Privacy Policy

Information we collect

We collect only what we need to evaluate, dispense, and support your care.

• Account and contact data: name, email, phone, shipping and billing address.
• Health information you submit: intake answers, medical history, medications, allergies, lab results, photos, and messages with your care team.
• Order data: products purchased, subscription status, and fulfillment records.
• Payment data: processed by our payment processor. We never store full card numbers.
• Technical and analytics data: IP address, device and browser type, pages viewed, and referral source — analytics cookies only load after you accept them.

How we use your information

• To connect you with a licensed physician and support clinical review of your intake.
• To transmit prescriptions to licensed US pharmacies and fulfill and ship your order.
• To provide customer and clinical support, refills, and dose adjustments.
• To send transactional messages about your order, intake, or account.
• To detect fraud, secure the platform, and comply with legal obligations.
• With your consent, to send marketing communications and measure marketing performance.

Protected health information (PHI)

Information you provide as part of a clinical evaluation is Protected Health Information and is handled under HIPAA and our HIPAA Notice of Privacy Practices. PHI is never sold and is never used for advertising.

How we share information

We share information only as described below — we do not sell personal information.

• Affiliated medical groups and the licensed physicians who review your case.
• Licensed pharmacies and laboratories that dispense medication or process labs.
• Service providers under contract: hosting, payments, shipping, e-commerce, email/SMS, customer support, and analytics.
• Legal and safety: when required by law, subpoena, or to prevent serious harm.
• Business transfers: in a merger, acquisition, or sale of assets, with notice where required.

Cookies and analytics

Essential cookies keep the cart, session, and checkout working. Analytics and advertising tags (Google Analytics, Google Tag Manager, Meta Pixel) load only after you accept analytics cookies in our consent banner. You can change your choice anytime through “Cookie settings” in the footer.

Data retention

Medical records are retained for the period required by applicable state law (generally 6–10 years after the last encounter). Order and tax records are retained as required by law. Marketing data is deleted upon request or when it is no longer needed.

Security

We use encryption in transit and at rest, access controls, least-privilege staff permissions, audit logging, and vendor due diligence. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

Your rights

Depending on where you live, you may request access to, correction of, deletion of, or a copy of your personal information, and you may opt out of marketing at any time. Residents of California, Colorado, Connecticut, Virginia, and other states with comprehensive privacy laws also have the right to appeal a denied request.

• Email privacy@mynuvara.com to submit a request. We verify identity before acting.
• We respond within 45 days, with one 45-day extension where permitted.
• We will never discriminate against you for exercising a privacy right.

Children

Nuvara services are for adults 18 and older. We do not knowingly collect information from children under 18.

Changes and contact

We will post any changes on this page and update the effective date. Questions: privacy@mynuvara.com.