Privacy Policy

1. Our privacy commitments at a glance

• We never sell your personal information. Not to data brokers, not to advertisers, not to anyone, for money or anything else of value.
• We are not a healthcare provider and we are not a HIPAA covered entity. BuyTides does not collect, store, or maintain Protected Health Information (“PHI”) as defined under the Health Insurance Portability and Accountability Act (“HIPAA”).
• Medical care is provided by independent, licensed third parties. All clinical services, consultations, prescribing decisions, and medical records are handled by independent telemedicine providers, not by BuyTides.
• Health assessment information belongs in the clinical relationship. Information you provide in a health assessment is for your treating provider’s clinical use. BuyTides does not use it for marketing, advertising, profiling, or any purpose of its own.
• Your information is encrypted. Information transmitted through our website is encrypted in transit, and data we store is protected with encryption and strict access controls.
• We keep cookies to a minimum. We use only three types of cookies: a cart cookie (30 days), an affiliate referral cookie (60 days), and Google Ads remarketing cookies, which you can opt out of at any time.
• You stay in control. You can access, correct, delete, and control how your information is used, as described below.

2. Who we are and what we do

BuyTides is a wellness platform that connects customers with doctor-prescribed peptide therapies, health plans, lab testing, and longevity programs. BuyTides provides the website, account and membership experience, customer support, and order coordination.

3. Our relationship with Telemedicine Providers

This section is central to how your information is handled, so we want to be precise.

3.1 Independent third parties

Telemedicine Providers are independent from BuyTides. They are solely responsible for the medical care they provide, the clinical decisions they make, and the medical records they create and keep.

3.2 Their privacy practices govern your medical information

When you interact with a Telemedicine Provider, including completing intake forms, consultations, messaging with a clinician, or receiving a prescription, your information is collected and maintained by that provider under its own privacy policy, its own Notice of Privacy Practices, and applicable law, including HIPAA where it applies to that provider. We encourage you to review those documents carefully. Our current Telemedicine Provider(s): [PROVIDER NAME(S) AND LINK(S) TO THEIR PRIVACY POLICIES].

3.3 BuyTides does not hold your medical records

BuyTides does not maintain your medical chart, clinical notes, diagnoses, or treatment records. Requests to access, amend, or obtain copies of medical records should be directed to your Telemedicine Provider.

3.4 Limited operational information

To coordinate your order, BuyTides may receive limited, non-clinical operational information from a Telemedicine Provider or Pharmacy Partner, such as whether an order has been approved, is pending, or has shipped. We use this information only to fulfill your order and support your account.

4. Health assessments

4.1 Purpose

Some Services require you to complete a health assessment or intake questionnaire (an “Assessment”). Assessments exist solely so that an independent licensed provider can evaluate whether a treatment or program is clinically appropriate for you.

4.2 Who uses Assessment information

Assessment responses are collected for, and used by, your Telemedicine Provider for its clinical purposes. Assessment responses are submitted through a secure, encrypted form and transmitted to the Telemedicine Provider’s platform. BuyTides does not use Assessment information for its own purposes.

4.3 What we will never do with Assessment information

BuyTides will never:

• sell, rent, or trade Assessment information;
• use Assessment information for advertising, retargeting, or marketing;
• share Assessment information with advertising platforms, social media companies, or data brokers;
• use Assessment information to build marketing profiles or make inferences about you; or
• place advertising pixels, tracking tags, or session-recording tools on Assessment pages.

4.4 Access restrictions

To the extent any Assessment information passes through systems we operate, access is strictly limited to what is technically necessary to deliver it securely to your Telemedicine Provider, maintain the security of the Services, or comply with law.

5. Information we collect

We collect only the information we reasonably need to operate the Services.

5.1 Information you provide to us

• Account and contact information: name, email address, phone number, shipping and billing address, date of birth (to confirm eligibility), and login credentials.
• Order and membership information: products and programs purchased, membership tier, subscription status, and order history.
• Payment information: Payments are processed by our third-party payment processor(s), [PAYMENT PROCESSOR NAME(S)]. BuyTides does not store full payment card numbers on its servers. We may receive limited information such as card type, the last four digits, and expiration date to manage your account.
• Communications: messages you send to customer support, survey responses, reviews, and your communication preferences.

