Privacy Policy

1. Introduction

Elevated Health RX, LLC ("Elevated Health RX," "we," "us," or "our") operates an online telehealth platform that connects patients with a network of licensed U.S. healthcare providers for the evaluation, diagnosis, and treatment of erectile dysfunction and related men's health conditions. Our providers may prescribe compounded medications, including PDE5 inhibitors such as Sildenafil and Tadalafil, which are dispensed by FDA-regulated 503A outsourcing pharmacies and shipped directly to you.

This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our website at elevatedhealthrx.com, use our telehealth services, communicate with our support team, or otherwise interact with us (collectively, the "Services"). By accessing or using our Services, you acknowledge that you have read and understand this Privacy Policy.

This Privacy Policy does not apply to the practices of our affiliated medical groups, independent healthcare providers, or pharmacy partners, each of which maintains its own privacy practices. For information about how your Protected Health Information (PHI) is handled by our medical group, please review our separate Notice of Privacy Practices (HIPAA).

2. Limitations on Use by Minors

Our Services are intended solely for individuals who are at least 18 years of age. We do not knowingly collect personal information from anyone under the age of 18. If you are under 18, you may not use our Services, create an account, or submit any personal information to us. If we learn that we have collected personal information from a person under 18, we will delete that information promptly. If you believe we may have inadvertently collected data from a minor, please contact us at privacy@elevatedhealthrx.com.

3. Protected Health Information (PHI)

When you use our telehealth services, the healthcare providers in our network create medical records that contain Protected Health Information as defined by the Health Insurance Portability and Accountability Act ("HIPAA"). PHI includes information related to your health conditions, treatment plans, prescription history, medical questionnaire responses, provider consultations, and any other clinical data generated during your care.

The use and disclosure of your PHI is governed by HIPAA, applicable state health privacy laws, and our Notice of Privacy Practices. In the event of a conflict between this Privacy Policy and the Notice of Privacy Practices regarding the handling of PHI, the Notice of Privacy Practices shall control.

This Privacy Policy applies to personal information that falls outside the scope of HIPAA, including information collected through your use of our website, account registration, customer support interactions, and marketing communications.

4. Personal Information We Collect

4.1 Information You Provide Directly

When you create an account, complete a medical intake, place an order, or contact us, we may collect:

• Identity information: full name, date of birth, gender, and photograph (if required for identity verification)
• Contact information: email address, phone number, mailing address, and shipping address
• Health information: medical history, current medications, allergies, health conditions, lifestyle information, and responses to our medical intake questionnaire (including information about erectile dysfunction symptoms, sexual health history, and relevant cardiovascular health)
• Payment information: credit card number, billing address, and other financial details necessary to process your order (note: full payment card data is processed and stored by our payment processor, not on our servers)
• Account credentials: username, password, and security questions
• Communications: messages you send to our support team, feedback, reviews, and survey responses
• Demographic information: age, state of residence, and other demographic data relevant to determining telehealth eligibility

4.2 Information Collected Automatically

When you access our website or use our Services, we automatically collect certain technical and usage information, including:

• Device information: IP address, browser type and version, operating system, device type, screen resolution, and unique device identifiers
• Usage data: pages visited, time spent on pages, click patterns, referring URLs, search terms used to find our site, and navigation paths
• Location data: approximate geographic location derived from your IP address (we do not collect precise GPS location)
• Cookies and similar technologies: cookies, web beacons, pixel tags, and local storage objects (see Section 6 for details)
• Log data: server logs that record requests made to our website, including timestamps, HTTP method, and response codes

5. How We Use Personal Information

We use the personal information we collect for the following purposes:

• Providing our Services: to facilitate telehealth consultations, connect you with licensed providers, process prescriptions for compounded medications (such as Sildenafil- and Tadalafil-based formulations), coordinate with 503A outsourcing pharmacies for fulfillment, and ship orders to your address
• Account management: to create and manage your account, authenticate your identity, and maintain your medical and order history
• Billing and payments: to process transactions, manage subscriptions, issue refunds, and prevent fraudulent charges
• Communications: to send you order confirmations, shipping notifications, appointment reminders, prescription updates, and customer service responses
• Marketing: to send you promotional offers, newsletters, and information about new products and services, where permitted by law (you may opt out at any time; see Section 8)
• Improvement and analytics: to understand how our Services are used, identify trends, diagnose technical issues, and improve the functionality, design, and content of our platform
• Legal compliance: to comply with applicable laws, regulations, legal processes, and government requests, including state telehealth regulations and pharmacy licensing requirements
• Safety and security: to detect, prevent, and respond to fraud, abuse, security incidents, and other harmful activity
• Eligibility verification: to confirm that you meet state-specific telehealth requirements and are eligible to receive prescribed medications

