Privacy Policies, Terms & Patient Agreements

TOWARD HEALTH | WEBSITE POLICIES

WEBSITE PRIVACY POLICY & TERMS OF USE

Effective Date: March 1, 2026

This Website Privacy Policy and Terms of Use (collectively, the "Terms") govern your access to and use of the website located at toward.health (the "Website" or "Site"). The Website is owned and operated directly by Dr. Tro’s Medical Weight Loss and Direct Primary Care, P.C., a New York professional corporation doing business as Toward Health ("Toward Health," "the Practice," "we," "us," or "our").

Please read these Terms carefully before using the Website. By accessing, browsing, or using this Website, you acknowledge that you have read, understood, and agree to be bound by these Terms. If you do not agree to these Terms, you are not authorized to use this Website and must discontinue use immediately.

Website Operator and Scope of Terms

These Terms apply solely and exclusively to your use of the public-facing Website located at toward.health and the information, educational resources, intake forms, and digital communication tools made available through it. Because Toward Health operates as a single clinical medical practice structured under Dr. Tro’s Medical Weight Loss and Direct Primary Care, P.C., there is no separate management services organization (MSO) or non-clinical operator running this Website. The Practice itself manages this platform to support patient onboarding, health education, and community outreach. Any references in these Terms to " Toward Health " or " the Practice " refer to Dr. Tro's Medical Weight Loss and Direct Primary Care, P.C.

Educational and Informational Purpose Only; Emergency Disclaimer

The content provided on this Website, including but not limited to articles, blog posts, patient success stories, educational courses, programmatic outlines, graphics, and video materials, is designed and provided for general informational and educational purposes only. Nothing contained on this Website is intended to be, nor should it be construed as, professional medical advice, a medical diagnosis, or a specific treatment plan.

Your use of this Website, including submitting an online contact form, signing up for newsletters, or enrolling in online courses, does not establish a physician-patient or provider-patient relationship between you and any Toward Health clinician. A professional medical relationship is only established after you have completed your onboarding administrative paperwork, signed the Master Program Agreement, and had your formal, initial consultation with a licensed Toward Health medical provider.

⚠️ MEDICAL EMERGENCY WARNING: THIS WEBSITE IS NOT MONITORED FOR EMERGENCIES OR URGENT CLINICAL INQUIRIES. If you are experiencing a medical emergency, severe chest pain, shortness of breath, sudden weakness, or any other life-threatening condition, do not wait for a response from this Website or our office. Immediately call 911 or proceed to the nearest hospital emergency room.

Technical and Non-Clinical Website Data Collection

Toward Health collects limited, non-clinical personal information through the Website to support public inquiries, operate our digital platforms, and coordinate our community offerings. This data falls into two main categories:

Voluntary Communications Data: When you fill out contact forms, apply for sponsorships, register for courses, or sign up for newsletters, we collect the personal information you submit, which may include your name, email address, physical address, phone number, and any general details you choose to share in text fields.
Automated Log and Technical Data: As is standard for professional websites, we collect technical data automatically via log files. This includes IP addresses, browser types, Internet Service Providers (ISPs), date/time stamps, referring/exit pages, and the number of clicks. This data is used on an aggregated, anonymous basis to analyze web traffic, optimize site performance, and protect our platform's security. It is not linked to any personally identifiable information.

Toward Health strictly does not sell your personal data. We only share website-collected information with trusted third-party administrative vendors (such as hosting partners, email newsletter platforms, and database managers) solely to facilitate Website operations and coordinates, subject to strict confidentiality obligations.

Separation of Clinical Privacy (HIPAA)

Toward Health does not collect, store, or maintain Protected Health Information (PHI) through standard contact or public-facing inquiry forms on toward.health.

Once you engage in medical care or enroll in a direct-pay clinical program, all clinical documentation, medical records, physiological tracking data, and patient communications are handled in accordance with the Health Insurance Portability and Accountability Act (HIPAA) and New York health privacy laws. This protected health information is maintained strictly in our secure, HIPAA-compliant electronic medical record systems and patient portals (such as Elation Health or Spruce Health). All patient care and clinical records are governed by the Practice's separate, formal Notice of Privacy Practices, which is available to you at enrollment and upon request, rather than these general Website Terms.

Cookies, Web Beacons, and Traffic Tracking

Toward Health utilizes essential and non-essential cookies, web beacons, and similar tracking technologies to enhance user experience and analyze how our Site is utilized. Most interactive web sites use cookies to enable functionality in specific areas and ease navigation. Cookies store information about visitor preferences and record user-specific patterns regarding which pages are visited. If you wish to disable cookies, you can easily do so through your individual web browser's options. Detailed instructions on cookie management can be found directly on your browser manufacturer's official support website.

