1. Introduction and Scope
Scope in one sentence.
This Privacy Policy explains RubyMD's handling of personal information on its public website and non-clinical services. It does not replace the Notice of Privacy Practices issued by the actual professional entity that provides a patient's clinical care.
RubyMD respects privacy and is committed to handling personal information responsibly. This Privacy Policy describes how RubyMD collects, uses, discloses, retains, and protects personal information when you visit www.joinrubymd.com, interact with RubyMD's public marketing pages, submit a business or general inquiry, request information, attend an event, communicate with us, purchase or inquire about non-clinical services, or otherwise interact with services that link to this Privacy Policy (collectively, the "Public Services").
In this Policy, "RubyMD," "we," "us," and "our" mean the RubyMD brand and the legal entity that operates the relevant Public Services. "Personal information" means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked with you or your household. It includes "personal data," "consumer health data," and similar terms where applicable law uses those terms.
This Policy does not govern protected health information ("PHI") created, received, maintained, or transmitted by the actual treating professional entity in connection with clinical care. If you become a patient, the actual treating professional entity will provide a separate Notice of Privacy Practices explaining how it uses and discloses PHI and how to exercise HIPAA rights. RubyMD may perform non-clinical services for a treating professional entity under a business associate agreement when required by law; that relationship does not make RubyMD the provider of clinical care.
2. Important Public-Site and Patient-Portal Separation
The public website is designed for general information, business inquiries, and non-clinical communications. Do not submit symptoms, diagnoses, medication lists, treatment questions, photos of medical conditions, insurance cards, or other health information through an ordinary public-site form, unencrypted email, social-media message, or advertising-platform lead form. We will direct prospective patients to the appropriate secure process when available.
RubyMD's patient portal, intake, scheduling, clinical-visit, and medical-record environments are operationally distinct from public marketing pages. RubyMD's intended configuration is that advertising pixels, behavioral-advertising tags, session-replay tools, and other marketing trackers are not deployed on patient portal, intake, scheduling, clinical visit, payment-for-care, or medical-record pages. The implementation team validates that configuration before launch and after material website changes.
3. Personal Information We Collect
The categories below describe personal information RubyMD may collect in the preceding twelve months and may collect in the future, depending on how you use the Public Services.
| Category | Examples | Typical sources |
|---|---|---|
| Identifiers and contact information | Name, email address, telephone number, mailing address, account credentials, IP address, device identifiers | Directly from you; cookies; service providers |
| Commercial and business information | Services requested, purchased, or considered; transaction history; business name, role, goals, and service preferences | Directly from you; payment and commerce vendors |
| Internet and device activity | Browser and device type, operating system, referral source, pages viewed, links clicked, approximate location derived from IP address, interaction with emails or ads | Cookies, pixels, analytics, logs, advertising partners |
| Communications and user content | Messages, support requests, meeting notes, call recordings if separately disclosed, survey responses, and documents you voluntarily submit | Directly from you; support and communications vendors |
| Professional information | Job title, organization, professional profile, business website, public social-media information | Directly from you; public sources; business partners |
| Inferences | General preferences, likely interests, and audience segments derived from public-site interaction | Analytics and advertising providers; our internal analysis |
| Payment and transaction information | Purchase amount, transaction date, payment status, billing information; payment card information is generally processed by a payment processor rather than stored by RubyMD | You; payment processors |
We do not intentionally use Public Services to collect medical records or clinical PHI. If a person voluntarily sends health information through a public channel, we will use reasonable efforts to route the person to an appropriate secure channel or otherwise handle the information consistent with the circumstances and applicable law. A person should not treat an ordinary public-site form as a secure clinical channel.
4. How We Collect Information
We collect personal information in three principal ways.
Information you provide directly. You may provide information when you complete a form, request a consultation or demo, create an account, subscribe to communications, purchase a non-clinical service, contact support, participate in a survey or event, submit a job application, or communicate with us.
Information collected automatically. When you visit the public website, we and our service providers may automatically collect information through cookies, pixels, web beacons, software-development tools, logs, and similar technologies. This information may include IP address, browser, device, page views, clicks, timing, referring URL, and advertising interactions.
