Privacy Policy

1. Information We Collect

When you use formblends.com, complete an assessment, request information, or begin the process of connecting with healthcare or pharmacy services, we may collect the following categories of information:

• Personal identifiers: name, email address, phone number, shipping address, date of birth.
• Health information: medical history, current medications, symptoms, treatment goals, lab results, body measurements, and other information you provide during medical consultations.
• Payment information: credit card or payment method details (processed securely by our payment processor; we do not store full card numbers).
• Technical data: browser type, IP address, device identifiers, pages visited, and interaction data collected through cookies and similar technologies.
• Communications: messages you send to our care team, support inquiries, and consultation records.

2. How We Use Your Information

We use your information for the following purposes:

• To facilitate telehealth consultations between you and licensed healthcare providers.
• To process prescriptions and coordinate medication fulfillment with our pharmacy partners.
• To process payments and manage your account.
• To communicate about your treatment, appointments, and account.
• To respond to support requests and care team inquiries.
• To improve our platform, services, and user experience.
• To send marketing communications if you have opted in (you may opt out at any time).
• To comply with legal obligations and regulatory requirements.

We never sell your personal information or health information to third parties.

3. How We Share Your Information

We share your information only with the following categories of recipients, and only as necessary to provide our services:

• The independent provider: the US-licensed provider (MD, DO, NP or PA) who reviews your intake receives your identity details, date of birth, state of residence, the answers you give in the medical intake, your medication history, the identification you upload for identity verification, and your messages in the patient portal. The provider network is independent of Form Blends LLC.
• The dispensing pharmacy: the state-licensed 503A compounding pharmacy that fills your prescription receives the details needed to fill and ship the prescription: your name, date of birth, shipping address, phone number, allergies, and the prescription itself.
• Payment processors: for secure payment processing (PCI DSS compliant).
• Shipping carriers: for medication delivery (name and address only).
• Technology providers: hosting, analytics, and communication tools that help us operate the platform, subject to confidentiality agreements. The checkout and the medical intake run on a HIPAA-compliant hosted platform.
• Legal and regulatory: when required by law, court order, or regulatory authority.

4. Integrated Clinical and Commerce Services

Checkout, consultation, and fulfillment use integrated technology and independent clinical and pharmacy services. Information you submit is shared with the relevant service providers as needed to process your request, payment, consultation, or order, as described above.

Independent healthcare providers maintain their own privacy notices for clinical records. Additional policies and consents are presented during the applicable care process. Embedding a service on this website does not change which provider delivers it.

5. Health Information and HIPAA

FormBlends facilitates access to healthcare services provided by independent, licensed healthcare providers. The healthcare providers who deliver clinical services through our platform are subject to the Health Insurance Portability and Accountability Act (HIPAA) and maintain their own Notice of Privacy Practices governing how your protected health information (PHI) is used and disclosed for treatment, payment, and healthcare operations.

To the extent that FormBlends receives, maintains, or transmits PHI on behalf of healthcare providers, we operate as a business associate under HIPAA and are bound by applicable business associate agreement obligations, including:

• Implementing reasonable and appropriate administrative, technical, and physical safeguards to protect PHI.
• Reporting any breach of unsecured PHI promptly.
• Ensuring that any subcontractors who access PHI agree to the same restrictions and conditions.
• Making PHI available to individuals who request access to their records, as required by HIPAA.

Your rights regarding health information: You have the right to request access to your health records, request amendments to your records, receive an accounting of disclosures, request restrictions on certain uses and disclosures, and file a complaint with the U.S. Department of Health and Human Services if you believe your privacy rights have been violated. To exercise any of these rights, contact us at support@formblends.com.

6. Payment Processing

All payments are processed securely through our payment processor. We do not store your full credit card information on our servers. Payment data is encrypted and handled in compliance with PCI DSS standards.

