Last updated: May 30, 2026
Who operates this site
VidaFlow Health is a brand operated by VidaFlow Health, LLC, a limited liability company formed in [Your State]. References in this policy to "VidaFlow Health," "we," "us," or "our" mean VidaFlow Health, LLC doing business as VidaFlow Health. Principal office: 123 Example Street, Suite 100, Anytown, ST 00000.
Overview
This Privacy Policy explains how VidaFlow Health (a brand of VidaFlow Health, LLC) collects, uses, discloses, and safeguards information when you visit vidaflowhealth.com, request a consultation, or otherwise interact with our marketing website (the "Site").
VidaFlow Health is a technology platform, not a healthcare provider. We connect you with an independent professional medical practice and independent licensed pharmacies. When you move into care, the medical assessment, treatment records, prescriptions, and any payment happen on a separate provider platform at portal.vidaflowhealth.com and within the providers' and pharmacies' own systems. Those independent parties maintain their own privacy notices that govern your treatment records. This policy covers the Site we operate. It does not replace the privacy notices of the providers or pharmacies.
By using the Site, you acknowledge this Privacy Policy. If you do not agree, please do not use the Site.
Categories of information we collect, and where it comes from
We collect the following categories of information. The source is shown in each item.
We do not collect more than we need to respond to your consultation request and operate the Site. The marketing Site has no on-site checkout, so we do not process payment card details on this Site; any payment occurs later on the separate provider platform.
- Identifiers and contact details that you provide: name, email address, phone number, and (when you ask us to follow up) similar contact information. Source: you, through the "Book a Call" consultation request and the /book quiz.
- Consultation-request and interest information that you provide: your responses to the booking quiz and the goals or general health interests you choose to share so we can route you to the right consultation. Source: you. Note: detailed clinical history, diagnoses, lab values, and prescription information are collected later by the independent providers and pharmacies on their own platforms, not on this marketing Site.
- Communications content: the contents of emails, calls, and messages you send to our Patient Care team. Source: you.
- Device, usage, and analytics data: IP address, browser and device type, referring page, pages viewed, and similar technical data collected through cookies and similar technologies described in our Cookie Policy. Source: automatically, through your browser and our analytics tooling (currently PostHog), when that tooling is enabled. Our analytics is configured so that automatic capture of clicks and form inputs is turned off, and we instruct our analytics to drop fields that look like names, email, phone, address, or other direct identifiers.
- Information from service providers: limited operational information from vendors that help us run the Site (for example, hosting, email, scheduling, and analytics providers) acting on our behalf under contract.
How we use information
We use the information above to:
- Respond to your consultation request, schedule your free call, and route you to the appropriate independent provider and intake.
- Communicate with you about your request, answer questions, and provide Patient Care support.
- Operate, secure, maintain, and improve the Site and measure how it is used in aggregate.
- Detect, prevent, and investigate fraud, abuse, and security incidents.
- Comply with our legal obligations and enforce our Terms of Use.
How health information flows to the independent providers and pharmacies
VidaFlow Health is a technology platform. We are not a HIPAA covered entity, and we do not create, hold, or maintain your medical record. Clinical services are provided by VidaFlow Medical Group, an independent professional medical practice, and medications are dispensed by independent licensed US compounding pharmacies named on our /pharmacies page.
When you proceed past the free consultation, the medical intake, clinical assessment, prescribing decisions, treatment records, and any payment take place on the separate provider platform at portal.vidaflowhealth.com and within the providers' and pharmacies' own systems. The health information you submit in that process is collected and held by those independent parties, who are responsible for it under their own privacy practices and under the laws that apply to them, which may include the federal Health Insurance Portability and Accountability Act (HIPAA). HIPAA obligations attach to those licensed providers and pharmacies, not to the VidaFlow Health technology platform.
Because we are the platform and not the treating practice, we do not represent that we are "HIPAA compliant." To the extent any limited health-related information passes through systems we operate, we handle it consistently with this policy and applicable consumer-health-data laws, and we do not sell it.
How we share information
We do not sell your personal information, and we do not share it for cross-context behavioral (targeted) advertising. We disclose information only as follows:
- With the independent providers and pharmacies that serve you, so they can deliver care and dispense medication. Once your information is in their systems it is governed by their privacy practices.
- With service providers and vendors that perform functions on our behalf (such as hosting, email and communications, scheduling, and analytics) under contracts that limit their use of the information to providing services to us.
- To comply with law, respond to lawful requests and legal process, protect the rights, safety, and property of VidaFlow Health, our users, and others, and enforce our agreements.
- In connection with a corporate transaction such as a merger, acquisition, financing, or sale of assets, subject to the commitments in this policy.
- With your direction or consent, for any other purpose disclosed to you at the time.
Cookies and tracking technologies
We use cookies and similar technologies for essential Site functionality and for privacy-conscious analytics. Our current analytics provider is PostHog. When analytics is enabled, it sets a first-party identifier in your browser (stored in a cookie and in local storage) to measure aggregate Site usage and consultation-funnel performance. We have turned off automatic capture of clicks and form inputs, we sanitize event data to drop direct identifiers, and we do not send your booking-quiz health answers, name, email, or phone to analytics.
