California Privacy Notice (CCPA Opt-Out)

Last updated: October 19, 2026

This California Privacy Notice (the "Notice") supplements, and is incorporated into, the Privacy Policy of Health Buy Inc ("HealthBuy," "we," "us" or "our"). It applies to personal information we collect online or offline from California residents ("consumers," "you" or "your") and explains your rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the "CCPA").

Do Not Sell or Share My Personal Information

We do not sell your personal information for money. Like most online stores, we use cookies and similar tools from advertising and analytics partners that may count as "sharing" personal information for cross-context behavioral advertising under the CCPA. You can opt out of that sharing at any time in any of these ways:

  • Email support@healthbuy.com with the subject line "California privacy request: opt out".
  • Send us a message through our contact form or call +1 (302) 684-6186.
  • Turn on the Global Privacy Control (GPC) setting in your browser. We treat a GPC signal as a request to opt out of sharing for the browser it comes from.
  • Decline non-essential cookies in your browser settings. Doing so may limit some site features.

We do not knowingly sell or share the personal information of consumers under 16 years of age.

Information we collect

In the last twelve months we have collected the following categories of personal information from consumers:

Category Examples
A. Identifiers and contact information Name, postal address, email address, telephone number, account login, IP address
B. Customer records and payment information Billing address, payment card details (processed by our payment providers), order history
C. Protected classifications Age or date of birth, and, for HealthBuy Telehealth only, gender and medical information you provide in an intake
D. Commercial information Products or services you have purchased, considered or subscribed to, and reviews you leave
E. Internet or other network activity Browsing history on our site, search history, pages viewed, interactions with our emails and ads
F. Geolocation data Approximate location derived from your IP address or shipping address
G. Sensitive personal information Account credentials, and, for HealthBuy Telehealth only, health information, government photo ID and a photo of you where state law requires identity verification
H. Inferences Preferences and characteristics inferred from your purchases and site activity

How we use personal information

We use these categories of personal information for the following business and commercial purposes:

  • to provide our products and services, including processing orders, payments, subscriptions, shipping and returns, and, for HealthBuy Telehealth, enabling the licensed professionals and pharmacies involved in your care to review your request and fulfil treatment;
  • to provide customer service, respond to your requests, verify your identity and maintain your account;
  • to analyze how our products, services and website are used and to customize and improve them;
  • for marketing, such as emails or texts about products or services offered by us that may be of interest to you, which you can opt out of at any time;
  • to keep our site, services and systems secure, including detecting fraud and security incidents;
  • to keep our website functioning properly, including debugging and fixing errors;
  • to comply with our legal obligations; and
  • to protect our rights, property and safety and those of our customers and others.

We use sensitive personal information only to provide the services you request, to verify identity where the law requires it, to keep your account secure and as otherwise permitted by the CCPA. We do not use it to infer characteristics about you.

How we disclose personal information

We disclose personal information to service providers and contractors who help us run our business, such as our e-commerce platform, payment processors, shipping and fulfilment partners, subscription and review tools, email and SMS providers, analytics providers, and, for HealthBuy Telehealth, our telehealth platform provider and the licensed healthcare professionals and affiliated pharmacies in our care network. Our service providers may use personal information only to provide their services to us and must protect it. In the last twelve months we have disclosed these categories for a business purpose:

Category Recipients
A. Identifiers and contact information Service providers; fulfilment and shipping partners; telehealth partner, healthcare professionals and pharmacies (telehealth customers only); advertising and analytics partners
B. Customer records and payment information Service providers; payment processors; fulfilment partners
C. Protected classifications Telehealth platform provider, healthcare professionals and affiliated pharmacies in HealthBuy Telehealth's care network (telehealth customers only)
D. Commercial information Service providers; fulfilment partners; advertising and analytics partners
E. Internet or other network activity Service providers; advertising and analytics partners
F. Geolocation data Service providers; shipping partners
G. Sensitive personal information Telehealth platform provider, healthcare professionals and affiliated pharmacies in HealthBuy Telehealth's care network (telehealth customers only); identity verification and security providers
H. Inferences Service providers; advertising and analytics partners

We may also disclose personal information when the law requires it, to protect our rights or the safety of others, and in connection with a merger, acquisition or sale of assets.

Your rights and choices

Right to know

You have the right to request, subject to certain exceptions, the categories of personal information we have collected about you, the categories of sources, our business or commercial purposes for collecting, sharing or disclosing it, the categories of third parties we disclose it to, and the specific pieces of personal information we have collected about you.

Right to delete

You have the right to request that we delete the personal information we have collected from you, subject to exceptions such as completing a transaction you requested, complying with a legal obligation or keeping records we are required to retain.

Right to correct

You have the right to ask us to correct inaccurate personal information we hold about you.

Right to opt out of sale or sharing

You have the right to opt out of the sale or sharing of your personal information. We do not sell personal information; you can opt out of sharing for cross-context behavioral advertising using the methods at the top of this Notice.

Right to limit the use of sensitive personal information

You have the right to ask us to limit our use of your sensitive personal information to what is necessary to provide the services you request. We already limit our use in this way.

Right to non-discrimination

We will not discriminate against you for exercising any of these rights.

How to submit a request to know, delete or correct

You may submit a request by:

To process your request we must verify your identity, that is, confirm that the person making the request is the person the information is about or someone authorized to act for that person. We verify identity by matching information you give us, such as your contact details, order details and account information, against our records. We may ask for additional information where a request concerns sensitive personal information.

You may designate an authorized agent to make a request on your behalf. The agent must provide your signed written permission, and we may ask you to verify your identity directly with us. We may deny a request from an agent who does not provide proof of authorization. Only a parent or legal guardian may make a request about the personal information of a child under 13, and we may ask for proof of that relationship.

You may make a request to know up to twice in any twelve-month period.

Response timing and format

We will confirm receipt of a request to know, delete or correct within 10 business days and explain how we will process it, including our verification process. We aim to respond substantively within 45 days of receiving the request; if we need up to 45 additional days we will tell you why. Requests to opt out are honored within 15 business days. We provide the information electronically in a portable, readily usable format, free of charge, unless requests are manifestly unfounded or excessive.

Financial incentives

We may offer promotions, such as a discount for joining our email or text list. Any such program is voluntary, you may opt in or withdraw at any time, and we value the personal information involved at the cost of the discount provided.

California "Shine the Light"

Under California Civil Code section 1798.83, California residents may request, once per calendar year, information about any personal information we disclosed to third parties for their own direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing purposes.

Changes to this Notice

We may change this Notice at any time. We will not use personal information we have already collected for a new purpose that is materially different from the purposes stated when it was collected without first obtaining your consent.

Contact information

If you have questions or concerns about this Notice or our privacy practices, contact us at:

Health Buy Inc (HealthBuy)
Attn: Privacy
1309 Coffeen Avenue, Ste 1200
Sheridan, WY 82801
United States
Email: support@healthbuy.com
Phone: +1 (302) 684-6186