Privacy Policy

This Privacy Policy describes how Pekorahealth LLC ("Pekora Health," "we," "us," "our") collects, uses, and protects information you provide when using healthpeptdsus.com and our membership services ("Services"). By using the Services, you agree to the practices described here. For our full HIPAA Notice of Privacy Practices, which covers how we handle your Protected Health Information (PHI), see our HIPAA Notice.

1. Who We Are

Pekorahealth LLC — Email: pekora@healthpeptdsus.com.

2. Information We Collect

Information you provide:

• Name, email address, phone number, and date of birth
• Mailing address (for medication shipments)
• Health history, current medications, allergies, and health goals from your intake
• Consultation notes and communications with affiliated Providers
• Payment information (processed by our PCI-compliant payment processor)

Information collected automatically:

• IP address, browser type, and device information
• Pages visited and time spent on the site
• Referring URLs
• Cookies and similar tracking technologies

3. How We Use Your Information

• Facilitate your intake, Provider consultation, and treatment workflow
• Process membership enrollment and recurring billing
• Communicate with you about your account, orders, and care coordination
• Send appointment reminders, health updates, and membership-related messages
• Improve our platform, services, and member experience
• Comply with legal obligations and respond to regulatory inquiries
• Prevent fraud and protect the security of our platform

4. Health Information & HIPAA

Because Pekora Health facilitates telehealth services involving PHI, we operate in compliance with the Health Insurance Portability and Accountability Act (HIPAA). Your health information is shared with affiliated licensed Providers only as necessary to deliver your care, stored on HIPAA-compliant platforms with encryption at rest and in transit, and accessible to third-party service providers only under written Business Associate Agreements (BAAs).

5. Third-Party Service Providers

• Karpa Health — Telehealth platform provider. Karpa Health hosts our intake questionnaire, member portal, and clinical records, and processes Protected Health Information on our behalf under a Business Associate Agreement. Data shared: name, contact details, date of birth, intake responses, health history, consultation records, and prescription information.
• Stripe — Payment processing. Data shared: name, email, billing address, payment method.
• Karpa Health — telehealth platform services (patient intake, patient portal, provider coordination, and secure health information hosting). Data shared: information you provide through intake and the patient portal.
• Compounding Pharmacies — Medication fulfillment. Data shared: name, address, prescription details.

All third parties with access to PHI are bound by BAAs or equivalent data protection agreements. We do not sell your personal information to any third party.

6. SMS & Email Communications

By providing your phone number and checking the SMS consent box during enrollment, you consent to receive text messages from Pekora Health related to your account, appointments, health updates, and membership. Reply STOP to opt out of SMS. Standard message and data rates may apply. Click "Unsubscribe" in any marketing email to opt out; transactional messages may still be sent.

7. Cookies & Analytics

We use cookies and similar technologies to keep you logged in, understand how members use our site (via analytics tools like Google Analytics), and improve performance. You can disable cookies in your browser settings, though some features may not function.

8. Your Rights

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your personal data (subject to legal retention requirements)
• Opt out of SMS and marketing email communications
• Receive a copy of your data in a portable format upon request

To exercise any of these rights, contact us at pekora@healthpeptdsus.com.

9. Data Security

• TLS encryption for all data in transit
• Encrypted storage for PHI and payment data
• Access controls limiting data access to authorized personnel
• Regular security reviews and vendor assessments

10. Data Retention

We retain personal information for as long as your account is active and for a minimum of seven (7) years after your last interaction with our Services, as required by applicable healthcare recordkeeping laws.

11. Children

Our Services are not directed at anyone under the age of 18. We do not knowingly collect personal information from minors.

12. Data Breach Notification

In the event of a security breach involving your personal information or PHI, we will notify affected individuals without unreasonable delay and in accordance with applicable federal and state breach notification laws, including HIPAA's Breach Notification Rule.

13. Governing Law & Dispute Resolution

This Privacy Policy is governed by the laws of the State of California. Any dispute shall be resolved by binding arbitration in Los Angeles County, California under the American Arbitration Association's Consumer Arbitration Rules.

14. Changes to This Policy

We may update this Privacy Policy from time to time. If changes are material, we will notify you by email. Continued use of the Services after changes take effect constitutes your acceptance of the revised policy.

15. Contact

Pekorahealth LLC — Email: pekora@healthpeptdsus.com.