Website Privacy Policy

Last update: 01.08.2026
Published: 02.10.2026
This Website Privacy Policy explains how A Better Lou MSO, LLC collects, uses, discloses, and protects information through abetterlou.com, its subdomains, related public pages, and the A Better Lou online checkout.

This Policy is a notice of information practices. It is not a contract, warranty, medical-record notice, or HIPAA authorization. It does not create rights or obligations beyond those provided by applicable law.

1. Who We Are
The A Better Lou program is supported by two separate entities with different responsibilities.

A Better Lou MSO, LLC, referred to as the "Platform," operates the Website and online checkout and provides nonclinical administrative, technology, marketing, and support services. In this Policy, "we," "us," and "our" refer to the Platform unless the context expressly states otherwise.

ABL Physician Services PLLC, referred to as the "Practice," provides all clinical care. The Practice controls its clinical decisions and medical records and is a HIPAA covered health care provider.

Under the current operating model, the Platform does not access the Practice-controlled clinical questionnaires, encounter content, medical records, clinical recordings, transcripts, clinical notes, laboratory results, or prescription records. The Platform does process Website, checkout, consent, account, and transaction information described in this Policy. Whether HIPAA applies to a particular Platform activity depends on the entity, function, relationship, information, and actual data flow involved. When and to the extent the Platform performs a function for the Practice that involves protected health information, it acts under the written business associate agreement and safeguards required by HIPAA for that function. This limited role does not make every Platform activity subject to HIPAA or authorize access to Practice-controlled clinical content.

Clinical Services are available only for a Plan that checkout shows as active and only when an appropriately licensed or authorized Provider is available. Arizona is active as of the Effective Date. Illinois becomes active for a selected Plan only when checkout expressly shows that Plan as available there.

2. Scope of This Policy
This Policy applies to information collected through:
  • the public Website and its subdomains;
  • the A Better Lou online checkout;
  • Website contact and support functions;
  • first-party Website and checkout analytics;
  • marketing-source and campaign attribution;
  • checkout, transaction, consent, and audit records; and
  • the optional advertising-measurement activity described in Section 7.

This Policy does not govern clinical intake, telehealth encounters, medical records, prescriptions, laboratory information, clinical messages, clinical recordings, AI-assisted clinical documentation, or other information maintained by or for the Practice in connection with care. Those activities are governed by the Practice's HIPAA Notice of Privacy Practices and applicable clinical consents.

The Website may link to services operated by the Practice, payment processors, pharmacies, laboratories, advertising platforms, social-media services, and other third parties. Their own privacy notices govern information they independently collect. If checkout or transaction information is transmitted to the Practice and maintained by it as protected health information, the Notice of Privacy Practices governs the Practice's handling of that information.

3. Information We Collect
Depending on how you use the Website or checkout, we may collect the following categories of information.

Contact and identifying information. This may include your name, email address, telephone number, mailing or billing address, state, and other information you provide.

Checkout and Plan information. This may include the Plan you select, order details, applicable price, billing frequency, state selection, transaction status, receipt or refund information, and information needed to administer the purchase.

Consent and audit information. We record whether required and optional controls were accepted or declined. An electronic-signature or consent record may include your typed name, date and time, IP address, browser or user-agent information, checkbox event, exact document version or cryptographic hash, transaction or verification identifier, and other tamper-evident audit information.

Payment and transaction information. Payment-card information is entered through secure fields operated by the payment processor for the Practice, which is the merchant of record. The Platform does not receive or store your complete payment-card number or card security code. The Practice and Platform may receive limited transaction information needed to confirm payment, administer the purchase, process support requests, or document a refund.

Device and usage information. This may include IP address, browser and device type, operating system, language, screen characteristics, dates and times, pages viewed, links selected, referring pages, and information about how the Website or checkout performs.

Marketing-source information. This may include campaign parameters, referring sources, advertising click identifiers, and related information showing how a visitor reached the Website or checkout.

Communications. We collect information you provide when you call, email, text, submit a public Website form, or contact support.

Information from service providers. We may receive transaction confirmations, fraud or security signals, delivery information, communications status, and other information from vendors performing services for us.
Please do not submit medical histories, symptoms, diagnoses, prescriptions, laboratory results, photographs, or other clinical information through public Website forms or ordinary email. Use the Practice's secure patient portal for clinical information.

