Privacy Policy
This page is a working template. The highlighted items below still need to be filled in, and a lawyer must sign off before it goes live. Each highlight is colour-coded by who handles it:
- You provide — a detail only you know (an address, an email, a date).
- Web team — a technical item the WellPeps web team completes. Nothing for you to do.
- Lawyer — a wording or legal decision for your attorney.
Just these items — everything else is handled by the web team or your lawyer:
- Your company's exact legal name.
- Your registered business address.
- A privacy contact email (we recommend [email protected]) and the name or title of your privacy officer.
- How long you keep three kinds of data: account data, health intake data, and marketing data.
- How you'll tell people about major changes to this policy — by email, a banner on the site, or both.
- The date this goes live.
This Privacy Policy describes how You provide: your company's exact legal name (“WellPeps,” “we,” “us”) collects, uses, discloses, and protects personal information when you visit our website, create an account, or use our services.
Protected health information handled in connection with medical care is governed by the Notice of Privacy Practices under HIPAA. This Privacy Policy covers everything else — website visits, marketing, account data, and information collected before a provider relationship exists.
1. Information We Collect
Information you provide
- Identity and contact details: name, email, phone number, date of birth, shipping and billing address;
- Account credentials;
- Health intake information you submit before or during the consultation process;
- Payment information (processed by our payment processor — we do not store full card numbers);
- Communications with our support team, and survey or review responses.
Information collected automatically
- Device and browser information, IP address, and approximate location;
- Usage data: pages viewed, links clicked, referring pages, session duration;
- Cookies and similar technologies, as described in Section 5.
2. How We Use Information
- To provide, operate, and improve the platform and connect you with providers and pharmacies;
- To process payments, subscriptions, and shipments;
- To communicate with you about your account, orders, and service updates;
- To send marketing communications, where permitted and subject to your opt-out rights;
- To detect and prevent fraud, abuse, and security incidents;
- To comply with legal obligations.
3. How We Share Information
- Healthcare providers and pharmacies — to deliver the services you request;
- Service providers — vendors that host, process payments, ship orders, send communications, and provide analytics on our behalf, under contracts limiting their use of your data. Web team: compile the full vendor list — hosting, payments, EHR/telehealth platform, pharmacy integrations, email/SMS, analytics.
- Legal and safety — when required by law, legal process, or to protect rights and safety;
- Business transfers — in connection with a merger, acquisition, or sale of assets, with notice to you.
Whether WellPeps “sells” or “shares” personal information under state privacy law depends on the advertising tags on the site, not on money changing hands. Web team: produce a complete list of the site's cookies and advertising pixels (Google Analytics, Meta Pixel, TikTok, etc.). Advertising pixels on a health site are the single riskiest item in this document; until the list exists, this policy cannot truthfully say “we do not sell or share.”
4. Consumer Health Data
Some states (including Washington under the My Health My Data Act, and Nevada) give consumer health data specific protections outside HIPAA. To the extent those laws apply, we collect and share consumer health data only with your consent or as necessary to provide services you request, and you may exercise the rights described in Section 7. Lawyer: confirm whether the Washington My Health My Data Act applies and whether a separate Consumer Health Data Privacy Policy link is required for Washington residents.
5. Cookies and Tracking Technologies
We use cookies and similar technologies for essential site functions, preferences, analytics, and — if enabled — advertising. Web team: build the final cookie table from the tag list — name, provider, purpose, and duration for each. You can control cookies through your browser settings, and opt out of any advertising-related sharing via Your Privacy Choices. We honor Global Privacy Control (GPC) signals where required by law.
6. Data Retention and Security
We retain personal information for as long as needed for the purposes described above: You provide: how long you keep account data, health intake data, and marketing data. We use administrative, technical, and physical safeguards appropriate to the sensitivity of the data, including encryption in transit and at rest, access controls, and vendor security review. No system is perfectly secure; we will notify you of a breach as required by law.
7. Your Privacy Rights
Depending on your state, you may have the right to know what personal information we hold about you, access it, correct it, delete it, receive a portable copy, opt out of sale/sharing and targeted advertising, and limit the use of sensitive personal information. We will not discriminate against you for exercising these rights.
To exercise any right:
- Visit Your Privacy Choices;
- Email You provide: a privacy contact email ([email protected] recommended);
- Call (833) 935-7377.
We will verify your request using the information associated with your account and respond within the time required by your state’s law (45 days in most states, extendable once). You may use an authorized agent, subject to verification.
8. Children
Our services are intended for adults. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.
9. Changes to This Policy
We will post updates to this page and revise the “Last Updated” date. For material changes, we will provide additional notice by You provide: how you'll notify people — email, a site banner, or both.
10. Contact Us
You provide: your company's legal name
Attn: Privacy — You provide: privacy officer name or title
You provide: your registered business address
Email: You provide: a privacy contact email | Phone:
(833) 935-7377