Privacy Policy

Last Updated: June 29, 2026

This Privacy Policy ("Privacy Policy") describes how OPTMZ, LLC and our owners, subsidiaries, and affiliates (collectively "OPTMZ Health," "Company," "we," "our," or "us") collect, use, disclose, and protect information about you when you use the OPTMZ Health website at optmzhealth.com, the OPTMZ Health patient portal, and related online services (together, the "Site").

OPTMZ Health operates as a technology platform that connects patients with independently licensed healthcare providers and pharmacies. OPTMZ Health does not itself practice medicine, make clinical decisions, or dispense medication. This Privacy Policy applies to information collected through the Site. It does not change the terms of any separate notice you receive from a provider or pharmacy.

By using the Site, you accept the practices described in this Privacy Policy and our Terms of Use. If you do not agree, please do not use the Site.

If you are a California resident, please also see our California Privacy Notice.

How This Policy Works With HIPAA

Some information you share through the Site is Protected Health Information ("PHI") governed by the Health Insurance Portability and Accountability Act ("HIPAA"). PHI created or received in connection with your care is handled in accordance with the Notice of Privacy Practices provided by the licensed providers and pharmacy with whom you have a treatment relationship. Where OPTMZ Health handles PHI on behalf of those providers or the pharmacy, it does so as a business associate under HIPAA, subject to applicable Business Associate Agreements.

This Privacy Policy governs information collected through the Site that is not otherwise governed by HIPAA — for example, general website browsing, account, marketing, and device information. Where HIPAA and this Privacy Policy both could apply, HIPAA and the Notice of Privacy Practices control for PHI.

Categories of Information We Collect

Depending on how you use the Site, we may collect the following categories of information:

• Identifiers and contact information — name, email address, phone number, mailing/shipping address, state of residence, date of birth, and account login credentials.
• Health information you provide — information you submit during intake, eligibility, and evaluation, such as health history, symptoms, medications, allergies, and lab or biomarker results. This information is used to connect you with a licensed provider and is treated as described in the Notice of Privacy Practices.
• Transaction and payment information — the program or service you select and a record of your purchases. Payment card details are collected and processed by our third-party payment processor (Authorize.Net); we do not store your full payment card number.
• Communications — messages you send to us or to your care team, customer-support and contact-form requests, and your communication preferences (including SMS consent).
• Device and usage information — IP address, device and browser type, operating system, identifiers, pages viewed, dates and times of interactions, general interaction data (such as clicks) on our public website, and campaign attribution data (such as UTM parameters and link-click data associated with our emails and ads), collected automatically.

We collect this information directly from you, automatically from your device, and from the providers, pharmacies, laboratories, and service providers involved in delivering the service you request.

How We Use Information

We use the information we collect to:

• Operate, secure, and improve the Site and the patient portal;
• Connect you with independently licensed healthcare providers and facilitate your requested services;
• Facilitate payment for the programs and services you select;
• Provide customer support and respond to your requests;
• Send you service-related and administrative messages, and — where you have provided consent — marketing or appointment communications by email or SMS, and measure how those communications and our campaigns perform;
• Understand and improve how our public website is used through aggregate analytics;
• Detect, investigate, and prevent fraud, security incidents, and misuse, and protect our rights and the safety of others;
• Comply with legal, regulatory, and accreditation obligations; and
• Create de-identified or aggregated information, which is no longer personal information and may be used for any lawful purpose.

We do not use your health information for third-party advertising, and we do not disclose identifiable health information to advertising or social-media platforms.

How We Share Information

We share information only as needed to provide the service and as described below:

• Independent healthcare providers who evaluate you and make clinical decisions.
• Pharmacies that fill and ship prescriptions when clinically appropriate.
• Service providers and subprocessors who perform services for us (see the list below).
• Legal and safety disclosures — when required by law or legal process, to enforce our Terms, or to protect the rights, property, or safety of OPTMZ Health, our users, or the public.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to the protections in this Privacy Policy.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. SMS/text-messaging opt-in consent is never sold or shared with third parties for their own marketing.

