Privacy Policy

Effective Date: July 6, 2025

Updated: June 8, 2026

This Privacy Policy describes how Jerald Cook, MD, PC, a Nevada professional corporation, dba Med Fit Culture ("we," "our," or "us" or “Med Fit Culture”) collects, uses, and protects any information that you provide when you visit www.medfitculture.com, including any subfolders and subdomains therein (“Website”), use our services, or engage with our content. The terms "you" or "your" refer to users of this Website and related services. By using this Website, you consent to the practices described in this Privacy Policy.

1. Information We Collect

We may collect the following types of information:

a. Personal Information

This includes your name, email address, phone number, and other details you voluntarily submit when filling out forms, scheduling appointments, or subscribing to newsletters.

b. Usage Data

We collect non-personal information such as your browser type, IP address, pages visited, and referring website. This helps us analyze trends and improve our Website’s performance.

2. How We Use Your Information

We use the information collected to:

Respond to inquiries or service requests

Provide educational content and coaching services

Schedule consultations and manage appointments

Send email communications or updates (with opt-out options)

Improve our Website, services, and user experience

Comply with legal obligations

3. Clinical Care Disclaimer

This Website is primarily for general information, education, marketing, and booking. For your privacy and security, clinical care. including but not limited to, telehealth visits, forms, messages, Electronic Health Records (EHR), prescriptions, is handled in our HIPAA-compliant client portal(Practice Better) and, when needed, prescriptions are handled securely through DrFirst. We do not collect or store Protected Health Information (PHI) on our Website. PHI is exchanged and stored within our secure clinical systems; Website interactions, including but not limited to, cookies, analytics, contact forms without medical details, are governed by this Privacy Policy.

3A. Clinical vs. Website Data (PHI vs. non-PHI)

Med Fit Culture offers health coaching, educational services, and clinical lifestyle consultations through a separate process. Engaging with this Website or booking a free consultation does not establish a physician–patient relationship.

Clinical services are available only in Nevada and California (via Med Fit Consulting, Inc, a California corporation) and are conducted through separate, HIPAA-compliant platforms to the extent required by law.

4. Data Storage and Security

We protect your information using administrative, technical, and physical safeguards appropriate to the data type.

Clinical data (PHI): EHR and PHI is stored in our secure portal, in Practice Better . When prescriptions are required, we use DrFirst for e-prescribing. We maintain Business Associate Agreements with all vendors handling PHI, use least-privilege, role-based access, and multi-factor authentication, and avoid sending PHI through unencrypted email or Short Message Service(SMS).

Website data (non-PHI): Information collected through this Website is stored within our Website and marketing systems with encryption in transit and access controls.

Payments: Payments may be processed securely through Stripe and/or QuickBooks Online (Intuit). We do not store full card numbers on our servers. These processors maintain PCI-DSS compliance.

While we take measures to safeguard your data, no method of transmission or storage can be guaranteed to be 100% secure. By using this Website, you acknowledge and accept this risk.

5. Cookies and Analytics

We may use cookies and third-party analytics tools to monitor user behavior and enhance your experience. You may disable cookies in your browser settings, but doing so may limit your access to some Website features.

6. Third-Party Access and Sharing

We do not sell or rent your personal information. We may share data with trusted service providers who assist in operating our business, so long as they agree to keep the information confidential.

Information may also be disclosed when required by law, to protect our rights or property, or in the case of a security incident.

6A. Third-Party Processors (Healthcare Operations & Payments)

We work with trusted third-party vendors to help us deliver secure and reliable services. For any PHI, we share only the minimum necessary for treatment, payment, or healthcare operations.

Practice Better (EHR/Portal): Used for clinical scheduling, forms, secure messaging, health records.

DrFirst (E-Prescribing/EPCS): Used for electronic prescriptions, including controlled substances when clinically appropriate.

Stripe / QuickBooks Online: Used for payment processing and invoicing. Card data is not stored on our servers, and these processors maintain PCI-DSS compliance.

Because vendor practices may change, we encourage you to review their most current security statements for details. We review vendor security pages periodically and update our references as needed.

7. Use by Children

This Website is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors.

8. Access, Updates, and Opt-Out

You may request to:

• View or correct your personal information

• Unsubscribe from email communications

• Delete your information from our records

To do so, please email: [email protected]

9. Changes to This Policy

We may update this Privacy Policy at any time without prior notice. The "Effective Date" above reflects the most recent changes. Continued use of this Website after changes are made constitutes your acceptance of the updated Privacy Policy.

10. Your Rights Under GDPR (If Applicable)

If you are located in the European Union, you have additional rights under the General Data Protection Regulation (GDPR), including the right to access, correct, or delete your personal data. Please contact us if you wish to exercise these rights.

10A. Your California Privacy Rights (CPRA) (If Applicable)

If you are a California resident, you may have additional rights regarding personal information collected on this Website (non-PHI), including rights to know, delete, correct, and opt out of certain sharing. To exercise these rights, contact [email protected]. These rights do not apply to PHI governed by HIPAA, which is covered by our HIPAA Notice of Privacy Practices.

11. SMS Communications

If you provide your phone number and opt in through our website forms, you consent to receive SMS messages from Med Fit Culture, operated by Jerald Cook, MD, PC. These messages may include appointment reminders, responses to inquiries, service updates, and account notifications.

Message frequency may vary. Message and data rates may apply.

You may opt out of SMS communications at any time by replying STOP to any message. For assistance, reply HELP.

Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes.

12. Contact Us

For questions or concerns about this policy, contact:

Email: [email protected]

Phone: 775-306-7315 (text or voicemail)

Secure Patient Portal (preferred for patients): Practice Better

© Copyrights by Med Fit Culture.

The information displayed on this webpage is not medical advice nor a substitute for medical advice, diagnosis, or treatment. No physician-patient relationship is established by viewing, using, or interacting with this website.

By viewing, using, or interacting with this webpage, you agree to our Terms of Use and Privacy Policy.