1. Who we are

MedArow (“MedArow,” “we,” “us,” or “our”) operates the website at www.medarow.com. This Privacy Policy explains how we collect, use, and share information when you visit our website, submit an intake form, or communicate with us.

MedArow is not a medical practice and does not provide medical care. We are a technology and administrative services company. Medical services, if any, are provided by independent licensed clinicians affiliated with third-party provider organizations. Those providers maintain their own privacy practices and, where applicable, their own Notice of Privacy Practices governing protected health information under HIPAA.

Contact: privacy@medarow.com

2. Scope of this policy

This policy covers information collected through our website, marketing communications, and customer service channels.

It does not cover protected health information created or received by a licensed provider in the course of treatment. That information is governed by the provider organization’s Notice of Privacy Practices, which is provided to you separately before any clinical services begin.

3. Information we collect

Information you give us

• Contact information — name, email address, phone number, and mailing address

• Intake information — responses you provide in our online intake form, which may include health-related information you choose to share

• Account and billing information — subscription status and payment details. Payment card numbers are collected and processed by our payment processor; we do not store full card numbers on our systems.

• Communications — messages you send us by email, SMS, web chat, or phone, including any recordings or transcripts where permitted by law

Information collected automatically

• Device and usage data — IP address, browser type, device identifiers, pages viewed, referring URLs, and timestamps

• Cookies and similar technologies — including advertising and analytics pixels. See Section 8.

Information from third parties

• Advertising platforms — aggregate campaign and conversion information from advertising partners

• Provider partners — enrollment and subscription status necessary for billing and customer support

4. How we use information

We use the information described above to:

• Respond to your inquiries and provide customer support

• Process your intake submission and route it to an appropriate provider organization

• Create and manage your account and subscription

• Process payments and send billing communications

• Send service messages about your account, appointments, or shipments

• Send marketing communications, where you have consented

• Measure and improve our website and advertising

• Detect and prevent fraud and abuse

• Comply with legal obligations

We do not sell your personal information. We do not use health-related information you provide in our intake form to target advertising to you.

5. How we share information

We share information in the following circumstances:

• Provider organizations and licensed clinicians — to evaluate your intake submission and, where appropriate, provide care

• Pharmacy partners — where fulfillment is required as part of services you have enrolled in

• Service providers — vendors who perform services on our behalf, including hosting, CRM, customer communications, analytics, and payment processing. These vendors are contractually restricted to using information only to provide services to us.

• Legal and safety — where required by law, subpoena, or other legal process, or to protect the rights, property, or safety of MedArow, our users, or others

• Business transfers — in connection with a merger, acquisition, financing, or sale of assets

We do not sell or rent personal information to third parties for their own marketing.

6. SMS and text messaging

If you provide your mobile number and consent to receive text messages, we may send service and marketing messages to that number.

• Message frequency varies.

• Message and data rates may apply.

• Reply STOP to any message to opt out. Reply HELP for assistance.

• Consent to receive marketing text messages is not a condition of purchase.

• We do not share mobile numbers or SMS consent with third parties for their own marketing purposes.

7. Email communications

You can unsubscribe from marketing email using the link in any marketing message. We will still send transactional messages about your account, billing, or orders.

8. Cookies and advertising technologies

We use cookies, pixels, and similar technologies to operate the site, remember your preferences, measure performance, and support advertising.

We work with advertising platforms that may set their own cookies or receive event data from our site. You can manage advertising preferences through:

• Your browser’s cookie settings

• The advertising platform’s own ad preference controls

• Industry opt-out tools such as the Digital Advertising Alliance and Network Advertising Initiative opt-out pages

Some browsers offer a “Do Not Track” signal. We currently respond to Global Privacy Control (GPC) signals where required by applicable state law.

9. Your privacy rights

Depending on where you live, you may have the right to:

• Know what personal information we collect, use, and share

• Access a copy of your personal information

• Correct inaccurate personal information

• Delete your personal information

• Opt out of targeted advertising, sale, or sharing of personal information

• Limit the use of sensitive personal information

• Not be discriminated against for exercising these rights

To make a request, email privacy@medarow.com with the subject line “Privacy Request.” We will verify your identity before responding, typically by confirming information already associated with your account.

You may designate an authorized agent to make a request on your behalf. We may require proof of authorization.

If we deny your request, you may appeal by replying to our response with the subject line “Privacy Appeal.”

10. Data retention

We retain personal information for as long as needed to provide services, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods vary by data type and legal requirement. When information is no longer needed, we delete or de-identify it.

11. Security

We maintain administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

If you believe your account has been compromised, contact us at privacy@medarow.com.

12. Children’s privacy

Our services are intended for adults 18 and older. We do not knowingly collect personal information from anyone under 18. If we learn we have collected such information, we will delete it. If you believe a minor has provided us information, contact privacy@medarow.com.

13. Where we operate

Our services are offered only in the United States, and only in states where our affiliated provider organizations are licensed.

We do not direct our services to individuals outside the United States.

14. Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be communicated by email or a notice on our website. Your continued use of the site after changes take effect constitutes acceptance.

15. Contact us

Questions about this policy or our privacy practices:

Email: privacy@medarow.com