7. Cookies and Tracking

We use cookies and similar technologies to maintain your session, remember your preferences, analyze site traffic, and improve our services. You can control cookie settings through your browser. Disabling cookies may affect certain platform functionality. We use analytics tools to understand how users interact with our platform. These tools may collect information about your browsing behavior. We do not use health information for advertising targeting.

Tracking and analytics choices

These are the analytics and advertising tools formblends.com actually loads:

• PostHog (product analytics and error tracking): page views, clicks on assessment and checkout links, and JavaScript errors. Person profiles are created only for identified users.
• Google Analytics 4: page views, scroll depth and conversion-link clicks, including attribution between this website and its integrated checkout services.
• Meta pixel: page views and assessment-start events, used to measure advertising.
• First-party attribution storage: campaign identifiers from the URL you arrived on (utm parameters, gclid, fbclid) are stored in this site's own storage so the assessment can record where you came from.
• Embedded media: some pages embed videos from third-party platforms, which load that platform's own scripts when the embed is on the page.

Global Privacy Control: if your browser sends a Global Privacy Control signal, we honor it. Google Analytics and advertising storage are set to denied, the Meta pixel is not loaded, and PostHog is opted out of capturing. This applies to every page on formblends.com and takes effect on the next page load after the signal is enabled.

Do not sell or share: we do not sell personal information. To record a do-not-sell-or-share request, or to opt out of the tools above without a Global Privacy Control signal, email support@formblends.com with the subject line "Privacy request". You can also block these tools in your browser or with a content blocker; the site works without them.

8. Data Security

We implement industry-standard security measures including SSL/TLS encryption for all data in transit, encryption of sensitive data at rest, secure server infrastructure, access controls limiting data access to authorized personnel, and regular security assessments. While no method of electronic transmission or storage is completely secure, we take reasonable steps to protect your personal and health information.

9. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. Health information and medical records are retained in accordance with applicable state and federal medical record retention requirements. We retain certain information as required by law or for legitimate business purposes, including dispute resolution and legal compliance.

10. Your Rights

You have the right to access, correct, or request deletion of your personal information. You can unsubscribe from marketing emails using the link in any email. To exercise any of your data rights, contact us at support@formblends.com. We will respond to verified requests within 30 days.

Privacy requests: access, deletion, do not sell

You can ask us at any time to tell you what personal information we hold about you, to correct it, to delete it, or to stop any sale or sharing of it (we do not sell personal information, and this request records your preference in case that ever changes). Send the request by email:

• Email support@formblends.com with the subject line "Privacy request".
• Say which right you are exercising: access, correction, deletion, or do not sell or share.
• Send it from the email address on your account, or tell us that address, so we can verify it is you. We may ask one follow-up question to confirm identity before releasing or deleting anything.

We respond within 30 days. Some records cannot be deleted on request: prescription and dispensing records are retained for the period state pharmacy law requires, and payment records are retained for tax and fraud-prevention purposes. We will tell you which records those are. If you have not heard back within 2 business days, reply to your ticket with the subject "Escalate".

11. California Residents (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect, request deletion of your data, opt out of the sale or sharing of personal information, and not be discriminated against for exercising these rights. We do not sell personal information. To exercise your rights, email support@formblends.comwith the subject line "Privacy request".

12. Other State Privacy Rights

Residents of Washington, Nevada, Connecticut, and other states with consumer health data privacy laws may have additional rights regarding the collection and use of health-related data. We process consumer health data in accordance with applicable state laws. To exercise state-specific privacy rights, contact us at support@formblends.com.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated revision date and, where appropriate, notified to you by email. Continued use of our platform after changes constitutes acceptance of the updated policy.

14. Contact

For questions about this Privacy Policy, your personal data, or to exercise any of your privacy rights, contact Form Blends LLC, a Wyoming limited liability company, 30 N Gould St, Ste R, Sheridan, WY 82801, by email at support@formblends.com, or visit our contact page.