5.2 Information collected automatically

• Device and usage information: IP address, browser type, device type, operating system, pages viewed, referring URLs, and dates and times of visits.
• Cookies: as described in Section 9.
• Affiliate referral information: if you arrive through an affiliate link, we record the referring affiliate’s ID, the link used, and the date of your visit so the affiliate can be credited for a qualifying purchase.

5.3 Information from third parties

• Service partners: order and fulfillment status updates from Telemedicine Providers, Pharmacy Partners, Lab Partners, and shipping carriers.
• Payment and fraud-prevention providers: transaction confirmation and fraud-screening results.

6. How we use your information

We use personal information to:

• create and manage your account and membership;
• process, coordinate, and ship your orders;
• facilitate your connection to independent Telemedicine Providers, Pharmacy Partners, and Lab Partners;
• provide customer support and respond to your requests;
• send transactional messages such as order confirmations, shipping updates, and account notices;
• send marketing communications where permitted by law and your preferences (never based on Assessment or health information);
• maintain, secure, and improve the Services;
• detect, prevent, and investigate fraud, abuse, and security incidents;
• comply with legal obligations and enforce our Terms of Service.

We do not use your personal information for any purpose that is materially different from those described above without notifying you and, where required, obtaining your consent.

7. How we share your information

We never sell your personal information. We share information only in the limited circumstances below:

• Telemedicine Providers, Pharmacy Partners, and Lab Partners: to enable them to provide the services you request.
• Service providers: vendors who perform services on our behalf, such as website hosting, payment processing, shipping, email delivery, and customer support. They are contractually required to protect your information and may use it only to provide services to us.
• Affiliate partners: if you arrive through an affiliate link and make a purchase, we share only the information needed to credit and pay the affiliate, such as an order number, order date, and order value. We do not share your name, contact information, the specific products or programs you ordered, or any health information with affiliates.
• Google Ads: our Google Ads remarketing cookies allow Google to collect limited browsing information (such as pages visited on our website, device identifiers, and IP address) to show you BuyTides ads on other websites. See Sections 8 and 9 for details and how to opt out.
• Legal and safety reasons: when we believe in good faith that disclosure is required by law, subpoena, or court order, or is necessary to protect the rights, property, or safety of BuyTides, our customers, or others.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to this Privacy Policy’s protections continuing to apply to your information.
• With your consent: when you direct or authorize us to share information.

8. We do not sell your information

BuyTides does not sell personal information, and has not sold personal information in the preceding twelve (12) months. We have no actual knowledge of selling or sharing the personal information of consumers under 18.

Google Ads remarketing and your opt-out rights

Some state privacy laws, including California’s, define “sharing” or “targeted advertising” to include the use of advertising cookies, even when no money changes hands. Our use of Google Ads remarketing cookies may fall within those definitions. You can opt out at any time by:

• clicking the “Your Privacy Choices” link in our website footer;
• enabling a Global Privacy Control (GPC) signal in your browser, which we honor as a valid opt-out request;
• adjusting your settings at Google’s My Ad Center; or
• contacting us at privacy@buytides.com.

Opting out will not affect your cart or your ability to use the Services.

9. Cookies

We keep our use of cookies intentionally limited. BuyTides uses only the following three types of cookies:

What we do not use

We do not use session-recording tools, heat-mapping tools, or social media tracking pixels.

No remarketing on health pages

Google Ads remarketing tags are not placed on Assessment pages, intake flows, or any page designed to collect health-related information. We do not create remarketing audiences based on health conditions, symptoms, Assessment responses, or medical information of any kind.

Google’s use of information

Information collected by Google Ads cookies is governed by Google’s Privacy Policy. You can learn how Google uses this information at policies.google.com/technologies/partner-sites.

Your choices

You can opt out of remarketing as described in Section 8. You can also block or delete cookies through your browser settings. Blocking the cart cookie means your cart will not be saved between visits, and blocking the affiliate cookie means a referring affiliate may not receive credit for your purchase.

10. How we protect your information

We take data security seriously and use administrative, technical, and physical safeguards designed to protect your information, including:

• Encryption in transit: all information transmitted through our website is encrypted using TLS/HTTPS.
• Encryption at rest: data we store is encrypted.
• Access controls: access to personal information is restricted to authorized personnel with a legitimate business need, using role-based permissions and multi-factor authentication.
• Payment security: payments are handled by PCI-DSS compliant payment processors.
• Vendor oversight: service providers are contractually required to maintain appropriate safeguards.
• Monitoring: we monitor our systems for vulnerabilities and suspicious activity.

