults, longer for minors).

9. Your Privacy Rights

Depending on your state of residence, you may have rights to:

• Know what personal information we have about you
• Request correction of inaccurate information
• Request deletion (subject to legal retention requirements)
• Opt out of certain data sharing
• Non-discrimination for exercising privacy rights

To exercise these rights, contact us using the information below. Patient medical record requests are handled separately under HIPAA — see our Notice of Privacy Practices.

10. Children's Privacy

This website is not directed at children under 13, and we do not knowingly collect information directly from children under 13. Our telehealth services are available to patients age 3 and older; for patients under 18, a parent or legal guardian must provide consent, supervise the visit, and submit any information on the minor's behalf.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted with an updated "Last Updated" date.