Privacy Policy

Effective Date: November 15, 2025

EPIC Health PBC (“EPIC Health,” “we,” “us,” or “our”) is committed to protecting your privacy and safeguarding your personal and health information. This Privacy Policy explains how we collect, use, disclose, and protect your information when you visit our website or use our intake forms and services.

1. Information We Collect

When you use EPIC Health’s website, intake forms, or related services, we may collect the following categories of information.

Personal Identifying Information

• Full name
• Email address
• Phone number
• Date of birth
• Gender or sex at birth
• Mailing address and state of residence

Health and Medical Information

When you complete an intake or medical questionnaire, we may collect health-related information necessary to determine eligibility for care. This may include:

• Height, weight, and body mass index (BMI)
• Medical history and current health conditions
• Current and past medications
• Allergies
• Weight management history
• Lifestyle and health-related habits

This information may be considered Protected Health Information (PHI) under the Health Insurance Portability and Accountability Act of 1996 (HIPAA), depending on how it is collected and used.

Contact and Communication Information

• Messages or questions submitted through website forms
• Communication preferences
• Form submission details, such as date and time

Technical and Usage Information

• IP address
• Device and browser type
• Pages visited and interaction data
• Website performance and security logs

2. How We Use Your Information

We use your information to:

• Evaluate eligibility for telehealth services and weight management programs
• Facilitate medical intake and provider review
• Coordinate services with licensed healthcare providers and pharmacy partners
• Communicate with you regarding your intake, questions, and next steps
• Maintain compliance with applicable healthcare and operational requirements
• Improve our website, services, and user experience

EPIC Health does not sell your personal information or health information.

3. HIPAA and Protected Health Information

EPIC Health follows HIPAA-aligned practices designed to protect the confidentiality, integrity, and availability of Protected Health Information (PHI). Your PHI may be used or disclosed only as permitted by law and as necessary for:

• Treatment coordination
• Pharmacy fulfillment
• Healthcare operations
• Regulatory and compliance obligations

We work with third-party partners and service providers, including licensed providers, pharmacy partners (such as GoGo Meds), and secure form platforms. These partners are expected to maintain appropriate safeguards for sensitive information.

4. Sharing of Information

We may share information only as necessary and permitted by law, including with:

• Licensed healthcare providers involved in your care
• Pharmacy partners fulfilling prescriptions and providing support services
• Vendors supporting secure website and form operations, subject to confidentiality obligations
• Government or regulatory authorities when required by law

5. Data Security

We use administrative, technical, and physical safeguards designed to protect your information from unauthorized access, use, or disclosure. While no system can be guaranteed to be completely secure, we take reasonable and appropriate steps to protect your data.

6. Your Rights

Depending on applicable law, you may have the right to:

• Request access to your personal or health information
• Request corrections to inaccurate information
• Request restrictions on certain uses or disclosures, where applicable
• Request communications in an alternative manner, where applicable

To exercise these rights, please contact us using the information below.

7. Cookies and Analytics

Our website may use cookies or similar technologies to support functionality, improve performance, and analyze site usage. You may adjust your browser settings to refuse cookies, though some features may not function properly if cookies are disabled.

8. Third-Party Websites

Our website may include links to third-party websites or services. EPIC Health is not responsible for the privacy practices or content of third parties.

9. Children’s Privacy

EPIC Health services are intended for adults. We do not knowingly collect personal information from children under the age of 18.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date.

11. Contact Information

If you have questions about this Privacy Policy or our privacy practices, please contact:

• EPIC Health PBC
• Email: support@epichealthpbc.com
• Phone: (754) 231-3667