Privacy Policy
Last updated: June 9, 2026
This is a general, HIPAA-aware privacy policy for the Vitale Health platform and may be updated. It is provided alongside any Notice of Privacy Practices that applies to your care.
Vitale Health (“we,” “us,” or “our”) respects your privacy and is committed to protecting the information you share with us. This Privacy Policy explains what information we collect, how we use and protect it, and the choices you have. Some of the information we handle is Protected Health Information (“PHI”) governed by the Health Insurance Portability and Accountability Act (“HIPAA”).
Information we collect
- Account information— such as your name, email address, phone number, and password.
- Medical intake information (PHI)— the health history, symptoms, and related information you provide so a licensed clinician can evaluate whether treatment is appropriate.
- Order and shipping information— products requested, shipping address, and order history. Payment card details are processed by our payment processor; we do not store full card numbers.
- Technical and usage information— limited analytics such as device and browser type and pages visited, collected as described in our Cookie Policy.
How we use information
We use the information we collect to:
- Provide telehealth services and connect you with licensed clinicians;
- Process and fulfill your orders and arrange shipping;
- Communicate with you about your account, care, and orders;
- Operate, secure, and improve the Service;
- Comply with our legal and regulatory obligations.
PHI is used and disclosed only as permitted by HIPAA — principally for treatment, payment, and health care operations — or with your authorization, or as otherwise required by law.
How we share information
We do not sell your personal information. We share information only as needed to provide the Service, including with: the independently licensed clinicians who provide your care; the pharmacy that compounds and ships your medication; our payment processor; and service providers who support our operations under contracts that require them to protect your information (including HIPAA business associate agreements where applicable). We may also disclose information when required by law or to protect the rights, safety, and security of our users and the public.
Your rights
Subject to applicable law, you have the right to access and obtain a copy of your records, request corrections, request restrictions on certain uses and disclosures, request an accounting of certain disclosures, and file a complaint. To exercise these rights, contact us at privacy@vitalehealth.shop. You will not be retaliated against for filing a complaint.
Data retention
We retain medical and account records for as long as necessary to provide the Service and to meet our legal, regulatory, and recordkeeping obligations, after which we securely delete or de-identify the information.
Security
We use administrative, technical, and physical safeguards to protect your information. PHI is encrypted at rest and in transit, access is limited to authorized clinicians and administrators, and access to sensitive records is logged. No method of transmission or storage is completely secure, but we work to protect your information consistent with applicable law.
Children's privacy
The Service is intended for adults 18 and older. We do not knowingly collect personal information from children under 18.
Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where required, provide additional notice.
Contact us
Questions about this Privacy Policy or our privacy practices can be sent to privacy@vitalehealth.shop.