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to operate and improve our Services. The types of cookies we use include:

• Essential cookies: required for the basic functionality of our website, such as maintaining your session, remembering items in your cart, and ensuring security. These cookies cannot be disabled.
• Analytics cookies: help us understand how visitors use our website by collecting information about page views, traffic sources, and user behavior. We use services such as Google Analytics for this purpose.
• Advertising cookies: used to deliver relevant advertisements and measure the effectiveness of our advertising campaigns. These cookies may track your browsing activity across different websites.
• Functional cookies: remember your preferences, such as language and display settings, to provide a more personalized experience.

You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. Please note that disabling certain cookies may impair the functionality of our Services. For more information about online advertising and your choices, you may visit the Network Advertising Initiative at networkadvertising.org or the Digital Advertising Alliance at aboutads.info.

We may also use pixel tags (also called web beacons or clear GIFs) in emails to track whether messages are opened and which links are clicked. This helps us measure the effectiveness of our communications and tailor future messages.

7. Disclosure of Personal Information

We do not sell your personal information. We may share your personal information with the following categories of third parties:

• Healthcare providers: we share your health information, identity details, and contact information with the licensed medical providers in our network who evaluate your eligibility, conduct telehealth consultations, and prescribe medications. These providers operate under their own medical licenses and are bound by HIPAA and applicable state laws.
• Pharmacies: once a provider writes a prescription, we transmit the prescription and necessary patient information to FDA-regulated 503A outsourcing pharmacies that compound and dispense your medications (such as compounded Sildenafil, Tadalafil, or combination sublingual formulations).
• Payment processors: we share billing and transaction information with Stripe and other payment processing partners to complete purchases, manage subscriptions, and prevent fraud. These processors handle your payment card data subject to PCI DSS standards.
• Service providers: we engage third-party vendors for services such as website hosting, data analytics, email delivery, customer support tools, identity verification, and shipping logistics. These providers access personal information only as needed to perform services on our behalf and are contractually obligated to protect your data.
• Law enforcement and legal compliance: we may disclose personal information when required by law, subpoena, court order, or government request, or when we believe disclosure is necessary to protect our rights, enforce our terms, investigate fraud, or ensure the safety of our users or the public.
• Corporate transactions: in the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.
• With your consent: we may share your personal information for purposes not described in this Privacy Policy if we obtain your consent.

8. Your Choices and Controls

You have the following rights and choices regarding your personal information:

• Access and portability: you may request a copy of the personal information we hold about you in a commonly used, machine-readable format.
• Correction: you may request that we correct inaccurate or incomplete personal information. You can update much of your information directly through your account settings.
• Deletion: you may request that we delete your personal information, subject to certain exceptions (for example, we may retain information required for legal compliance, to complete a pending transaction, or to maintain medical records as required by law).
• Marketing opt-out: you may opt out of receiving promotional emails by clicking the "unsubscribe" link in any marketing email, or by contacting us at support@elevatedhealthrx.com. Please note that even after opting out, you will continue to receive transactional and service-related communications (such as order confirmations and shipping updates).
• Cookie controls: you may manage or disable cookies through your browser settings as described in Section 6.
• Do Not Track: our website does not currently respond to "Do Not Track" browser signals. We will update this policy if we adopt a Do Not Track standard in the future.

To exercise any of these rights, please contact us at privacy@elevatedhealthrx.com or write to us at the address listed in Section 15. We will respond to your request within 30 days (or sooner if required by applicable law). We may ask you to verify your identity before fulfilling your request.

