Privacy Policy

1. Scope of This Policy

This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit our website, move from a sales page to intake, complete checkout, use support or subscription services, access a Dosable-supported patient portal, or otherwise interact with us (collectively, the "Services").

This Policy covers information handled by WellMensRX for non-clinical platform, commerce, support, and administrative purposes. Protected Health Information ("PHI") handled by treating clinicians, pharmacies, or other HIPAA-covered participants may also be governed by HIPAA and by the applicable Notice of Privacy Practices. If this Policy conflicts with a HIPAA notice for PHI, the HIPAA notice controls for that PHI.

2. Personal Information We Collect

Depending on how you use the Services, we may collect the following categories of information.

Information You Provide

• Identity and contact information: name, email address, phone number, date of birth, billing address, shipping address, and state of residence.
• Account and portal information: login credentials, account settings, support history, subscription status, refill preferences, and messages submitted through a Dosable-supported patient portal.
• Intake and health information: medical questionnaire responses, medication history, allergies, health goals, age-related concerns, contraindication screening answers, and other information you submit so an independent clinician can evaluate whether treatment is appropriate.
• Order and payment information: selected product or plan, order history, subscription renewals, refund requests, payment status, card brand, last four digits, billing ZIP code, and transaction identifiers. Full payment-card numbers are handled by our payment processor and are not stored by us.
• Communications: emails, calls, texts, form submissions, photos or documents you choose to upload, survey responses, reviews, and support requests.

Information Collected Automatically

• Device and log information: IP address, browser type, device type, operating system, referring URL, page path, timestamp, error logs, and basic diagnostic information.
• First-party attribution information: landing-page parameters such as UTM values, referral codes, affiliate identifiers, click identifiers, and advertising click IDs that help us route you to the correct intake experience and measure campaign performance.
• Cookie and local-storage information: values needed for site operation, security, attribution continuity, and checkout handoff.

3. Health Information and PHI

Some health information you submit may become PHI when it is created, received, maintained, or transmitted by a HIPAA-covered clinician, medical practice, pharmacy, or their business associates for treatment, payment, or healthcare operations. Examples include intake answers, clinical notes, prescription records, medication instructions, adverse-event reports, and portal messages about your care.

We use health information only for permitted service, care-coordination, support, legal, safety, and compliance purposes. We do not sell PHI, and we do not use PHI for targeted advertising. Review our Notice of Privacy Practices for more detail about HIPAA-related rights and disclosures.

4. How We Use Personal Information

• To provide the Services: operate the website, route you to intake, support checkout, create or maintain your account, coordinate portal access, and respond to support requests.
• To support telehealth evaluation: make your intake information available to independent licensed clinicians, support follow-up questions, and help coordinate clinical decisions without directing or overriding the clinician's judgment.
• To coordinate pharmacy fulfillment: transmit necessary prescription, patient, shipping, and contact information to licensed pharmacy partners such as Epiq Scripts or Rush Pharmacy after a clinician issues a valid prescription.
• To process payments and subscriptions: complete purchases, manage recurring billing, send receipts, process refunds, prevent fraud, and support subscription changes or cancellations.
• To communicate with you: send transactional, service, support, portal, billing, renewal, refill, shipping, safety, and legally required notices.
• To improve and secure the Services: debug issues, prevent abuse, maintain audit logs, improve page performance, and protect the integrity of the website, intake handoff, checkout, and portal-support workflow.
• To comply with law: satisfy legal, tax, accounting, telehealth, pharmacy, privacy, consumer-protection, dispute-resolution, and safety obligations.
• For marketing with limits: send promotional communications where permitted by law and measure advertising effectiveness using limited non-health attribution signals. You can opt out of marketing at any time.

5. Cookies, Attribution, and Advertising Measurement

Our website is designed to avoid client-side third-party tracking tags such as Google Tag Manager, Google Analytics, Meta Pixel, Microsoft Clarity, or similar browser pixels. We use first-party cookies and scripts to remember campaign and referral parameters, route CTA clicks to the correct intake destination, maintain session continuity, and protect the Services.

We may use server-side conversion measurement after a purchase or checkout event if enabled. When we do, the event is intentionally minimized. It may include a generic purchase event, event time, event ID, currency, a rounded or bucketed value, and limited attribution identifiers such as fbc/fbp or click IDs. It does not include your name, email, phone number, diagnosis, intake answers, medication name, product contents, user agent, IP address, or page URL.