Automated Tools and Artificial Intelligence. We may use automated tools, algorithms, and artificial intelligence to:
(i) detect and prevent fraud, payment abuse, and security threats;
(ii) analyze Website performance, identify errors, and improve user experience;
(iii) provide chatbot or virtual-assistant support for account and billing questions;
(iv) measure marketing-campaign effectiveness and attribute conversions; and
(v) support internal analytics and business planning.

We do not use automated decision-making to make decisions that produce legal or similarly significant effects concerning you (such as eligibility for Services, pricing, or credit) without human review. If our use of automated decision-making changes, we will update this Policy and provide any required notice, explanation, or opt-out mechanism.

Clinical AI tools (e.g., AI-assisted clinical documentation, diagnostic support, or prescription decision support) are controlled by the Practice and governed by the Practice's Notice of Privacy Practices and applicable clinical consents, not this Policy.

4. How We Collect Information
We collect information:
  • directly from you when you use the Website, submit information, contact us, or complete checkout;
  • automatically through first-party cookies, storage, logs, and similar technologies;
  • from the payment processor and other service providers;
  • from the advertising source that directed you to the Website; and
  • from other sources when you direct or authorize the disclosure or when applicable law permits it.

5. How We Use Information
We may use information to:
  • operate, maintain, secure, and improve the Website and checkout;
  • display available Plans, pricing, and state availability;
  • complete and administer purchases;
  • confirm transactions and support refunds;
  • create and maintain consent, signature, and transaction records;
  • provide customer, technical, and account support;
  • respond to questions and communications;
  • detect, investigate, and prevent fraud, misuse, security incidents, and technical errors;
  • understand Website and checkout performance;
  • perform internal business, campaign, and attribution analysis;
  • send communications you request or separately authorize;
  • protect the rights, safety, systems, and property of the Platform, Practice, users, and others;
  • comply with legal, regulatory, accounting, and contractual obligations; and
    establish, exercise, or defend legal claims.

We may use aggregated or properly deidentified information for analytics, planning, security, quality improvement, and other lawful purposes. Where applicable law requires it, we will maintain information treated as deidentified in deidentified form and will not attempt to reidentify it.

6. First-Party Cookies and Analytics
We use first-party cookies, session storage, server logs, and similar technologies to operate the Website and checkout, remember preferences, preserve campaign information, maintain security, prevent duplicate transactions, diagnose errors, and understand Website performance.

The Platform's first-party analytics is hosted in a Google Cloud environment covered by a business associate agreement and configured to support applicable privacy and security requirements. The existence of a business associate agreement is a contractual safeguard and is not, by itself, a certification that every activity or system is subject to HIPAA.

You may control cookies through available Website controls and your browser settings. Disabling necessary storage may prevent portions of the Website or checkout from working correctly.

Browsers may offer "Do Not Track," Global Privacy Control, or other preference signals. Because there is no single uniform standard for every signal, we respond as required by applicable law.

Recording and Monitoring. We may record, transcribe, or monitor customer-support calls, chat sessions, and other communications for quality assurance, training, fraud prevention, dispute resolution, and compliance purposes. When we record a call, we provide any notice and obtain any consent that applicable law requires, which varies by state. If applicable law requires your consent and you do not consent, we will assist you through non-recorded channels when available.

We do not record clinical telehealth encounters; those are controlled by the Practice under its Notice of Privacy Practices.

7. Optional Advertising Measurement
Checkout presents a separate, optional, unchecked choice linked to the Analytics and Advertising Policy. If you affirmatively consent and successfully complete an initial checkout, the Platform may send one generic completed-checkout event to the advertising platform associated with the ad click that brought you to A Better Lou. The event is generated solely within the Platform's separated Website, checkout, and attribution process before information enters a Practice-controlled system. It is not created from, linked back to, or disclosed on behalf of Practice-controlled records or clinical systems.

The event may include only:
  • the advertising platform's own attribution identifiers;
  • a generic completed-checkout indicator;
  • the address (URL) of the Website page on which the event occurred, which does not identify you;
  • the date and time of the event; and
  • a random event identifier used only for measurement and duplicate prevention and not as a lookup key to a patient, order, Plan, payment, or Practice record.

