Information collected
We collect information you provide through contact and intake forms, device and browser information needed to operate the site, and consent preferences.
The categories of personal information we collect are:
- identifiers (name, email address, phone number, postal address, state of residence)
- customer records and transaction information (program selected, order and payment status — payment card details are processed by our payment processor and are not stored by us)
- health-related information you choose to submit through intake and contact forms
- internet and device activity (IP address, browser and device type, pages viewed, referring page, and similar technical data needed to operate and secure the site)
- consent and preference records (age attestation, terms acceptance, telehealth consent, cookie and SMS choices)
- inferences drawn only for the purpose of routing you to the right program
We collect this information from you directly, automatically from your device when you use the site, and from the clinical and fulfillment partners named in the footer when they confirm an order status. We do not knowingly collect information from anyone under 18. We do not sell personal information and we do not share it for cross-context behavioral advertising.
Uses and disclosures
Information is used to operate the service, respond to requests, support clinician review, maintain security, and meet legal obligations.
We disclose personal information to:
- the independent professional medical entity and its licensed clinicians, so your intake can be reviewed
- the pharmacy and fulfillment partner, so an approved prescription can be dispensed and shipped
- service providers acting on our written instructions (hosting, email delivery, SMS delivery, payment processing, error monitoring, customer support tooling)
- regulators, courts, or law enforcement where required by law or to protect the rights and safety of people using the service
Each service provider is bound by contract to use the information only to deliver its service to us. Information may also be transferred as part of a merger, acquisition, or sale of assets, subject to this policy. We retain website and contact-form information for up to 24 months after your last interaction, transaction records for 7 years as required for tax and accounting, and consent records for the life of the account plus 7 years. Health records created in the course of clinical care are held by the medical entity under its own retention obligations, not by ME & YOU. Residents of states with comprehensive privacy laws — including California, Colorado, Connecticut, Virginia, Texas, Oregon, Utah, Montana, and others as they take effect — have the rights described below; California residents may also request the specific categories listed above for the preceding 12 months.
Your choices and rights
Non-essential scripts remain blocked until cookie consent is accepted.
Depending on your state, you may have the right to:
- know what personal information we hold and how it is used
- obtain a portable copy
- correct inaccurate information
- delete information, subject to legal and clinical retention requirements
- opt out of sale, targeted advertising, and profiling (we do none of these)
- withdraw consent you previously gave, including SMS and optional cookies
- be free from discrimination for exercising a right
Submit a request through the Contact page or to support@meandyouhealth.com. We verify identity by matching the details in your request against the information already on file, and we may ask for one additional data point before acting on a deletion or copy request; we do not ask for sensitive documents. An authorized agent may submit a request on your behalf with written permission signed by you, and we may still contact you to confirm. We respond within 45 days and may extend once by 45 days with notice. If we decline a request, you may appeal free of charge by replying to our decision with the word “appeal”; we respond to appeals within 45 days and, if the appeal is denied, will tell you how to contact your state attorney general.
Contact
Privacy requests may be submitted through the Contact page. Privacy requests and questions: Privacy Officer, ME & YOU Health LLC, c/o 30 N Gould St, Ste R, Sheridan, WY 82801, or support@meandyouhealth.com. Nevada residents may submit a verified request not to sell covered information to the same address. Health information created during clinical care is governed by the Notice of Privacy Practices. Washington, Nevada, and Connecticut consumer health data is additionally governed by the Consumer Health Data Privacy notice.