Your information deserves careful handling.

Truevex Health ("Truevex," "we," "us") is operated by [LEGAL ENTITY NAME], located at [BUSINESS ADDRESS]. This policy explains how we handle personal information when you visit truevex.health, create an account, take an assessment, buy a treatment, use the member portal, or contact us.

Medical care is provided by independent, licensed healthcare providers through [AFFILIATED MEDICAL GROUP NAME], and prescriptions are filled by licensed partner pharmacies. When your health information is handled by these providers or pharmacies as part of your treatment, it is also protected by the federal HIPAA law and described in the Notice of Privacy Practices, available at [LINK TO NOTICE OF PRIVACY PRACTICES]. If this policy and that Notice differ on medical records, the Notice governs.

Information you give us:

• Contact and account details: name, email, phone number, shipping address, date of birth, password.
• Health information: your assessment and intake answers, health history, symptoms, goals, medications, allergies, photos you choose to upload, lab results, and messages with your care team.
• Identity verification: information or a photo ID used to confirm your identity where required.
• Payment details: payments are processed by our checkout and payment partners (Shopify and [PAYMENT PROCESSOR]). We do not store your full card number.
• Messages: emails, chats and support requests you send us.

Information collected automatically:

• Device and usage information: IP address, browser and device type, pages viewed, and how you use the site, collected through cookies and similar tools (see section 07).

Information from others:

• Providers, pharmacies and labs involved in your care, payment and shipping partners, and identity-verification services.

• To connect you with a licensed provider and support your evaluation and treatment.
• To process orders, payments, prescriptions and shipping.
• To run your account and member portal, including reminders, tracking and wellness tools.
• To communicate with you about your care, orders and account.
• To provide customer support.
• To keep the site secure, prevent fraud and fix problems.
• To understand how the site is used and improve it, using information that does not identify your health.
• To meet legal, medical-record and regulatory requirements.
• To send marketing emails or texts, only with your permission. You can opt out at any time.

We treat health information as our most sensitive category of data. We collect and use it only to provide the services you request, to support your care, and to meet legal requirements. We do not sell health information and do not use it for advertising or marketing to you. Where state law requires it, including Washington's My Health My Data Act, Nevada and Connecticut law, we ask for your consent before collecting or sharing consumer health data, and you may withdraw that consent at any time. Our Consumer Health Data Privacy Policy is available at [LINK, IF APPLICABLE].

• Your care team: licensed providers through [AFFILIATED MEDICAL GROUP NAME].
• Pharmacies and labs that fill your prescriptions or process your tests.
• Service providers who work for us under contract and may use information only to provide their services: website hosting, e-commerce and checkout (Shopify), payment processing, shipping, email and text messaging, customer support and security. [LIST OR CONFIRM VENDORS]
• Legal and safety: when required by law, court order or regulators, or to protect the safety and rights of you, others or Truevex.
• Business changes: if Truevex is involved in a merger, acquisition or sale of assets, information may transfer under the same protections described here.
• With your permission: any other sharing happens only with your consent.

Truevex does not sell your personal information, and does not share it for cross-context behavioral advertising. [CONFIRM WITH YOUR TEAM AND ATTORNEY BEFORE LAUNCH]

We use cookies and similar technologies to keep you signed in, remember your cart, keep the site secure, and understand how it is used. We do not place advertising or social-media tracking pixels on pages where you enter health information, such as assessments, intake forms and the member portal. [CONFIRM]

You can control cookies in your browser settings. We honor Global Privacy Control (GPC) browser signals as an opt-out request where required by law.

We send messages about your account, orders and care. With your consent, we may also send marketing emails or texts. Reply STOP to any text to opt out of texts, or HELP for help; message and data rates may apply, and message frequency varies. Use the unsubscribe link in any marketing email to stop marketing emails. You'll still receive messages needed for your care and orders.

Depending on where you live, you may have the right to:

• Know and access the personal information we hold about you.
• Correct information that is wrong.
• Delete your information, subject to the medical-record and legal requirements in section 10.
• Get a copy of your information in a portable format.
• Opt out of marketing, and of any sale, sharing or targeted advertising.
• Withdraw consent you have given, including consent for consumer health data.
• Appeal our decision if we deny your request.

To make a request, email support@truevexhealth.com with the subject "Privacy request." We will verify your identity before acting on it, and respond within the time required by law. You may use an authorized agent where the law allows. We won't treat you differently for exercising your rights.

We keep personal information for as long as your account is active and as needed to provide our services. Medical records are kept for the period required by state and federal law, which can be several years after your last visit. [CONFIRM RETENTION PERIODS] When information is no longer needed, we delete or de-identify it.

We use administrative, technical and physical safeguards to protect your information, including encryption in transit, access controls, and limiting access to people who need it for your care or our services. No online service can be 100% secure, so please keep your password private and let us know right away if you think your account has been accessed without permission.

Our services are only for people 18 and older. We do not knowingly collect information from anyone under 18. If you believe a minor has given us information, contact us and we will delete it.

Truevex serves patients in the United States, and your information is stored and processed in the United States.

We may update this policy from time to time. We'll post the new version on this page with a new "Last updated" date, and if the changes are significant we'll notify you by email or in your account.

Email: support@truevexhealth.com

Hours: Mon – Fri, 8am – 8pm EST

Mail: [LEGAL ENTITY NAME], [BUSINESS ADDRESS]

[PRIVACY OFFICER NAME OR TITLE, IF APPLICABLE]