Privacy Policy

How Our Telehealth Services Work

Floellia is a wellness platform. We do not practice medicine. When you request a treatment, your medical intake is reviewed by independent, licensed healthcare providers who decide, in their own professional judgment, whether a treatment is appropriate for you. Approved prescriptions are filled and shipped by licensed partner pharmacies.

Health information you provide to those providers and pharmacies for diagnosis, treatment, or dispensing may be considered "protected health information" under the Health Insurance Portability and Accountability Act ("HIPAA"). Where HIPAA applies, that information is handled in accordance with HIPAA and the applicable provider's or pharmacy's Notice of Privacy Practices, which governs over this Privacy Policy to the extent they conflict. Where we handle such information on a provider's behalf, we do so under a business associate agreement and only as that agreement permits.

Information We Collect

Depending on how you use the Services, we may collect the following categories of personal information:

• Contact and identity information, such as your name, date of birth, email address, phone number, shipping address, and billing address, and, where required by a provider or by law, a government-issued ID or photo to verify your identity.
• Health information, such as your medical history, current medications, allergies, symptoms, health goals, lab results, photos, and other information you share in your intake or in messages with a provider.
• Treatment and order information, such as the treatments you request, prescriptions issued, subscription status, shipments, refills, and cancellations.
• Payment information, such as card details and transaction records. Payment card numbers are collected and processed by our payment processor; we do not store full card numbers.
• Account information, such as login credentials, preferences, and communication settings.
• Communications, such as the content of emails, text messages, and support requests you send us.
• Device and usage information, such as IP address, browser type, device identifiers, pages viewed, and how you interact with the Services, collected through cookies and similar technologies.

Sources of Information

• Directly from you, when you complete an intake, create an account, place an order, or contact us.
• From providers and pharmacies, such as treatment decisions, prescription status, and shipping updates needed to fulfill your care.
• From service providers who operate technology on our behalf, such as payment processing, identity verification, hosting, and customer support tools.
• Automatically, through cookies and similar technologies when you use the Services.

How We Use Information

• To provide the Services. We use your information to route your intake to a licensed provider, coordinate prescriptions with partner pharmacies, process payments and subscriptions, ship orders, manage your account, and send you service messages such as order confirmations, refill reminders, and provider updates.
• To communicate with you. We use your contact details to respond to questions, provide customer support, and, with your consent where required, send marketing communications.
• To operate and improve the Services. We use device and usage information to keep the website working, understand how it is used, and improve it. We use de-identified or aggregated data where possible.
• For safety, security, and fraud prevention. We use information to verify identity, protect accounts, and detect and prevent fraud, abuse, or prescription misuse.
• For legal and compliance purposes. We use information to comply with laws and regulations, including medical and pharmacy record-keeping requirements, to respond to lawful requests, and to enforce our terms.

We do not use your health information for advertising, and we do not use it for marketing without your express authorization.

How We Disclose Information

We do not sell your personal information, and we never sell your health information. We disclose personal information only as follows:

• Licensed providers and pharmacies, to review your intake, make treatment decisions, and dispense and ship prescriptions.
• Service providers who perform services on our behalf, such as payment processing, identity verification, hosting and cloud storage, email and text messaging, customer support, and shipping. They are contractually required to use your information only to provide those services and to protect it.
• With your direction or consent, for example if you ask us to share records with another healthcare provider.
• For legal reasons, to comply with law, subpoenas, or other legal process, to protect the rights, safety, or property of you, us, or others, or to respond to a public health or safety emergency.
• In a business transaction, such as a merger, acquisition, or sale of assets, subject to the commitments in this Privacy Policy and applicable law.

Cookies and Similar Technologies

We use cookies and similar technologies to operate the website, remember your preferences, and understand how the Services are used. We configure these tools so that health information you enter in an intake is not shared with advertising or analytics partners. You can control cookies through your browser settings; disabling some cookies may affect how the website works.

If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of any sale or sharing of personal information for targeted advertising for that browser, where applicable law requires. We do not currently respond to other "Do Not Track" signals.

Text Messages and Email

If you provide your phone number, we and our providers may send you text messages about your intake, orders, prescriptions, and account. Message and data rates may apply. You can opt out of text messages at any time by replying STOP. You can unsubscribe from marketing emails using the link in any marketing email; we may still send you service-related messages about your care, orders, or account.

Data Security

We use administrative, technical, and physical safeguards designed to protect your information, including encryption in transit and access controls that limit health information to those who need it. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please keep your account credentials confidential and avoid sending sensitive health information through unsecured channels such as regular email.

Data Retention

We keep personal information for as long as needed to provide the Services, maintain your account, and meet our legal obligations. Medical and pharmacy records may be retained for the periods required by federal and state law, even after you close your account or request deletion.

Your Rights and Choices

Depending on where you live, you may have the right to:

• access the personal information we hold about you;
• request correction of inaccurate information;
• request deletion of your information, subject to legal retention requirements;
• receive a copy of your information in a portable format;
• opt out of targeted advertising, the sale of personal information, or certain profiling;
• withdraw consent you previously gave, including consent to collect or share consumer health data; and
• appeal our decision on a privacy request.

Some states, including Washington, Nevada, and Connecticut, provide additional rights for consumer health data. We collect and share consumer health data only as needed to provide the Services you request or with your consent.

For health information held by a provider or pharmacy under HIPAA, you may also have rights to access, amend, and receive an accounting of disclosures of your records, as described in their Notice of Privacy Practices. We will help direct those requests to the appropriate provider or pharmacy.

To make a request, email us at sales@floellia.com. We may need to verify your identity before responding. You may use an authorized agent, and we may ask for proof of their authority. We will not discriminate against you for exercising your rights.

Eligibility and Children

The Services are intended only for adults 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with information, please contact us and we will delete it as permitted by law.

Third-Party Websites

The Services may link to websites or platforms operated by others. Their privacy practices are governed by their own policies, and we are not responsible for them.

Where We Operate

The Services are offered in the United States, and your information is stored and processed in the United States.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will post the revised version on this page and update the "Last updated" date. If we make material changes, we will provide additional notice as required by law.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, or would like to exercise your rights, contact:

DDW Distribution LLC
159 County Road 1405
Skiatook, OK 74070
Email: sales@floellia.com