Privacy Policy

Effective Date: August 23, 2025
Last Revised: April 18, 2026

At Madison Meds, your privacy and the security of your personal and health information are very important to us. This Privacy Policy explains what information we collect, how we use it, how we protect it, and your rights regarding your data.

What Information Do We Collect?

We collect information when you:

• Register on our website
• Place an order for medications or services
• Contact us with questions or complete surveys
• Use our telehealth platform or participate in other features

The types of information we collect include:

• Personal Information: Name, email address, mailing address, phone number, date of birth
• Payment Information: Credit card or other billing details, processed securely by trusted payment processors
• Health Information: Medical history, current medications, prescription details, treatment preferences
• Technical Information: IP address, browser type, cookies, and other web tracking data
• Referral Recipient Information: If you refer another person to Madison Meds (for example, by purchasing a treatment voucher on their behalf), we may collect limited contact information for that person solely to deliver the voucher or referral code. Prescription medications are never dispensed to a third party on your behalf — any person receiving care must complete their own intake, medical evaluation, and consent process with a licensed provider.

You may browse the site anonymously; however, to use many of the services, providing information is required.

How Do We Use Your Information?

We use your information to:

• Personalize your experience on the site and tailor product/service offerings
• Process your orders and telehealth consultations efficiently
• Respond to customer service inquiries
• Administer contests, promotions, or surveys
• Communicate important information including treatment updates and marketing messages (only if you opt in)
• Comply with legal and regulatory requirements

If you opt out of marketing emails, you will no longer receive promotional communications.

How Do We Protect Your Information?

Security measures include:

• Storing personal and health information behind secure, encrypted networks accessible only to authorized personnel
• Using SSL encryption to protect payment and sensitive data during transmission
• Maintaining a certified Electronic Health Record (EHR) system for storing Protected Health Information (PHI)
• Regularly reviewing security practices to maintain high standards of data protection

HIPAA and Protected Health Information

As a telehealth provider, Madison Meds complies with the Health Insurance Portability and Accountability Act (HIPAA). You have the right to request access to your medical records by contacting: ask@madisonmeds.com

Cookies, Analytics, and Online Tracking

We use cookies and similar tracking technologies (web beacons, pixels, local storage, SDKs) to:

• Enable core site functionality (login, cart, checkout);
• Remember your preferences;
• Measure site traffic and performance; and
• Understand how visitors engage with our pages so we can improve the Service.

Third-Party Analytics and Advertising Tools

We may use third-party analytics and advertising services such as Google Analytics, Google Ads, Meta (Facebook) Pixel, TikTok Pixel, and similar tools to understand how visitors use our site and to deliver relevant advertising. We do not knowingly share Protected Health Information (PHI), prescription details, or individual health conditions with these third-party trackers. Tracking on pages that collect health information is configured to exclude form-field content and PHI.

Your Tracking Choices

You can control cookies and trackers in the following ways:

• Browser settings: Most browsers let you block or delete cookies;
• Global Privacy Control (GPC): We honor the Global Privacy Control signal as an opt-out of sharing for cross-context behavioral advertising, where applicable law recognizes it;
• “Do Not Track”: Because there is no industry standard for responding to Do Not Track browser signals, we do not currently respond to them beyond the GPC signal described above;
• Industry opt-outs: You may opt out of interest-based advertising through the Digital Advertising Alliance (optout.aboutads.info) or the Network Advertising Initiative (optout.networkadvertising.org).

Disabling cookies may limit site functionality.

Affiliated Telemedicine Providers

• belugahealth.com
• drtelx.com

Do We Share Your Information?

Madison Meds does not sell or trade your personally identifiable information. Information may be shared with:

• Licensed healthcare providers involved in your care
• Compounding pharmacies fulfilling prescriptions
• Service providers who assist in operating the website and services (bound to confidentiality)
• Law enforcement or regulators when legally required

Non-personal, aggregated data may be shared for marketing or analytical purposes.

Data Retention

We retain your Protected Health Information (PHI) for the period required by applicable federal and state laws governing medical records — generally at least seven (7) years from the last date of service, and longer where state law requires a longer period. Non-PHI personal information is retained for as long as reasonably necessary for the purposes described in this Notice, including to comply with our legal obligations, resolve disputes, and enforce our agreements. Technical and analytics data is retained in line with industry-standard timeframes (typically 14–26 months for aggregated analytics).

International Visitors

Madison Meds’ services are directed to residents of the United States and its territories. Personal information is processed and stored in the United States. If you access the Service from outside the United States, you understand and agree that your information will be transferred to, processed, and stored in the United States under U.S. law, which may not provide the same level of protection as the laws of your jurisdiction. We do not knowingly collect information from individuals outside the United States.

Children’s Privacy

The Service is not directed to children under the age of 18. We do not knowingly collect personal information from anyone under 13 in violation of the Children’s Online Privacy Protection Act (“COPPA”), and we do not knowingly treat minors ages 13–17 without a parent or legal guardian’s consent where required. If you believe we have collected information from a child without appropriate consent, please contact us immediately and we will promptly delete the information.

Your California Privacy Rights

If you are a California resident, you have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the “CCPA”). Note that most health information we maintain about you is “Protected Health Information” under HIPAA, which is exempt from the CCPA. For non-PHI personal information, you have the following rights:

• Right to Know the categories and specific pieces of personal information we have collected about you, the sources, the purposes of collection, and the categories of third parties with whom we share it;
• Right to Delete personal information we have collected from you, subject to certain exceptions (including PHI retained for legal or treatment reasons);
• Right to Correct inaccurate personal information;
• Right to Opt Out of the “sale” or “sharing” of personal information for cross-context behavioral advertising. Madison Meds does not sell personal information for money; we may “share” limited non-PHI identifiers with advertising partners for interest-based advertising, and you may opt out as described under Cookies, Analytics, and Online Tracking above;
• Right to Limit Use of Sensitive Personal Information to purposes necessary to provide the Service;
• Right to Non-Discrimination for exercising any CCPA right;
• Right to Authorized Agent — you may designate an authorized agent to submit requests on your behalf, subject to verification.

To exercise your CCPA rights, email ask@madisonmeds.com with “California Privacy Request” in the subject line. We will verify your identity before responding and aim to respond within 45 days as required by law.

Your Privacy Rights in Other U.S. States

If you are a resident of Colorado, Virginia, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Tennessee, Indiana, Nebraska, New Hampshire, New Jersey, or another state with a comprehensive consumer privacy law, you may have rights similar to those described above, including the right to access, correct, delete, obtain a portable copy of, or opt out of certain uses of your personal information. Health information protected by HIPAA is generally exempt from these laws, but non-PHI personal information we maintain is covered.

To submit a request, email ask@madisonmeds.com with “State Privacy Request” in the subject line and identify your state of residence. We will respond within the timeframe required by your state’s law.

If we deny your request, you generally have the right to appeal our decision; instructions for appeal will be included in our response.

Changes to This Policy

This Privacy Policy may be updated occasionally. Material changes will be posted with a new effective date; continued use of the Service after changes take effect constitutes your acceptance of the updated Policy.

Your Consent

By using the site and services, you consent to this Privacy Policy.