Privacy Policy

Introduction

This Privacy Policy outlines the data protection practices of Renuvia and its affiliates ("Renuvia," "RenuviaRx," "we," "us," or "our") regarding use of our websites (including www.renuviarx.com), mobile applications, telehealth services, and other offerings (collectively, "Services").

This policy describes how information is collected, used, disclosed, and protected when you access our Services or interact with Renuvia. It is incorporated by reference into our Terms of Service.

By using our Services, you agree to the terms of this Privacy Policy. If you do not agree, please do not access or use our Services.

What This Privacy Policy Covers

This Privacy Policy explains:

• Information collection and sources
• How we use your information
• Online analytics and advertising tools
• How and when we share your information
• Your privacy rights and choices
• Third-party services and health information disclosures
• How we protect your information
• California residents' privacy rights
• Nevada residents' privacy rights
• International data transfers
• How long we retain your information
• Changes to this policy
• How to contact us

The Information We Collect and How We Collect It

We collect information when you interact with or use our Services. Some information is required for effective service delivery. Choosing not to provide certain information may prevent access to some or all service features.

1. Information You Provide to Us

We collect personal and health-related information that you voluntarily provide when you:

• Create or register an account
• Request or receive treatment and order products or services
• Participate in telehealth consultations
• Contact us via forms, chat, email, or support channels
• Participate in surveys, research studies, or promotional campaigns
• Submit feedback, questions, or communications
• Apply for employment opportunities
• Upload or post content (reviews or forum posts)

Examples of collected information:

• Personal identifiers: name, date of birth, address, phone number, and email address
• Health information: medical conditions, symptoms, treatments, prescriptions, lab results, physician referrals, medical history, allergies, and related health data
• Account details: log-in credentials and security information
• Billing and shipping details: addresses, payment card data (processed via third-party vendors)
• Transactional data: order history, subscription preferences, and fulfillment details
• Customer support records: interactions with support or technical teams
• Demographic details: gender and age, if voluntarily provided
• Public content: user-generated content submitted to forums, blogs, or review sections
• Communications: any other information voluntarily shared

2. Information We Collect Through Automated Means

Certain information about your devices and interactions is automatically collected to analyze performance, maintain security, and improve the user experience.

This may include:

• Technical data: IP address, browser type, device type and identifiers, operating system, and referring/exit URLs
• Usage details: pages visited, time spent on each page, clickstream data, search queries, downloads, and user interactions
• System data: error logs, crash reports, and diagnostics related to performance or functionality

Mobile App Usage

When using our mobile Apps, additional data specific to mobile devices may be collected:

• Device ID and IP address
• Operating system and browser type
• Mobile carrier and language settings
• Date, time, and frequency of use
• Behavioral patterns related to in-app navigation

Location Information

We may collect:

• Approximate location (city/state based on IP address)
• Precise location (GPS coordinates), only with your explicit permission, to enable certain features or personalize content

Your device settings allow you to control or disable location tracking at any time.

Cookies and Similar Technologies

We use cookies and similar technologies (tags, SDKs, tracking pixels, server logs) to:

• Recognize devices across sessions
• Store user preferences and login status
• Monitor traffic, usage, and performance trends
• Deliver tailored content and advertising
• Assist with security, fraud prevention, and administrative tasks

Your browser configuration allows you to be alerted about cookie usage or to block cookies entirely. However, some service features may not function properly without them.

3. Information We Collect from Social Media and Third-Party Platforms

If you engage with Renuvia on social media (Facebook, Instagram, X), we may collect publicly available information including your name, profile details, and any comments, tags, or shared content about us.

If you participate in promotions or connect your social accounts through our Services, we may collect any information those platforms authorize you to share.

4. Information We Receive from Other Sources

We may receive additional information from third-party partners including healthcare providers, pharmacies, laboratories, technical service vendors, and analytics platforms. This information may be used to complete transactions, enhance the user experience, or support treatment, fulfillment, and communications.

How We Use Your Information

Healthcare Services and Treatment

• Providing telehealth consultations and medical care
• Processing prescriptions and facilitating medication delivery
• Coordinating care with healthcare providers and pharmacies
• Maintaining medical records and treatment history
• Conducting health assessments and monitoring

Service Operations

• Creating and managing accounts
• Processing orders and payments
• Providing customer support and technical assistance
• Fulfilling product orders and managing shipping
• Communicating about accounts, orders, and services

Legal and Regulatory Compliance

• Complying with applicable healthcare laws and regulations
• Meeting licensing and certification requirements
• Responding to legal requests and protecting our rights
• Conducting internal audits and investigations

Service Improvement and Analytics

• Analyzing usage patterns and service performance
• Developing new features and improving existing services
• Conducting research and clinical studies (with appropriate consent)
• Personalizing your experience and recommendations

Marketing and Communications

• Sending promotional materials and service updates (with consent)
• Conducting surveys and collecting feedback
• Analyzing marketing effectiveness
• Managing referral and loyalty programs

Online Analytics and Advertising Tools

Analytics Services

We use services like Google Analytics to collect information about usage patterns and improve our Services. These services may use cookies and similar technologies to track interactions across websites.

Advertising and Marketing

We use advertising networks and marketing platforms to deliver targeted advertisements based on your interests and interactions with our Services. We do not use protected health information for advertising purposes without your explicit consent.

