Last Updated: October 22, 2025
Welcome to Get Med Card LLC (“Get Med Card,” “we,” “our,” or “us”).
We own and operate several clinic brands that help patients connect with licensed healthcare providers for medical evaluations and related services. One of those brands is Kentucky Med Card (“Kentucky Med Card”), which delivers telehealth evaluations and support for qualifying medical programs in Kentucky and other approved states.
Get Med Card LLC acts as the managing company for all affiliated clinics. It provides administrative and communication support — including phone calls, text messaging, scheduling, and customer service — and maintains the technology systems that keep those services running securely. Each clinic brand operates under the same privacy and data-protection standards described in this Policy.
This Privacy Policy explains in clear terms:
what information we collect from you,
how we use and share it,
how we protect it, and
what rights you have over your data.
By using our websites, telehealth platforms, or messaging systems, you agree to this Privacy Policy. If you do not agree, please stop using our services and contact us if you have questions about your privacy choices.
We collect only the information needed to provide and improve our services. The types of data we collect fall into these categories:
Personal Information
This includes basic details you share when creating an account, filling out an intake form, or contacting us — such as your name, date of birth, mailing address, phone number, and email address.
Health Information
When you use our telehealth or clinic services, you may provide medical history, symptoms, or other health-related details. This information may be considered Protected Health Information (PHI) under HIPAA.
Technical Data
We collect limited technical information automatically — like your device type, browser, IP address, and how you interact with our website. This helps us keep our systems secure and user-friendly.
Communications Data
We may collect information from your calls, text messages, chat sessions, or emails with our support team. This helps us respond to requests, verify identity, and ensure quality service.
Billing Information
If you make a payment, your billing details are processed securely by third-party payment vendors. We don’t store your full payment card number.
Cookies and Analytics
We use cookies and analytics tools (such as Google Analytics or Meta Pixel) to understand website performance and advertising reach. These tools do not access or store any health information.
We use your information only for legitimate purposes related to your care, communication, and service experience. Specifically, we may use it to:
Deliver telehealth and clinic services.
Communicate with you.
Coordinate with healthcare providers.
Process payments and forms.
Maintain and improve our systems.
Comply with laws and regulations.
We never sell or rent your personal or health information. Any information shared with partners is done solely to provide services or fulfill legal requirements — never for external marketing or data resale.
We take the privacy and security of your health information seriously.
Our Role Under HIPAA
Get Med Card LLC is the HIPAA-covered entity that manages administrative and communication systems for all affiliated clinic brands, including Kentucky Med Card.
Independent, licensed healthcare professionals provide medical evaluations and are responsible for maintaining their own clinical records and HIPAA compliance.
Get Med Card facilitates secure communication between patients and these providers and protects all PHI that passes through its systems.
Business Associate Agreements (BAAs)
We work only with trusted technology partners who sign Business Associate Agreements with us, requiring them to safeguard PHI under HIPAA. This includes vendors such as:
Heally Inc. (telehealth technology platform)
Twilio Inc. (secure messaging and SMS provider)
Payment processors and hosting providers (for billing and secure data storage)
How We Protect Your PHI
We use multiple layers of protection, including:
Encrypted transmission and storage of health data
Role-based access controls and audit logs
Continuous system monitoring
Staff training on HIPAA security
Your PHI is used or disclosed only for treatment, payment, healthcare operations, or as required by law.
Notice of Privacy Practices
You may request a copy of our Notice of Privacy Practices (NPP) by emailing privacy@kymedcards.com.
When you provide your phone number and consent to receive messages, you’re authorizing Get Med Card LLC and its affiliated clinics (including Kentucky Med Card) to communicate with you by SMS, MMS, or automated text.
All communications follow HIPAA and A2P 10DLC compliance requirements. Messaging is securely delivered through Twilio, our registered A2P provider.
To opt out, reply STOP to any text message. For help, reply HELP. Standard carrier rates may apply.
We share information only as necessary for:
Licensed healthcare provider coordination
Internal administrative support between affiliated clinics
Authorized service providers (Heally, Twilio, payment processors)
Legal or regulatory compliance when required
We never sell or rent your personal or health data.
We use encryption, access controls, audit logging, and regular monitoring to safeguard your information. Medical records are retained for at least seven (7) years or longer if required by law. Non-medical data, such as analytics or message logs, is kept no longer than 24 months unless legally required.
If a data breach occurs that may compromise your information, you will be notified promptly in accordance with HIPAA and state law.
Depending on your jurisdiction (HIPAA, CCPA, GDPR), you have rights to:
Access, correct, or delete your data
Restrict or object to processing
Request a copy of your records
File a complaint without retaliation
To exercise your rights, email privacy@kymedcards.com.
Our site uses cookies to improve usability and analytics tools such as Google Analytics and Meta Pixel. These collect only de-identified technical data, not PHI. You may disable cookies via your browser settings.
Our services primarily operate in the United States. Data processed abroad is protected using appropriate legal safeguards such as BAAs and Standard Contractual Clauses.
By using our services, you consent to data transfer and processing in the United States.
Our services are intended for adults 18 and older. We do not knowingly collect data from minors. Parents or guardians may contact us at privacy@kymedcards.com to request deletion if a child’s data was submitted.
We may update this Privacy Policy occasionally. The revised date will appear at the top of this page. Material updates will be communicated via website notice, email, or text (if opted in).
Continued use of our services means you accept the updated policy.
If you have questions, feedback, or privacy concerns, contact us:
Get Med Card LLC
Attn: Privacy Officer
📧 Email: privacy@kymedcards.com
📍 Address: 339 E 3900 S, Suite 110, Salt Lake City, UT 84107, USA
🌐 Website: www.kymedcards.com
HIPAA complaints may also be submitted to the U.S. Department of Health and Human Services (HHS):
👉 https://www.hhs.gov/hipaa/filing-a-complaint
Your trust means everything to us.
We protect your data with the same care we’d want for our own, following all HIPAA and industry security standards.
If you ever have questions about how your data is handled, reach out anytime at privacy@kymedcards.com.
Acknowledgment and Consent
By using our websites, telehealth platforms, or messaging systems, you acknowledge that you have read and understood this Privacy Policy and consent to our collection, use, and disclosure of information as described herein.
Today only — Don’t miss out
