PRIVACY POLICY

Anchor Away Telehealth – State of New Mexico

Effective Date: July 21, 2026

Anchor Away Telehealth (“Anchor Away,” “we,” “us,” or “our”) provides telehealth medical services to patients located in New Mexico. This Privacy Policy explains how we collect, use, disclose, and protect information we obtain through our website, patient portal, intake forms, and telehealth visits, and describes the choices and rights available to you. Please read this policy carefully. By using our website or services, you acknowledge the practices described here.

Related Document: This Privacy Policy works together with our HIPAA Notice of Privacy Practices, which specifically governs how we use and disclose Protected Health Information (PHI) as a HIPAA-covered healthcare provider. Where this policy and the Notice of Privacy Practices address the same topic, the Notice of Privacy Practices controls for PHI.

1. Information We Collect

1.1 Information You Provide Directly

Identifying information: name, date of birth, address, phone number, email address
Health information: medical history, current medications, allergies, symptoms, lab results, treatment notes, and other information you share during intake or a telehealth visit
Payment information: billing address, insurance information, and payment card details (processed via a secure third-party payment processor)
Account credentials for our patient portal or telehealth platform
Communications you send us, such as messages, appointment requests, or support inquiries

1.2 Information Collected Automatically

Device and usage information: IP address, browser type, operating system, referring URLs, and pages viewed
Cookies and similar technologies used for site functionality, analytics, and (where you consent) marketing purposes
Approximate location information used to verify that you are physically located in a state where your provider is licensed at the time of a telehealth visit

1.3 Information from Third Parties

Pharmacies, laboratories, and other healthcare providers involved in your care
Your health insurance plan, where applicable
Our telehealth platform, scheduling, and payment vendors

2. How We Use Your Information

To provide, coordinate, and bill for your care, including diagnosis, treatment, prescribing, and follow-up
To verify your identity and confirm you are located in a state where your provider is licensed
To communicate with you about appointments, treatment plans, and account matters
To operate, maintain, and improve our website and telehealth platform
To comply with legal, regulatory, and accreditation requirements
To process payments and manage billing
With your consent, to send you appointment reminders, wellness information, or marketing communications; you may opt out of marketing communications at any time

3. Protected Health Information (PHI) & HIPAA

As a healthcare provider, Anchor Away is a “covered entity” under the Health Insurance Portability and Accountability Act (HIPAA). We use and disclose PHI as permitted by HIPAA, generally for purposes of treatment, payment, and healthcare operations, and we apply the “minimum necessary” standard to disclosures outside of treatment. Your rights regarding PHI – including the right to access and obtain a copy of your medical record, request corrections, request an accounting of certain disclosures, request restrictions on certain uses or disclosures, request confidential communications, and file a complaint – are described in full in our HIPAA Notice of Privacy Practices, provided to you at the start of care and available upon request.

We will not sell your PHI.
We will not use or disclose PHI for marketing purposes without your written authorization.
We will not disclose psychotherapy notes (where applicable) without your written authorization, except as required by law.

4. Telehealth-Specific Privacy & Security Practices

Anchor Away delivers care via telehealth in accordance with the New Mexico Telehealth Act and applicable federal and state confidentiality and security requirements. To protect your privacy during virtual care, we:

Confirm your identity and physical location at the start of each visit
Use a telehealth platform with encryption and access controls for audio/video visits and messaging
Limit staff access to your health information to those involved in your care or its administration
Recommend you participate in telehealth visits from a private location and secure device to reduce the risk of being overheard or your screen being viewed by others
Advise that no method of electronic transmission or storage is 100% secure; we cannot guarantee absolute security, but we maintain administrative, physical, and technical safeguards designed to protect your information

5. Cookies & Website Technologies

Our website may use cookies, pixels, and similar technologies to operate core site functions, remember preferences, analyze site traffic, and, where permitted, support advertising. You can control cookies through your browser settings; disabling cookies may affect site functionality. We do not knowingly use health information gathered through telehealth visits for website advertising or analytics purposes.

6. How We Share Information

We share information only as necessary to provide your care, operate our business, and comply with the law, including with:

Pharmacies, laboratories, and other treating providers involved in your care
Business associates who perform services on our behalf, such as our telehealth platform, scheduling software, and payment processor, each bound by a business associate agreement where PHI is involved
Your health insurance plan, for billing and payment purposes
Regulators, licensing boards, or public health authorities where required by law
Law enforcement or other parties when required or permitted by law, such as to prevent serious harm or in response to a valid legal request

We do not sell your personal information or PHI to third parties.

7. Data Security

Encryption of data in transit and, where applicable, at rest
Access controls limiting staff access to information on a need-to-know basis
Secure, HIPAA-compliant telehealth, scheduling, and storage platforms
Staff training on privacy, security, and confidentiality obligations

In the event of a breach involving your personal information, we will notify you and, where required, the New Mexico Attorney General, in accordance with the New Mexico Data Breach Notification Act (NMSA § 57-12C-1 et seq.) and applicable HIPAA breach notification requirements.

8. Data Retention

We retain medical records and associated information for the period required by New Mexico law and our professional licensing requirements, and other personal information for as long as reasonably necessary to fulfill the purposes described in this policy, resolve disputes, and comply with our legal obligations. Retention periods for medical records are generally a minimum of several years following the last date of service; your provider or our office can confirm the specific retention period that applies to your records upon request.

9. Your Privacy Rights & Choices

New Mexico does not currently have a comprehensive consumer data privacy statute comparable to laws in some other states. However, you have the following rights and protections:

Rights under HIPAA regarding your PHI, as described in our Notice of Privacy Practices (access, amendment, accounting of disclosures, restriction requests, confidential communications, and the right to file a complaint with us or with the U.S. Department of Health and Human Services Office for Civil Rights)
The right to opt out of marketing communications at any time
The right to request information about the categories of personal information we have collected about you
Protections under the New Mexico Data Breach Notification Act in the event your personal identifying information is involved in a security breach

New Mexico privacy law continues to evolve, and additional consumer privacy rights may become available under future state legislation. We will update this policy as required to reflect any new legal obligations.

10. Children's Privacy

Our website and services are not directed to children under 18, and we do not knowingly collect personal information from children through our website without parental involvement. Patients under 18 may only receive care through Anchor Away with the involvement and consent of a parent or legal guardian, consistent with New Mexico law.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The “Effective Date” at the top of this policy indicates when it was last revised. Material changes will be posted on our website, and where required by law, we will provide additional notice.

12. Contact Us

If you have questions about this Privacy Policy, would like to exercise a privacy right, or wish to file a complaint, please contact us:

Anchor Away Telehealth
Attn: Privacy Officer – Natalie Sanchez, FNP-BC
Email: Nataliesnpbc@gmail.com
Phone: 805-821-1888
Fax 804-964-2345

You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights, at www.hhs.gov/ocr/privacy/hipaa/complaints, or with the New Mexico Attorney General's Office. We will not retaliate against you for filing a complaint.

New Mexico's privacy law landscape is actively changing (including pending legislation such as the Internet Privacy and Safety Act and the Community and Health Information Safety and Privacy Act).

Merchant Policies