Privacy policy

This policy describes how we handle personal information collected through our website and services. Protected health information created or received in the course of providing care is additionally governed by our notice of privacy practices, which controls where the two differ.

Information we collect

• Account information: name, email address, date of birth, shipping address and payment details.
• Health information: intake responses, medical history, laboratory results, prescriptions and messages with your care team.
• Usage information: pages visited, device and browser type, and referral source.
• Communications: messages, support requests and survey responses you send us.

How we use it

• To provide care — clinician review, prescribing, dispensing and follow-up.
• To operate the service, process payments and ship orders.
• To communicate about your orders, your protocol and service changes.
• To improve the product and, where permitted, to measure marketing effectiveness.
• To comply with legal, regulatory and pharmacy recordkeeping obligations.

What we never do

We do not sell personal information. We do not share protected health information with advertisers, data brokers or social platforms for advertising purposes. We do not use your clinical records to target advertising to you.

Who we share it with

• Licensed clinicians and pharmacies involved in your care.
• Laboratories processing tests you have ordered.
• Service providers under contract — payment processing, shipping, hosting and customer support — limited to what their function requires.
• Authorities, where disclosure is required by law or necessary to prevent serious harm.

Your choices

• Access, correct or download the personal information we hold about you.
• Request deletion, subject to records we are legally required to retain.
• Opt out of marketing email at any time; transactional and clinical messages continue.
• Set browser-level signals such as Global Privacy Control, which we honour.

Retention

Clinical and prescribing records are retained for the period required by the state in which care was delivered, typically between six and ten years. Marketing data is retained until you opt out or request deletion.

Contact

Questions about this policy, or a request relating to your data, can be sent to our privacy team using the contact page.