Privacy Policy

Introduction

FORM by GBY is dedicated to upholding the privacy of our users and ensuring compliance with applicable laws regarding the personal information we may collect from you through our websites, including www.formbygby.com, and our platform. This Privacy Policy outlines our practices concerning the collection, use, and disclosure of your personal information. By accessing our websites and using our services, you agree to the terms and conditions described in this policy.

Information We Collect

We collect information in two ways: (1) Voluntarily Provided Information – data you actively provide while using our services, such as your full name, email address, phone number, social media credentials, date of birth, and payment information; and (2) Automatically Collected Data – information automatically transmitted from your device when using our services, such as IP address, browser type, device details, and page visit data.

Your information may be used to: manage interactions with you by administering our communications, account access, and engagement with you across the website and platform; enhance and secure the website and platform by maintaining, protecting, and improving functionality and security; provide personalized experiences and improved support based on your preferences and usage patterns; respond to inquiries and assess user needs; inform you of changes to services, products, or the platform; conduct research and create or enhance products, services, and promotions; market goods and services with your consent; provide routine updates and reminders regarding services or orders; facilitate clinical care and coordination by sharing relevant health information with providers, pharmacies, or other professionals involved in your care; support billing and payment processing; and ensure regulatory and legal compliance.

Cookies

We use cookies to improve your experience. Most browsers accept cookies by default, but you can modify your settings to decline them or receive alerts. Note that declining cookies may limit website functionality.

Your Data

Your data may be shared in the following contexts, with attention to both operational and clinical needs: Subsidiaries and Acquisitions – in the event of a corporate restructuring, merger, acquisition, or other business transition, your personal and health information may be securely transferred within our corporate group to ensure continuity of care. Without Specific Consent – your information may be shared with third parties without your explicit consent when legally required or justified, including complying with laws, responding to legal proceedings, defending our legal rights, or preventing fraud or illegal activity. Public – certain information you voluntarily share in public forums or publicly accessible areas of our website may become visible to other users or the general public. Service Providers and Clinical Partners – we may share your personal and health information with affiliated service providers, including healthcare providers, pharmacies, laboratories, payment processors, technical support teams, and marketing partners, to deliver care, coordinate prescriptions, process transactions, and improve our services. Aggregated or De-Identified Data – non-identifiable or aggregated data may be used internally or shared with third parties for marketing, research, quality improvement, product development, and clinical program evaluation. Clinical Context Considerations – when sharing health information with providers, pharmacies, or other clinical partners, only the information necessary for safe, effective care coordination will be disclosed, in compliance with applicable laws, regulations, and professional standards governing patient confidentiality.

Data Retention

We uphold the retention of personal information only for as long as it is deemed essential to fulfill the intended purposes for which it was initially obtained. This encompasses adherence to our operational necessities, legal mandates, dispute resolution proceedings, asset protection measures, service provision, and the enforcement of agreements. When, in our sole discretion, it is determined that continued retention of personal information is no longer necessary, it will be securely and permanently deleted in accordance with prevailing legal regulations and our established policies. Even upon a request for deletion, certain information may still be retained to fulfill legal, regulatory, contractual, or other similar obligations, while anonymized or aggregated data may be preserved for analytical and performance reporting purposes, as permitted by applicable laws.

Use of Personal Data

Your information may be used to: facilitate access to services, including creating and maintaining your account, scheduling consultations, and coordinating care with affiliated providers and pharmacies; process transactions, including payments, billing, subscriptions, and orders; communicate with you regarding your account, services, appointments, or other inquiries via email, phone, or text message (message and data rates may apply, and you may opt out of SMS at any time); fulfill legal and regulatory obligations, including reporting to authorities when required, conducting audits, managing disputes, or protecting our rights and those of our users; coordinate with pharmacies and providers to ensure prescriptions and treatments are accurately delivered; and support internal management and improvements through analysis of aggregated, de-identified, or pseudonymized data.

