Privacy Policy
Effective Date: April 26, 2026 | Last Updated: April 26, 2026
Nuvari Health, LLC ("Nuvari," "we," "us," or "our") operates the wellness storefront at nuvarihealth.com and related applications and services (collectively, the "Services"). This Privacy Policy explains what information we collect, how we use it, and the choices you have.
By using our Services, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use our Services.
1. The short version
Nuvari is the storefront and brand. Our role is to introduce you to wellness protocols and connect you with a clinical services partner who provides physician consultations, prescriptions, and pharmacy fulfillment. Nuvari does not collect, store, or process your medical records, health intake answers, lab results, prescriptions, or diagnoses. Those live with our clinical services partner under their own HIPAA-compliant infrastructure and privacy practices.
The information Nuvari does collect is the information needed to operate a storefront: who you are, how to reach you, where to send your order, and how to bill you.
2. Information We Collect
2.1 Information You Provide to Nuvari
| Category | Examples |
|---|
| Identity Information | Full name, date of birth |
| Contact Information | Email address, phone number, mailing address |
| Account Information | Password (stored hashed), account preferences, communication preferences |
| Order Information | Order ID, order status, shipment tracking, protocol selected, subscription preferences |
| Payment Information | Billing address. Card numbers are entered on, processed by, and stored by our payment processor — Nuvari does not see, store, or transmit full card numbers. |
| Communications | Messages you send to our customer support team |
| Marketing Preferences | Whether you've opted in or out of email or SMS marketing |
2.2 Information Collected Automatically
| Category | Examples |
|---|
| Device Information | IP address, browser type, operating system, device identifiers |
| Usage Data | Pages visited, time spent, click patterns, referring URLs |
| Approximate Location | General location derived from IP address. We do not collect precise GPS location. |
| Cookies and Tracking | Cookies, pixels, and similar technologies (see Section 6) |
2.3 Information Nuvari Does NOT Collect
The following information is collected and stored exclusively by our clinical services partner — not by Nuvari:
- Medical history, conditions, and diagnoses
- Current and past medications
- Allergies
- Health intake assessment answers
- Lab results
- Prescription details
- Clinical communications between you and your healthcare provider
When you start a clinical visit through our Services, you are connected directly with our clinical services partner, who collects this information and operates under their own privacy practices and applicable healthcare privacy laws.
3. How We Use Your Information
- Account and orders: To create and maintain your account, process orders, coordinate shipping, and manage subscriptions
- Communications: To send order confirmations, shipping updates, account notifications, and respond to your inquiries
- Marketing: To send promotional content where you have opted in. You may opt out at any time.
- Service improvement: To analyze aggregated usage patterns, improve our website, and develop new features
- Safety, fraud, and compliance: To detect fraud or abuse, enforce our Terms of Service, and comply with legal obligations
4. How We Share Your Information
We do not sell your personal information. We share information only with the following categories of third parties, and only as needed to provide our Services:
| Category of Third Party | Purpose | Information Shared |
|---|
| Clinical Services Partner | To connect you with a licensed physician for consultation, prescription, and pharmacy fulfillment | Identity and contact information needed to start the handoff. The clinical intake itself is collected by the partner directly. |
| Payment Processor | To process payments securely | Billing address; card data is collected directly by the processor |
| Shipping Partners | To deliver orders | Name, shipping address |
| Email and SMS Service Providers | To send transactional and marketing communications you have opted into | Name, email, phone, message content (no clinical information) |
| Cloud Infrastructure and Analytics Providers | To host our website and understand aggregated usage | Account data, usage data, device information; aggregated or de-identified where possible |
| Legal and Regulatory | When required by law, subpoena, or government request, or to protect our legal rights | As required by the specific request |
5. HIPAA and Your Health Information
The Health Insurance Portability and Accountability Act (HIPAA) regulates how Covered Entities (such as healthcare providers) and their Business Associates handle Protected Health Information (PHI).