Online Billing and Credit Card Processing Safeguards

Toward Health collects online membership and program fees for administrative ease. To protect your financial security, the Practice does not directly store, process, or transmit credit card details on our own servers. All payment transactions, credit card processing, and subscription billing are handled through PCI-DSS-compliant third-party administrative processors, specifically Hint Health, Spruce Health, and Stripe. These secure platforms operate under their own privacy and terms notices, which you can review directly at Stripe (stripe.com/privacy), Hint (hint.com/privacy), and Spruce. By making a payment through this Website or our secure portals, you agree to these secure billing configurations.

Intellectual Property Rights and Content License

Unless otherwise stated in writing, Toward Health and/or its licensors own all intellectual property rights and copyrights for all materials, code, text, graphics, logos, and custom clinical frameworks published on toward.health. All intellectual property rights are reserved. You are granted a limited, personal, non-exclusive license to view, download, and print pages from Toward Health for your own personal, educational, non-commercial use, subject strictly to the following restrictions:

No Republication: You must not republish, redistribute, or copy material from toward.health without express, prior written authorization from the Practice's clinical management.
No Commercialization: You must not sell, rent, lease, or sub-license any material or educational courses obtained from our Website.
No Visual Alterations (I-Frames): You may not create frames around our web pages or utilize any technical iframe frameworks that alter the visual presentation, branding, or appearance of our Website.

Disclaimer of Warranties and Limitation of Liability

THE WEBSITE AND ALL CONTENT, COURSE MATERIALS, AND RESOURCES PROVIDED THEREIN ARE DELIVERED ON AN "AS IS" AND "AS AVAILABLE" BASIS, WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED. TOWARD HEALTH AND DR. TRO'S MEDICAL WEIGHT LOSS AND DIRECT PRIMARY CARE, P.C. DISCLAIM ALL REPRESENTATIONS AND WARRANTIES, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF ACCURACY, COMPLETENESS, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. WE DO NOT WARRANT THAT THE SITE WILL BE UNINTERRUPTED, SECURE, OR ERROR-FREE.

TO THE FULLEST EXTENT PERMITTED UNDER APPLICABLE LAW, IN NO EVENT SHALL TOWARD HEALTH, ITS PHYSICIANS, AFFILIATED CLINICIANS, EMPLOYEES, OR AGENTS BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENT, OR PUNITIVE DAMAGES (INCLUDING BUT NOT LIMITED TO HEALTH ADVICE MISUSE, TECHNICAL SYSTEM DELAYS, OR PROPERTY LOSS) ARISING OUT OF OR IN CONNECTION WITH YOUR USE OF OR INABILITY TO USE THIS WEBSITE.

Governing Law, New York Jurisdiction, and Policy Updates

These Terms, your use of the Website, and any claims or disputes arising directly therefrom shall be governed by and interpreted in accordance with the laws of the State of New York, without regard to conflict-of-law principles. By accessing this Website, you agree that any legal actions or proceedings arising out of these Terms or your use of the Site must be filed exclusively in New York state or federal courts located in the county of proper venue for the Practice's principal clinic location in Rockland County, New York.

Toward Health reserves the right to update or modify these Terms at any time in its sole discretion. Any changes will be effective immediately upon posting to the Website with a revised Effective Date. Your continued use of the Website following the posting of updated Terms constitutes your affirmative, legally binding acceptance of those changes.

Contact and Practice Information

If you have any questions, concerns, or inquiries regarding these Website Privacy Policy and Terms of Use, please contact the Practice's administrative offices using the details below:

Clinical Office Address: Toward Health, 564 Route 303, Blauvelt, NY 10913
Contact Email: [email protected]
Contact Phone: 845-397-2873

User Acknowledgment and Affirmative Agreement

BY CONTINUING TO USE THIS WEBSITE, SUBMITTING INQUIRIES, PURCHASING COURSES, OR ENTERING CORE COMMUNICATIONS, YOU CONFIRM THAT YOU HAVE READ, UNDERSTOOD, AND VOLUNTARILY AGREE TO THESE CONSOLIDATED SITE PRIVACY AND USE TERMS.

Continue to the HIPAA Notice of Privacy Practices

HIPAA NOTICE OF PRIVACY PRACTICES

Toward Health
d/b/a Toward Health
Effective Date: March 1, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU MAY ACCESS THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

This Notice is provided pursuant to the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), 45 C.F.R. Parts 160 and 164, and applicable New York law.

