General Privacy Policy

Teladoc Health · agreement dated March 9, 2026 · Official agreement

Read the agreement

50 of 50 cards

Legal Rights & Agreement Rules · Context

This policy took effect March 9, 2026

The assigned General Privacy Policy states an effective date of March 9, 2026. It links a previous version, whose terms are not supplied here.

Details not recorded for this card

Supporting quotations

Effective Date: March 9, 2026

Legal Rights & Agreement Rules · Context

The full policy controls over the summary

The summary is only a guide and does not replace or change the full policy. If the two differ, the full policy controls. The policy describes public website practices for information, rather than creating a contract.

Details not recorded for this card

Supporting quotations

It is only a guide. It does not replace or change the full Policy.
The Policy is for information only. It is not a contract.
If this summary and the full Policy are different, the full Policy controls.

Legal Rights & Agreement Rules · Context

The policy covers Teladoc Health’s public websites and associated apps

The policy describes collection, use and disclosure of visitors’ Personal Information on Teladochealth.com, MyStrength.com, their associated public domains and mobile applications. It is informational and creates no contractual rights or obligations. Secure-platform information falls outside this general policy, subject to the stated connection-technology exception.

Details not recorded for this card

Supporting quotations

This Policy applies to visitors to Teladoc Health’s public websites.
our publicly available websites: Teladochealth.com and MyStrength.com and their associated public domains and mobile applications (collectively, the “Websites”).
Our privacy policies explain our privacy practices; they do not create any contractual rights or obligations.
However, any technology or data needed to enable the HealthKit/Health Connect connections is subject to this General Privacy Policy.

Qualifications & exceptions

  • Applies to public website visitors; secure-platform health information is addressed separately.

Cross-references

Also annotated in the same passage (1)

Use & Processing · Restriction or exception

Secure-platform health information is governed separately

The general policy excludes information collected from registered, logged-in Members on secure platforms. It treats information stored there or added by Members as PHI and/or medical information and points to the HIPAA notice, including for imported HealthKit or Health Connect data. Teladoc says it does not use, disclose or sell this data for advertising or data mining or combine it with other data. Connection-enabling technology or data remains subject to this general policy. The HIPAA notice also applies when public-site information is PHI, and the supplemental consumer health policy applies when it is Consumer Health Data under applicable law. Those linked notices are not supplied here.

Details not recorded for this card

Supporting quotations

It does not apply to information you enter after you log in to secure Teladoc Health sites.
PHI is covered by HIPAA and other health privacy laws.
To learn about PHI, please read the HIPAA Notice of Privacy Practices.
If your information is PHI, your HIPAA rights are explained in the HIPAA Notice of Privacy Practices.
Teladoc does not use, disclose, or sell this data for advertising or data mining and does not combine it with other data.
applies to the extent that any Personal Information collected on our Websites is considered Consumer Health Data under applicable law.

Qualifications & exceptions

  • The no-advertising/data-mining statement concerns the health data described in this passage.
  • Connection-enabling technology or data is subject to the general policy.

Not stated here

  • The linked notices’ detailed terms are not supplied.

Cross-references

Also annotated in the same passage (2)

Data Access & Collection · Company practice

Public-site information includes browsing details and submitted forms

The summary says Teladoc may collect public-site activity, browser and device details and information supplied in forms, such as name, contact details, birth date, location and health plan. Its stated uses include operating and improving websites and services, registration and eligibility, responses, security, legal compliance and updates or offers where allowed. More detailed collection and use rules follow later in the policy.

Details not recorded for this card

Supporting quotations

This may include pages you view, features you use, time on the site, your browser, your device, and similar details.
This may include your name, contact information, birth date, location, health plan, and email address.
We may use this information to run our websites, help you register, check if you can use services, respond to you, improve our services, protect security, follow the law, and send updates or offers where allowed.

Qualifications & exceptions

  • Updates or offers are subject to what is allowed.

Sharing & Disclosure · Company practice

The summary identifies vendors and special sharing situations

Teladoc says it may share information with vendors helping operate its websites and services, as legally required, to protect safety, during a business deal, or at your request or agreement. The policy’s detailed sharing rules govern these summarized situations.

Details not recorded for this card

Supporting quotations

We may share information with vendors that help us run our websites and services.
We may also share information when the law requires it, to protect safety, during a business deal, or when you ask us or agree.

Data Access & Collection · User right or choice

Cookies support website functions and advertising choices

The summary describes cookies and similar tools for website operation, preferences, improvement and message measurement. Advertising tools may be used with agreement where required. Cookie choices can be changed through “Your Privacy Choices” in the website footer.

Details not recorded for this card

Supporting quotations

These tools help our websites work, remember your settings, improve our websites, and measure messages.
If you agree where required, we may use cookies and similar tools for ads.
You can change your cookie choices by using “Your Privacy Choices” in the website footer.

Qualifications & exceptions

  • Advertising consent applies where required.

Security & Safeguards · Company practice

The summary describes children, safeguards and limited retention

The websites are not intended for children under 13. Teladoc describes safeguards but says no system is fully secure, and says information is kept only as long as needed or legally required. The detailed sections explain these statements further.

Details not recorded for this card

Supporting quotations

Our websites are not meant for children under 13.
We use safeguards to help protect information. No system is fully secure.
We keep information only as long as needed or as required by law.

Account & Service Control · User right or choice

Some state residents may have privacy rights

The summary says residents of certain states may have rights to know, access, correct, delete or opt out of some information uses. It directs privacy questions and requests to the contact options in the full policy; it does not promise every listed right to everyone.

Details not recorded for this card

Supporting quotations

If you live in certain states, you may have privacy rights. These may include rights to know, access, correct, delete, or opt out of some uses of your information.
You may contact Teladoc Health about privacy questions or requests through the options listed in the full Policy.

Qualifications & exceptions

  • Availability depends on state and the relevant right.

Legal Rights & Agreement Rules · Context

Employment-related information has a separate notice

The policy directs current or former Teladoc Health job applicants, employees and contractors to the U.S. Employees’ Notice of Privacy Practices for their Personal Information. That notice is linked but not supplied in this source.

Details not recorded for this card

Supporting quotations

current or former Teladoc Health job applicants, employees or contractors

Not stated here

  • The employment notice’s terms are not supplied.

Legal Rights & Agreement Rules · Company commitment

Teladoc says it will notify you of significant policy changes

Teladoc may periodically update the policy and says it will notify you when changes are significant. It also encourages periodic review of this page; this passage does not specify a notice channel or advance-notice period.

Details not recorded for this card

Supporting quotations

We may periodically update this General Privacy Policy. When we make significant changes, we will notify you.

Qualifications & exceptions

  • The notification promise concerns significant changes.

Not stated here

  • No notification method or advance period is specified here.

Sharing & Disclosure · Company practice

Business disclosures are subject to restrictions on partners

Teladoc says it processes information to provide the Websites and may disclose Personal Information for legitimate business purposes, subject to the policy’s limitations and strict restrictions on partners’ use or disclosure. It also permits disclosures at your request or as allowed by law. The table summarizes categories it may have collected during the past 12 months, rather than saying every visitor supplied every category.

Details not recorded for this card

Supporting quotations

we may disclose your Personal Information for legitimate business purposes, subject to strict restrictions on how our partners may use or disclose the data we provide.

Qualifications & exceptions

  • Subject to the limitations in this policy.
Also annotated in the same passage (1)

Data Access & Collection · Company practice

Visitor Data includes activity, device details and identifiers

Teladoc processes pages and features used, time spent, errors and device/browser details. It may process IP and email addresses and external/internal identifiers where device settings make them available. The Visitor Data row says third-party advertising and cookie sharing depends on opt-in/consent. This concerns public website activity, rather than the separate device-sync location and secure-platform PHI rules.

Details not recorded for this card

Supporting quotations

Visitor Data
When you visit the Websites, we process information like the pages visited or which features you interacted with, the amount of time on the Websites, Website errors, information about the type of device and browser you’re using.
We may process IP address and email address, External Identifiers and Internal Identifiers (if available based on the settings of your device).
We may share the information with Third Parties, if you opt-in/consent to advertising and cookies.

Qualifications & exceptions

  • Identifiers depend on device settings.
  • The row conditions third-party advertising/cookie sharing on opt-in or consent.
Also annotated in the same passage (3)

Use & Processing · Company practice

Visitor Data supports requests, personalization and website improvement

The Visitor Data row lists communication, completing requested activities such as secure-platform registration, information, a demo or an RFP, personalizing the website, and understanding use to improve effectiveness and convenience. These purposes describe public-site data and do not extend this policy to secure-platform health records.

Details not recorded for this card

Supporting quotations

Communicating with you.
Completing the activity you requested (for example: registering for the Secure Platform, obtaining more information, requesting a demo, or requesting an RFP).
Personalizing your web experience.
Helping us understand how you use our Websites and how we can improve them to make them more effective and convenient.

Use & Processing · Company practice

Visitor Data may support legal compliance, safety and security

The Visitor Data row includes complying with laws, protecting people’s safety, securing the Websites, responding to law enforcement, court orders and legal processes, carrying out legal and contractual obligations and enforcing Teladoc’s rights.

Details not recorded for this card

Supporting quotations

Complying with applicable laws.
Protecting your safety and the safety of others.
Monitoring and protecting the security of the Websites.
Responding to law enforcement requests, court orders, and legal processes, and carrying out our legal and contractual obligations and enforcing our rights.

Use & Processing · Company practice

Visitor Data may be used for promotions and advertising analysis

The Visitor Data row lists opportunities, promotions, news, updates, reminders and optimizing and analyzing advertising. It also lists other purposes with your consent. Advertising-related third-party disclosures remain subject to the opt-in/consent wording in this row; that wording does not mean every processing purpose requires consent.

Details not recorded for this card

Supporting quotations

Sending opportunities, promotions, news, updates, and reminders.
Optimizing and analyzing advertising.
Any other purpose with your consent.
We may share the information with Third Parties, if you opt-in/consent to advertising and cookies.

Qualifications & exceptions

  • Other purposes are tied to your consent.
  • Advertising/cookie third-party sharing is conditioned on opt-in/consent in this row.
Also annotated in the same passage (3)

Legal Rights & Agreement Rules · Context

The Visitor Data row lists legitimate interest and consent

The policy lists Legitimate Interest and Consent as legal bases for processing Visitor Data. It does not map each listed purpose to a particular basis or establish that both bases apply to every operation.

Details not recorded for this card

Supporting quotations

Legitimate Interest
Consent

Not stated here

  • No purpose-by-purpose allocation of these bases is supplied.

Sharing & Disclosure · Company practice

Visitor Data may go to providers, third parties and affiliates

The Visitor Data sharing column names service providers, third parties, Teladoc Health affiliates and subsidiaries, law enforcement or other third parties for legal requests, law or preventing harm, and successors or new owners when ownership or control of products or assets changes. Advertising/cookie third-party sharing remains subject to the row’s opt-in/consent condition.

Details not recorded for this card

Supporting quotations

Service Providers
Third Parties
Law enforcement or other third parties to comply with legal requests, applicable law, or to prevent harm
Successors or new owners, in connection with a change in ownership or control of all or part of our products or their assets
Teladoc Health affiliates and subsidiaries
We may share the information with Third Parties, if you opt-in/consent to advertising and cookies.

Qualifications & exceptions

  • Legal/safety recipients and ownership-change recipients are tied to the stated circumstances.
  • The row requires opt-in/consent for third-party advertising/cookie sharing.
Also annotated in the same passage (3)

Sharing & Disclosure · Company practice

Vendors and advisers may receive information for business purposes

In the Visitor Data sharing column, Teladoc names hosting/storage, analytics and advertising, technology/support and security providers, plus auditors, attorneys and accountants. It expressly says service providers may receive your name, email, birth date, phone and address if supplied in a website form during incomplete or failed registration. The general partner-use restrictions still apply.

Details not recorded for this card

Supporting quotations

Business Purposes. With vendors and service providers, including our data hosting and data storage partners, analytics and advertising providers, technology services and support, and data security.
We may also share with professional advisors, such as auditors, attorneys, and accounting firms.
We may disclose your name, email, date of birth, phone number, and address if you provided it to us via a form on the website during an incomplete or failed registration to Service Providers
subject to strict restrictions on how our partners may use or disclose the data we provide.

Qualifications & exceptions

  • The incomplete/failed-registration example concerns details you provided in a website form.
Also annotated in the same passage (1)

Sharing & Disclosure · Company practice

Requests, legal duties and business transactions can lead to sharing

The Visitor Data sharing column permits sharing at your request or direction, including use of social-media widgets or the Websites; for legal compliance, law-enforcement cooperation, judicial orders and regulatory inquiries; and in an asset sale, merger, bankruptcy or other business transaction. These are stated circumstances, rather than unrestricted permission to disclose for any reason.

Details not recorded for this card

Supporting quotations

At your request or with your consent. If you request or direct us to do so. This includes your use of social media widgets or our Websites
Legal Compliance. To comply with applicable law and any obligations, including cooperation with law enforcement, judicial orders, and regulatory inquiries
For a Transaction. In connection with an asset sale, merger, bankruptcy, or other business transaction

Sharing & Disclosure · Company practice

Website activity may be disclosed to advertising partners with consent where required

The Visitor Data sharing column describes cookie and similar-technology disclosures of website activity to advertising partners with consent where required, while the collection cell expressly says third-party advertising/cookie sharing follows opt-in/consent. A later passage adds explicit opt-in for cookies that may reveal consumer health data and says server-side privacy technology ensures PHI is not shared with Third Party Advertisers. Cookie preferences can be managed through the footer.

Details not recorded for this card

Supporting quotations

Advertising. Using cookies and similar technologies, we may, with your consent where required, disclose your activity on our Websites to advertising partners
We may share the information with Third Parties, if you opt-in/consent to advertising and cookies.
If you provide explicit opt-in consent, some cookies and similar technologies may collect Visitor Data that may reveal consumer health data.
To protect your privacy, we use server-side privacy enhancing technology to ensure no Protected Health Information (PHI) is shared with Third Party Advertisers.

Qualifications & exceptions

  • Consent requirements are expressed in both the row and the later cookie provision.
  • Teladoc says PHI is not shared with Third Party Advertisers.

Cross-references

Also annotated in the same passage (3)

Data Access & Collection · Company practice

Registration forms may collect identity, contact and eligibility details

To register for a secure-platform account or submit an information webform, you first fill out online forms. The Registration Data row says you may provide name, title, contact details and phone, birth date, sex assigned at birth, state/country/zip, health plan and email or login identification. This is form information; the policy separately excludes information on logged-in Secure Platforms.

Details not recorded for this card

Supporting quotations

Registration Data
you must first fill out online form(s) where you may provide your name, title, contact information, phone number, date of birth, sex assigned at birth, state, country, zip code, your health plan, and email address or login dentification information.

Use & Processing · Company practice

Registration Data supports enrollment, eligibility and research

The Registration Data row lists helping complete registration, checking service eligibility, personalizing website experience, legal compliance, analytics/reporting/research and other purposes with your consent. It lists Legitimate Interest, Consent and Performance of Contract as processing bases without assigning a basis to each purpose.

Details not recorded for this card

Supporting quotations

Assisting you in completing the registration process
Checking your eligibility for services
Personalizing your experience on the Websites
Complying with laws
Analytics, reporting, and research
Any other purpose with your consent
Legitimate Interest
Consent
Performance of Contract

Qualifications & exceptions

  • Other purposes require your consent as stated in this row.

Not stated here

  • The row does not allocate each legal basis to a particular purpose.

Use & Processing · Company practice

Customer-service communications are processed for service and protection purposes

Teladoc processes your communications with customer service. The Customer Service and Communications Data row lists communication, understanding website use, improving products and services and offering new features, legal compliance and protecting people’s safety. Its listed legal bases are Legitimate Interest and Performance of Contract. The sharing column is not a separate detailed sharing list for this row; the Visitor Data list should not be read as if repeated here.

Details not recorded for this card

Supporting quotations

Customer Service and
Communications Data
We process communications you have with our customer service team.
Communicating with you
Helping us understand how you use our Websites, how we can improve our products and services to make them more effective and convenient, and offer you new features
Complying with laws
Protecting your safety and the safety of others
Legitimate Interest
Performance of Contract

Data Access & Collection · Company practice

Device readings need Bluetooth and location services

Eligible Members may choose Teladoc or third-party devices, including relevant wearables, scales and glucose monitors. Bluetooth and location services allow readings to appear in the app. Members may disable these in device settings, but functionality may be limited. Teladoc says device-sync location data is not used for targeted advertising. Device readings such as weight and glucose are PHI, whose handling is addressed in the linked HIPAA notice rather than supplied here.

Details not recorded for this card

Supporting quotations

These devices rely on Bluetooth and location services for readings to appear in the Member’s app. Members can disable these features in their device settings; however, doing so may limit app functionality.
Teladoc Health does not use location data required for device syncing for targeted advertising.
the devices collect PHI (weight, glucose levels, etc.) that you share via use of the device- please see our HIPAA Notice of Privacy Practices for more detail.
However, any technology or data needed to enable the HealthKit/Health Connect connections is subject to this General Privacy Policy.

Qualifications & exceptions

  • Applies to eligible Members using the described devices.
  • The advertising restriction concerns location needed for device syncing.

Not stated here

  • The HIPAA notice’s detailed rules are not supplied.
Also annotated in the same passage (2)

Use & Processing · Company practice

Teladoc may use AI and other automated tools for website and business support

Teladoc may use automated tools, including AI, to support website operations and related business activities. Examples include analytics, quality improvement, administration and system management, in accordance with applicable law. The passage does not specify tools, training practices or automated decisions about individuals.

Details not recorded for this card

Supporting quotations

To support the operation of the Websites and related business activities, we may use automated tools, including artificial intelligence technologies.
These tools may assist with functions such as analytics, quality improvement, administrative activities, and system management, and are used in accordance with applicable law.

Not stated here

  • Specific tools, model-training uses and individual decision processes are not described here.

Account & Service Control · User right or choice

US visitors can use NAI and DAA opt-out pages for targeted advertising collection

Teladoc points to the National Advertising Initiative and Digital Advertising Alliance opt-out pages as ways to opt out of third parties collecting Personal Information for targeted advertising in the United States. This passage does not describe those programs’ detailed coverage or operation.

Details not recorded for this card

Supporting quotations

You can opt out of third parties collecting your Personal Information for targeted advertising purposes in the United States by visiting the National Advertising Initiative’s (NAI) opt-out page and the Digital Advertising Alliance’s (DAA) opt-out page.

Qualifications & exceptions

  • This option is described for targeted advertising collection in the United States.

Account & Service Control · Company commitment

Teladoc honors Global Privacy Control signals

Teladoc says it recognizes and honors GPC. When it detects the signal, it automatically applies a preference rejecting non-essential cookies and preventing the associated sharing of Personal Information. This is a stated cookie-and-sharing response, not a claim that all processing stops.

Details not recorded for this card

Supporting quotations

We recognize and honor the Global Privacy Control (GPC) opt-out signal.
When we detect the noted opt-out signal, we automatically apply your preference to reject non-essential cookies and prevent associated sharing of your personal information.

Qualifications & exceptions

  • The response applies when the signal is detected and covers non-essential cookies and associated sharing.

Cross-references

Account & Service Control · User right or choice

The cookie preference center lets you adjust choices and sensitive-data use

You can customize cookie preferences while visiting the Websites, including limiting sensitive-data use, through “Your Privacy Choices” in the footer or the cookie icon on any page. You can change preferences at any time. Rejecting certain cookies may affect the experience or available features.

Details not recorded for this card

Supporting quotations

You can manage your preferences, including limiting use of sensitive data, at any time by clicking “Your Privacy Choices” in the footer or clicking the cookie icon of any page and adjusting your preferences.
Please note that rejecting certain cookies may impact your experience with our Websites and limit available features.

Qualifications & exceptions

  • Rejecting some cookies can limit features.

Cross-references

Data Access & Collection · Restriction or exception

Teladoc says it does not knowingly collect or sell under-13 information

The Websites are not intended for children under 13, and Teladoc says it does not knowingly collect or sell their Personal Information. The policy asks under-13 users who are not emancipated minors not to use the sites or provide information without parental consent. A parent or guardian who believes an under-13 child supplied information may contact Teladoc to request deletion. The wording preserves the parental-consent and emancipation qualifications without claiming these sites are designed for children.

Details not recorded for this card

Supporting quotations

Our Websites are not intended for children under 13 years of age, and we do not knowingly collect or sell Personal Information from children under 13.
If you are under 13 and you are not an emancipated minor, please do not use or provide any information on our Websites without parental consent.
If you are a parent or guardian who believes your child under 13 has provided us with Personal Information, please contact us using the information below to request its deletion.

Qualifications & exceptions

  • The collection/sale statement is qualified by knowingly.
  • The no-use request is addressed to non-emancipated under-13 users without parental consent.

Cross-references

Security & Safeguards · Company practice

Teladoc uses safeguards but does not guarantee absolute security

Teladoc describes administrative, technical and physical safeguards designed to protect Personal Information from accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use. It says transmission and storage cannot be completely secure and does not guarantee absolute security. These are statements under this general policy’s scope, rather than detailed HIPAA security terms for secure-platform records.

