Privacy Policy

Information we collect

We collect only what we need to evaluate, dispense, and support your care.

• Account and contact data: name, email, phone, shipping and billing address.
• Health information you submit: intake answers, medical history, medications, allergies, lab results, photos, and messages with your care team.
• Order data: products purchased and fulfillment records.
• Payment data: processed by our payment processor. We never store full card numbers.
• Technical and analytics data: IP address, device and browser type, pages viewed, and referral source — analytics cookies only load after you accept them.

How we use your information

• To connect you with a licensed physician and support clinical review of your intake.
• To transmit prescriptions to licensed US pharmacies and fulfill and ship your order.
• To provide customer and clinical support, refills, and dose adjustments.
• To send transactional messages about your order, intake, or account.
• To detect fraud, secure the platform, and comply with legal obligations.
• With your consent, to send marketing communications and measure marketing performance.

Protected health information (PHI)

Information you provide as part of a clinical evaluation is Protected Health Information and is handled under HIPAA and our HIPAA Notice of Privacy Practices. PHI is never sold and is never used for advertising.

How we share information

We share information only as described below — we do not sell personal information.

• Affiliated medical groups and the licensed physicians who review your case.
• Licensed pharmacies and laboratories that dispense medication or process labs.
• Service providers under contract: hosting, payments, shipping, e-commerce, email/SMS, customer support, and analytics.
• Legal and safety: when required by law, subpoena, or to prevent serious harm.
• Business transfers: in a merger, acquisition, or sale of assets, with notice where required.

Text messages (SMS)

You can opt in by checking the SMS consent box on our contact or checkout forms, or through the chat widget on mynuvarahealth.com. We send texts you opt into, which may include offers and promotions, reminders, and updates about your inquiries, orders and account. The sender is MyNuvara Health (Nuvara Health LLC). Consent given through the chat widget covers informational and transactional texts only; marketing texts go only to people who opted in through the website checkbox. We use your mobile phone number only to send the texts you opted into. Msg frequency varies. Msg & data rates may apply. Reply STOP to opt out or HELP for help. Consent is not a condition of purchase. We keep a record of your consent, including the date and time, the page, and the wording you agreed to.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties.

We do not share or sell mobile phone numbers or SMS opt-in consent to third parties or affiliates for marketing purposes.

See our SMS Terms at mynuvarahealth.com/legal/sms-terms.

Cookies and analytics

Essential cookies and browser storage keep the cart, session, and checkout working. Analytics and advertising tags (Google Analytics, the Meta Pixel and TikTok server events) load or send data only after you accept analytics cookies in our consent banner. If you accepted, our server may also send Google Analytics a record of a completed order with an order reference, the amount, the currency, and the campaign that brought you to us, but not your name, email, or phone number. You can change your choice anytime through “Cookie settings” in the footer.

We use Google Analytics, Meta and TikTok to measure site use and our ads. With your consent, we may share limited event data (such as page views, checkout steps and order value, plus hashed email or phone where applicable) with Meta and TikTok. We never share intake answers or other health information with advertising platforms.

Data retention

Medical records are retained for the period required by applicable state law (generally 6–10 years after the last encounter). Order and tax records are retained as required by law. Marketing data is deleted upon request or when it is no longer needed.

Security

We use encryption in transit and at rest, access controls, least-privilege staff permissions, audit logging, and vendor due diligence. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

Your rights

Depending on where you live, you may request access to, correction of, deletion of, or a copy of your personal information, and you may opt out of marketing at any time. Residents of California, Colorado, Connecticut, Virginia, and other states with comprehensive privacy laws also have the right to appeal a denied request.

• Email privacy@mynuvara.com to submit a request. We verify identity before acting.
• We respond within 45 days, with one 45-day extension where permitted.
• We will never discriminate against you for exercising a privacy right.

Children

Nuvara services are for adults 18 and older. We do not knowingly collect information from children under 18.

Changes and contact

We will post any changes on this page and update the effective date. Questions: privacy@mynuvara.com.