Privacy Policy

1Who this policy covers

Neveth Health is operated by Neveth LLC, located at 1406 Stoneboro Ln, Richardson, TX 75082. In this policy, "Neveth Health", "we", "our" and "us" refer to that entity. "You" refers to anyone who visits this website or uses our services.

Neveth Health is a metabolic health clinic. We connect you with independent licensed healthcare providers who evaluate your information and decide whether treatment is medically appropriate. We are not a pharmacy, and we do not compound, manufacture or dispense medication. Services are not available everywhere, and availability can vary by treatment, provider licensure and eligibility.

2Information you give us

Most of what we hold about you is information you have entered yourself — when you create an account, complete an assessment, message our care team, book a consultation, or place an order. Depending on what you do, this can include:

• Your name, date of birth, sex assigned at birth, and gender identity if you choose to share it
• Email address, phone number, shipping address and billing address
• Account login credentials for the patient portal
• Government-issued identification or proof of identity, where a provider or pharmacy is required to verify who you are
• The content of messages, forms, uploads and photographs you send us
• Responses to surveys, reviews, or requests for feedback

You decide what to share. Leaving parts of an assessment blank is your choice, but a provider may be unable to complete a clinical review without them.

3Health information

Because we exist to support clinical care, some of what you tell us is health information. This may include your medical and surgical history, current and past medications, allergies, symptoms, height and weight, body composition, sleep and training patterns, nutrition, lab results, and any photographs you upload to support a clinical review.

We collect this so a licensed provider can assess whether a treatment is appropriate for you, and so your care can be monitored over time. We do not use the health information you submit for advertising, and we do not sell it.

Where Neveth Health, a treating provider, or a partner pharmacy acts as a covered entity or business associate under the Health Insurance Portability and Accountability Act (HIPAA), protected health information is handled in line with that law and any applicable notice of privacy practices. Some information you give us — for example, details entered on marketing pages before you become a patient — may fall outside HIPAA and is governed by this policy and applicable state law instead.

4Information collected automatically

When you visit the website, some information is recorded by our systems and those of our technology vendors without you typing anything. That typically includes:

• IP address and approximate location derived from it
• Browser type, operating system, screen size and device identifiers
• Pages viewed, links clicked, time spent, and the page or advertisement that referred you
• Dates and times of visits, and error or performance diagnostics

We use this to keep the site working and secure, to detect abuse, and to understand which parts of the site people find useful.

5Information we receive from others

Not everything we hold comes from you directly. We also receive information about you from the organisations involved in delivering the service:

• The providers and medical groups treating you, including the outcome of a clinical review and whether a prescription was issued
• Laboratories, confirming that a requisition was issued or a sample processed
• Pharmacies and fulfilment partners, confirming dispensing and shipping status
• Our patient portal provider, which processes your account and messages on our behalf
• Payment processors, returning transaction outcomes, billing details and fraud signals
• Identity and address verification services, where verification is required

Clinical information we receive from a provider or laboratory is subject to the authorisation you sign and to the access limits described in section 11. Ask your treating provider for the applicable notice describing clinical record access and retention.

6Cookies and browser storage

This website uses browser session storage to remember dismissal of an announcement. Hosting and security services may process technical information such as IP addresses, requested pages and timestamps to deliver and protect the website. These operational records are separate from advertising tracking.

You can manage browser storage through your browser settings. The separate Bask patient portal may use storage for its own functionality; review the notices presented there or contact us with questions.

Neveth does not currently use Meta Pixel, Google Analytics or Google Ads tracking on its website.

If we introduce analytics or advertising tracking in the future, we will update this policy to explain the tools, information collected, purposes and privacy choices before enabling them. We will obtain consent and provide controls where required. This policy does not itself authorize future tracking or advertising use of health information.

7How we use information

We use the information described above to:

• Operate the website, the assessment and the patient portal
• Pass your information to a licensed provider for clinical review
• Arrange laboratory testing where a provider requests it
• Send your prescription to a licensed pharmacy for fulfilment, where treatment is appropriate
• Take payment and manage refunds, subscriptions and billing questions
• Answer your questions and provide patient support
• Send appointment reminders, refill reminders and other service messages
• Improve our services, and measure and target our marketing
• Detect and prevent fraud, abuse and security incidents
• Meet our legal, regulatory and recordkeeping obligations

8How we share information

We share information only where it is needed to deliver the service or where the law requires it. The categories of recipient are:

• Licensed healthcare providers who review your assessment and manage your care
• Licensed pharmacies and fulfilment partners, where a prescription is written
• Clinical laboratories, where testing is ordered
• Payment processors, to take and reconcile payment
• Technology vendors that host our systems, run the patient portal, deliver email and SMS, and provide customer support tooling
• Professional advisers such as lawyers, accountants and auditors
• Regulators, courts and law enforcement, where we are legally required to respond or where disclosure is needed to protect someone's safety
• A buyer or successor, if our business or its assets are sold, merged or reorganised

We do not sell your personal information for money. The current website does not use Meta or Google advertising tracking. Any future analytics or advertising implementation will be addressed as described in the Analytics and marketing section.