You can control or refuse cookies through your browser settings and, where available, by sending a Global Privacy Control (GPC) signal, which we honor as a valid opt-out of "sale" and "sharing" where required by law. For full details, including how to opt out of analytics, see our Cookie Policy at /policies/cookie-policy.
Data retention
We keep personal information only for as long as we need it for the purposes described in this policy, and then we delete or de-identify it. Consultation-request and contact information is generally retained while we are in active contact with you and for a reasonable period afterward to support follow-up, recordkeeping, and dispute resolution. Communications and support records are retained for a limited period consistent with our operational and legal needs.
Analytics data is retained in aggregated or pseudonymized form for the period set by our analytics configuration and provider. Where we have a legal obligation to keep certain records, we retain them for the required period. Clinical and prescription records created during care are retained by the independent providers and pharmacies under their own retention schedules and applicable law, not by us.
Data security
We use administrative, technical, and physical safeguards designed to protect the information we handle, including transport encryption (HTTPS), access controls, and vendor contracts that require appropriate safeguards. No method of transmission over the internet or method of storage is completely secure, so we cannot guarantee absolute security. If we become aware of a security incident affecting your information, where required by applicable law, we will provide notice of a security incident.
Your US state privacy rights
Depending on the state where you live, you may have some or all of the following rights regarding personal information we control. These rights come from laws such as the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), the Virginia Consumer Data Protection Act, the Colorado Privacy Act, the Connecticut Data Privacy Act, the Utah Consumer Privacy Act, the Texas Data Privacy and Security Act, the Oregon Consumer Privacy Act, the Montana Consumer Data Privacy Act, and similar laws in other states. Available rights vary by state.
To exercise any of these rights, contact us using the details in the "How to exercise your rights" section below. We will not discriminate against you for exercising your privacy rights.
- The right to know and access the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the categories of third parties to whom we disclose it.
- The right to correct inaccurate personal information.
- The right to delete personal information we have collected from you, subject to legal exceptions.
- The right to data portability, meaning a copy of your information in a portable format.
- The right to opt out of the "sale" or "sharing" of personal information and of targeted advertising. We do not sell or share personal information for these purposes, and because we do not sell or share personal information for targeted advertising, browser opt-out signals such as Global Privacy Control do not change how we handle your information.
- The right to limit the use of sensitive personal information to what is necessary to provide the services you requested.
- The right, in some states, to appeal a denial of your request and to be free from retaliation for exercising your rights.
Consumer health data (Washington My Health My Data Act, Nevada, and similar laws)
Some states have specific laws that protect "consumer health data," meaning information that identifies your past, present, or future physical or mental health status. These include the Washington My Health My Data Act (MHMDA), the Nevada consumer-health-data law (SB 370), and similar provisions in other states. The Washington law is particularly relevant because the independent professional practice we connect you with operates in Washington.
Where these laws apply to information we handle, you have the right to confirm whether we are collecting, sharing, or selling your consumer health data, to access that data, to withdraw consent, and to have that data deleted. We do not sell consumer health data, and we do not share it except to provide the consultation and care you request or as permitted by law. We do not require, and we do not seek, any "valid authorization" to sell consumer health data, because we do not sell it.
To exercise consumer-health-data rights, including a request to delete, contact us at the address in the "How to exercise your rights" section. Remember that clinical health records created during care are held by the independent providers and pharmacies, and requests about those records may need to be directed to them; we will help point you to the right party.
Children's privacy
The Site and our services are intended only for adults 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.
How to exercise your rights
You can submit a privacy request, including a request to know, access, correct, delete, opt out, or appeal, by emailing care@vidaflowhealth.com or calling (800) 000-0000, or by writing to VidaFlow Health, LLC (dba VidaFlow Health), 123 Example Street, Suite 100, Anytown, ST 00000.
To protect your information, we will take reasonable steps to verify your identity before acting on a request, which may mean asking you to confirm details we already have on file. You may use an authorized agent to submit a request on your behalf where the law allows; we may ask the agent for proof of authorization and may ask you to verify your identity directly. We respond to verifiable requests within the timeframes required by applicable law.
Because the independent providers and pharmacies hold your clinical and prescription records, some requests about treatment records should be directed to them. If you contact us, we will help identify the right party.
International visitors
The Site is operated from the United States and is intended for users in the United States. If you access the Site from outside the United States, you understand that your information will be processed in the United States, where data-protection laws may differ from those in your location.
Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will post the updated policy here and revise the "Last updated" date. Your continued use of the Site after an update means you acknowledge the revised policy.
Contact
Questions about this policy, or legal and privacy notices, can be sent to VidaFlow Health, LLC (dba VidaFlow Health), 123 Example Street, Suite 100, Anytown, ST 00000, by email at care@vidaflowhealth.com, or by phone at (800) 000-0000.