9. Data Retention

We retain your personal information for as long as necessary to provide our Services, fulfill the purposes described in this Privacy Policy, and comply with our legal obligations. Specifically:

• Account information: retained for as long as your account is active, and for a reasonable period thereafter in case you decide to reactivate.
• Medical records: retained in accordance with applicable state and federal medical record retention laws, which generally require retention for a minimum of 7 to 10 years from the date of last treatment.
• Transaction records: retained for a minimum of 7 years to comply with financial and tax reporting requirements.
• Marketing data: retained until you opt out, after which we will suppress your information from future marketing communications but may retain a record of your opt-out preference.
• Cookies and analytics data: retained for up to 26 months, depending on the type of cookie and analytics service.

When personal information is no longer needed, we will securely delete or de-identify it in accordance with our data retention and destruction policies.

10. Payment Processing

We use Stripe, Inc. as our primary payment processor. When you make a purchase, your payment card information (credit or debit card number, expiration date, and CVV) is transmitted directly to Stripe through their secure, PCI DSS-compliant infrastructure. We do not store, process, or have access to your full payment card details on our servers.

We receive from Stripe only a tokenized representation of your payment method, the last four digits of your card, the card brand, and the transaction result. This allows us to display your payment method in your account and process refunds or subscription changes without handling your sensitive card data.

For more information on how Stripe handles your data, please review Stripe's Privacy Policy.

11. California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (as amended by the California Privacy Rights Act) provides you with additional rights regarding your personal information. This section supplements the rest of our Privacy Policy and applies solely to California residents.

11.1 Right to Know

You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which the information was collected, the business or commercial purpose for collecting the information, and the categories of third parties with whom we share the information. You may make this request up to twice in a 12-month period.

11.2 Right to Delete

You have the right to request that we delete the personal information we have collected from you, subject to certain exceptions permitted by law (such as when retention is necessary to complete a transaction, comply with a legal obligation, or maintain medical records).

11.3 Right to Correct

You have the right to request that we correct inaccurate personal information that we maintain about you.

11.4 Right to Opt Out of Sale or Sharing

We do not sell your personal information and have not sold personal information in the preceding 12 months. We do not share your personal information for cross-context behavioral advertising purposes. If our practices change, we will update this policy and provide an opt-out mechanism.

11.5 Right to Non-Discrimination

We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you services, charge you different prices, provide a different level of quality, or suggest any of these as a consequence of exercising your rights.

11.6 How to Exercise Your Rights

To submit a request to know, delete, or correct, please contact us at privacy@elevatedhealthrx.com or call us at (844) 357-3601. We will verify your identity by matching information you provide with information we have on file. You may also designate an authorized agent to submit a request on your behalf, provided the agent has your written permission and we can verify your identity.

11.7 Categories of Personal Information Collected

In the preceding 12 months, we have collected the following categories of personal information as defined by the CCPA:

• Identifiers (name, email, phone, address, IP address)
• Personal information categories listed in Cal. Civ. Code 1798.80(e) (name, address, phone, financial information)
• Protected classification characteristics (age, gender)
• Commercial information (purchase history, subscription details)
• Internet or similar network activity (browsing history, search history, interactions with our website)
• Geolocation data (approximate location from IP address)
• Professional or employment-related information (if provided during intake)
• Sensitive personal information (health information, account credentials)

12. Data Security

We implement commercially reasonable administrative, technical, and physical safeguards to protect your personal information from unauthorized access, use, alteration, and destruction. Our security measures include:

• Encryption of data in transit using TLS/SSL protocols
• Encryption of sensitive data at rest
• Access controls limiting employee access to personal information on a need-to-know basis
• Regular security assessments and vulnerability testing
• Employee training on data privacy and security practices
• Secure data center hosting with physical access controls

Despite our efforts, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your personal information. If you have reason to believe that your interaction with us is no longer secure, please contact us immediately at privacy@elevatedhealthrx.com.

13. Links to Third-Party Websites

Our website may contain links to third-party websites, services, or applications that are not operated by us, including pharmacy partner portals, payment processor pages, and health information resources. This Privacy Policy does not apply to those third-party services. We are not responsible for the privacy practices or content of third-party websites. We encourage you to review the privacy policies of any third-party sites you visit.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email or through a prominent notice on our website prior to the changes taking effect.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our Services after any changes to this Privacy Policy constitutes your acceptance of the updated policy.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Elevated Health RX, LLC
• 8950 SW 74th Court, Suite 2201
• Miami, FL 33156
• Email: privacy@elevatedhealthrx.com
• Phone: (844) 357-3601