Information from third parties. We may receive information from analytics providers, advertising platforms, social-media platforms, referral partners, payment processors, event providers, public sources, and business partners. Those parties' handling of information is governed by their own policies and agreements.
5. Cookies, Pixels, Analytics, and Interest-Based Advertising
RubyMD uses cookies and similar technologies on public marketing pages to operate the website, remember preferences, measure traffic, understand engagement, prevent fraud, improve content, attribute advertising, and show or measure interest-based advertising where permitted by law. We may use analytics and advertising providers that receive identifiers and internet-activity information from public website pages.
Some disclosures through cookies and pixels may constitute a "sale," "sharing," or processing for targeted advertising under certain U.S. privacy laws, even though RubyMD does not exchange a person's name for money. We provide choices described below and honor a valid Global Privacy Control signal where required by applicable law.
You can control cookies through browser settings. Blocking cookies may affect website functionality. You may also use the following industry opt-out resources, which are provided by third parties:
- Digital Advertising Alliance opt-out tools (optout.aboutads.info)
- Network Advertising Initiative opt-out tools (optout.networkadvertising.org)
Your choices may be browser- and device-specific. Cookie controls do not automatically prevent all data collection, including information necessary to operate, secure, or measure the Public Services.
6. How We Use Personal Information
RubyMD may use personal information for the following business and commercial purposes:
| Purpose | Examples |
|---|---|
| Operate and deliver Public Services | Provide requested information, process purchases, create accounts, schedule demos or business consultations, provide support, and maintain records |
| Communicate with you | Send transactional, account, security, service, event, and support messages; respond to inquiries |
| Market and measure services | Send marketing communications where permitted; evaluate ad campaigns; create or use audience segments; understand interest in our services |
| Improve and secure the Public Services | Analyze usage, troubleshoot, test, monitor fraud, enforce terms, protect systems, and improve content and functionality |
| Perform contracts and legal obligations | Process payments, administer engagements, comply with lawful requests, maintain required records, and establish or defend legal claims |
| Business administration | Conduct audits, finance, corporate transactions, vendor management, training, and internal reporting |
| Other disclosed or consented purposes | Use information for another purpose disclosed when collected or with your consent where required |
RubyMD does not use chatbot tools or artificial-intelligence tools to collect or process information through the Public Services as of the Last Updated date above. If that practice changes materially, we will update this Policy and applicable notices before deploying the change.
7. How We Disclose Personal Information
RubyMD may disclose the categories of personal information described above to the following recipients for the purposes described in this Policy.
| Recipient category | Why information may be disclosed |
|---|---|
| Service providers and contractors | Hosting, website development, analytics, payment processing, communications, customer support, security, accounting, legal, and other operational services |
| Advertising, analytics, and social-media partners | Public-site analytics, advertising measurement, audience creation, and interest-based advertising, subject to applicable choices |
| Professional advisors and business partners | Legal, accounting, insurance, financing, auditing, consulting, referral, and operational support |
| Affiliates and successors | Internal administration, corporate operations, financing, merger, acquisition, restructuring, asset sale, or similar transaction |
| Government authorities and other parties where legally necessary | Compliance with law, subpoena, court order, regulatory request, protection of rights, fraud prevention, security, safety, or legal claims |
| A treating professional entity or provider, when you seek clinical care | Routing a patient to an appropriate secure workflow or coordinating non-clinical platform services; clinical information is governed by the treating entity's notices and contracts |
RubyMD does not sell or rent names, medical records, or patient lists for money. However, certain public-site advertising and analytics disclosures may be treated as a "sale" or "sharing" of identifiers and internet activity under applicable law. RubyMD does not disclose mobile telephone numbers, text-message originator information, or SMS opt-in consent to unaffiliated third parties for their own marketing or promotional purposes. RubyMD may disclose SMS consent status to vendors that provide messaging, delivery, telecommunications, security, or compliance services on RubyMD's behalf.
8. Your Choices
8.1 Marketing Emails and Texts
You may opt out of marketing emails by using the unsubscribe link in the message. You may opt out of marketing texts by replying STOP. Your opt-out request may take a reasonable time to process. You may still receive non-marketing communications, including transaction, security, account, legal, care-coordination, or appointment-related communications where applicable.