While we work hard to protect your information, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account password confidential. If you believe your account has been compromised, contact us immediately.

11. Data breach notification

If we become aware of a security incident that affects your personal information, we will notify you and the appropriate authorities as required by applicable law, without unreasonable delay.

12. Data retention

We keep personal information only as long as reasonably necessary to provide the Services, maintain your account, comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. Cart cookies expire after 30 days and affiliate tracking cookies expire after 60 days. When information is no longer needed, we securely delete or de-identify it. Medical records are retained by your Telemedicine Provider under its own retention policies and applicable law.

13. Your privacy rights

Depending on where you live, you may have some or all of the following rights:

• Access / Know: request the personal information we hold about you and how we use it.
• Correction: request that we correct inaccurate information.
• Deletion: request that we delete your personal information, subject to legal exceptions.
• Portability: receive a copy of your information in a portable format.
• Opt-out: opt out of targeted advertising, sale, sharing, or profiling (we do not sell your information).
• Limit use of sensitive information: where applicable.
• Withdraw consent: where processing is based on consent.

These rights may be available to residents of California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, and other states with applicable privacy laws.

How to exercise your rights

Email privacy@buytides.com or use [WEBFORM LINK]. We will verify your identity before fulfilling your request and respond within the time required by law (generally 45 days). You may use an authorized agent, subject to verification.

Appeals

If we decline your request, you may appeal by emailing privacy@buytides.com with the subject line “Privacy Request Appeal.” If you are not satisfied with the outcome, you may contact your state Attorney General.

No discrimination

We will never deny you service, charge you a different price, or provide a lower quality of service because you exercised your privacy rights.

14. Consumer health data notice

Washington, Nevada, Connecticut, and similar laws

Certain state laws, including Washington’s My Health My Data Act, Nevada SB 370, and Connecticut’s consumer health data provisions, protect “consumer health data” even when HIPAA does not apply. To the extent BuyTides processes any information covered by these laws:

• Categories: information that could identify your interest in or purchase of health-related products or programs (for example, the programs you enroll in or products you order), and any health information that passes through our systems for delivery to your Telemedicine Provider.
• Sources: directly from you and from our Telemedicine, Pharmacy, and Lab Partners.
• Purposes: only to provide the products and services you request, process orders, provide support, and comply with law.
• Sharing: only with the Telemedicine Providers, Pharmacy Partners, Lab Partners, and service providers necessary to deliver the services you request.
• Consent: we collect and share consumer health data only with your consent or as necessary to provide the service you requested.
• No sale: we never sell consumer health data.
• Your rights: you may confirm whether we process your consumer health data, access it, obtain a list of third parties with whom it was shared, withdraw consent, and request deletion by contacting privacy@buytides.com.

15. Marketing communications

• Email: You can unsubscribe at any time using the link in any marketing email.
• Text messages: If you opt in to SMS messages, message frequency varies and message and data rates may apply. Reply STOP to opt out or HELP for help. Consent to marketing texts is never a condition of purchase. We do not share your mobile number or SMS opt-in consent with third parties for their marketing purposes.
• Opting out of marketing does not stop transactional messages about your orders or account.

16. Age restriction

The Services are intended only for adults 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If we learn we have collected such information, we will delete it promptly. If you believe a minor has provided us information, contact us at privacy@buytides.com.

17. Third-party websites and services

The Services may link to or integrate with third-party websites and platforms, including those of Telemedicine Providers, Pharmacy Partners, and Lab Partners. We are not responsible for the privacy practices of those third parties. Their collection and use of your information is governed by their own privacy policies.

18. Where we operate

The Services are intended for residents of the United States, and your information is stored and processed in the United States. If you access the Services from outside the United States, you do so at your own initiative and consent to the transfer and processing of your information in the United States.

19. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last Updated” date above. If we make material changes, we will notify you by email or by a prominent notice on the Services before the changes take effect. We will never apply a material change to previously collected information in a less protective way without your consent where required by law.

20. Contact us

If you have questions, requests, or concerns about this Privacy Policy or our privacy practices, contact us:

For questions about your medical records or clinical care, please contact your Telemedicine Provider directly.