Privacy Policy

1. Introduction

VitaStack LLC (“VitaStack Health,” “Company,” “we,” “us,” or “our”) operates the website vitastackhealth.com and provides telehealth services connecting patients with independent licensed medical providers. We are committed to protecting your privacy and handling your personal and health information with care, transparency, and in compliance with applicable law.

This Privacy Policy explains what information we collect, how we use and share it, and your rights regarding your data. It applies to all users of our website, mobile application, and telehealth platform.

By accessing or using our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this policy, please do not use our services.

2. Information We Collect

2.1 Information You Provide

We collect information you provide directly when using our services, including:

• Account & Identity Information: Full name, date of birth, gender, email address, phone number, mailing address
• Health & Medical Information: Medical history, current medications, allergies, conditions, lab results, symptoms, treatment goals, and other health-related information you submit through intake forms or consultations
• Payment Information: Credit/debit card details, billing address (processed securely by third-party payment processors; we do not store full card numbers)
• Communications: Messages sent to our care team, providers, or support staff
• Identity Verification: Government-issued ID when required for prescription verification

Health and medical information above is collected only within our secure patient intake platform — not on this public marketing site.

2.2 Information Collected Automatically

When you visit our website, we automatically collect certain technical information:

• IP address, browser type, operating system
• Pages visited, time on page, referring URLs
• Device identifiers and usage patterns
• Cookie and tracking data (see Section 6)

2.3 Information from Third Parties

We may receive information from pharmacies, labs, or other healthcare providers involved in your care, as well as identity verification services and payment processors.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Providing Services: Connecting you with licensed providers, processing prescriptions, managing your care plan, and facilitating medication delivery
• Account Management: Creating and maintaining your patient account, verifying your identity, and enabling access to your care portal
• Communication: Sending appointment reminders, prescription updates, care team messages, billing notices, and service updates
• Billing & Payments: Processing payments, managing subscriptions, and handling refunds
• Safety & Compliance: Monitoring for safety issues, complying with legal obligations, and responding to law enforcement requests
• Service Improvement: Analyzing usage patterns (in de-identified, aggregate form) to improve our platform and care quality
• Marketing: Sending promotional communications about our services, with your consent where required (you may opt out at any time)

We do not sell your personal health information to third parties for marketing purposes.

4. Health Information & Privacy

Because VitaStack LLC connects you with licensed medical providers and handles health-related information, we are required by federal law (HIPAA) to protect any health information you share with us. This applies regardless of whether insurance is involved — it covers any platform that collects medical history, prescriptions, or health intake data.

In plain terms: we keep your health information private, secure, and only share it with the people directly involved in your care — your provider and the pharmacy fulfilling your prescription. We never sell it.

You have the right to access your health records, request corrections, or ask us to restrict how your information is used. To make any of these requests, email us at support@vitastackhealth.com .

5. How We Share Your Information

We share your information only as described below and never sell your personal information to data brokers or advertisers.

5.1 With Independent Licensed Providers

Your health information is shared with the independent licensed physicians and providers who evaluate and treat you through our platform. These providers operate independently and have their own privacy obligations.

5.2 With Pharmacies

When a prescription is issued, we share relevant information with our partner PCAB-accredited compounding pharmacies to fulfill your prescription.

5.3 With Service Providers (Business Associates)

We share information with third-party vendors who assist in operating our platform, subject to Business Associate Agreements (BAAs) where required by HIPAA:

• Electronic Health Record (EHR) platforms
• Telehealth video infrastructure providers
• Payment processors (e.g., Stripe)
• Secure messaging and communication tools
• Cloud hosting and data storage providers

5.4 Legal Requirements

We may disclose your information if required by law, court order, or government authority, or to protect the rights, property, or safety of VitaStack Health, our users, or the public.

5.5 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our site before your information becomes subject to a different privacy policy.

We do not sell, rent, or trade your personal health information to third parties for marketing or advertising purposes.

6. Cookies & Tracking Technologies

This website uses only the cookies necessary for basic site functionality and security:

• Essential Cookies: Required for basic site functionality, security, and maintaining your session. These cannot be disabled.
• Analytics/Marketing Tags: We use Google Tag Manager on our public marketing pages to load and manage analytics and advertising tools. You can opt out of Google Analytics tracking using Google’s opt-out browser add-on , or manage ad personalization at Google’s Ads Settings .

We do not use tracking technologies on pages where you enter health information or in our secure patient portal.

7. Data Retention

We retain your information for as long as necessary to provide our services, comply with legal obligations, and resolve disputes:

• Medical Records: Retained for a minimum of 7 years from the date of last treatment, or longer as required by state law
• Account Information: Retained for the duration of your account plus 3 years after closure
• Payment Records: Retained for 7 years for financial compliance
• Communication Logs: Retained for 3 years

When retention periods expire, we securely delete or anonymize your information.

8. Data Security

We implement industry-standard technical and organizational safeguards to protect your information, including:

• TLS/SSL encryption for all data in transit
• AES-256 encryption for data at rest
• Access controls and role-based permissions
• Regular security audits and vulnerability testing
• Employee training on HIPAA and data security
• Business Associate Agreements with all vendors handling PHI

No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. In the event of a data breach affecting your information, we will notify you as required by applicable law.

9. Your Privacy Rights

Depending on your state of residence, you may have the following rights:

Rights Available to All Users

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate personal information
• Deletion: Request deletion of your personal information (subject to legal retention requirements)
• Opt-Out of Marketing: Unsubscribe from promotional emails at any time via the link in any email or by contacting us
• Data Portability: Request your data in a portable format where technically feasible

California Residents (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act, including the right to know, delete, correct, and opt out of the sale or sharing of personal information. We do not sell or share personal information as defined under the CCPA. To submit a California privacy request, contact us at support@vitastackhealth.com .

How to Exercise Your Rights

To exercise any of these rights, please contact us at support@vitastackhealth.com or by mail at the address in Section 14. We will respond within 30 days. We may need to verify your identity before processing your request.

10. Children’s Privacy

Our services are intended for adults 18 years of age and older. We do not knowingly collect personal information from individuals under the age of 18. If you believe we have inadvertently collected information from a minor, please contact us immediately at support@vitastackhealth.com and we will promptly delete such information.

11. Third-Party Links & Services

Our website may contain links to third-party websites or services. This Privacy Policy does not apply to those third-party sites. We are not responsible for the privacy practices of external websites and encourage you to review their privacy policies before providing any personal information.

12. Telehealth Consent & Acknowledgment

By using our telehealth services, you acknowledge and consent to the following:

• Telehealth consultations are conducted via secure video or asynchronous communication
• Independent licensed providers — not VitaStack Health — make all clinical decisions
• Compounded medications prescribed through our platform are not FDA-approved
• Telehealth is not appropriate for emergency medical situations — call 911 or go to your nearest emergency room in a medical emergency
• Telehealth services are available only where our providers are licensed — Available in all 50 states. See our State Availability page
• Individual results vary and are not guaranteed

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:

• Update the “Last Updated” date at the top of this page
• Send a notification to your registered email address
• Display a prominent notice on our website

Your continued use of our services after any changes constitutes your acceptance of the updated policy. We encourage you to review this policy periodically.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

This Privacy Policy is provided for informational purposes. Consult a qualified attorney to ensure compliance with all applicable laws in your jurisdiction.