The event does not include your name, email address, telephone number, mailing address, IP address, complete payment-card or bank information, selected Plan, program, product, or medication, actual payment amount, clinical information, questionnaire answers, symptoms, diagnoses, prescriptions, laboratory information, treatment information, patient status, or Practice medical records. The Platform does not send the event as a disclosure by or on behalf of the Practice.

The choice applies only to the initial completed checkout. It does not authorize events concerning renewals, recurring payments, refunds, cancellations, later purchases, appointments, prescriptions, laboratory activity, treatment, or other later account or clinical activity.

The event may be used to measure and improve advertising performance. The advertising platform may associate its own attribution identifiers with ad, campaign, account, device, or other context it already holds under its own privacy terms. A Better Lou does not append your Plan, program, medication, amount, clinical information, or Practice records to the event. This choice does not authorize the use or disclosure of Practice medical records or clinical information for advertising, health-based audiences, remarketing, or retargeting.

If you leave the box unchecked, no completed-checkout event is sent under this process. Declining does not affect purchase, pricing, eligibility, Plan availability, Services, or care.

Additional terms, including withdrawal mechanics, appear in the Analytics and Advertising Policy.

8. How We Disclose Information
We may disclose information as follows.

Service providers. We use vendors for Website hosting, cloud infrastructure, payment processing, communications, security, fraud prevention, customer support, analytics, document delivery, and other business functions. They may receive information needed to perform the contracted service and are subject to applicable contractual and legal requirements.

The Practice. Information needed to begin or administer purchased Services may be provided to the Practice or transmitted directly into a Practice-controlled system. The Platform does not receive access to the Practice's resulting clinical records under the current operating model.

Payment processor. The payment processor receives payment-card, billing, and transaction information needed to process charges for the Practice as merchant of record.

Advertising platform. If you provide the separate optional consent, the advertising platform associated with the originating ad click may receive the limited event described in Section 7.

Legal and safety purposes. We may disclose information when required by law, regulation, court order, subpoena, or other valid legal process, or when reasonably necessary to investigate fraud, protect rights or property, enforce applicable terms, respond to an emergency, or protect the safety of any person.

Business transactions. Information may be transferred as part of a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar corporate transaction, subject to applicable law.

At your direction. We may disclose information when you direct us to do so or provide a legally sufficient consent.

The Platform does not sell personal information for monetary consideration.

9. Marketing Communications
Consent to receive marketing calls, texts, or emails is separate and optional. It is not a condition of purchase or care.

If you separately consent, we may send information about Plans, programs, products, or services. Marketing communications may include ordinary delivery and performance information, such as whether an email was delivered or a link was selected.

You may unsubscribe from marketing email using the unsubscribe link. You may stop marketing text messages by replying STOP. Message and data rates may apply.

Opting out of marketing does not stop transactional, security, account, billing, or care-logistics communications that applicable law permits us to send.

10. Your Choices and Privacy Rights
Depending on applicable law and the information involved, you may have the right to:
  • request access to personal information;
  • request correction of inaccurate information;
  • request deletion;
  • request a portable copy of certain information;
  • opt out of certain processing;
  • withdraw a consent;
  • appeal a privacy-request decision;
  • use an authorized agent where permitted; and
  • receive equal service and pricing when exercising a privacy right.

These rights may be subject to identity verification, legal exceptions, transaction and record-retention requirements, security needs, and other limitations permitted by law.

A withdrawal of consent operates prospectively. It does not invalidate processing already lawfully completed and cannot recall information already delivered to a recipient before we received and processed the withdrawal.

To submit a request, email privacy@abetterlou.com. Describe the request and the information or activity involved. We may ask for information reasonably necessary to verify your identity and authority.

Requests concerning Practice medical records or HIPAA rights must be submitted to the Practice under its Notice of Privacy Practices.

State-Specific Privacy Rights and Notices. Depending on your state of residence and the information involved, you may have additional rights under state privacy laws. The following state-specific provisions apply when required by law and when the information is not governed exclusively by HIPAA or the Practice's Notice of Privacy Practices.

Illinois Residents. Biometric Information. If we collect, capture, purchase, receive through trade, or otherwise obtain your biometric identifiers or biometric information (as defined in 740 ILCS 14/1 et seq.), we will: (i) inform you in writing before collection of the specific purpose and length of retention; (ii) obtain your written consent before collection; (iii) publish retention and destruction guidelines; and (iv) store, transmit, and protect biometric data using a reasonable standard of care that is the same as or more protective than the manner in which we protect other confidential and sensitive information. We will not sell, lease, trade, or otherwise profit from biometric information. We will permanently destroy biometric information when the initial purpose is satisfied or within three years of your last interaction, whichever occurs first, unless a longer retention is required by law. To withdraw consent or request destruction, contact privacy@abetterlou.com.

Other Personal Information. You have the right to request access, correction, and deletion of personal information subject to verification and legal exceptions. You may designate an authorized agent by providing written authorization.

11. Security
We maintain administrative, technical, and physical safeguards designed to protect information against unauthorized access, use, alteration, loss, and disclosure. Safeguards may include access controls, encryption in transit, logging, credential protections, vendor controls, and procedures for detecting and responding to security events.

You are responsible for protecting your account credentials, devices, and copies of downloaded records. Notify support@abetterlou.com promptly if you believe your account or information has been used without authorization.

No Website, storage system, security measure, or internet transmission can be guaranteed completely secure. We cannot guarantee that unauthorized access, loss, misuse, or alteration will never occur.

12. Retention
We retain information for as long as reasonably necessary for the purposes described in this Policy, including to:
  • operate the Website and checkout;
  • administer purchases and transactions;
  • maintain consent and signature evidence;
  • meet legal, tax, accounting, and recordkeeping obligations;
  • prevent fraud and security incidents;
  • resolve disputes;
  • enforce agreements; and
  • establish, exercise, or defend legal claims.

Retention periods vary based on the information, purpose, applicable law, contractual requirements, and whether the information is needed for an active account, transaction, audit, complaint, or dispute.

When information is no longer reasonably needed, we may delete, aggregate, deidentify, or otherwise make it unusable, subject to lawful backup and retention practices. Properly aggregated or deidentified information may be retained longer where permitted by law.

Clinical records are retained separately by the Practice under its Notice of Privacy Practices and applicable record-retention requirements.

13. Third-Party Services and Links
The Website may contain links to or integrations with payment processors, advertising platforms, social-media services, pharmacies, laboratories, shipping providers, and other third parties.

An independent third party's privacy notice and terms govern information it collects for its own purposes. We are not responsible for the privacy, security, accuracy, or availability of an independent third party's website or service.

This section does not reduce the Platform's responsibility for service providers acting on its behalf where applicable law makes the Platform responsible for their conduct.

14. Adults Only
The Website, checkout, Plans, and Services are intended for adults age 18 and older. They are not directed to individuals under 18, and we do not knowingly permit an individual under 18 to purchase a Plan through checkout.

If you believe an individual under 18 has provided personal information through the Website, contact privacy@abetterlou.com.

15. Changes to This Policy
We may update this Policy to reflect changes in law, technology, the Website, checkout, Plans, vendors, or information practices.

When we update it, we will revise the version and Effective Date and make the current Policy available through the Website. We will provide additional notice or obtain consent when applicable law requires it.

A revised Policy applies prospectively from its stated effective date unless applicable law permits or requires another treatment.

16. Contact Information
For Website, checkout, technology, program-support, and Platform privacy matters:
A Better Lou MSO, LLC
333 N Wilmot Rd, Ste 340
Tucson AZ, 85711
privacy@abetterlou.com
support@abetterlou.com
(520) 524-3202

333 N Wilmot Rd Ste 340-18
Tucson, AZ 85711
privacy@abetterlou.com
support@abetterlou.com
(480) 944-3221

Secure patient portal: https://abetterlou.canvasmedical.com/app/login

Do not send detailed medical information through ordinary email. Use the secure patient portal for clinical information.

These contacts and messaging channels are not monitored continuously and are not for emergency or crisis care. If you think you may have a medical emergency, call 911 or go to the nearest emergency department immediately.