Privacy policy

Last updated: November 6, 2026

This Privacy Policy describes how Health Buy Corp and its affiliates ("HealthBuy," "we," "us" or "our") collect, use, disclose and protect information about you when you visit healthbuy.com, shop with us, contact us, or use the services we offer through the site (together, the "Site"). It applies to information collected in connection with the Site, including the retail store and the marketing and intake pages for HealthBuy Telehealth. If you do not want us to collect, use or disclose information about you as described here, please do not use the Site. By using the Site you accept the practices set out in this Privacy Policy and our Terms of Use.

Protected health information handled in connection with HealthBuy Telehealth is also covered by our HIPAA Notice of Privacy Practices. If you are a California resident, please also see our California Privacy Notice.

About the Site

The Site lets you browse and buy dietary supplements, skin care and personal care products, manage subscriptions, read guides, contact customer care, and start an online intake for HealthBuy Telehealth, our prescription weight-loss service delivered by licensed healthcare professionals and the affiliated pharmacies in our care network, through our telehealth platform provider. The intake is hosted on that platform; information you enter there is collected by the platform provider and the professionals and pharmacies involved in your care, and HealthBuy's retail systems receive only what they need to support you, such as your contact details and the status of your request.

Categories of information we collect

Depending on how you use the Site, we collect the following categories of information directly from you:

• Contact and account information: name, email address, postal address, telephone number, and the password and settings for any account you create.
• Order and payment information: the products you buy, package and subscription choices, billing and shipping addresses, and payment details. Card numbers are collected and processed by our payment processors; we see only a token, the card type and the last four digits.
• Communications: messages you send through our contact form, email, phone or text, reviews you post, and survey responses.
• Telehealth information: when you start a HealthBuy Telehealth intake, the health history, medication, goal and identity-verification information you provide, including a photo ID and a photo of you where your state requires it. This information is collected on our telehealth partner's platform and handled as described in our HIPAA Notice.
• Preferences: your communication choices, saved items and other settings.

When you use the Site we also automatically collect information about your device and your use of the Site, such as your IP address, browser and operating system, device identifiers, the pages you view, the products you look at, the links you click, how you arrived at the Site, and the dates and times of your visits. We collect this information with cookies and similar tools, described below. We use Shopify's built-in analytics and Google Analytics, a service provided by Google LLC, to understand how the Site is used; you can read how Google uses data at policies.google.com/technologies/partner-sites.

We may also receive information about you from third parties, including our payment processors, shipping carriers and fulfilment partner, marketing and advertising platforms, our subscription and review tools, and our telehealth partner, and we may combine it with the information described above.

How we use the information we collect

We use information about you to:

• operate the Site and provide the products and services you request, including processing orders, payments, subscriptions, shipping and returns, and supporting your HealthBuy Telehealth request;
• provide customer service, respond to your questions and manage your account;
• customize your experience, for example by showing you products related to what you have viewed or bought;
• improve the Site and our products and services, develop new ones, perform quality control and conduct analytics;
• send you marketing communications about products, services and offers that may interest you, by email, text message or postal mail, where you have agreed to receive them or where the law otherwise permits, and show you advertisements on other websites and apps;
• send you service and administrative messages about your orders, subscriptions, account and the Site, by email or text message at the number you give us;
• detect, prevent and respond to fraud, security incidents, violations of our Terms of Use and other misuse of the Site;
• compile aggregated and de-identified statistics that do not identify you; and
• comply with legal obligations and protect our rights, property and safety and those of others.

Where the law permits, we may combine information you give us with information we collect from third parties and use it for any of these purposes, and we may de-identify information and use the de-identified information for any lawful purpose.

How we share information we collect

We disclose information about you to:

• service providers who work on our behalf, including Shopify (our e-commerce platform), payment processors, our fulfilment and shipping partners, subscription and review tools, email and text-message providers, customer support tools, and analytics and advertising partners. Service providers may use your information only to provide their services to us and must protect it;
• for HealthBuy Telehealth customers, our telehealth platform provider and the licensed healthcare professionals and affiliated pharmacies in our care network, so that your request can be reviewed, treatment prescribed where appropriate, and medication dispensed and shipped;
• law enforcement, regulators, courts and other parties when we believe in good faith that disclosure is required by law or legal process, or is necessary to protect our rights or property, your safety or the safety of others, or to investigate fraud;
• advisors, potential buyers and other parties in connection with a merger, acquisition, financing, reorganization or sale of all or part of our business, in which case your information may be transferred as part of that transaction; and
• other parties with your consent or at your direction.

