Privacy Policy

Identity and account details (name, email, phone, shipping address); health-related information you submit in the intake and in messages with our team; order and payment metadata (we never store full card numbers — payment credentials go directly to our payment processor); and device and usage data such as IP address, browser type, referring pages and interactions, collected via cookies and similar technologies. We may also receive information from the independent clinicians and pharmacies involved in your care.

To run your evaluation and orders, connect you with independent licensed clinicians and pharmacies, provide support and care coaching, process payments and refunds, improve the service, measure marketing, prevent fraud and abuse, and meet legal obligations.

Care-related texts (order status, clinician updates, sign-in codes) are sent as part of the service. Marketing texts are separate, require your express opt-in, are never a condition of purchase, and can be stopped anytime by replying STOP (HELP for help). Your text-message opt-in consent and phone number are never shared with third parties for their own marketing — this exclusion overrides anything else in this policy.

With the independent medical groups, clinicians, pharmacies and laboratories involved in your care; with service providers who operate the platform for us (hosting, payments, communications, analytics) under contractual confidentiality; in a merger, acquisition or asset sale with notice to you; and where required by law. We do not sell your personal information.

We use cookies and similar technologies for sign-in, experiment assignment, analytics and advertising measurement. You can control cookies in your browser, and we honor the Global Privacy Control (GPC) signal as an opt-out of targeted-advertising sharing where required by law.

We keep personal information only as long as needed for the purposes above: account and order records for the life of your account plus the period required by tax, healthcare and consumer-protection law; intake data associated with clinical care per medical record retention requirements; marketing data until you opt out. When no longer needed, data is deleted or de-identified.

We use encryption in transit, access controls, audit logging and least-privilege practices. No system is perfectly secure — notify us immediately at the contact below if you suspect unauthorized access to your account.

Our services are for adults 18 and older. We do not knowingly collect information from anyone under 18; if we learn we have, we delete it.

Links to third-party sites (including partner pharmacies) are provided for convenience; their privacy practices are their own and are not covered by this policy.

California residents have additional rights described in our separate statement, For California Residents — that document controls for CCPA/CPRA matters. We keep one canonical description of those rights to avoid inconsistency.

We will post any changes here with a new version and date; material changes are notified by email. Questions and privacy requests: privacy@medabol.example. Postal contact is listed in our Terms of Service.