Privacy Policy

The information collected depends on how you interact with the platform and may include:

• Name, email address, telephone number, and date of birth or age where applicable.
• Account details, billing and transaction information, support inquiries, communications, and marketing preferences.
• Device and browser details, IP address, approximate location, and website activity.
• Information needed to facilitate telehealth services, including health-related information where collected through applicable patient or telehealth workflows.

OptimizeMD does not necessarily possess every category listed above in every interaction.

Certain medical information may be collected directly by independent healthcare professionals, provider networks, or through third-party telehealth and patient-portal platforms. The current patient portal is operated through OLA Digital Health / OLA MD LLC.

Certain health information handled by healthcare providers or other covered entities may be governed by HIPAA and their respective Notices of Privacy Practices. C2C Ventures LLC is not represented here as a HIPAA covered entity, and not all information submitted through OptimizeMD is necessarily protected by HIPAA. Provider and patient-portal arrangements may have separate privacy notices.

C2C Ventures LLC maintains privacy and information-handling practices designed to comply with applicable federal and state privacy, consumer protection, and health-information requirements based on the information we handle and the services we provide.

Health information used in connection with clinical care may also be collected, maintained, or transmitted by independent healthcare providers, provider networks, laboratories, pharmacies, patient-portal operators, and other healthcare entities. Where those entities are subject to the Health Insurance Portability and Accountability Act (“HIPAA”) or other health-information privacy requirements, their handling of protected health information is governed by their applicable legal obligations and privacy practices, including any Notice of Privacy Practices they provide.

C2C Ventures LLC does not represent itself as a HIPAA covered entity solely by virtue of operating the OptimizeMD administrative platform. Where C2C Ventures LLC is subject to privacy, security, contractual, or other legal requirements concerning personal or health-related information, it handles that information in accordance with those applicable requirements.

OptimizeMD uses reasonable administrative, technical, and organizational safeguards appropriate to the nature of the information processed. Sensitive information transmitted through OptimizeMD-controlled web services is protected using encrypted HTTPS/TLS connections. We also limit the use and disclosure of personal and health-related information to purposes described in this Policy, applicable service arrangements, and as otherwise permitted or required by law.

Because privacy requirements vary by jurisdiction and by the type of entity handling the information, patients may also receive separate privacy notices from healthcare providers, laboratories, pharmacies, patient portals, or other entities involved in their care.

• Operate, maintain, support, and improve the website and administrative platform.
• Facilitate access to telehealth services, laboratory arrangements, pharmacy fulfillment, and patient support.
• Create and administer accounts, process transactions, and communicate about services.
• Protect safety and security, prevent fraud, troubleshoot, and comply with legal obligations.
• Measure website use and, subject to applicable law and user choices, provide analytics or relevant marketing.

Information may be shared as reasonably necessary with independent healthcare professionals and provider networks, pharmacies, laboratories, telehealth technology and patient-portal providers, payment processors, communications providers, analytics and advertising vendors, professional advisers, and other service providers.

Current arrangements may include LocumTele, Vios Compounding Pharmacy, Labcorp, and OLA Digital Health / OLA MD LLC. At-home blood collection may use Tasso devices where offered. These relationships and service providers may change.

Information may also be disclosed to comply with law, respond to lawful process, protect rights and safety, investigate fraud, or support a merger, financing, acquisition, or transfer of relevant business assets, subject to applicable law.

Payment processing may be provided directly by OptimizeMD or C2C Ventures LLC, or by authorized third-party service providers. During the current transition to direct payment processing, certain payments may be facilitated through OLA Digital Health / OLA MD LLC. Payment providers may collect and process payment credentials under their own privacy terms.

OptimizeMD and its service providers may use cookies, pixels, local storage, and similar technologies to operate the website, remember preferences, understand use, measure performance, detect fraud, and support advertising.

Your browser or device may offer controls for cookies or tracking. Disabling some technologies may affect site functions. Marketing technologies are used subject to applicable law and available consent or opt-out mechanisms.

We may send essential transactional or service messages when you provide contact details. Marketing communications are separate. You may unsubscribe from marketing emails through the provided link. Opting out of marketing does not prevent legally permitted treatment-related or essential service communications.

Text messaging (SMS). If you give us your mobile number and agree to receive text messages, OptimizeMD may text you:

• one-time verification codes to confirm your phone number and secure your account;
• account and care notifications, such as reminders that a refill is coming up, that a lab kit has shipped, that you have a new message in your patient portal, or that your payment method needs updating.

Our text messages do not include details of your medical conditions or treatments. Message frequency varies. Message and data rates may apply. Reply STOP to any message to stop receiving texts, or HELP for help. You can also contact us at support@optimizemd.co.

We do not sell, rent or share your mobile number or text messaging consent with third parties or affiliates for their marketing or promotional purposes. Text messaging opt-in data and consent are not shared with any third parties, except service providers that deliver messages on our behalf under confidentiality obligations.

Information is retained for as long as reasonably necessary for the purposes described in this Policy, including providing services, maintaining records, resolving disputes, enforcing agreements, and satisfying legal, regulatory, tax, accounting, fraud-prevention, and security requirements. Retention periods vary by information type, relationship, and legal obligation.

We use reasonable administrative, technical, and organizational safeguards appropriate to the nature of the information. No online system or transmission is completely secure, and absolute security cannot be guaranteed.

Depending on where you live and subject to legal exceptions, you may have rights to request access, correction, deletion, or a copy of certain personal information, or to opt out of certain targeted advertising, sale, or sharing as those terms are defined by applicable law.

To submit a privacy request, email support@optimizemd.co. We may need to verify your identity. You may use an authorized agent where permitted by law. We will not unlawfully discriminate against you for exercising applicable privacy rights.

Services through OptimizeMD are intended for people who are at least 25 years old. We do not knowingly offer these services to anyone under 25. If you believe information was submitted by someone under 25, contact us.

We may update this Policy as our services, technology, providers, or legal obligations evolve. We will post the revised Policy with a new “Last updated” date and provide additional notice when required by law.