Privacy Policy
This Privacy Policy describes how information is collected, used, and protected when you visit wellesleymedical.com or interact with us as a prospective or current patient.
If you are, or are becoming, a patient: Clinical care is provided by Lampert Medical, PLLC, d/b/a Wellesley Medical (the "Practice"). Patients receive the Practice's HIPAA Notice of Privacy Practices, which governs how protected health information is used and disclosed in the course of medical care. That Notice — not this Privacy Policy — controls the handling of your health information. View the Notice of Privacy Practices.
1. Who we are
The website wellesleymedical.com is the website of Lampert Medical, PLLC, d/b/a Wellesley Medical (the "Practice"), the professional medical practice that delivers all clinical care to patients. Website operations, administration, and technology are provided on the Practice's behalf by Wyman Medical Management LLC, a Massachusetts limited liability company located at 888 Worcester Street, Suite 130, Wellesley, MA 02482, under a management services agreement and a HIPAA Business Associate Agreement. "We," "us," and "our" refer to the Practice and, where acting on its behalf, its management company.
2. Information we collect
Information you provide
- Contact information — name, email, phone number, and similar details you submit through forms on our website (including inquiries and waitlist signups).
- Health and intake information — medical history, medications, symptoms, goals, and other clinical information you submit through the patient intake process. This information is collected on behalf of the Practice, is treated as protected health information from the moment you submit it, and is governed by the Notice of Privacy Practices.
- Payment information — payment card and billing details, processed directly by our payment provider; we do not store full card numbers on our servers.
- Communications — emails, messages, and other information you send us directly.
Information collected automatically
- Device and usage data — IP address, browser type, operating system, pages visited, referring URLs, and timestamps.
- Cookies and similar technologies — small data files used to operate the website, remember preferences, and measure traffic. You can disable cookies in your browser, though some site features may not function as intended.
3. Cookies, analytics, and advertising
We use cookies and analytics to understand how visitors use the website and to measure the effectiveness of our advertising. We do not use advertising trackers, pixels, or third-party marketing technologies on any page where health information is entered. Intake, scheduling, and patient-facing pages are kept free of third-party marketing technologies by design. Any advertising conversion measurement is limited to general marketing pages and never draws on information about your health, your intake responses, or your status as a patient.
4. How we use information
- To respond to inquiries and provide the services you request.
- To evaluate, schedule, and support the provision of medical care by the Practice.
- To process payments and manage memberships.
- To operate, secure, and improve the website.
- To comply with legal, regulatory, and professional obligations.
- To send service-related communications (appointment reminders, account notices, and similar), and marketing emails you can leave at any time using the unsubscribe link.
We do not sell your personal information, and we will not. We do not use your personal information for targeted advertising based on your activity across other websites. We do not use protected health information for marketing.
5. How we share information
We share information only as needed to operate the Practice and the website, and only with parties bound by appropriate confidentiality and security obligations. Categories of recipients:
- The Practice and its clinicians — for the purpose of providing your care.
- Healthcare operations vendors — including our electronic health record platform, secure messaging platform, telehealth platform, clinical documentation tools, and laboratory partners. Vendors handling protected health information are bound by HIPAA Business Associate Agreements.
- Payment processors — to process evaluation fees, membership fees, and other charges.
- Pharmacies — to transmit prescriptions you authorize.
- Professional advisors — including legal counsel, accountants, and insurance carriers, where appropriate.
- Government authorities — when required by law, court order, or to protect rights, property, or safety.
- In a business transaction — if the business is involved in a merger, acquisition, or sale of assets, information may be transferred subject to confidentiality obligations and applicable law, including laws governing medical records.
For state-law disclosure purposes: the categories of personal data we collect are described in Section 2. We have not sold personal data or personally identifiable information to any third party, and we will not. Third parties to whom personal data has been or may be sold: none.
6. HIPAA and your medical record
Health information held by the Practice is protected health information ("PHI") under HIPAA and applicable state law and is governed by the Practice's Notice of Privacy Practices, provided to every patient at intake and available at any time on the website. Health information you submit through the intake process is handled with the same HIPAA safeguards from the moment of submission. General inquiries and waitlist signups that do not include health information are protected under this Privacy Policy and the safeguards described below.
7. Data security
We maintain administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, and vendor due diligence. We comply with the Massachusetts Standards for the Protection of Personal Information of Residents of the Commonwealth (201 CMR 17.00) and applicable provisions of the HIPAA Security Rule. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security. We will notify affected individuals of a breach of unsecured information as required by law.
8. Your privacy rights
- Access, correction, deletion, portability — you may request access to, correction or deletion of, or a portable copy of the personal data we hold about you.
- Opt out of targeted advertising or sale — we do neither, and you may confirm or exercise this right at any time.
- Medical records — patients requesting medical records will be assisted under HIPAA, which provides stronger rights, by contacting the Practice.
- Marketing communications — unsubscribe from marketing emails using the link in any such email.
- Cookies — disable or delete cookies through your browser settings.
Rhode Island residents have these rights under the Rhode Island Data Transparency and Privacy Protection Act; we extend the same rights to all visitors as a matter of practice. To exercise any right, email admin@wellesleymedical.com. We will verify your identity and respond within 45 days. You will never be penalized for exercising a privacy right.
9. Children
The website is not directed to children under 18, and we do not knowingly collect personal information from children. Wellesley Medical provides care to adults only. If you believe a minor has provided us information, contact us and we will delete it.
10. Third-party links
Our website may link to third-party sites. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy notices.
11. United States only
The website is intended for residents of the United States, and the Practice's medical services are available only to patients located in Massachusetts and Rhode Island.
12. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent version. Material changes will be posted on this page. Superseded versions are retained and available on request.
13. Contact us
Lampert Medical, PLLC d/b/a Wellesley Medical
Attn: Administration (Wyman Medical Management LLC)
888 Worcester Street, Suite 130
Wellesley, MA 02482
Email: admin@wellesleymedical.com