We and our service providers may share aggregated reports about customer demographics and traffic patterns that do not identify you.

Text-message opt-in data and consent are never shared with third parties or affiliates for their marketing purposes. Your mobile number is used only to send the messages you have agreed to receive, through the providers that deliver them for us.

Relationship with Shopify

The Site is hosted on Shopify, which processes personal information as our service provider to run the store, process payments through Shopify Payments and Shop Pay, prevent fraud and provide analytics. Shopify may also use certain information for its own purposes as described in the Shopify Consumer Privacy Policy. If you use Shop Pay or a Shop account, Shopify's privacy policy applies to that account.

Information security

We take reasonable administrative, technical and physical steps to protect your personal information. The Site uses TLS encryption (shown by "https" and a lock icon in your browser) to protect information in transit, and payments are handled by PCI-compliant processors. No system is completely secure, however, and we cannot guarantee that unauthorized third parties will never defeat our safeguards. We are not responsible for the security of information you send over networks we do not control. Email is not encrypted, and by emailing us you accept the risk that its contents could be intercepted.

Your choices

• Marketing email: use the unsubscribe link in any marketing email or send us a message through our contact form. You will still receive non-promotional messages about orders, subscriptions and your account.
• Text messages: reply STOP to any message. See our SMS Terms and Conditions.
• Cookies and advertising: adjust your browser settings to refuse cookies, and use the opt-outs offered by advertising networks. We honor Global Privacy Control signals as an opt-out of sharing for targeted advertising for the browser that sends them. The Site does not respond to browser "Do Not Track" signals, for which no industry standard exists.
• Account information: sign in to your account to update your details, or contact us.

Information about minors

The Site is intended for adults. We do not knowingly collect personal information from anyone under 18, and anyone under 18 may not place an order or use HealthBuy Telehealth. If you believe a minor has given us personal information, contact us and we will delete it.

California residents

Under California Civil Code section 1798.83, California residents may request, once per calendar year, information about any personal information we disclose to third parties for their own direct marketing purposes. We do not disclose personal information for that purpose. California residents also have the rights described in our California Privacy Notice, which explains how to opt out of sharing and how to submit requests.

Other US state privacy rights

Residents of states with comprehensive privacy laws, such as Colorado, Connecticut, Oregon, Texas and Virginia, may have the right to access, correct or delete their personal information, to receive a portable copy of it, and to opt out of targeted advertising, sale of personal information and certain profiling. To exercise these rights, contact us using the details below. We will verify your request and respond within the time the applicable law requires, and you may appeal a decision by replying to our response.

Links to other websites

The Site includes links to third-party websites and services we do not control, including our telehealth partner's intake and patient portal, our subscription management app, our affiliate program and social media. We are not responsible for their privacy practices, and a link does not imply endorsement. Please review the privacy policy of every site you visit.

Cookies and similar tools

We and our service providers use cookies, pixels, web beacons and similar technologies to keep your cart and sign-in working, remember your preferences, measure how the Site is used, protect against fraud and show you relevant advertising on and off the Site. A cookie is a small text file placed on your device; a pixel or web beacon is a small piece of code that lets us know whether a page or email was opened. Shopify sets cookies that are necessary for the store to function. You can set your browser to refuse cookies or alert you when one is set, but some parts of the Site may then not work properly. By using the Site without disabling cookies you consent to their use.

Retention

We keep personal information for as long as needed to provide our services, to comply with legal obligations such as tax and consumer-protection record keeping, to resolve disputes and to enforce our agreements, and then delete or de-identify it in line with our retention practices. You can ask us to delete your information through our contact form, subject to the exceptions the law allows.

Access from outside the United States

HealthBuy is based in the United States and processes information there. If you access the Site from another country, you understand that your information will be transferred to, stored and processed in the United States, where privacy laws may differ from those in your country. HealthBuy Telehealth is available only to residents of the United States.

Changes and updates

We may change this Privacy Policy from time to time. When we do, we will post the revised policy on the Site and update the "last updated" date at the top. Your continued use of the Site after that date means you accept the revised policy.

Contact us

If you have questions about this Privacy Policy or want to exercise your rights, use our contact form or write to:

Health Buy Corp (HealthBuy)
Attn: Privacy
1309 Coffeen Avenue, Ste 1200
Sheridan, WY 82801
United States