Details not recorded for this card

Supporting quotations

We use administrative, technical, and physical safeguards designed to protect Personal Information from accidental, unlawful, or unauthorized destruction, loss, alteration, access, disclosure, or use.
However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Qualifications & exceptions

  • Safeguards are described as designed to protect; absolute security is not guaranteed.
Also annotated in the same passage (1)

Security & Safeguards · Procedure

You are responsible for keeping service passwords confidential

If you use a password to access parts of Teladoc’s services, the policy places responsibility for keeping that password confidential on you.

Details not recorded for this card

Supporting quotations

If you use a password to access certain parts of our services, you are responsible for keeping it confidential.

Qualifications & exceptions

  • Applies when you use a password to access the described services.
Also annotated in the same passage (1)

Retention & Deletion · Company practice

Retention depends on purposes and legal requirements

Teladoc retains Personal Information only as long as needed for the policy’s purposes, including providing Websites, business operations, legal/regulatory compliance, dispute resolution and enforcing agreements. Legally required retention periods govern where applicable; otherwise these purpose criteria apply. The policy supplies no fixed universal retention duration.

Details not recorded for this card

Supporting quotations

We retain Personal Information only for as long as necessary to fulfill the purposes described in this General Privacy Policy, including to provide Websites, maintain business operations, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements.
Where specific retention periods are required by law, we comply with those timeframes; otherwise, we apply the criteria above to determine how long to retain the information.

Qualifications & exceptions

  • Legally required periods apply where relevant.

Not stated here

  • No fixed general retention period is stated.

Cross-references

Retention & Deletion · Company practice

Unneeded information is deleted, anonymized or put beyond use

When Personal Information is no longer needed for its collection purposes, Teladoc says it securely deletes, anonymizes or puts it beyond use. Residual copies may remain for a limited time in backup or archive systems maintained against accidental or malicious loss before deletion or inaccessibility. This is not a promise of immediate erasure of every copy.

Details not recorded for this card

Supporting quotations

When Personal Information is no longer needed for the purposes for which it was collected, we securely delete, anonymize, or put it beyond use.
residual copies of Personal Information may remain in backup or archival systems for a limited time before being deleted or rendered inaccessible.

Qualifications & exceptions

  • Backup or archive residual copies can remain temporarily.

Not stated here

  • The backup/archive interval is not quantified.

Cross-references

Use & Processing · Company practice

Website information may be processed in the US or other countries

Teladoc operates the Websites from the United States and says they are not intended to subject it to foreign laws or jurisdictions. Information you provide may be stored, processed or accessed in the US or countries with different data protection from your residence. Teladoc says this General Privacy Policy governs its handling regardless of storage or access location; this statement does not determine which laws legally apply.

Details not recorded for this card

Supporting quotations

Our Websites are controlled and operated by us from the United States and are not intended to subject us to the laws or jurisdictions of any state, country, or territory outside the United States.
Information you provide through our Websites may be stored, processed, and accessed in the United States or other countries that may not provide the same level of data protection as your place of residence.
Regardless of where your Personal Information is stored or accessed, we will handle it in accordance with this General Privacy Policy.

Qualifications & exceptions

  • The policy remains the stated handling standard regardless of location.

Legal Rights & Agreement Rules · Restriction or exception

The California notice identifies CCPA/CPRA coverage and exclusions

For California residents, certain collected Personal Information is subject to CCPA as amended by CPRA. The notice says those laws may not apply, among other things, to lawfully public government-record information, deidentified or aggregate consumer information, HIPAA-governed PHI held by covered entities/business associates, or provider medical information governed by California’s CMIA. This is the notice’s scope description, not a claim that every Californian’s information has the same rights.

Details not recorded for this card

Supporting quotations

If you are a California resident, certain Personal Information that we collect about you is subject to the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).
Please note that these laws may not apply to, among other things:
Information that is lawfully made available from federal, state, or local government records
Consumer information that is deidentified or aggregated
Protected health information that is collected by a covered entity or business associate governed by HIPAA
Medical information maintained by a provider of health care governed by California's Confidentiality of Medical Information Act (CMIA)

Qualifications & exceptions

  • For California residents and information subject to the cited laws.
  • The listed exclusions are non-exhaustive and expressed as may not apply.

