Rapha Healthcare, PLLC
Effective Date: October 20, 2026
Last Updated: October 20, 2026
At Rapha Healthcare, PLLC ("Rapha Healthcare," "RHC," "we," "our," or "us"), we respect your privacy and are committed to protecting your personal information. We understand that information about your health and wellness is personal, and we take our responsibility to safeguard that information seriously.
This Privacy Policy explains how we collect, use, store, protect, and disclose information when you visit our websites, complete online forms, participate in health or wellness assessments, purchase digital products, request consultations, or otherwise interact with our online services.
By using our website or submitting information through our online forms, you acknowledge the privacy practices described in this Policy.
1. Information We Collect
We may collect the following categories of information:
Personal Information
Name
Email address
Telephone number
Mailing address
Contact preferences
Other information you voluntarily provide
Health and Wellness Information
When you complete a health questionnaire, wellness assessment, consultation request, or other health-related form, we may collect information including:
General health concerns and wellness goals
Symptoms and relevant health history
Lifestyle and wellness habits
Hormonal or metabolic health concerns
Other health-related information you voluntarily share
We collect this information to respond to your inquiries, provide requested services, personalize applicable communications, and assist with the delivery of our healthcare and wellness offerings.
Website and Technical Information
We may automatically collect certain information through permitted website technologies, including:
IP address
Browser and device information
Pages visited and general website activity
Referral sources
Cookies and similar technologies, where enabled
We use this information to maintain our website, understand engagement, evaluate website performance, and improve the user experience, subject to applicable privacy laws.
Payment Information
If you purchase a product, consultation, membership, or service, payments may be processed through an authorized third-party payment processor. Payment information is handled according to the payment processor's security and privacy practices. We do not intentionally store complete payment card details in our CRM.
2. How We Use Your Information
Rapha Healthcare may use the information we collect to:
Respond to questions and consultation requests
Deliver products, resources, assessments, and services you request
Provide information about our healthcare and wellness offerings
Schedule appointments and communicate about requested services
Send educational content, newsletters, or promotional communications when permitted by law
Personalize relevant wellness information based on information you choose to provide
Process transactions and provide customer support
Improve our website, services, and customer experience
Maintain business records and meet applicable legal obligations
Protect against fraud, misuse, and unauthorized access
Where information constitutes protected health information under HIPAA, we use and disclose that information only as permitted or required by applicable law, including any required authorizations.
3. How Your Information Is Stored and Protected
Rapha Healthcare uses Get Care Nexus, a customer relationship management (CRM) and workflow automation platform, to help manage inquiries, communications, scheduling, and customer relationships.
Get Care Nexus provides HIPAA-supporting capabilities designed for healthcare-related operations, including secure information management and access controls.
Information submitted through our online forms may be transmitted to and maintained within Get Care Nexus and authorized supporting services.
We use administrative, technical, and organizational safeguards appropriate to the sensitivity of the information, which may include:
Controlled access to personal and health-related information
Encryption and other appropriate security measures
Role-based access permissions
Secure information management practices
Staff confidentiality requirements
Vendor oversight and contractual safeguards, including Business Associate Agreements where required
Although we take reasonable measures to safeguard information, no website, electronic transmission, or data storage system can be guaranteed completely secure.
4. HIPAA and Protected Health Information
Rapha Healthcare is committed to protecting patient information in accordance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA), where applicable.
Certain information collected when you request or receive healthcare services may qualify as protected health information (PHI). This information is subject to applicable HIPAA privacy and security requirements.
Information provided through general website browsing, marketing inquiries, or newsletter subscriptions may not always constitute PHI. However, we recognize that health-related information can be sensitive even when HIPAA does not apply.
Our collection and handling of PHI are also governed by our separate Notice of Privacy Practices, where applicable. If this Privacy Policy conflicts with our HIPAA Notice of Privacy Practices regarding PHI, the applicable HIPAA requirements and Notice of Privacy Practices govern.
We do not sell protected health information.
5. Email, SMS, and Marketing Communications
When you voluntarily provide your contact information, we may communicate with you regarding your inquiry, requested resources, appointments, purchases, or other services.
With appropriate consent or another lawful basis, we may also send educational newsletters, wellness information, promotional offers, and updates about Rapha Healthcare services.
Email Communications
You may unsubscribe from promotional emails at any time by selecting the unsubscribe link included in those communications or contacting us directly.
Text Message Communications
If you separately opt in to receive promotional text messages, Rapha Healthcare may send SMS communications relating to wellness education, products, programs, promotions, and other offerings.
Message frequency may vary. Message and data rates may apply.
You may reply STOP to opt out of promotional text messages or HELP for assistance, where those commands are supported.
Consent to receive marketing text messages is not a condition of purchasing any product or receiving healthcare services.
We will not use PHI for marketing purposes requiring HIPAA authorization unless the necessary authorization has been obtained. Consent to receive text messages is not, by itself, a HIPAA marketing authorization.
