Privacy Policy

We collect information you give us, information collected automatically, and information from our partners.

• Identity and contact information: name, date of birth, email address, phone number, and shipping address.
• Health information: medical history, symptoms, medications, allergies, intake and questionnaire responses, lab results, photos or documents you upload, and messages with your care team.
• Identity verification: information or images used to confirm your identity, as required by your provider or state law.
• Order and payment information: treatments ordered, order history, and billing details. Card payments are processed by Stripe. We do not store full card numbers.
• Device and usage information: IP address, browser type, device type, pages viewed, and similar data collected through cookies and related technologies.
• Communications: emails, texts, and support requests you send us.

We use your information to provide and support your care, not to sell it.

• Connect you with a licensed provider in your state and support your evaluation and treatment.
• Send prescriptions to a licensed pharmacy and arrange delivery.
• Verify your identity and location, including confirming you are in a state where services are available.
• Process payments, refunds, and billing questions.
• Communicate with you about your account, orders, appointments, and care.
• Operate, secure, and improve our website and services.
• Comply with legal, regulatory, and licensing obligations.

We send marketing messages only with your consent where required. You can opt out at any time using the unsubscribe link or by contacting us. We never use your health information for marketing without your written authorization.

De-identified data. Our platform partner uses de-identified data, with all 18 HIPAA identifiers removed, to improve its clinical software and AI tools on its own infrastructure. De-identified data cannot identify you and is not used for marketing.

We share information only as needed to provide your care and run our services. We do not sell your personal or health information.

• MyDose Health, LLC and MyDose.ai, LLC: our platform partners, which provide the patient portal (app.mydose.ai), technology, scheduling, billing, and administrative support, under written agreements including Business Associate Agreements.
• Your healthcare provider: licensed clinicians of NVP Medical Group or MDSide, PLLC, who review your information, evaluate you, and decide whether a prescription is appropriate.
• Licensed pharmacies: pharmacies that fill and ship your prescriptions.
• Payment processor: Stripe processes card payments under its own privacy policy.
• Service providers: vendors that help us with hosting, email, customer support, and analytics, bound by confidentiality obligations.
• Legal and safety reasons: when required by law, subpoena, or court order, to protect rights and safety, or to prevent fraud.
• Business transfers: if WellaraMD is involved in a merger, acquisition, or sale of assets, subject to this Privacy Policy and applicable law.

The medical practice that treats you (NVP Medical Group or MDSide, PLLC) is your healthcare provider and the Covered Entity under HIPAA. Your pharmacies are also covered entities. They protect your health information and describe your HIPAA rights, including access to and amendment of your medical records, in their Notice of Privacy Practices.

When WellaraMD or MyDose handles health information on behalf of a provider or pharmacy, we do so as a business associate under a Business Associate Agreement and only as HIPAA permits. Health information you provide that is not covered by HIPAA is protected as described in this Privacy Policy and under applicable state law.

The Notice of Privacy Practices for care delivered through our platform partner is available at health.mydose.ai/privacy-policy.

Our marketing website uses cookies and similar technologies to keep the site working, understand how visitors use it, and, if you allow it, measure our advertising.

• Essential cookies keep the site and portal secure and functional.
• Analytics cookies tell us which pages are visited and how the site performs.
• Advertising technologies (including Meta and Google pixels and tags) are used on our general marketing pages to measure ad performance and show WellaraMD ads to visitors on other sites. You can opt out of targeted advertising at any time through our cookie settings or by enabling Global Privacy Control in your browser.

We do not place advertising pixels on intake, checkout, or patient portal pages, and we do not share health information with advertising platforms. You can manage cookies in your browser settings, and we honor Global Privacy Control signals where required by law.

Security. We and our partners use administrative, technical, and physical safeguards, including encryption in transit and at rest and role-based access controls. No system is completely secure, and we cannot guarantee absolute security.

Retention. We keep personal information only as long as needed to provide services, meet legal and regulatory obligations, and resolve disputes. Medical and pharmacy records are kept by providers and pharmacies for the periods required by state and federal law.

Children. Our services are only for adults 18 and older. We do not knowingly collect information from anyone under 18. If we learn that we have, we will delete it.

Depending on where you live, you may have the right to:

• Know what personal information we collect and how we use and share it.
• Access or get a copy of your personal information.
• Correct inaccurate information.
• Delete your personal information, subject to legal record-keeping requirements.
• Opt out of targeted advertising, sale, or sharing of personal information.
• Withdraw consent and not be discriminated against for exercising your rights.

To make a request, email privacy@wellaramd.com or write to us at the address below. We will verify your identity before responding and reply within the time required by law. You may use an authorized agent where permitted. If we deny your request, you may appeal by replying to our decision.

California residents. Under the CCPA/CPRA, you have the rights listed above. We do not sell or share personal information for cross-context behavioral advertising using health information. Information governed by HIPAA or California’s medical privacy law (CMIA) is handled under those laws.

Washington, Nevada, and Connecticut residents. We collect consumer health data only to provide the services you request, share it only as described in this policy or with your consent, and never sell it. Residents of these states may request access to or deletion of their consumer health data using the contact details below.

Other states. Residents of other states with consumer privacy laws may exercise the rights those laws provide using the same process.

We may update this Privacy Policy from time to time. We will post the updated version on this page with a new effective date and, for material changes, notify you by email or on our website.

Questions or requests:

• WellaraMD LLC
• Mail: 1081 N Tustin Ave, Ste 115, PMB #4026, Anaheim, CA 92807
• Email: privacy@wellaramd.com
• Support: support@wellaramd.com
• Phone: (866) 667-5276 (toll-free)