Privacy Policy

Interpretation and Definitions

Interpretation

Capitalized words used in this Privacy Policy have the meanings given in the Definitions section below.

Definitions

For the purposes of this Privacy Policy:

• Account means a unique account created for You to access our Service or parts of our Service.
• Affiliate means an entity that controls, is controlled by, or is under common control with a party.
• Company (referred to as "we", "us", or "our") refers to TrimTale LLC, 38439 5th Ave STE 2108.
• Cookies are small files placed on Your device to store information about You or Your device.
• Country refers to: Florida, United States.
• Device means any device that can access the Service such as a computer, cellphone, or tablet.
• Personal Data means information that identifies or can be used to identify an individual (non-sensitive data).
• Protected Health Information (PHI) means individually identifiable health information collected in connection with the provision of medical services or medical forms, which is subject to HIPAA/HITECH controls when applicable.
• Service refers to the Website: https://trimtalehealth.com/.
• Service Provider means a natural or legal person who processes data on behalf of the Company.
• Usage Data refers to data collected automatically when using the Service (see details below).
• You means the individual or legal entity using the Service.

Collecting and Using Your Personal Data

Types of Data Collected

Personal Data (Provided by You)

When you register, create an account, complete forms, or contact us, we may collect personal data such as:

• Email address
• First and last name
• Phone number
• Account information and credentials
• Information you voluntarily provide in forms or messages

Non-PHI Website Activity (Automatically Collected)

We explicitly collect the following non-health website activity data:

• IP address (or a truncated/anonymized IP where required by law)
• Device identifiers (device ID, browser fingerprinting in limited cases)
• Browser & OS information (browser type, version, operating system)
• Pages visited (URLs and timestamps for pages you visit on our Site)
• Referrer & click data (how You arrived at and navigated the Site)
• Session and usage metrics (duration of page visits, events, error logs)

This non-PHI website activity is used to operate and improve the Service, monitor performance and security, and for analytics and advertising purposes where lawful and where you have provided the required consent.

Protected Health Information (PHI)

Scope: Any medical or health-related information you submit after logging into a secure account or completing a medical intake form (for example, clinical history, prescription requests, treatment notes) is PHI. PHI is subject to HIPAA/HITECH when it is collected, stored, or processed in the context of providing covered health care services.

Handling & Sharing: PHI is handled and stored using appropriate administrative, technical, and physical safeguards. PHI is not shared with advertising partners (including Meta Platforms, Inc.) and is only disclosed to third parties when permitted or required by law or with your explicit authorization (for example, to contracted pharmacies, licensed clinicians, or billing processors under Business Associate Agreements as required by HIPAA).

Tracking Technologies and Cookies

We use Cookies and similar tracking technologies (beacons, tags, scripts) to track activity on our Service and store certain information.

Types of tracking we use

• Essential Cookies: Necessary for security, authentication, and core functionality.
• Performance & Analytics Cookies: Collect anonymous usage statistics to help us improve the Service.
• Functionality Cookies: Remember user preferences (language, form values).
• Advertising Cookies (including Meta Pixel): Used for advertising, retargeting, and measurement.

Meta Pixel & Advertising Partners

We use the Meta Pixel provided by Meta Platforms, Inc. (Facebook & Instagram) to help us understand the effectiveness of our advertising on Meta properties and to deliver more relevant ads. The Meta Pixel collects non-PHI website activity (for example: page views, add to cart, purchase events) and may pair that data with Meta's systems for targeting, conversion measurement, and analytics.

Important: The Meta Pixel does not receive Protected Health Information (PHI) from our systems. PHI is kept separate and is not shared with Meta or advertising partners.