Data Access & Collection · Company practice

The California notice lists statutory categories it may collect

The notice maps Section 1’s collection, use and sharing to CCPA/CPRA categories it may collect: identifiers; California Customer Records categories; protected classification characteristics; commercial, biometric, internet/network activity, geolocation and sensory information; Sensitive Personal Information; professional/employment information; and non-public education information. The named statutes classify categories here; their contents are not supplied. The list does not say every category is collected from every person or add detailed uses beyond the policy’s collection section.

Details not recorded for this card

Supporting quotations

Collection of Personal Information
Section 1 above describes the Personal information we collect, use, and share.
Identifiers
Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))
Protected classification characteristics under California or federal law
Commercial information
Biometric information
Internet or other similar network activity
Geolocation data
Sensory data
Sensitive Personal Information
Professional or employment-related information
Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99))

Qualifications & exceptions

  • These are categories the notice says Teladoc may collect.

Not stated here

  • The cited statutes’ substantive text is not supplied.

Sharing & Disclosure · Company practice

Advertising-cookie use may count as a sale even though Teladoc is not paid for data

Teladoc says no one pays it for any data. It explains that California defines sale broadly to include sharing for anything of value. If you opt in or consent to advertising cookies and similar tools, their use may count as a sale under particular state privacy laws, including California. The no-payment statement therefore does not mean no legally defined sale can occur.

Details not recorded for this card

Supporting quotations

We are not paid by anyone for any data.
However, California laws define “sale” broadly to include the sharing of information in exchange for anything of value.
If you opt-in/consent to our use of advertising cookies and similar technologies, the use may be considered a “sale” of personal information under specific state consumer privacy law (including in California).

Qualifications & exceptions

  • The possible statutory sale concerns opted-in/consented advertising cookies and similar tools.

Data Access & Collection · Restriction or exception

The California notice says Teladoc does not collect or share known under-16 data

Within the California notice, Teladoc says it does not collect or share website Personal Information from anyone it knows is under 16. The general children’s section separately says the Websites are not intended for under-13 children and bars knowing collection or sale for that age group, while addressing parental consent and emancipated minors. These are different age thresholds and operations; the general wording does not erase the California notice’s stricter statement.

Details not recorded for this card

Supporting quotations

Teladoc does not collect or share Personal Information on the Websites from any person we know to be under the age of 16.
Our Websites are not intended for children under 13 years of age, and we do not knowingly collect or sell Personal Information from children under 13.
If you are under 13 and you are not an emancipated minor, please do not use or provide any information on our Websites without parental consent.

Qualifications & exceptions

  • The under-16 statement appears in the California notice and depends on knowledge of age.

Cross-references

Data Access & Collection · Company practice

The California notice lists direct, social, partner and tracking sources

Teladoc lists Personal Information obtained directly or indirectly from you through website interaction, social media, analytics/marketing partners and automatic tracking technologies. It says the Websites recognize browser GPC preferences for CCPA/CPRA-covered information and offers “Your Privacy Choices” in the footer for cookie settings. This source list does not mean every source supplies data about every visitor.

Details not recorded for this card

Supporting quotations

Teladoc collects Personal Information from the following categories of sources:
Directly and indirectly from you, including through your interaction with the Websites
Social media platforms
Third party partners such as analytics or marketing providers
Automatically through tracking technologies.
our Websites are configured to recognize and respect those preferences with respect to Personal Information that falls under the CCPA/CPRA.

Qualifications & exceptions

  • The GPC statement here concerns CCPA/CPRA-covered Personal Information.

Account & Service Control · User right or choice

California rights include access-related choices, deletion, correction and opt-outs

The California notice lists rights to know collected information, delete, opt out of sale or sharing, correct inaccuracies, limit Sensitive Personal Information use, data portability and non-discrimination. These apply within the notice’s California-law scope and exemptions; the later note says the described rights do not apply to PHI, for which HIPAA and the HIPAA notice govern instead. It does not promise every right for every type of health information.

Details not recorded for this card

Supporting quotations

Your California Rights Include:
Right to know what personal information we collect
Right to delete personal information
Right to opt-out of sale or sharing
Right to correct inaccurate information
Right to limit use of sensitive personal information
Right to data portability
Non-discrimination for exercising rights
If your Personal Information is considered Protected Health Information (PHI), the rights described above do not apply. Instead, your rights are governed by HIPAA and described in our HIPAA Notice of Privacy Practices.

Qualifications & exceptions

  • Subject to the California notice’s coverage and exemptions.
  • PHI rights are governed separately by HIPAA and its notice.

