Privacy Policy
Effective Date: September 24, 2026 • FRAME Medicine • Richmond Hill, GA
FRAME Medicine is committed to protecting your health information. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal and protected health information (PHI). Please read it carefully. By using our services, you agree to the practices described here.
1. Who We Are
FRAME Medicine (“FRAME,” “we,” “our,” or “us”) is a telemedicine practice based in Richmond Hill, Georgia. Medical services are offered only where the treating clinician is authorized to provide them.
Privacy Officer: Tom Rubenstein • tom@framemedicine.com • (904) 494-8330
2. Information We Collect
We collect information you provide directly and information generated through your use of our services:
- Identity Information: Name, date of birth, sex, address, email, phone number
- Health Information (PHI): Medical history, symptoms, lab results, medications, prescriptions, treatment records
- Payment Information: Billing details processed through our secure payment processor (we do not store full card numbers)
- Communications: Messages, emails, SMS texts, and records of interactions with our staff and physicians
- Technical Information: IP address, browser type, device information, and usage data collected when you access our website or patient portal
3. How We Use Your Information
We use your information for the following purposes:
- To provide, manage, and improve our telemedicine services
- To fulfill prescriptions and coordinate pharmacy services
- To communicate with you about your treatment, lab results, and care plan
- To process payments and manage your account
- To send appointment reminders, refill notifications, and care-related messages via SMS (with your consent)
- To comply with applicable laws and regulations, including HIPAA
- To protect the rights, safety, and property of FRAME Medicine and our patients
4. HIPAA Notice of Privacy Practices
FRAME Medicine protects health information in accordance with applicable privacy law. Protected health information (PHI) is used and disclosed only as permitted or required by law.
This website policy is a summary and does not replace any Notice of Privacy Practices that FRAME is required to provide.
Permitted uses of your PHI include:
- Treatment: Sharing with authorized treating providers and organizations involved in your care
- Healthcare Operations: Quality assurance, compliance, training, and operational activities
- As Required by Law: Reporting obligations to public health authorities or law enforcement as required
All other uses and disclosures of your PHI require your written authorization, which you may revoke at any time.
5. Your HIPAA Rights
To exercise any of these rights, contact our Privacy Officer at tom@framemedicine.com.
6. Business Associates and Third-Party Vendors
FRAME uses service providers to support scheduling, clinical records, communications, payment processing, and operations. Where required, we use agreements and safeguards appropriate to the information handled. Our current patient-facing scheduling and communication portal is Jane. Service providers may change as our operations evolve.
7. SMS / Text Message Communications
If you separately consent to SMS, FRAME may send service-related messages such as reminders or follow-up notices. Consent is not a condition of treatment. Message frequency varies, and message and data rates may apply. Reply STOP to opt out or HELP for assistance. We do not sell or share SMS consent information for third-party marketing.
8. Website and Technical Data
Our website may use cookies, analytics tools, and session tracking to improve user experience and measure site performance. We do not sell your personal data to advertisers. You may disable cookies in your browser settings, though some site functions may be limited as a result.
9. Data Security
We implement administrative, technical, and physical safeguards to protect your information from unauthorized access, disclosure, or destruction. These include encrypted data transmission (HTTPS/TLS), access controls, and secure cloud-based storage and service providers selected for the information they handle. No system is 100% secure; if you believe your information has been compromised, contact us immediately.
10. Data Retention
FRAME retains clinical, billing, and operational records according to applicable law and its documented retention schedule. Retention periods may vary by record type and jurisdiction.
11. Children’s Privacy
FRAME Medicine’s services are intended for adults aged 18 and older. We do not knowingly collect personal information from individuals under 18. If you believe a minor has submitted information to us, please contact us immediately.
12. Telehealth Disclosure
Services at FRAME Medicine are delivered via telemedicine. Telehealth consultations involve electronic transmission of health information and carry inherent privacy limitations compared to in-person care. By participating in telehealth services, you acknowledge and accept these limitations. We take all reasonable steps to ensure secure transmission of your health information.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be posted with a revised effective date and communicated when required by law.
14. Contact Us
For questions, requests, or complaints regarding this Privacy Policy or your health information:
Privacy Officer: Tom Rubenstein
Email: tom@framemedicine.com
Phone: (904) 494-8330
Address: FRAME Medicine, Richmond Hill, GA 31324
To file a complaint with the federal government: U.S. Department of Health and Human Services, Office for Civil Rights, hhs.gov/hipaa/filing-a-complaint. We will not retaliate against you for filing a complaint.