This Privacy Policy (“Policy”) explains how Savvy Smart Ecomm Ltd, doing business as Savvy Health ("Savvy Health", "we", "us", or "our"), collects, uses, discloses, and safeguards your personal information when you visit our website or use our services. For European Union residents, this policy also follows the requirements of the European General Data Protection Regulation (GDPR).

Personal information may include:

When you use our services, we may collect health-related information including:

When you access our Site, we may automatically collect certain information including:

We may share your information with:

Licensed healthcare providers who deliver telehealth services through our Site.

Licensed pharmacies that dispense medications prescribed through the Site.

Third-party vendors who help operate our services, including:

We may disclose information if required by law or legal process.

If Savvy Health undergoes a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

E. Managing email preferences:

To stop receiving marketing and non-transactional emails, click the "unsubscribe" link at the bottom of those emails. If you decide not to receive our emails or newsletters, you can opt-out by emailing us at support@savvyhealthrx.com.

By providing us your phone number, and providing the express written consent required by the Telephone Consumer Protection Act (TCPA) and similar laws (if applicable), you authorize us to contact you by email, phone, text message, social networks, or other communication methods your device can receive. You must provide express, verifiable consent before receiving marketing or reminder communications, including email, SMS, or calls, consistent with TCPA, GDPR, CCPA, or other applicable law. Consent to receive marketing calls, texts, or emails is voluntary and is not required to access our platform or services. No healthcare, purchases, or services are conditioned on marketing consent. Messages are sent by Savvy Health. Frequency may vary. Your mobile carrier’s message and message/data rates may apply. You can text HELP for help or STOP to cancel at any time. Examples of giving permission for telemarketing include:

G. Opting out of telemarketing:

You don't need to agree to our telemarketing efforts to buy goods or services from us. If you don't want to receive marketing calls, let us know by emailing us at support@savvyhealthrx.com. We'll honor opt-out requests immediately.

H. Limitations on opting out:

You might not be able to opt out of all information sharing, such as sharing with credit card processors for orders you place with us. Choices you make about marketing communications won't affect transactional, relationship, or legally required communications.

I. Legal disclosure of personal information:

We may disclose your personal information to law enforcement or other government officials if necessary to comply with the law or at their request.

J. Agreement to Privacy Policy:

By using our site, you agree to this Privacy Policy. If you disagree, please don't use our site. We may change this policy as needed.

K. Confidentiality and security:

We treat all information on our site as confidential. It is stored securely and accessed only by authorized personnel. We take appropriate measures to protect personal data from unauthorized use, loss, destruction, damage, theft, or disclosure.

How we obtain your consent:

When you give us personal information to complete a transaction, verify your credit card, place an order, arrange for a delivery, or return a purchase, you're consenting to our collection and use of that information for that specific purpose.

Withdrawing your consent:

If you change your mind after giving consent, you can withdraw it at any time by contacting us at email address support@savvyhealthrx.com.

Keep in mind that withdrawing consent won't affect information sharing you can't opt out of, such as sharing with credit card processors for orders you place with us. Withdrawing consent will not affect the processing of your health or demographic data necessary for clinical evaluation, fulfillment of services, or legal obligations. Opt-out only applies to marketing or optional product communications. Choices you make about information sharing won't affect transactional, relationship, or legally required communications. For some services, collection and use of your personal data might be necessary for the service to work.

M. Circumstances without separate consent:

We collect and process your personal data for various purposes in this Privacy Policy. In some cases, we don't need separate consent, including:

You can request to edit, update, access, or delete your information by emailing us at support@savvyhealthrx.com. We will respond within timelines required by applicable law and will delete or de-identify personal data as required. We retain personal information only for as long as necessary for the purposes described in this Policy, or as otherwise required or permitted by law.

We may use de-identified or aggregated data for analytics and service improvement and we do not attempt to re-identify it.

We do not sell personal information as defined under applicable law.

P. Health-Related Information:

Savvy Health operates a platform that connects users with independent licensed healthcare providers who evaluate health information and determine appropriate care options. Independent providers and pharmacies may issue separate privacy notices or Notices of Privacy Practices governing their own collection, use, and disclosure of medical information. Protected Health Information (PHI) is processed only under a valid Business Associate Agreement (BAA) with a covered entity. Savvy Health does not provide medical care. All health evaluations, prescriptions, or treatment decisions are made by independent licensed providers. Savvy Health is not a HIPAA covered entity; HIPAA obligations apply only when a BAA is executed.