WHO WE ARE

This Notice applies to: Toward Health, a New York professional corporation Doing business as Toward Health (“Practice,” “we,” “us,” or “our”)
All medical services are provided exclusively by licensed healthcare professionals affiliated with Toward Health
Toward Health, Inc. is a management services organization (“MSO”) that provides non-clinical administrative, operational, and technology support services to the Practice pursuant to a management services agreement. Toward Health, Inc. does not practice medicine and does not provide clinical care. When performing services on behalf of the Practice that involve protected health information, Toward Health, Inc. acts as a Business Associate as defined by HIPAA.

OUR LEGAL DUTIES

We are required by law to:
1. Maintain the privacy and security of your protected health information (“PHI”).
2. Provide you with this Notice of our legal duties and privacy practices.
3. Notify you following a breach of unsecured PHI when required by law.
4. Abide by the terms of the Notice currently in effect.
We reserve the right to change the terms of this Notice. Any revised Notice will apply to all PHI we maintain and will be made available on our website and upon request.

HOW WE MAY USE AND DISCLOSE YOUR PROTECTED HEALTH INFORMATION

We may use and disclose your PHI without your written authorization for the following purposes:

Treatment: We may use and disclose PHI to provide, coordinate, or manage your healthcare, including:

Medical evaluation, diagnosis, and treatment
Telehealth consultations
Laboratory testing and diagnostic services
Prescriptions and medication management
Referrals to specialists
Care coordination with other healthcare providers

Payment: Although the Practice operates on a self-pay basis and does not participate with insurance, Medicare, or Medicaid, we may use and disclose PHI for payment-related purposes, including:

Billing and collection activities
Processing payments
Issuing receipts or statements
Reviewing program eligibility or participation

Healthcare Operations: We may use and disclose PHI for healthcare operations, including:

Quality assessment and improvement
Clinical performance review
Compliance, risk management, and legal review
Licensing and credentialing
Business planning and administrative activities
Training and supervision of healthcare professionals

OTHER PERMITTED OR REQUIRED DISCLOSURES

We may disclose PHI without your authorization when required or permitted by law, including:

Public health reporting
Health oversight activities
Judicial or administrative proceedings
Law enforcement purposes
Coroners, medical examiners, or funeral directors
Organ or tissue donation
Serious threats to health or safety
Workers’ compensation claims
As otherwise required by federal or New York law

USES AND DISCLOSURES REQUIRING WRITTEN AUTHORIZATION

We will obtain your written authorization for:

Most uses and disclosures of psychotherapy notes (if applicable)
Marketing communications that require authorization under HIPAA
Sale of PHI (we do not sell PHI)
Any other use or disclosure not described in this Notice

You may revoke an authorization in writing at any time, except to the extent we have already relied upon it.

YOUR RIGHTS REGARDING YOUR HEALTH INFORMATION

You have the following rights:

Right to Access: You have the right to inspect and obtain a copy of your PHI in a designated record set, subject to limited exceptions permitted by law.

Right to Request Amendment: You may request an amendment to your PHI if you believe it is incorrect or incomplete.

Right to an Accounting of Disclosures: You may request a list of certain disclosures of your PHI made in the six (6) years prior to your request.

Right to Request Restrictions: You may request restrictions on certain uses or disclosures of your PHI. We are not required to agree to all requested restrictions, except where required by law.

Right to Confidential Communications: You may request that we communicate with you using alternative means or at alternative locations.

Right to a Paper Copy: You have the right to receive a paper copy of this Notice upon request, even if you have agreed to receive it electronically.

TELEHEALTH AND ELECTRONIC SYSTEMS

As part of your care, we may use electronic systems, including:

Electronic health record platforms
Secure messaging applications
Telehealth platforms
Email or SMS communications (as authorized by you)

We implement reasonable administrative, technical, and physical safeguards to protect PHI. However, no electronic transmission system can be guaranteed to be completely secure.

COMPLAINTS

If you believe your privacy rights have been violated, you may file a complaint with:

Privacy Officer
Toward Health
564 Route 303
Blauvelt, NY 10913
[email protected]

You may also file a complaint with:

U.S. Department of Health and Human Services
Office for Civil Rights
www.hhs.gov/ocr/privacy/hipaa/complaints/
1-877-696-6775

You will not be retaliated against for filing a complaint.

Back to the top

Privacy Policies & Terms