Privacy Notice for California Residents

This notice adds to our Privacy Policy and applies to California residents under the California Consumer Privacy Act, as amended (CCPA). Medical records created once your care begins are held by OpenLoop Health’s affiliated medical groups and protected under HIPAA and California’s Confidentiality of Medical Information Act, as described in their Notice of Privacy Practices.

Information we collect

• Identifiers and contact details: name, email, phone number, shipping address.
• Sensitive personal information: date of birth and your assessment answers, which include health information.
• Payment information: held by Stripe; we keep only a reference and never see your card number.
• Internet activity: pages viewed, clicks and the ad that brought you, collected with cookies and similar tools (Google Analytics, Meta Pixel, and Microsoft Clarity, which records how pages are used). Text you type into forms is masked in these recordings.

Sources

From you, when you complete an assessment or contact us; from your browser, through cookies; and from our clinical partner about the status of your order.

How we use it

• To prepare your order with our clinical partner and contact you about it, including refills and shipping.
• To take payment, issue refunds and honor the StaveMD Weight Loss Guarantee.
• To run, secure and improve the site, and to measure our advertising.
• To meet legal obligations.

Sharing

We share personal information with our clinical partner, OpenLoop Health, and its affiliated medical groups and pharmacies, to provide your care; with service providers that host, store and process it for us under contract; and where the law requires.

Selling and sharing for advertising

We do not sell personal information, and we never send your assessment answers or health information to advertising or analytics services. The Meta Pixel and Google Analytics receive browsing activity on our site, which California law may treat as “sharing” for cross-context behavioral advertising. You can opt out by emailing hello@stavemd.com with the subject “Do not share”, by turning on Global Privacy Control in your browser, or by blocking cookies in your browser settings.

Your rights

• Know and access: what personal information we collect, use and share about you, and a copy of it in a portable format.
• Correct: inaccurate personal information we hold.
• Delete: personal information we collected from you, subject to legal exceptions (for example, records we must keep for payments, taxes or the law).
• Limit: the use of sensitive personal information. We use it only to provide the services you asked for.
• Opt out of sharing for cross-context behavioral advertising, as above.
• No discrimination: we will not charge you a different price or deny service because you used these rights.

How to make a request

Email hello@stavemd.com. We will confirm we received it within 10 business days and answer within 45 days. We may ask you to confirm details from your order to verify it is you. An authorized agent may make a request with your signed permission.

Changes

We update this notice when our practices change, and the date above shows the latest version.

Contact

RZ International LLC, doing business as StaveMD, 1060 Lincoln Ave, Suite 20 #1049, San Jose, CA 95125. hello@stavemd.com.