Privacy Policy | Heir Health

Introduction

Heir Health LLC and its affiliates ("Heir Health," "we," or "us") own and operate the website located at https://www.heirhealth.co (collectively, the "Platform"). Your access and use of the Platform, any part thereof, or anything associated therewith, including its content ("Content"), any products or services provided through the Platform or otherwise by Heir Health, and any affiliated website, software or application owned or operated by Heir Health (collectively, including the Platform and the Content, the "Service") are subject to this Privacy Policy unless specifically stated otherwise. Capitalized terms not otherwise defined in this Privacy Policy have the same meaning as set forth in the Heir Health Terms and Conditions.

We are committed to respecting the privacy of users of the Service. We created this Privacy Policy ("Privacy Policy") to tell you how Heir Health collects, uses, and discloses information in order to provide you with the Service.

By creating, registering, or logging into an account through the Service, or otherwise accessing or using the Service, you are acknowledging the most recent version of this Privacy Policy. We will update this Privacy Policy when necessary to reflect material changes in the Service or how we use personal information, and as required by applicable law. If we make any changes, we will post the revised Privacy Policy and update the "Last updated" date at the top.

If you are using the Service on behalf of an individual other than yourself, you represent that you are authorized by such individual to act on their behalf and that they acknowledge the practices outlined in this Privacy Policy.

Limitations on Use by Minors

The Service is generally intended for use by individuals who are at least eighteen (18) years of age or such older age as may be required by applicable state law in the jurisdiction in which an individual utilizes the Service. The Service is not designed or intended to attract, and is not directed to, children under thirteen (13) years of age. If we obtain actual knowledge that we have collected personal information through the Platform from a person under thirteen (13) years of age, we will use reasonable efforts to refrain from further using such personal information or maintaining it in retrievable form.

If you are under sixteen (16) years of age, then you (or your parent or legal guardian if you are under age 13) may at any time request that we remove content or information about you that is posted on the Platform. Please submit any such request ("Request for Removal of Minor Information") to either of the following:

By mail: Heir Health LLC, Attn: Privacy Officer, 1300 S Highland Ave, Clearwater, FL 33756, with a subject line of "Removal of Minor Information." If sending by mail, please send by U.S. Certified Mail, Return Receipt Requested.

By email: privacy@heirhealth.co, with a subject line of "Removal of Minor Information."

For each Request for Removal of Minor Information, please clearly state:

The nature of your request
The identity of the content or information to be removed
The location of the content or information on the Platform (e.g., the URL)
That the request is related to "Removal of Minor Information"
Your name, street address, city, state, zip code, email address, and your preferred method of response

We will not accept any Request for Removal of Minor Information via telephone or facsimile. Heir Health is not responsible for failing to comply with any request that is incomplete, incorrectly labeled, or incorrectly sent.

Protected Information

When you set up an account with Heir Health, you are creating a direct customer relationship with Heir Health that enables you to access the various functions of the Platform and the Service. As part of that relationship, you provide information including but not limited to your name, email address, shipping address, phone number, and certain transactional information, which we do not consider to be "protected health information" or "medical information."

However, in using certain components of the Service, you may provide health or medical information that may be protected under applicable laws. Heir Health is not a "covered entity" under the Health Insurance Portability and Accountability Act of 1996 ("HIPAA"). One or more of the Pharmacies or Medical Groups (as defined in our Terms and Conditions) may or may not be a "covered entity" or "business associate" under HIPAA, and Heir Health may in some cases be a "business associate" of a Pharmacy or Medical Group. To the extent Heir Health is deemed a "business associate," and solely in its role as a business associate, Heir Health may be subject to certain provisions of HIPAA with respect to "protected health information" ("PHI"). Any medical or health information that you provide that is subject to specific protections under applicable state laws (collectively with PHI, "Protected Information") will be used and disclosed only in accordance with such applicable laws.

The Medical Groups and Providers have adopted a Notice of Privacy Practices that describes how they use and disclose Protected Information. By accessing or using any part of the Service, you acknowledge receipt of the Notice of Privacy Practices from your Medical Group and Provider(s).

Collection of Personal Information

The personal information we collect depends on how you interact with us, the services you use, and the choices you make. We collect information about you from different sources and in various ways when you use our Service, including information you provide directly, information collected automatically, information from third-party data sources, and data we infer or generate from other data.

Information you provide directly

Name and contact information, such as your name, email address, phone number, billing and physical addresses.
Demographic data, such as your gender, date of birth, and zip code.
Health information, such as your medical history, current medications, symptoms, photographs, height, weight, and other information relevant to your evaluation and treatment.
Payment information, such as credit/debit card number, expiration date, and billing address.
Government-issued identifiers, such as driver's license number, when required to verify identity for certain prescriptions.
Account credentials, such as your username and password.
Communications you send to us, including support inquiries and messages to your Provider.

Information we collect automatically

When you visit our Service, our web servers automatically log your Internet Protocol (IP) address and information about your device, including device identifiers, device type, operating system, browser, and other software details. We also use cookies, mobile IDs, and similar technologies. We may collect general location data, and we automatically log activity on our websites and apps including pages viewed, time spent, access times, and other details about your use of the Service.

Information from third-party sources

We may obtain information from corporate affiliates, third-party partners, co-branding/marketing partners, service providers, and publicly available sources.

Use of Personal Information

We use the personal information we collect for purposes described in this Privacy Policy or as otherwise disclosed to you, subject to the limitations addressed in the "Protected Information" section above. For example, we use personal information for the following purposes:

Product and service delivery. To provide and deliver the Service, including troubleshooting, facilitating your movement through the Service, confirming your location, improving, and personalizing those services.
Business operations. To operate our business, such as billing, processing your payments, accounting, administering your account, improving our internal operations, securing our systems, detecting fraudulent or illegal activity, verifying your identity, and meeting our legal obligations.
Product improvement, development, and research. To develop, test, or improve the Service and content, features, and products or services offered via the Service.
Personalization. To understand you and your preferences to enhance your experience using our services.
Customer support. To provide customer support, fulfill your requests, and respond to your questions.
Communications. To send you information about Heir Health, the Pharmacies, the Medical Groups, and the Providers, including confirmations, invoices, technical notices, updates, security alerts, and support and administrative messages.
Marketing. To communicate with you about new services, offers, promotions, rewards, contests, upcoming events, and other information about our services and those of our selected partners.
Advertising. To promote and market Heir Health, the Service, and the products and services offered via the Service.

We combine data we collect from different sources for these purposes, and to give you a more seamless, consistent, and personalized experience.

We may de-identify your information and use, create, and disclose such de-identified information for any business or other purpose not prohibited by applicable law.

Disclosure of Personal Information

We disclose personal information as we determine necessary to complete your transactions or provide the services you have requested or authorized, or with your consent as required by applicable law. For example, we may disclose information about you to:

Service providers. Vendors or agents working on our behalf, such as customer service support, IT, hosting, fulfillment, analytics, and security providers.
Marketing/Ad partners. We may provide identifying information to advertising partners to deliver personalized advertising or to reach audiences with similar interests.
Financial services and payment processing. Payment and transactional data are disclosed to banks and payment processors as necessary for processing, fraud prevention, and analytics.
Affiliates. Including other entities under common ownership, where access helps us provide our services and operate our business.
Pharmacies, Medical Groups, and Providers. We facilitate information disclosure with these parties to enable them to provide services to you and collect payment on their behalf.
Corporate transactions. As part of a merger, financing, acquisition, or sale of all or a portion of our business or assets.
Legal and law enforcement. When we believe doing so is necessary to comply with law or respond to valid legal process.

Third-party analytics and advertising companies also collect personal information through our websites and apps including identifiers and device information, geolocation data, usage data, and inferences based on that data. Examples of third-party analytics and advertising providers we use include Google (DoubleClick), Google Analytics, Meta (Facebook), and X.

Choice and Control of Personal Information

We provide a variety of ways for you to control the personal information we hold about you, including choices about how we use that data.

