Privacy Policy

Information you provide:

• Name, email address, phone number, and date of birth
• Mailing address (for medication shipments)
• Health history, current medications, allergies, and health goals provided in your intake form
• Consultation notes and communications with licensed providers at Elite Care Health
• Payment information (processed by our PCI-compliant payment processor; we do not store raw card data)

Information collected automatically:

• IP address, browser type, and device information
• Pages visited and time spent on the site
• Referring URLs
• Cookies and similar tracking technologies (see "Cookies & analytics")

We use your information to:

• Facilitate your intake, provider review, and treatment workflow
• Process orders and recurring billing for monthly treatment plans
• Communicate with you about your orders and care coordination
• Send reminders, health updates, and plan-related messages
• Improve our website and services
• Comply with legal obligations and respond to regulatory inquiries
• Prevent fraud and protect the security of our platform

Because Revivex facilitates telehealth services involving Protected Health Information (PHI), we operate in compliance with the Health Insurance Portability and Accountability Act (HIPAA). Your health information is:

• Shared with licensed providers at Elite Care Health only as necessary to deliver your care
• Stored on HIPAA-compliant platforms with encryption at rest and in transit
• Accessible to third-party service providers only under written Business Associate Agreements (BAAs)

For your full rights as a patient, including the right to access, amend, or restrict use of your PHI, see our HIPAA Policy.

We share your information with the following categories of third parties who help operate our services:

• Elite Care Health: clinical care. Data shared: intake responses, health history, and contact details.
• Rx Ave Health: pharmacy services and prescription fulfillment. Data shared: name, address, and prescription details.
• Payment processor: payment processing. Data shared: name, email, billing address, and payment method.
• Communications platform: email and SMS messages. Data shared: name, email, and phone (no PHI is transmitted).

All third parties with access to PHI are bound by BAAs or equivalent data protection agreements. We do not sell your personal information to any third party.

By providing your phone number and checking the SMS consent box during your intake, you consent to receive text messages from Revivex related to your orders, care, and health updates.

To opt out of SMS, reply STOP to any message. Standard message and data rates may apply.

To opt out of marketing emails, click "Unsubscribe" in any marketing email. Transactional messages (billing and order confirmations) may still be sent as necessary to manage your care.

We use cookies and similar technologies to:

• Remember your preferences during your visit
• Understand how visitors use our site (via analytics tools such as Google Analytics)
• Improve site performance

You can disable cookies in your browser settings, though some features may not function properly.

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your personal data (subject to legal retention requirements)
• Opt out of SMS and marketing email communications
• Receive a copy of your data in a portable format upon request

To exercise any of these rights, contact us using the details in the Contact section below. We will respond within 30 days.

We implement administrative, physical, and technical safeguards to protect your information, including:

• TLS encryption for all data in transit
• Encrypted storage for PHI and payment data
• Access controls limiting data access to authorized personnel
• Regular security reviews and vendor assessments

No system is 100% secure. If you believe your information has been compromised, contact us using the details in the Contact section below immediately.

We retain medical records and personal information for seven (7) years after your last interaction with our Services, as required by applicable healthcare recordkeeping laws. After that period, protected health information is securely destroyed. Payment records are retained as required by applicable financial regulations.

Our Services are not directed at anyone under the age of 18. We do not knowingly collect personal information from minors. If we learn that a minor has submitted information, we will delete it promptly.

In the event of a security breach involving your personal information or PHI, we will notify affected individuals without unreasonable delay and in accordance with applicable federal and state breach notification laws, including HIPAA's Breach Notification Rule.

This Privacy Policy is governed by the laws of the State of Florida. Any dispute arising out of or relating to this policy shall be resolved by binding arbitration under the American Arbitration Association's Consumer Arbitration Rules. You waive your right to participate in class action litigation.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date. If changes are material, we will notify you by email. Continued use of the Services after changes take effect constitutes your acceptance of the revised policy.