Preservation and Security of Your Data

We implement a range of administrative, technical, and physical security measures designed to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include secure storage systems, access controls, and encryption where appropriate. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security of your information.

Protected Health Information (PHI)

To the extent we collect Protected Health Information (PHI) in connection with the clinical services provided through our platform, that information is handled in accordance with applicable health privacy laws, including the Health Insurance Portability and Accountability Act (HIPAA), where applicable. PHI may be shared with affiliated healthcare providers, pharmacies, laboratories, and other parties involved in your care solely for purposes of treatment, payment, and healthcare operations, or as otherwise authorized by you or permitted by law.

Device Data Collection

When you access our website or platform, we may automatically collect certain information about your device, including your IP address, browser type, operating system, device identifiers, referring URLs, and information about your interactions with our website, such as pages visited and time spent on the site. This information helps us maintain the security and functionality of our services and improve your overall experience.

Third-Party Links

Our website and platform may contain links to third-party websites or services that are not owned or controlled by us. We are not responsible for the privacy practices or content of these third parties. We encourage you to review the privacy policies of any third-party websites you visit.

Data Subject Rights and Options

Depending on your state of residence, you may have certain rights regarding your personal information, including the right to: access the personal information we hold about you; request correction of inaccurate personal information; request deletion of your personal information, subject to certain exceptions; request a copy of your personal information in a portable format; opt out of the sale or sharing of your personal information, or its use for targeted advertising; and opt out of profiling in furtherance of decisions that produce legal or similarly significant effects. To exercise any of these rights, please contact us using the details provided in the Contact Details section below. We will respond to your request within the timeframe required by applicable law.

State-Specific Opt-Out Rights

Residents of California, Nevada, Utah, Colorado, Connecticut, Virginia, and Maine may have additional rights under applicable state privacy laws, including the right to opt out of the sale of personal information, targeted advertising, and certain profiling activities. If you are a resident of one of these states and wish to exercise your applicable rights, please contact us using the details provided below, and we will process your request in accordance with the requirements of your state’s law.

Security

We take reasonable steps to protect your personal information from loss, misuse, unauthorized access, disclosure, alteration, or destruction. While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee its absolute security.

Order Acceptance and Fulfillment

Orders placed through our platform are subject to review and acceptance by our affiliated providers and pharmacy partners. Information you provide when placing an order, including health-related information, may be shared with these parties for the purpose of clinical review, prescription fulfillment, and delivery of your order.

Amendments to Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Any changes will be posted on this page with an updated revision date. Your continued use of our website and services after any changes to this Privacy Policy constitutes your acceptance of the revised policy.

Your Rights Regarding Health Information

Where applicable, you have the right to request access to, and copies of, your health information; request corrections to your health information; request restrictions on certain uses and disclosures of your health information; request confidential communications regarding your health information; and receive an accounting of certain disclosures of your health information. To exercise any of these rights, please contact us using the details provided below.

How We Use or Share Health Information

We may use or share your health information for treatment purposes, including coordinating care with providers, pharmacies, and laboratories; for payment purposes, including billing and processing claims; and for healthcare operations, including quality assessment, provider training, and business management activities. We may also use or share your health information as required by law, to prevent a serious threat to health or safety, or with your specific authorization.

Responsibilities

You are responsible for maintaining the confidentiality of any account credentials associated with our platform and for all activities that occur under your account. You agree to provide accurate and complete information when using our services and to promptly update any information that has changed.

Contact Details

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us at:

FORM by GBY

Email: hello@formbygby.com

Address: [COMPANY ADDRESS — TO BE COMPLETED, LEGAL REVIEW REQUIRED]

Pharmacy Partner: [PHARMACY NAME AND ADDRESS — TO BE COMPLETED, LEGAL REVIEW REQUIRED]

Agreement and Acknowledgment

By using our website and services, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your personal information as described herein.