Privacy Policy

1. OVERVIEW

Natural Beauty Bar LLC d/b/a VEYRA MEDS (“VEYRA MEDS,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect information when you visit veyrameds.com, create an account, complete an assessment, use our calculators or digital tools, communicate with support, participate in a VEYRA MEDS program, or otherwise interact with our services.

By accessing or using our website or services, you acknowledge the practices described in this Privacy Policy. Where consent is required by applicable law, we will request that consent separately.

Information We Collect

Depending on how you interact with VEYRA MEDS, we may collect:

• Contact information, including your name, email address, telephone number, billing address, and shipping address.
• Account information, including login credentials, account preferences, user role, program information, and communication history.
• Transaction information, including purchase history, payment status, refunds, discounts, and billing details. Complete payment-card information may be processed directly by our payment providers rather than stored by VEYRA MEDS.
• Health and wellness information that you choose to provide through assessments, questionnaires, progress updates, uploaded photographs, support inquiries, or other service features.
• Communications, including website-form submissions, chat messages, emails, text messages, call records, support references, and customer-service history.
• Device and usage information, including IP address, browser type, device type, operating system, referring pages, pages viewed, approximate location derived from an IP address, timestamps, and website interactions.
• Cookie and similar-technology information used to maintain sessions, remember preferences, improve performance, prevent fraud, and understand website usage.

How We Use Information

We may use information to:

• Operate, maintain, secure, and improve our website and services.
• Create and manage accounts.
• Process transactions and provide requested services.
• Personalize the user experience and support the user’s VEYRA journey.
• Connect users with appropriate care, service, fulfillment, payment, or support resources when applicable.
• Respond to questions and route medical or emergency-related messages for appropriate review.
• Send administrative, account, security, billing, support, and service-related communications.
• Send marketing communications when permitted by law and consistent with the user’s communication preferences.
• Detect, investigate, and prevent fraud, misuse, security incidents, and unlawful activity.
• Maintain business, security, compliance, and audit records.
• Satisfy legal, regulatory, contractual, and reporting obligations.

Health Information

Information submitted through a general website, calculator, contact form, or marketing interaction is not automatically protected health information under the Health Insurance Portability and Accountability Act (“HIPAA”).

When information is created, received, maintained, or transmitted by a healthcare provider or another HIPAA-regulated entity in connection with care, that information may be governed by HIPAA and the regulated entity’s Notice of Privacy Practices. If a Notice of Privacy Practices applies, it will control in the event of a conflict concerning protected health information.

VEYRA MEDS uses reasonable administrative, technical, and organizational safeguards designed to protect personal and health-related information. No electronic system, transmission, or storage method can be guaranteed to be completely secure.

Data Retention

We retain information for as long as reasonably necessary to provide services, maintain required records, resolve disputes, enforce agreements, protect users and the platform, and satisfy applicable legal, regulatory, tax, accounting, and compliance obligations. Retention periods may vary according to the type of information and the reason it was collected.

Children’s Privacy

VEYRA MEDS services are not intended for children under 18. We do not knowingly collect personal information directly from anyone under 18 through services intended for adults. If we learn that information was collected from a child inappropriately, we will take reasonable steps to delete it.

2. DEFINITIONS

“Consumer Health Data” means personal information that identifies or may reasonably be linked to a consumer and relates to the consumer’s past, present, or future physical or mental health status, care, treatment, bodily functions, symptoms, measurements, or health-related inferences, as defined by applicable law.

“Personal Information” means information that identifies, relates to, describes, can reasonably be linked to, or could reasonably be associated with an individual or household. Personal information does not include information that has been lawfully made public, aggregated, or deidentified so that it cannot reasonably identify an individual.

“Protected Health Information” or “PHI” has the meaning assigned under HIPAA and generally refers to individually identifiable health information created, received, maintained, or transmitted by a HIPAA-covered entity or business associate.

“Service Providers” means companies and individuals that process information or perform services on our behalf, such as website hosting, cloud storage, security, communications, payment processing, analytics, customer support, and fulfillment.

“Services” means the VEYRA MEDS website, accounts, assessments, calculators, portals, programs, communications, customer-support channels, and related digital services.

“Sensitive Personal Information” may include account credentials, precise location, financial information, government identifiers, health information, biometric information, and other information treated as sensitive under applicable law.

“Sell,” “Sale,” “Share,” and “Targeted Advertising” have the meanings provided by applicable privacy laws. These definitions may differ by jurisdiction.