Service Providers and Subprocessors

We engage vendors to perform services on our behalf, only as needed and under contract. Where a vendor handles PHI on our behalf, it does so under a Business Associate Agreement. Our service providers currently include:

• Website hosting and platform — Lovable.
• Contact-form delivery — FormSubmit (used for general inquiries only; please do not include health information in the contact form — use the patient portal for anything about your care).
• Customer relationship management and communications — HighLevel (inquiry and lead capture, email/SMS messaging, and campaign attribution).
• Website analytics — Google Analytics (GA4), used on our public website pages only (see "Cookies, Analytics, and Tracking Technologies").
• Payment processing — Authorize.Net.
• Clinical operations technology supporting the independent providers — MD Integrations.
• Dispensing pharmacy — Manifest Pharmacy.
• Laboratory partners and text-message (SMS) delivery providers.

A current list of the service providers and subprocessors we use is available on request at support@optmzhealth.com.

Cookies, Analytics, and Tracking Technologies

We use strictly necessary cookies to operate the Site and remember your preferences, and we self-host our fonts so that loading the Site does not share your information with a font provider.

To understand how our website is used and to improve it, we use Google Analytics (GA4) on our general, public website pages. We configure Google Analytics for analytics only — we do not enable its advertising, audience, or cross-site features. We do not deploy Google Analytics, or any similar third-party analytics or tracking tool, on pages where you submit health information, complete checkout, create an account, or access the patient portal.

We also use our customer-relationship platform (HighLevel) to capture inquiries and measure campaign performance, including UTM parameters and link-click data associated with our communications.

We do not use third-party advertising or social-media tracking pixels, and we do not disclose identifiable health information to advertising platforms or analytics providers.

You can control cookies through your browser settings, and you can opt out of Google Analytics using Google's opt-out browser add-on. We honor recognized browser-based opt-out signals, including the Global Privacy Control (GPC), where required by law.

Your Privacy Choices and Rights

You may:

• Opt out of marketing emails using the unsubscribe link in any marketing message, or by emailing support@optmzhealth.com;
• Opt out of marketing SMS by replying STOP to any marketing text; and
• Access, update, or request deletion of your information, as described below.

Depending on where you live, you may have rights to: confirm whether we process your personal information; access, correct, or delete it; obtain a portable copy; opt out of sale, sharing, or targeted advertising (note: we do not sell or share personal information for these purposes); and limit the use of sensitive personal information. We will not discriminate against you for exercising these rights.

To exercise a right, email support@optmzhealth.com or write to the address below. We will verify your request and respond within the timeframe required by applicable law. You may use an authorized agent where permitted, and you may appeal a decision by contacting us at the same address. Requests concerning PHI are handled under the Notice of Privacy Practices.

California residents: see our California Privacy Notice for additional disclosures, including under the CCPA/CPRA. Washington residents: see our Consumer Health Data Privacy Policy for rights specific to consumer health data.

Information Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit (SSL/TLS). No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Email is not a secure channel — please do not include sensitive health information in unencrypted email or the contact form; use the patient portal for communications with your care team.

Data Retention

We retain personal information for as long as needed to provide the Site and the services you request, and as required to meet legal, regulatory, tax, accounting, and recordkeeping obligations, resolve disputes, and enforce our agreements. Medical records are retained by the applicable providers and pharmacy in accordance with law. You may request changes or deletion by contacting us at support@optmzhealth.com.

Children's Privacy

The Site and our services are intended for adults. You must be 18 or older to use the Site or become a patient. We do not knowingly collect personal information from, or provide services to, anyone under 18. If you believe a minor has provided us information, please contact us and we will delete it.

Access From Outside the United States

The Site is intended for residents of the United States. If you access it from outside the U.S., your information will be transferred to and processed in the United States, where data-protection laws may differ from those of your jurisdiction.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will post the revised version and update the "Last Updated" date above. Your continued use of the Site after the effective date means you accept the updated Privacy Policy.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact us at: