Privacy policy

Who this notice covers

EPETAH LLC, trading as Balmve RX, operates www.balmverx.com. This notice covers our website and business support. For privacy questions or requests, email support@balmve.com. Our Consumer Health Data Privacy Policy explains health-data handling and related rights.

Clinical providers and pharmacies have separate duties and privacy notices for their professional records. This notice does not replace their notices or claim that all website information is protected by HIPAA.

Information you provide

We receive your email address, message and any information you choose to send when you contact support. Please do not email payment-card details, identity documents or detailed medical records. We will explain a suitable route if those are needed.

Assessment forms ask for contact details, age or date of birth, location, treatment interests and relevant health information. Depending on the assessment, this includes weight and height, symptoms, medications, allergies, medical history, sex assigned at birth and pregnancy or breastfeeding information. Some assessments also ask for photos, a photo of your ID or a short video.

If you sign up with your mobile number, we text a 6 digit code to that number to confirm it, and your number is saved to your account so you can sign in by text later. Quo, our text message provider, receives your number and the text. Our texts carry only a code or a sign in link, never health information.

How your assessment is stored and sent

As you answer, your progress is kept in this browser tab and saved to your Balmve RX account on our servers, so you can come back to it. Photos, ID and video you upload are stored with your account. “Clear my answers” removes the progress kept in this browser tab; answers saved to your account stay there until you ask us to delete them.

When you send your answers and pay, we share your answers, contact details, date of birth, location, and any photos, ID or video you upload with MD Integrations (MDI), so a licensed clinician can review your case. If you are prescribed medicine, the pharmacy that fills it gets what it needs to fill and ship it. MDI and the pharmacy protect this information under their own privacy rules, including HIPAA where it applies. We never send your answers to advertisers and we never sell your health data.

Technical information

Loading the site sends connection information, such as your IP address, requested page, browser details and request time, to the website's hosting infrastructure. We use hosting and technical service providers to deliver pages, maintain reliability and address security issues. Fonts and some images load from Google Fonts and Shopify's content network, which receive the connection details needed to return those files.

The website does not use advertising pixels to send assessment answers to advertising platforms. We do not sell your personal information or use health assessment answers for targeted advertising. Any material change to these practices requires an updated notice and any consent required by law.

How information is used and shared

We use information to run your account, send your assessment for clinical review, answer enquiries, provide requested support, operate and secure the site, handle privacy requests and meet legal duties. We may disclose information when required by law or a valid legal process.

Clinical care: MD Integrations and its licensed clinicians receive your assessment and uploads to review your case. Our partner pharmacies (Boothwyn Pharmacy, Hallandale Pharmacy and Southend Pharmacy for weight loss, and Epiq Scripts for hair loss) receive what they need to fill a prescription. They handle it under their own privacy notices and legal duties.

Service providers process information on our behalf: Railway (hosting and storage), Postmark (email), Quo (text messages, if you sign up with your mobile number or turn on text sign in), Google (if you sign in with Google) and our payment processors (card payments at checkout). Business ownership alone does not authorize sharing your health information with another company.

Retention and security

We keep your account, assessment answers and uploads as part of your care record. We keep support correspondence for as long as needed to resolve the enquiry and maintain a record of its outcome. We retain information longer where required for legal obligations, disputes or security investigations. Clinical records follow the responsible provider's retention rules.

No online service can guarantee absolute security. Avoid using a shared device for private health information, and clear your browser data when needed.

Your choices and requests

Email support@balmve.com to request access, correction, deletion, a copy of your information or withdrawal of consent where applicable. We may need to verify your identity. We explain any refusal and the available appeal route. For an appeal, reply with the subject “Privacy appeal”. You may also contact your state regulator.

You do not need to create an account to make a privacy request. Clinical-record requests are directed to the provider or pharmacy responsible for those records. Promotional emails, if you choose to receive them, can be stopped using their unsubscribe instructions.

Children and policy updates

The service is intended for adults. Contact us if you believe a child has provided personal information. We show the effective and revision dates on this notice and provide further notice or seek consent for changes where required.