9Providers, pharmacies and laboratories

The providers who treat you exercise independent clinical judgement and keep their own medical records. They handle your information in line with their own privacy practices and their obligations as licensed clinicians, including under HIPAA where it applies.

Pharmacies receive what they need to dispense and ship a prescription — your name, contact and shipping details, the prescription itself, and relevant clinical information. Laboratories such as Quest Diagnostics and Labcorp receive the details required to process a requisition and return results to your provider. Each of these organisations is responsible for the information it holds under its own policies.

10Payment information

Payments are handled by a third-party payment processor. Your full card number is entered directly with that processor and is not stored on Neveth Health systems. We receive limited details in return — typically the card brand, the last four digits, the expiry date, the billing address and whether the transaction succeeded — which we use for billing, refunds, dispute handling and fraud prevention.

Lab panels are billed separately from treatment.

11The patient portal

Neveth Health uses Bask as its patient platform. Visit Ask about care for current access information. For information about how the portal and your treating provider handle health information, request the applicable privacy notice through the portal or contact care@nevethhealth.com.

Keep your portal password confidential. If you believe someone else has accessed your account, contact us straight away at care@nevethhealth.com.

12Analytics and marketing

Neveth does not currently use Meta Pixel, Google Analytics or Google Ads tracking on its website.

If we introduce analytics or advertising tracking in the future, we will update this policy to explain the tools, information collected, purposes and privacy choices before enabling them. We will obtain consent and provide controls where required. This policy does not itself authorize future tracking or advertising use of health information.

13Email and text messages

We send two kinds of messages. Marketing messages promote our services; you can stop those at any time by using the unsubscribe link in an email or replying STOP to a text. Service messages relate to your account, your order or your care — appointment reminders, shipping updates, refill notices and billing alerts — and continue for as long as you are a patient, because they are part of the service itself.

Message and data rates may apply to text messages. Message frequency varies.

14Your privacy choices

Depending on where you live, you may have some or all of the following rights over your personal information:

To make a request, email care@nevethhealth.com or write to us at the address in section 1. We will need to verify your identity before we act, and we may ask for information to do so. An authorised agent may submit a request on your behalf with proof of authorisation.

Some information cannot be deleted on request. Medical records must be retained for periods set by state law and professional standards, and we may need to keep records to meet tax, accounting, safety-reporting or legal-defence obligations. If we decline a request, we will tell you why and how to appeal.

15California residents

If you live in California, the California Consumer Privacy Act, as amended by the CPRA, gives you the rights described in section 14, including the right to know the specific pieces of personal information we have collected, the right to correct and delete it, the right to opt out of sale or sharing, and the right to limit the use of sensitive personal information.

Some information collected by Neveth Health is exempt from the CCPA because it is medical information governed by California's Confidentiality of Medical Information Act, or protected health information under HIPAA. Those records are handled under those laws instead.

To exercise a California right, contact us at care@nevethhealth.com.

Contact patient support to request the privacy disclosures applicable to your state before providing health information.

16Other state privacy laws

Several other states — including Colorado, Connecticut, Virginia, Texas, Oregon and Washington, among others — give residents comparable rights, and some impose specific rules on consumer health data. Nevada residents may direct us not to sell certain covered information as that term is defined under Nevada law.

Where a state law grants you a right described in section 14, you can exercise it through the same contact details. Tell us which state you live in so we can apply the correct process.

Privacy rights and the process for handling a request depend on applicable law. Tell us which state you live in so we can identify the appropriate process for your request.

17Age requirement

Neveth Health is for adults aged 18 and over. We do not knowingly collect information from children under 13, and the service is not directed at them. If you believe a child has given us personal information, contact care@nevethhealth.com and we will delete it.

18How we protect information

We use administrative, technical and physical safeguards to protect the information we hold. Information you submit through this website is transmitted over an encrypted connection, access to clinical records is limited to people who need it, and our vendors are bound by contract to protect what we share with them.

No system is completely secure. We cannot guarantee that information will never be accessed or disclosed in a way that breaches these safeguards, and you send information to us understanding that risk.

19How long we keep information

We keep information for as long as we need it to provide the service and to meet our obligations afterwards. Medical records are retained for the period required by the law of the state where your provider is licensed, which is commonly several years after your last visit and longer for patients treated as minors. Billing and transaction records are kept for tax and accounting purposes. Marketing information is kept until you opt out or until it is no longer useful.

When information is no longer needed, we delete it or remove the details that identify you.

20Other websites we link to

This site links to other organisations, including our patient portal, our pharmacy and laboratory partners, and payment providers. Once you leave nevethhealth.com you are covered by the privacy policy of the site you have moved to. We do not control those sites and are not responsible for how they handle your information.

21Changes to this policy

We may update this policy as our services, our vendors or the law change. When we do, we will update the date at the top of the page. If a change materially affects how we use your information, we will give you additional notice — by email or through the patient portal — and, where the law requires it, ask for your consent.

22How to reach us

For any question about this policy or to exercise a privacy right:

We aim to respond to privacy requests within the timeframe set by the law that applies to you, which is usually 45 days, and we will tell you if we need an extension.