Cross-references

Also annotated in the same passage (3)

Account & Service Control · User right or choice

State law may provide rights to know, correct and delete information

Depending on residence, you may have some or all listed rights: request details about Personal Information collected, used or disclosed and data practices; request correction of inaccuracies; and request deletion of information collected from or about you. In some states, the right to know includes a list of third parties, as legally defined, with whom information was shared. The policy excludes PHI from these described rights and directs it to HIPAA rights instead.

Details not recorded for this card

Supporting quotations

Depending on your state of residency, you may have some or all of the following rights:
Right to Know: The right to request details about the Personal Information we collect, use, or disclose, as well as information about our data practices. In some states, this may also include a list of third parties (as defined by applicable law) with whom we have shared your Personal Information
Right to Request Correction: The right to request correction of any inaccurate Personal Information we maintain about you
Right to Request Deletion: The right to request deletion of the Personal Information we have collected from or about you
If your Personal Information is considered Protected Health Information (PHI), the rights described above do not apply.

Qualifications & exceptions

  • Availability depends on state of residence.
  • The third-party-list feature is described only for some states.
  • These described rights exclude PHI.

Cross-references

Also annotated in the same passage (3)

Account & Service Control · User right or choice

State rights may include a targeted-advertising opt-out and non-discrimination

Depending on residence, you may have a right to opt out of Personal Information use for legally defined targeted advertising, including data collected from activity on nonaffiliated sites or apps, and a right against discrimination for exercising privacy rights. The policy’s PHI exclusion applies to these described rights; it directs PHI to HIPAA rights instead.

Details not recorded for this card

Supporting quotations

Depending on your state of residency, you may have some or all of the following rights:
Right to Opt-out of Targeted Advertising: The right to opt out of the use of your Personal Information for purposes considered “targeted advertising” under applicable U.S. privacy laws, including data collected from your activities on nonaffiliated websites or apps
Right to Non-Discrimination: The right not to be subject to discrimination for exercising your privacy rights
If your Personal Information is considered Protected Health Information (PHI), the rights described above do not apply.

Qualifications & exceptions

  • Depends on state of residence and applicable legal definitions.
  • The described rights do not apply to PHI.

Cross-references

Also annotated in the same passage (3)

Account & Service Control · Procedure

A linked webform handles rights requests and applicable appeals

The policy directs you to its linked webform to exercise rights and, where applicable, appeal a consumer-rights decision. It does not give a universal appeal right, response deadline or verification procedure in this passage. The preceding rights depend on residence; PHI rights instead follow HIPAA and the HIPAA notice.

Details not recorded for this card

Supporting quotations

To exercise your rights and, as applicable, to appeal a consumer rights decision, please submit this
Instead, your rights are governed by HIPAA and described in our HIPAA Notice of Privacy Practices.

Qualifications & exceptions

  • Appeals are available as applicable.
  • PHI follows the separate HIPAA rights framework.

Not stated here

  • This passage does not specify appeal timing, response deadlines or identity-verification steps.
Also annotated in the same passage (5)

Account & Service Control · Restriction or exception

PHI follows HIPAA rights instead of the rights listed above

If Personal Information is PHI, the policy expressly excludes it from the preceding privacy-rights list. HIPAA and the linked HIPAA Notice of Privacy Practices govern those rights instead. This source does not supply that notice’s detailed rights or procedures.

Details not recorded for this card

Supporting quotations

Note- If your Personal Information is considered Protected Health Information (PHI), the rights described above do not apply. Instead, your rights are governed by HIPAA and described in our HIPAA Notice of Privacy Practices.

Qualifications & exceptions

  • Applies when the Personal Information is PHI.

Not stated here

  • The HIPAA notice’s detailed rights and procedures are not supplied.

Cross-references

Also annotated in the same passage (1)

Account & Service Control · Procedure

Privacy questions, complaints and requests can go online or by email

For questions about the policy, or questions, complaints or requests about your information, Teladoc offers the linked online contact form and PrivacyRights@teladochealth.com. The policy separately directs rights requests and applicable consumer-rights appeals to the webform; it does not state that every privacy email is an appeal.

Details not recorded for this card

Supporting quotations

If you have questions about this Policy or have questions, complaints or requests regarding your information, you can contact us online or at PrivacyRights@teladochealth.com
To exercise your rights and, as applicable, to appeal a consumer rights decision, please submit this
Also annotated in the same passage (1)