You can control cookies through your browser. If your browser sends a Global Privacy Control ("GPC") or similar universal opt-out signal, we treat that signal as a request to opt out of sale or sharing for that browser where required by applicable law.

6. When We Disclose Personal Information

We disclose personal information only as needed for the purposes described in this Policy.

• Independent clinicians and medical practices: to evaluate intake information, communicate with you, determine eligibility, issue or decline prescriptions, and provide clinical follow-up.
• Pharmacy partners: to compound, dispense, label, counsel on, ship, replace, or otherwise fulfill prescriptions. Pharmacy partners may include Epiq Scripts and Rush Pharmacy.
• Dosable and portal vendors: to support intake, patient-portal access, secure messaging, document handling, patient support, and care-coordination workflows.
• Payment processors: to process checkout, recurring payments, refunds, chargebacks, fraud screening, and tax or accounting records.
• Shipping carriers and logistics providers: to deliver medications or related supplies, provide tracking, resolve shipping issues, and investigate lost or damaged shipments.
• Service providers: hosting, security, email, SMS, customer support, analytics, audit logging, compliance, professional advisors, and similar operational vendors who are bound to use information only to provide services to us.
• Advertising and measurement partners: limited attribution or conversion information as described in Section 5, subject to your privacy choices and applicable law.
• Legal, safety, and compliance recipients: regulators, law enforcement, courts, insurers, auditors, professional advisors, or other parties when required or reasonably necessary to comply with law, protect rights, prevent fraud, or respond to safety concerns.
• Business transfer parties: in connection with a merger, financing, reorganization, acquisition, bankruptcy, or sale of all or part of our business, subject to appropriate confidentiality protections.
• With your direction or consent: when you ask us to disclose information or authorize a disclosure.

7. State Privacy Rights

Depending on where you live, you may have rights to know, access, correct, delete, or receive a portable copy of personal information; to opt out of sale, sharing, or targeted advertising; to limit certain uses of sensitive personal information; and to appeal a privacy decision.

We do not sell personal information for money. Some limited advertising or attribution disclosures may be considered a "sale," "sharing," or "targeted advertising" under certain state privacy laws even though no money is exchanged. You can exercise those choices on our Your Privacy Choices page.

We may deny or limit requests when an exception applies, including when we must retain records for clinical, pharmacy, safety, legal, tax, fraud-prevention, dispute-resolution, or security reasons. We will not discriminate against you for exercising a privacy right.

8. Marketing Choices

You may opt out of promotional emails by using the unsubscribe link in the email or contacting support@wellmensrx.com. You may opt out of SMS marketing by replying STOP where available. Even after opting out of marketing, you may still receive transactional or service messages such as intake, portal, billing, renewal, order, shipping, safety, and legal notices.

9. Retention

We retain personal information for as long as needed to provide the Services, maintain your account, complete transactions, comply with law, resolve disputes, prevent fraud, support safety and audit obligations, and enforce our agreements. Clinical and pharmacy records may be retained by the applicable clinician, medical practice, pharmacy, Dosable-supported portal, or business associate for the period required by federal and state law.

When information is no longer needed, we delete, de-identify, aggregate, or securely archive it according to applicable retention requirements and operational needs.

10. Security

We use administrative, technical, and physical safeguards designed to protect personal information. These safeguards may include encryption in transit, access controls, audit logs, vendor diligence, secure hosting practices, staff training, and incident-response procedures. No website, portal, transmission method, or storage system is completely secure. If you believe your account or information may have been compromised, contact us immediately.

If a security incident requires notice, we will provide notice to affected individuals, regulators, clinicians, pharmacies, service providers, or other parties as required by applicable HIPAA, FTC Health Breach Notification Rule, state breach-notification, consumer privacy, or other laws.

11. Children

The Services are intended for adults 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided information to us, please contact us so we can take appropriate action.

12. Third-Party Sites and Services

The Services may link to third-party websites or services, including payment, pharmacy, carrier, patient portal, or health-information resources. Those parties have their own privacy practices. This Policy does not control information after you leave our website or interact directly with an independent third party.

13. Changes to This Policy

We may update this Policy from time to time. When we make material changes, we will update the date above and provide additional notice where required by law. Your continued use of the Services after an updated Policy is posted means you acknowledge the updated Policy.

14. Contact Us