1. Introduction
PureForty ("we," "our," or "us") operates a telehealth platform that connects patients with licensed clinicians for GLP-1 weight loss treatment. This Privacy Policy explains how we collect, use, share, and protect information when you visit pureforty.com or use our services.
By using our website or submitting a health intake, you agree to the practices described in this policy. If you do not agree, please do not use our services.
2. Information We Collect
We collect information you provide directly and information generated through your use of our site.
Information you provide directly:
- Name, email address, date of birth, phone number, and mailing address
- Health and medication history submitted through our intake forms, including current conditions, medications, height, weight, and health goals
- Communications you send to our support team or through any patient portal
- Payment information (credit/debit card, FSA/HSA) — collected at checkout and processed by our third-party payment processor; PureForty does not store full card numbers
Information collected automatically:
- Usage data — pages visited, time on site, referral source, and general interaction patterns
- Device and browser information — IP address, browser type, operating system, and device identifiers
- Cookie data — see Section 6 for details
3. How We Use Your Information
We use the information we collect to:
- Facilitate your telehealth consultation through our clinical partner, OpenLoop Health, and connect you with a licensed clinician
- Process payment for your treatment plan
- Coordinate medication fulfillment and shipping
- Send you order confirmations, shipping updates, and clinical correspondence
- Respond to your support requests
- Improve our website, services, and patient experience
- Comply with applicable legal and regulatory obligations, including healthcare and pharmacy regulations
We do not use your health information for advertising, behavioral profiling, or sale to any third party.
4. Who We Share It With
We share your information only as necessary to deliver our services and comply with the law. We do not sell your personal information.
- OpenLoop Health — our clinical partner provides the licensed provider network, pharmacy coordination, and clinical platform. Health intake data and relevant personal information are transmitted to OpenLoop to facilitate prescribing and fulfillment. OpenLoop operates HIPAA-compliant systems and handles your data as Protected Health Information.
- Compounding Pharmacy — your prescription and shipping address are transmitted to our pharmacy partner to prepare and ship your medication.
- Payment Processors (Stripe or equivalent) — payment card information is processed directly by our payment processor. PureForty does not receive or store your full card number.
- Analytics Providers — we use privacy-respecting analytics tools (such as Cloudflare Web Analytics) that collect anonymized, aggregate data. No personally identifiable information is shared with analytics providers.
- As Required by Law — we may disclose information when required by a valid legal process, court order, or government authority, or to protect the rights, property, or safety of PureForty, our users, or the public.
5. HIPAA
Clinical data submitted through PureForty's intake forms and transmitted to OpenLoop Health is handled as Protected Health Information (PHI) under the Health Insurance Portability and Accountability Act (HIPAA). OpenLoop Health operates as a Covered Entity. PureForty acts as a Business Associate under HIPAA and is subject to applicable Business Associate obligations.
As a patient, you have rights regarding your PHI, including the right to access your records, request amendments to inaccurate information, and receive an accounting of disclosures. To exercise any of these rights, contact us at privacy@pureforty.com.
For questions specifically related to the handling of your PHI within the OpenLoop clinical platform, you may also contact OpenLoop Health directly through their published patient privacy channels.
6. Cookies & Analytics
We use session cookies that are essential to site function — for example, maintaining your session state as you move through our intake process. These cookies are not used to track you across other websites.
We use analytics tools to understand how visitors use our site and improve our services. These tools collect aggregate, anonymized data and do not build profiles of individual users for advertising purposes.
We do not use advertising pixels, behavioral tracking cookies, or third-party ad network scripts. We do not sell cookie-derived data to data brokers.
You can disable or clear cookies through your browser settings at any time. Disabling cookies may affect site functionality, including the ability to complete an intake form.
7. Data Retention
We retain your personal information for as long as your account is active and for seven (7) years thereafter to satisfy legal, regulatory, and business record-keeping requirements.
Health records and PHI transmitted to OpenLoop Health are retained in accordance with applicable federal and state healthcare record retention laws, which may require retention for longer periods.
You may request deletion of your account and non-clinical personal data — see Section 8 for how to submit a request. Note that legal retention obligations may prevent us from deleting certain records immediately or in their entirety.
8. Your Rights
Regardless of where you live, you have the following rights with respect to the personal information PureForty holds about you:
- Access — you may request a copy of the personal information we hold about you
- Correction — you may request that we correct inaccurate or incomplete information
- Deletion — you may request deletion of your account and associated personal data, subject to our legal retention obligations
- Opt-out of marketing — you may unsubscribe from marketing emails at any time using the unsubscribe link in any email we send
To exercise any of these rights, email privacy@pureforty.com. We will acknowledge your request within 5 business days and respond fully within 30 days.
9. California / CCPA
If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) gives you additional rights:
- Right to Know — you may request that we disclose what categories of personal information we have collected about you
- Right to Delete — you may request deletion of personal information we have collected, subject to applicable exceptions
- Right to Correct — you may request correction of inaccurate personal information
- Right to Opt Out of Sale or Sharing — we do not sell or share your personal information for cross-context behavioral advertising
- Right to Non-Discrimination — we will not discriminate against you for exercising your CCPA rights
To submit a CCPA request, email privacy@pureforty.com with the subject line "California Privacy Request." We will respond within 45 days as required by law.
10. Children's Privacy
Our website and services are intended exclusively for adults 18 years of age and older. We do not knowingly collect personal information from anyone under the age of 18. If you believe we have inadvertently collected information from a minor, please contact us immediately at privacy@pureforty.com and we will promptly delete it.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we make changes, we will update the "Last Updated" date at the top of this page.
For material changes — such as new data sharing relationships or significant changes to how we use health information — we will notify current patients via the email address on file. Your continued use of our services after any update constitutes acceptance of the revised policy.
12. Contact
If you have questions about this Privacy Policy, want to submit a privacy request, or need to report a concern about how your data is handled, contact us at:
privacy@pureforty.com
PureForty
United States