How to control trackers

You may manage or withdraw consent for non-essential cookies (including advertising cookies) by using our cookie consent tool on the Site. For advertising preferences, you can also visit the following external opt-out resources:

• Your Online Choices (European opt-out tools)
• Meta Ads Settings

Third-Party Sharing (Advertising & Service Providers)

We may share or disclose Personal Data and non-PHI website activity with third parties in limited circumstances, including:

• Service Providers: third-party vendors who perform services on our behalf (hosting, payment processors, analytics, customer support).
• Advertising partners: such as Meta Platforms, Inc. (for Meta Pixel, advertising and analytics as described above), and other ad networks, where you have provided consent or as permitted by law.
• Legal & safety reasons: where required by law, to protect rights, or to prevent fraud.

PHI and advertising partners: PHI collected in the context of medical care or after you submit medical intake forms is not shared with advertising partners (including Meta) and is processed under additional safeguards consistent with HIPAA/HITECH.

Your Rights & Choices

Data Minimization

We only collect the minimum amount of data necessary to accomplish the purposes described in this Privacy Policy (service delivery, security, analytics, and legally required processing).

European (EU) Residents — GDPR

If you are located in the EU, you have the following rights under applicable data protection laws:

• Right of access to the personal data we hold about you.
• Right to request rectification of inaccurate data.
• Right to erasure ("right to be forgotten") in certain circumstances.
• Right to restrict or object to processing, including profiling.
• Right to data portability where applicable.
• Right to withdraw consent at any time where processing is based on consent.

Cookie/Pixel Consent for EU users: We obtain explicit, unambiguous opt-in consent from EU users before firing advertising pixels or processing personal data for advertising. If you do not consent, the Meta Pixel and other advertising cookies will not run.

California Residents — CCPA / CPRA

If you are a California resident, you have certain rights including the right to:

• Request disclosure of categories of personal information we collect, disclose, or sell.
• Request deletion of personal information we have collected (subject to exceptions).
• Opt-out of the sale or sharing of your personal information.

To exercise your California privacy rights, please use our portal or click here: Do Not Sell or Share My Personal Information.

How to exercise your rights

To exercise any of the rights described above, please contact us at support@trimtalehealth.com. We will respond to verified requests in accordance with applicable law.

Retention, Transfer & Security

Retention of Your Personal Data

We retain Personal Data only for as long as necessary to fulfill the purposes described in this Policy, to comply with legal obligations, to resolve disputes, and to enforce our agreements and policies.

Transfer of Your Personal Data

Your information may be processed in the United States or other countries where our service providers operate. Where required, we take steps to protect transferred personal data consistent with applicable law (including standard contractual clauses where applicable).

Security

We use administrative, technical, and physical safeguards designed to protect personal data. However, no method of transmission or storage is 100% secure; we cannot guarantee absolute security.

Medical Data, Compounded Medications & Related Disclosures

PHI & HIPAA/HITECH: Any personal health information you submit through secure medical forms, patient portals, or during consultations is considered PHI when provided in connection with the provision of healthcare services. Such PHI is governed by HIPAA and related laws where applicable. We will use, store, and disclose PHI only as described in this Policy or as permitted by law (for treatment, payment, healthcare operations, or with your authorization).

Advertising partners: PHI is not shared with advertising or analytics partners (including Meta Platforms, Inc.). Only non-PHI website activity (see above) is used for advertising and analytics where you have given appropriate consent.

Medical Disclaimer & Compounded Medication Transparency: Our Medical Disclaimer / Terms of Use explains our medication practices, including that certain Semaglutide products we provide are compounded and are not equivalent to branded, FDA-approved drugs such as Ozempic® or Wegovy®. Please review the full Medical Disclaimer here: Medical Disclaimer / Terms of Use.

Children's Privacy

Our Service is not intended for anyone under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13 without parental consent, we will take steps to delete such information.

Links to Other Websites & Changes to this Policy

Our Service may contain links to third-party websites. We are not responsible for their privacy practices. We may update this Privacy Policy from time to time; we will notify You via posting the updated Policy and updating the "Last updated" date.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at:

• Email: support@trimtalehealth.com
• Mailing address: TrimTale LLC, 38439 5th Ave STE 2108

Note: This Privacy Policy template is for informational purposes. For regulatory compliance tailored to your business model and jurisdictions, consult privacy counsel.