Because Nuvari does not collect, store, or transmit clinical health information, Nuvari is not a HIPAA Covered Entity and does not act as a Business Associate of a Covered Entity for clinical purposes. Your medical information is collected, stored, and processed by our clinical services partner, who maintains HIPAA-compliant infrastructure and operates under its own Notice of Privacy Practices, which will be presented to you during the clinical intake process.
6. Cookies and Tracking Technologies
We use cookies and similar technologies to:
- Essential cookies: Enable core site functionality (signed-in sessions, security)
- Analytics cookies: Understand how visitors interact with our website on an aggregated basis
- Marketing cookies: Deliver relevant advertisements where you have consented
Global Privacy Control (GPC): If your browser sends a Global Privacy Control signal, we treat it as a valid request to opt out of the sale or sharing of your personal information for targeted advertising. We honor GPC signals automatically — you do not need to take additional action.
You can also manage cookies through your browser settings. Disabling essential cookies may affect the functionality of our Services.
7. Data Retention
We retain your information only as long as necessary to fulfill the purposes described in this Privacy Policy:
- Account data: For the duration of your account plus a reasonable period for legal and operational purposes after deletion
- Order and transaction records: For at least 7 years for tax, accounting, and compliance purposes
- Marketing preferences: Until you opt out or withdraw consent
- Customer support communications: For a reasonable period to maintain support history
Clinical and medical records, where applicable, are retained by our clinical services partner under their own retention policies and applicable medical record retention laws — not by Nuvari.
8. Your Rights
Depending on your state of residence, you may have the following rights regarding the personal information Nuvari holds about you:
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your personal information, subject to legal retention requirements
- Opt-out of marketing: Unsubscribe from marketing communications at any time using the link in any email or by contacting us
- Data portability: Request your data in a structured, machine-readable format where applicable
- Withdraw consent: Withdraw consent for processing where consent is the legal basis
To exercise any of these rights, contact us at privacy@nuvarihealth.com. We will respond within 45 days, with the right to extend by an additional 45 days where reasonably necessary, as permitted by applicable law.
To exercise rights regarding your medical records, contact our clinical services partner directly. We can help facilitate the introduction.
9. California Privacy Rights
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
- Right to know: What personal information we collect, use, disclose, and share
- Right to delete: Request deletion of your personal information
- Right to opt-out of sale or sharing: We do not sell your personal information. We honor Global Privacy Control signals as a valid opt-out of sale or sharing for targeted advertising.
- Right to correct: Request correction of inaccurate personal information
- Right to limit sensitive information use: Limit how we use sensitive personal information to what is necessary for providing the Services
- Right to non-discrimination: We will not discriminate against you for exercising any of your rights
10. Other State-Specific Rights
Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and other states with comprehensive consumer privacy laws may have additional rights, including the right to access, correct, delete, and obtain a copy of personal data, and the right to opt out of targeted advertising, sale, and certain profiling activities. Contact us at privacy@nuvarihealth.com to exercise these rights.
For Washington state residents, please also see our Consumer Health Data Privacy Policy.
11. Children's Privacy
Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we discover that we have collected information from a person under 18, we will promptly delete it. If you believe a child has provided us with personal information, please contact us at privacy@nuvarihealth.com.
12. Data Security
We use industry-standard administrative, technical, and physical safeguards to protect the personal information we hold:
- TLS encryption for all data transmitted between your device and our Services
- Encryption at rest provided by our infrastructure providers
- Access controls limiting employee access to personal information based on the principle of least privilege
- Multi-factor authentication for administrative access to our systems
- Periodic review of our security posture
While we take reasonable measures to protect your information, no method of transmission or storage over the internet is 100% secure. We cannot guarantee absolute security.
13. Third-Party Links
Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access.
14. International Users
Our Services are intended for use within the United States. If you access our Services from outside the United States, your information may be transferred to and processed in the United States, where privacy laws may differ from those in your jurisdiction.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a prominent notice on our website. The "Last Updated" date at the top of this page indicates when the most recent changes were made.
16. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us:
Nuvari Health, LLC
Email: privacy@nuvarihealth.com
Website: nuvarihealth.com
