Privacy policy
Draft for attorney review
This is a working draft written for Next You Health. It is not final and must be reviewed by a Florida healthcare attorney before launch. The reference site's own policy pages were empty, so nothing here was copied. Last edited November 2, 2026.
Who we are
Next You Health (“we”) operates NextYouHealth.com. This policy explains what this website collects and how it's used. Health information you provide to your clinician is handled separately, through a HIPAA-compliant clinical platform, under that platform's Notice of Privacy Practices.
What this website collects
- Account details: name, email, password (stored only as a one-way hash) and state of residence.
- Consultation scheduling: the treatment you're interested in, preferred date, time window and contact method.
- Payment records: amounts, dates and receipt numbers. Card details are handled by our payment processor and never reach our servers.
- Contact form messages. Please don't include health information in them.
- Anonymous page-view counts (the page path only, with no cookies, IP addresses or identifiers).
What this website does not collect
The website does not collect medical history, symptoms, medications, lab results or prescriptions. Those are collected only inside the clinical platform once it's connected.
The health assessment
The “Find your Next You” assessment is an educational questionnaire about your goals. It is not a medical intake, and it doesn't diagnose, prescribe or decide eligibility.
- Your answers are stored only in your own browser (local storage) for up to 24 hours so you can resume or revisit your results. You can clear them at any time from the assessment.
- Your answers are not sent to our servers, not attached to your account, and never shared with advertising or analytics platforms such as Meta or Google.
- To improve the experience we record anonymous progress events: a random id created for each attempt, which step was reached, whether the assessment was completed, which button was used on the results page, and which wording variant was shown. Timestamps are rounded to the hour. We do not record names, emails, IP addresses or device details with these events.
- If you create an account or request a consultation within 24 hours of finishing, we count that as a conversion against the same random id. Your answers are still not sent.
- Medical questions are asked only later, in a separate clinical intake run by a HIPAA-appropriate clinical platform.
How we use information
To create and secure your account, schedule consultations, process payments and renewals, send receipts and renewal reminders, answer your questions and meet legal obligations. We do not sell personal information and we do not use advertising trackers on this site.
Who we share it with
Service providers that run the site and payments (hosting, database, payment processor, email), each under contract; the licensed clinicians and pharmacies involved in your care, through the clinical platform; and authorities when the law requires it.
Your choices
You can view and update account details, cancel plans and request deletion of your account by contacting us. Some records, such as payment history, must be kept for legal and tax purposes.
Security
Connections are encrypted, passwords are hashed and sessions expire after eight hours. No system is perfectly secure; we'll notify you of a breach as required by Florida law (§501.171).
Items for counsel
- Confirm HIPAA covered-entity structure and the Notice of Privacy Practices.
- Florida Digital Bill of Rights applicability.
- Email and SMS consent language (TCPA).
- Data retention schedule.
Questions? Contact us.