Operational or service-related communications may be governed by separate permissions and applicable law.
6. Cookies, Website Analytics, and Tracking Technologies
Our websites may use cookies and similar technologies to improve functionality, understand website traffic, and measure the effectiveness of our educational and marketing activities.
These technologies may collect general website usage information.
We do not knowingly authorize third-party advertising or tracking technologies to collect PHI in violation of applicable law.
Where required, we obtain consent for optional cookies or tracking technologies. You may also manage certain cookie preferences through your browser settings or available website controls.
We may use aggregated or de-identified data to evaluate website performance, provided such use complies with applicable law.
7. Information Sharing and Third-Party Service Providers
Rapha Healthcare does not sell personal information to third parties for their independent marketing purposes.
We may share information with authorized service providers when reasonably necessary to operate our business and deliver requested services, including:
CRM and communications technology providers, including Get Care Nexus
Website hosting and technical support providers
Payment processors
Scheduling and appointment management services
Secure messaging and communications providers
Other vendors supporting business or healthcare operations
Service providers are expected to protect information entrusted to them and use it only for authorized purposes.
Where a service provider handles PHI on our behalf and qualifies as a HIPAA business associate, we require an appropriate Business Associate Agreement before permitting that access.
We may also disclose information when required by law, in response to lawful requests, or when otherwise permitted or required under applicable privacy regulations.
Information collected by Rapha Healthcare is not automatically available for Get Care Nexus's independent sales, marketing, or business development activities. Get Care Nexus's role as a technology provider does not authorize it to use RHC customer or patient information for unrelated purposes.
8. Wellness Assessments and Online Forms
Rapha Healthcare may offer digital assessments, health questionnaires, wellness check-ins, and similar educational tools.
Information voluntarily submitted through these tools may be used to:
Generate or deliver requested assessment results
Identify potential areas of health or wellness interest
Provide educational resources relevant to your responses
Support requested consultations or services
Recommend relevant RHC programs when legally permitted
Submitting an online wellness assessment does not automatically establish a physician-patient relationship.
Unless expressly identified as a clinical service, educational assessments and automated results are not intended to replace individualized medical evaluation, diagnosis, or treatment.
Please do not submit emergency medical concerns through online forms. If you are experiencing a medical emergency, call 911 or seek immediate emergency care.
9. Data Retention
We retain personal information only as long as reasonably necessary for the purposes described in this Policy, including providing requested services, maintaining business records, meeting legal obligations, resolving disputes, and enforcing agreements.
Retention periods may vary depending on the type of information collected and whether the information is subject to medical record retention requirements or other applicable laws.
When information is no longer required, we take appropriate steps to delete, de-identify, or securely dispose of it in accordance with applicable requirements.
10. Your Privacy Choices and Rights
Depending on applicable law and the type of information involved, you may have rights to:
Request access to certain personal information
Request correction of inaccurate information
Request deletion of information, subject to applicable exceptions
Opt out of promotional communications
Withdraw certain previously provided consents
Request information about applicable privacy practices
Patients whose information is protected by HIPAA may have additional rights, including rights to access and request amendments to medical records, request certain restrictions, and obtain an accounting of certain disclosures.
We will evaluate and respond to privacy requests as required by applicable law.
To submit a privacy-related request, contact us using the information provided below.
11. Children's Privacy
Our marketing websites and online funnels are not directed toward children under 13, and we do not knowingly collect personal information directly from children under 13 through these services without appropriate parental or guardian involvement.
Rapha Healthcare may provide healthcare services to minors. Information collected for those services is handled in accordance with applicable medical privacy laws, parental consent requirements, and minors' confidentiality rights.
If you believe a child has submitted personal information through a marketing form without appropriate authorization, please contact us.
12. External Websites and Third-Party Links
Our websites and communications may contain links to websites, applications, or services operated by third parties.
We are not responsible for the privacy practices of independently operated third-party websites. We encourage you to review their privacy policies before providing personal information.
13. Changes to This Privacy Policy
Rapha Healthcare may update this Privacy Policy periodically to reflect changes in our services, technology, business practices, or legal requirements.
When changes are made, we will update the effective or last updated date at the top of this Policy.
Material changes may be communicated through additional notices when required by applicable law.
14. Contact Information
If you have questions about this Privacy Policy or how your information is handled, please contact:
Rapha Healthcare, PLLC
Website: https://raphahealthcare.net
Privacy Contact Email: [email protected]
Mailing Address: 121 S Church St Murfreesboro, TN 37130
Phone: 615-240-5214
For questions specifically concerning protected health information or patient privacy rights, please contact our designated Privacy Officer using the contact information above.
Your Privacy Matters
At Rapha Healthcare, we believe that better health begins with trust. Whether you are exploring our services, completing a wellness assessment, or receiving personalized medical care, we are committed to treating your information with care, respect, and appropriate confidentiality.