3. YOUR RIGHTS

Depending on where you live and subject to applicable exceptions, you may have the right to:

• Confirm whether we process your personal information.
• Request access to personal information we maintain about you.
• Request correction of inaccurate personal information.
• Request deletion of eligible personal information.
• Request a portable copy of eligible information.
• Withdraw consent where processing is based on consent.
• Opt out of nonessential marketing communications.
• Opt out of certain sales, sharing, targeted advertising, or profiling where applicable.
• Request information regarding the categories of information collected, the purposes for collection, and the categories of recipients receiving it.
• Request information about, or withdraw consent for, certain collection or sharing of consumer health data where applicable.
• Appeal a decision concerning a privacy request when that right is provided by applicable law.
• Exercise applicable privacy rights without unlawful discrimination.

How to Exercise Your Rights

Submit a request by emailing info@veyrameds.com with the subject line “Privacy Request” or by using the VEYRA MEDS Contact page.

Please include your name, the email address associated with your account, your state of residence, the right you wish to exercise, and enough information for us to understand the request.

We may take reasonable steps to verify your identity before completing a request. Verification information will be used only to evaluate and process the request.

We may deny or limit a request where permitted by law, including when we cannot verify identity or when information must be retained for legal, security, fraud-prevention, transactional, or recordkeeping purposes.

An authorized agent may submit a request when permitted by law. We may require proof of authorization and may contact the individual directly to verify the request.

Communication Choices

You may unsubscribe from promotional emails by using the unsubscribe option included in those messages. You may opt out of promotional text messages by replying STOP.

Transactional, security, care-related, or administrative communications may continue when necessary to provide requested services or maintain an account.

Cookie Choices

You may manage certain cookies through our cookie-preference controls or browser settings. Disabling cookies may affect website functions, authentication, preferences, and other features.

4. DISCLOSURES

We may disclose information only as reasonably necessary for the purposes described in this policy.

Service Providers

We may disclose information to service providers supporting website hosting, databases, cybersecurity, communications, payment processing, customer support, analytics, account administration, fulfillment, and other business operations.

These providers may use information only for authorized purposes and are expected to protect it appropriately.

Care and Service Partners

When applicable and authorized, information may be disclosed to licensed healthcare professionals, pharmacies, laboratories, fulfillment partners, or other organizations involved in providing requested care or services. Their privacy notices may separately govern information they receive or maintain.

Payment Processors

Payment information may be transmitted directly to payment processors and financial institutions to complete transactions, prevent fraud, process recurring payments, or address billing matters. Their handling of information is governed by their privacy terms and applicable law.

Legal and Safety Purposes

We may disclose information when reasonably necessary to:

• Comply with law, regulation, court order, subpoena, governmental request, licensing obligation, or legal process.
• Protect the rights, safety, and security of users, VEYRA MEDS, or others.
• Investigate fraud or security incidents.
• Enforce agreements.
• Establish, exercise, or defend legal claims.

Business Transactions

Information may be transferred as part of an actual or proposed merger, financing, acquisition, reorganization, sale of assets, bankruptcy, or similar business transaction, subject to applicable confidentiality and privacy requirements.

With Your Direction or Consent

We may disclose information when you direct us to do so, authorize the disclosure, request an integration, or otherwise provide consent.

Consumer Health Data

VEYRA MEDS does not sell consumer health data. We do not use consumer health data for targeted advertising.

We will not disclose consumer health data beyond what is reasonably necessary to provide requested services, operate and secure the platform, satisfy legal obligations, or fulfill another purpose authorized by the consumer or permitted by applicable law.

Deidentified and Aggregated Information

We may use or disclose information that has been aggregated or deidentified so that it cannot reasonably be linked to an individual. We will not attempt to reidentify information that applicable law requires to remain deidentified.

Security Incidents

If a security incident involving protected information occurs, VEYRA MEDS will investigate and provide legally required notifications to affected individuals, regulators, or other parties in accordance with applicable law.

Third-Party Services

Our website may link to services operated by third parties. VEYRA MEDS is not responsible for the privacy, security, or content practices of third-party services. Review their privacy notices before providing information.

Changes to This Policy

We may update this Privacy Policy to reflect changes in our services, data practices, technology, or legal obligations.

The revised policy will display a new “Last Updated” date. When legally required, we will provide additional notice or obtain consent.

5. CONTACT US

For privacy questions, concerns, or requests, contact:

Use the subject line “Privacy Request.”

If you contact us about a privacy concern, please provide enough information for us to identify your account and understand your request.

Do not send Social Security numbers, complete payment-card numbers, passwords, or unrelated sensitive documents through ordinary email or general website chat.