Your Choices

You may opt out of certain analytics and advertising practices through:

• Browser settings and cookie preferences
• Industry opt-out tools (Digital Advertising Alliance)
• Platform-specific privacy controls (Facebook, Google)

How and When We Share Your Information

Healthcare Operations

• Healthcare providers: Licensed physicians, nurses, and other medical professionals involved in your care
• Pharmacies and fulfillment partners: To process prescriptions and deliver medications
• Laboratories: For processing diagnostic tests and lab work
• Insurance providers: For coverage verification and claims processing (with consent)

Service Providers and Business Partners

• Technology vendors: Companies providing platform, hosting, and technical services
• Payment processors: For handling billing and payment transactions
• Shipping and logistics providers: To fulfill and deliver orders
• Customer service providers: To provide support and assistance

Legal and Regulatory Requirements

• Legal compliance: When required by law, regulation, or legal process
• Law enforcement: In response to valid legal requests from authorities
• Regulatory bodies: For licensing, compliance, and certification purposes
• Court orders and subpoenas: As required by judicial proceedings

Business Transactions

• Mergers and acquisitions: In connection with corporate transactions
• Asset transfers: If business assets are sold or transferred
• Bankruptcy proceedings: As required in insolvency situations

With Your Consent

• Authorized disclosures: When you provide explicit consent
• Emergency situations: When necessary to protect your health and safety
• Research purposes: For approved clinical studies and research (with appropriate consent and de-identification)

Your Privacy Rights and Choices

Access and Control

You have the right to:

• Access your personal information
• Correct inaccurate information
• Request deletion of your information (subject to legal and medical record retention requirements)
• Withdraw consent for certain uses
• Receive copies of your information in a portable format

Marketing Communications

You may opt out of marketing communications by:

• Using unsubscribe links in emails
• Updating your account preferences
• Contacting our support team
• Calling the number provided in our communications

Account Management

You may update your account information and privacy preferences through your online account or by contacting our support team.

Third-Party Services and Health Information Disclosures

Business Associate Agreements

When working with third-party service providers who may access protected health information, we enter into Business Associate Agreements to ensure HIPAA compliance.

Third-Party Links and Services

Our Services may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of external services. We encourage you to review their privacy policies before sharing information.

Health Information Sharing

We follow strict protocols for sharing health information:

• Treatment coordination: Sharing with healthcare providers involved in your care
• Payment processing: Sharing with insurers and payment providers as needed
• Healthcare operations: Sharing for quality assurance and regulatory compliance
• Emergency situations: Sharing when necessary to protect your health and safety

How We Protect Your Information

Security Measures

We implement comprehensive security measures to protect your information:

• Encryption of data in transit and at rest
• Access controls and user authentication
• Regular security assessments and monitoring
• Staff training on privacy and security practices
• Incident response and breach notification procedures

HIPAA Compliance

As a covered entity under HIPAA, we maintain strict safeguards for protected health information:

• Administrative safeguards: Workforce training and access management
• Physical safeguards: Facilities and equipment protection
• Technical safeguards: Information systems and data transmission security

Data Breach Response

In the event of a data breach, we will:

• Investigate and contain the incident
• Notify affected individuals as required by law
• Report to regulatory authorities as required
• Take steps to prevent future incidents

Privacy Rights for California Residents

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have additional privacy rights:

Right to Know

You have the right to know:

• What personal information is collected about you
• How your personal information is used
• With whom your personal information is shared
• How long your personal information is retained

Right to Delete

You may request deletion of your personal information, subject to certain exceptions for healthcare records and legal compliance.

Right to Correct

You may request correction of inaccurate personal information.

Right to Opt-Out

You may opt out of:

• Sale of personal information (we do not sell personal information)
• Sharing for cross-context behavioral advertising
• Automated decision-making that produces legal or significant effects

Right to Non-Discrimination

We will not discriminate against you for exercising your privacy rights.

Exercising Your Rights

You may exercise these rights by contacting us using the information provided in the "How to Contact Us" section below. We may need to verify your identity before processing your request.

Privacy Rights for Nevada Residents

Nevada residents have the right to opt out of the sale of their personal information. We do not sell personal information as defined under Nevada law. For more information about your rights, please contact us using the information provided below.

International Data Transfers

If you are located outside the United States, please be aware that your information will be transferred to and processed in the United States, where our servers and operations are located. By using our Services, you consent to this transfer and processing.

For users in the European Economic Area (EEA) or United Kingdom, we have appropriate safeguards in place for international transfers:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by the European Commission
• Other appropriate transfer mechanisms as required by law

How Long We Retain Your Information

We retain your information for as long as necessary to:

• Provide our Services to you
• Comply with legal and regulatory requirements
• Maintain medical records as required by law
• Resolve disputes and enforce our agreements

Healthcare Records

Medical records and health information are retained in accordance with applicable healthcare laws and regulations, which typically require retention for a minimum of 6–7 years after the last date of service.

Account Information

Account information is retained while your account is active and for a reasonable period afterward to comply with legal obligations and resolve any disputes.

Marketing Information

Marketing and communications data is retained until you opt out or request deletion, subject to legal retention requirements.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make significant changes, we will:

• Post the updated policy on our website
• Update the "Last Updated" date
• Notify you via email or through our Services
• Obtain your consent for material changes that affect how your health information is used

We encourage you to review this Policy periodically to stay informed about how we protect your information.

How to Contact Us

For questions about this Privacy Policy or our privacy practices, please contact:

Renuvia Privacy Office

• Email: privacy@renuviarx.com
• Mail: Renuvia Privacy Office, 1309 Coffeen Avenue, Sheridan, WY 82801
• Phone: +1 (206) 814-5447

For HIPAA-related requests:

• Email: hipaa@renuviarx.com
• Mail: Renuvia HIPAA Privacy Officer, 1309 Coffeen Avenue, Sheridan, WY 82801
• Phone: +1 (206) 814-5447

We will respond to privacy inquiries and requests in accordance with applicable law, typically within 30 days of receipt.