Marketing-text consent must be separate from consent to receive clinical, account, or transactional messages. Consent to marketing is not a condition of medical care or of purchasing a non-marketing service.
8.2 Cookies, Targeted Advertising, and Global Privacy Control
To opt out of the sale or sharing of personal information or targeted advertising to the extent applicable law provides that right, email [email protected] with the subject line "Privacy Opt-Out." RubyMD will process a valid Global Privacy Control ("GPC") signal as an opt-out of sale or sharing or targeted advertising for the browser or device that transmits the signal where required by law.
8.3 Care-Related Communication Preferences
If you are a patient, your preferences concerning appointment reminders, care-related text messages, email, and other communications are addressed through the treating professional entity's consent and privacy processes. Do not send clinical or urgent requests to a general privacy email address.
9. U.S. State Privacy Rights
Depending on your state of residence and the applicability thresholds in state law, you may have rights to request confirmation of processing, access, correction, deletion, portability, or an opt-out of sale, sharing, targeted advertising, or certain profiling. Some states also provide rights concerning consumer health data or sensitive data.
To exercise a privacy right, email [email protected] with the subject line "Privacy Request." We may verify your identity before acting and may request information reasonably necessary for verification. You may use an authorized agent where permitted by law; we may require proof of the agent's authority and may verify your identity directly.
We will respond within the time required by applicable law. If we deny a request, you may appeal by emailing [email protected] with the subject line "Privacy Request Appeal." We will not unlawfully discriminate against you for exercising a privacy right.
California-Specific Notice
For California residents, the categories of personal information RubyMD may collect, the sources, purposes, and recipient categories are described in Sections 3 through 7. In the preceding twelve months, RubyMD may have shared identifiers and internet or electronic network activity with advertising and analytics partners for cross-context behavioral advertising. California residents may exercise the rights described in this Policy, including the right to limit certain uses of sensitive personal information where applicable. RubyMD does not knowingly sell or share personal information of consumers under sixteen (16) years of age.
Consumer Health Data
Some state laws regulate personal information that identifies a person's past, present, or future physical or mental health status. RubyMD's public website is not intended to collect clinical health information. If state law treats a submitted inquiry or interaction as consumer health data, RubyMD will process it only as necessary to provide the requested service, operate and secure the Public Services, comply with law, or as otherwise permitted or consented to under applicable law. We will provide any additional notice or consent required by applicable consumer-health-data laws before engaging in processing that requires it.
10. Data Retention
RubyMD retains personal information for as long as reasonably necessary for the purposes described in this Policy, including to provide Services, maintain business and transaction records, meet legal and contractual obligations, resolve disputes, enforce agreements, protect security, and preserve evidence. Retention periods depend on the nature of the information, the purpose of processing, legal requirements, and the sensitivity of the information. When information is no longer needed, we will delete, deidentify, aggregate, or otherwise dispose of it in accordance with our retention practices and applicable law.
11. Security
RubyMD uses reasonable administrative, technical, and organizational safeguards designed to protect personal information. No internet transmission, storage system, or security control is completely secure. You are responsible for protecting your passwords and devices. If we are legally required to provide notice of a breach affecting personal information, we will do so as required by applicable law.
12. Children's Privacy
The Public Services are not directed to children, and RubyMD does not knowingly collect personal information from anyone under eighteen (18) through the Public Services. If you believe a child has provided personal information, contact [email protected] so we can investigate and take appropriate action.
13. External Links and Social Media
The Public Services may link to external websites, social-media platforms, or applications. This Policy does not govern those third parties. Their collection and use of information is governed by their own privacy notices. Review their policies before providing information or interacting with their services.
14. Changes to This Policy
RubyMD may update this Policy from time to time. The revised policy will be posted on this page with an updated Last Updated date. If a change is material, we may provide additional notice where required by law or reasonably practicable. Continued use of the Public Services after an update is subject to the revised Policy to the extent permitted by law.
15. Contact Us
For questions, concerns, or requests about this Privacy Policy, contact:
- [email protected]
- Phone
- 786-402-5587
- Website
- www.joinrubymd.com
- Privacy requests
- Email us with the subject line "Privacy Request," "Privacy Opt-Out," or "Privacy Request Appeal."