Privacy Policy
This Privacy Policy describes how Wyman Medical Management LLC, doing business as Wellesley Medical ("Wellesley Medical," "we," "us," or "our"), collects, uses, and protects information when you visit wellesleymedical.com or interact with us as a prospective or current patient.
If you are an established patient: Clinical care is provided by an affiliated professional medical practice. Patients receive a separate HIPAA Notice of Privacy Practices at intake, which governs how protected health information is used in the course of your medical care. That notice — not this Privacy Policy — controls the handling of your medical record.
1. Who we are
The website wellesleymedical.com is operated by Wyman Medical Management LLC, doing business as Wellesley Medical, a Massachusetts limited liability company located at 888 Worcester Street, Suite 130, Wellesley, MA 02482. Wyman Medical Management LLC provides administrative and management services to an affiliated professional medical practice that delivers clinical care to patients.
2. Information we collect
Information you provide
- Contact and intake information — name, email, phone number, date of birth, address, and similar details you submit through forms on our website (including the patient intake flow and waitlist).
- Health information — medical history, medications, symptoms, goals, and other clinical information submitted as part of patient intake or ongoing care.
- Payment information — payment card and billing details, processed by our payment provider (we do not store full card numbers on our servers).
- Communications — emails, messages, and other information you send us directly.
Information collected automatically
- Device and usage data — IP address, browser type, operating system, pages visited, referring URLs, and timestamps.
- Cookies and similar technologies — small data files used to operate the website, remember preferences, and measure traffic. You can disable cookies in your browser, though some site features may not function as intended.
3. How we use information
- To respond to inquiries and provide the services you request.
- To evaluate, schedule, and provide medical care through our affiliated practice.
- To process payments and manage memberships.
- To operate, secure, and improve the website.
- To comply with legal, regulatory, and professional obligations.
- To send service-related communications (appointment reminders, account notices, and similar).
We do not sell your personal information. We do not use your protected health information for marketing.
4. How we share information
We share information only as needed to operate the practice and the website, and only with parties bound by appropriate confidentiality and security obligations. Categories of recipients include:
- Our affiliated medical practice and its clinicians — for the purpose of providing your care.
- Healthcare operations vendors — including our electronic health record platform, secure messaging platform, telehealth platform, AI clinical documentation tool, and laboratory partners. Vendors handling protected health information are bound by HIPAA Business Associate Agreements.
- Payment processors — to process membership fees and other charges.
- Pharmacies — to transmit prescriptions you authorize.
- Professional advisors — including legal counsel, accountants, and insurance carriers, where appropriate.
- Government authorities — when required by law, court order, or to protect rights, property, or safety.
- In a business transaction — if Wellesley Medical is involved in a merger, acquisition, or sale of assets, information may be transferred subject to confidentiality and applicable law.
5. HIPAA and your medical record
Health information you provide as part of receiving medical care is protected health information ("PHI") under the federal Health Insurance Portability and Accountability Act (HIPAA) and applicable state law. PHI is held by our affiliated medical practice and is governed by the practice's HIPAA Notice of Privacy Practices, which is provided to every patient at intake and available on request.
Information you submit through the website before becoming a patient (such as a waitlist email or general inquiry) is treated with reasonable care but may not constitute PHI under HIPAA until a treatment relationship is established.
6. Data security
We maintain administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, and vendor due diligence. We comply with the Massachusetts Standards for the Protection of Personal Information of Residents of the Commonwealth (201 CMR 17.00) and applicable provisions of HIPAA's Security Rule. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.
7. Your choices and rights
- Access and correction — patients may request access to or correction of their medical records by contacting our office.
- Marketing communications — you can unsubscribe from marketing emails using the link in any such email.
- Cookies — you can disable or delete cookies through your browser settings.
- State privacy rights — depending on your state of residence, you may have additional rights to access, correct, delete, or restrict the use of your personal information. Contact us using the details below to exercise any such rights.
8. Children
The website is not directed to children under 18, and we do not knowingly collect personal information from children. Wellesley Medical provides care to adults only.
9. Third-party links
Our website may link to third-party sites. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy notices.
10. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent version. Material changes will be posted on this page; continued use of the website after changes are posted constitutes acceptance of the updated policy.
11. Contact us
If you have questions about this Privacy Policy or our handling of your information, contact us at:
Wyman Medical Management LLC, dba Wellesley Medical
888 Worcester Street, Suite 130
Wellesley, MA 02482
Email: hello@wellesleymedical.com