This Privacy Policy explains how 1500 Park Holdings, LLC, doing business as Bivvy Health ("Bivvy," "we," "us"), collects, uses, and shares information when you use our website and membership services. Bivvy provides access to telehealth care delivered by independent, licensed providers through DrCare247; it is not itself a medical provider and is not insurance.
Information we collect
Information you give us
- Account and profile: name, date of birth, sex, email, phone, and mailing address.
- Family members: the name, date of birth, and sex of the children you add to a plan. Adult members provide their own information under their own account.
- Payment: processed by Stripe. We do not store full card numbers; we retain limited billing metadata (e.g., last four digits, plan, status).
- Communications: messages you send us, such as contact-form submissions.
Information created through care
When you start a visit, clinical information is created and held by the treating provider and DrCare247. That information is held by the treating provider and DrCare247 as HIPAA covered entities, and is governed by the notices and authorizations you receive from them. Bivvy is not a HIPAA covered entity and does not receive your clinical records. See how your health information works.
Information collected automatically
Basic technical and usage data (e.g., IP address, device and browser type, pages viewed) collected to operate and secure the service.
We do not use advertising, analytics, or social media tracking technologies on our website. We do not run advertising pixels, tags, or software development kits from Meta, Google, TikTok, Snap, Reddit, LinkedIn, or any similar platform, and we do not upload customer lists to advertising platforms. The only cookies we set are those strictly necessary to keep you signed in and to process payments, placed by our authentication provider (Clerk) and our payment processor (Stripe).
How we use information
- To create and manage your account and membership.
- To connect you and your family members to telehealth care through DrCare247.
- To process payments and prevent fraud.
- To communicate with you about your account, visits, and support requests.
- To secure, maintain, and improve the service, and to meet legal obligations.
How we share information
We do not sell your personal information, we do not share it for cross-context behavioral advertising, and we do not use your health information for advertising or marketing of any kind. We share information only as needed to run the service:
- DrCare247 and treating providers — to create your care record and deliver visits.
- Stripe — payment processing.
- Clerk — authentication and account management.
- SendGrid — transactional email (e.g., family invitations, support replies).
- Service providers under contract — including, where protected health information is involved, under HIPAA Business Associate Agreements.
- Legal and safety — when required by law or to protect people from harm.
How we protect information
Protected health information is encrypted in transit and at rest, with field-level encryption backed by managed keys (Google Cloud KMS). Access is limited and audited. No system is perfectly secure, but we work to protect your data and to meet our obligations under our Business Associate Agreements.
Data retention
We keep account and membership information for as long as your account is active. If you cancel, we keep your account and billing records for seven years after your last transaction to meet tax, accounting, and legal recordkeeping obligations, and then delete or de-identify them. Contact-form and support messages are kept for two years. Clinical records created during a visit are not held by Bivvy; they are retained by the treating provider under that provider's own retention obligations.
Children and family members
Accounts are for adults 18 and older. A subscriber may add children under 18 to a family plan and manages their information as the responsible adult. We do not knowingly collect information directly from children under 13 without the involvement of a parent or guardian.
Every member 18 and over holds their own account, with their own login and their own records, even when the subscriber pays for their seat. We do not give the subscriber access to an adult member's visits, records, or care activity. What the subscriber sees is the billing line item for that seat.
When a child on a plan turns 18, their account becomes their own on that birthday. From that point the subscriber can see the billing line item and nothing more.
Your choices and rights
You may review and update your profile at any time from your account. Wherever you live, you may ask us to:
- Access the personal information we hold about you and about the children on your plan. An adult member makes their own request for their own information;
- Correct information that is inaccurate;
- Delete your personal information, subject to records we are required to keep by law; and
- Receive a copy of your information in a portable format.
Email privacy@bivvyhealth.com to make a request. We will respond within 30 days. We will not charge you, discriminate against you, or change your price or service because you made a request. If we deny a request, we will tell you why and how to appeal.
We honor the Global Privacy Control (GPC) and other recognized browser opt-out signals. Because we do not sell personal information, do not share it for cross-context behavioral advertising, and do not use it for targeted advertising or profiling, there is nothing to opt out of, and we do not maintain a "Do Not Sell or Share My Personal Information" link. If that ever changes, we will update this policy and add the required controls before making the change.
If you are a Washington, Nevada, or Connecticut resident, please also see our Consumer Health Data Privacy Policy, which describes additional rights regarding health-related information.
Changes to this policy
We may update this policy. If we make material changes, we will update the effective date and, where appropriate, notify you.
Contact us
Questions about this document can go to support@bivvyhealth.com or, for privacy matters, privacy@bivvyhealth.com.