Access, portability, correction, and deletion. If you wish to access, copy, download, correct, or delete personal information about you that we hold, please contact us at privacy@heirhealth.co.

Data sales. Some privacy laws define "sale" broadly to include some of the disclosures described above. To opt out of such data "sales," you can use the Global Privacy Control setting or click "Your Privacy Choices" on the bottom of our webpage.

Targeted advertising. If you wish to opt out of the use of your personal information for targeted advertising, you may do so by contacting us at privacy@heirhealth.co.

Communications preferences. You can choose whether to receive promotional communications from us by email or SMS. To stop, follow the directions in the message or contact us as described in the "Contacting Us" section. These choices do not apply to certain mandatory service communications.

Browser or Platform Controls

Cookie controls. Most web browsers are set to accept cookies by default. You can change your browser settings to delete or reject cookies, but doing so may affect certain features of our website.

Global Privacy Control. Some browsers and extensions support the "Global Privacy Control" (GPC). When we detect such a signal, we will make reasonable efforts to respect your choices.

Do Not Track. Our websites do not respond to browser DNT signals because there is no common standard for interpreting them.

Mobile advertising ID controls. iOS and Android operating systems provide options to limit tracking and reset advertising IDs.

Data Retention

We retain personal information for as long as necessary to provide the Service and fulfill the transactions you have requested, comply with our legal obligations, resolve disputes, enforce our agreements, and for other legitimate and lawful business purposes. Retention periods vary based on data type, sensitivity of information, user expectations, and our legal or contractual obligations.

Transactions

In connection with any transaction that you conduct through the Service, you may be asked to supply information relevant to the transaction, including your credit card number and expiration date, billing address, shipping address, phone number, and email address. By submitting such information, you grant Heir Health the right to provide such information to third parties (such as payment processors) for the purpose of facilitating the transaction.

All credit card and other monetary transactions on the Service occur through online payment processing applications provided by third-party vendors such as Stripe. Heir Health's relationship with payment vendors is contractual; payment vendors are independent third parties not subject to Heir Health's direction or control.

Jurisdictional Issues

The Service may only be used within certain states within the United States as described in our Terms and Conditions. Accordingly, this Privacy Policy and our collection, use, and disclosure of information about you, is governed by U.S. law.

California Privacy Rights

If you are a California resident and the processing of personal information about you is subject to the California Consumer Privacy Act (CCPA), you have certain rights with respect to that information.

Right to Know. You may request that we disclose to you the personal information we have collected about you. Submit your request by emailing privacy@heirhealth.co.

Right to Request Correction or Deletion. You also have rights to request that we correct inaccurate personal information and that we delete personal information under certain circumstances, subject to a number of exceptions.

Right to Opt-Out / "Do Not Sell or Share My Personal Information." You have a right to opt out from future "sales" or "sharing" of personal information. The CCPA defines "sell," "share," and "personal information" broadly, and some of our data sharing may be considered a "sale" or "sharing." We do not knowingly sell or share the personal information of minors under 16 years of age.

Right to Limit Use of Sensitive Personal Information. You have a right to limit our use of sensitive personal information for any purposes other than to provide the services or goods you request or as otherwise permitted by law.

Authorized Agent and Verification. You may designate an authorized agent to make requests on your behalf. We will require proof of authorization and may need to verify your identity.

Miscellaneous

We strive to use reasonable physical, technical, and administrative measures to protect information from unauthorized access, use, disclosure, alteration, and destruction. However, you must keep your account password secure and your account confidential, and you are responsible for all use of your account.

Heir Health may supplement, amend, or otherwise modify this Privacy Policy at any time. Such modifications will be posted on this or a similar page of the Service and shall be deemed effective as of the "Last Updated" date. It is your responsibility to review this Privacy Policy each time you visit, access, or use the Service.

Contacting Us

If you have any questions about this Privacy Policy, please contact us by email at privacy@heirhealth.co or by regular mail at:

Heir Health LLC

Attn: Privacy Officer

1300 S Highland Ave

Clearwater, FL 33756