Cross-context behavioral advertising is allowed only with explicit opt-in consent, and health-related information is never disclosed for third-party advertising. Marketing communications are only sent with consent where legally required. Tracking on intake, authenticated, scheduling, treatment, and payment pages is limited to what is necessary to provide the requested service or otherwise permitted by law. Users may manage their cookie preferences via the platform’s settings. Global Privacy Control (GPC) signals are honored for California residents.

Personal and health-related information is retained only as long as necessary to provide services, support care coordination, maintain required records, comply with law, detect or prevent fraud, enforce agreements, or protect the platform and users. Aggregated or de-identified data may be used to improve services, perform analytics, and benchmark performance, provided no individual can be identified.

When acting as a business associate under a valid BAA, Savvy Health will notify the covered entity promptly of any PHI breach. The covered entity is responsible for notifying affected individuals unless the BAA delegates that duty.

California, EU, and UK residents have rights to access, correct, delete, opt out of sale or sharing, and limit the use of sensitive personal information. Requests may be submitted to support@savvyhealthrx.com, and Savvy Health will respond within the legally required timeframe. Users may withdraw consent for optional marketing or tracking activities without affecting necessary operational communications.

Savvy Health may act as a business associate only when a valid written BAA is in place. When acting as a business associate, only the minimum necessary PHI is accessed, such as scheduling information, encounter records, and communications required to connect users and providers. Savvy Health does not access clinical notes, diagnoses, or prescription content unless explicitly required by the BAA. All PHI is used, disclosed, and protected solely as permitted by the applicable BAA and HIPAA.

For ‘medical information’ under California’s CMIA outside HIPAA scope, CMIA confidentiality and breach obligations are followed.

Savvy Health does not collect, retain, or sell PHI or consumer health data for advertising purposes. It does not share such information for targeted advertising without express written consent. We do not use health-related information for third-party advertising. Cross-context behavioral advertising with personal information is only conducted with explicit opt-in consent. No PHI or sensitive health data is shared for targeting or advertising purposes.

In the event of a suspected data security incident, users should contact support@savvyhealthrx.com without including PHI or other sensitive data.

Savvy Health uses vetted vendors and subprocessors to provide the platform and services. Subprocessors that handle PHI are bound by written agreements requiring HIPAA compliance, where applicable. A current list of subprocessors is available upon request or posted on the site.

If there is a conflict between these Terms and a BAA or a medical group’s Notice of Privacy Practices, the document that provides stronger privacy or security protections for PHI governs with respect to PHI.

B. Third-Party Cookies: We may work with third-party advertising companies that serve ads on our behalf across the internet. These companies may collect and use information about your visits to our website and other websites, as well as your interaction with our products and services. They do this to provide you with advertisements about goods and services that may interest you. These partners may associate data with identifiers; see their privacy notices and your browser/app settings for controls. We honor Global Privacy Control (GPC) signals where required. They may use information about your visits to this and other websites to target ads and track user responses. These targeted ads may appear on our website or other sites you visit. Anonymous information is collected using pixel tags or cookies, which are standard technologies used by most major websites. If you don't want these companies to collect this information, you can opt out.

To learn more about the use of this information or to opt out from certain third-party advertising partners, please visit the Network Advertising Initiative at http://www.networkadvertising.org/choices. Note that if you delete your cookies, use a different browser, or buy a new computer, you'll need to renew your opt-out choice.

C. Third-Party Services: Generally, the third-party providers we use will only collect, use, and disclose your information as necessary to perform specific services they provide to us. Some third-party services, like payment gateways and transaction/payment processors, must comply with security standards, such as the Payment Card Industry Data Security Standard (PCI-DSS). PCI-DSS is a set of security standards designed to ensure that all payment processors handling credit card information maintain a secure environment. All direct payment gateways we use adhere to PCI-DSS.

While we don't store your credit card information, payment gateways and transaction/payment processors may store your purchase transaction data as required by law. These third parties have their own privacy policies about how they handle your personal information during purchase-related transactions. We recommend reading their privacy policies to understand how your information will be handled.

Keep in mind that some providers may be located in, or have facilities in, a different jurisdiction than you or us. If you proceed with a transaction involving a third-party service provider, your information may be subject to the laws of the jurisdiction(s) where the provider or its facilities are located.

Once you leave our site or are redirected to a third-party website or application, our Privacy Policy and Terms of Use no longer apply.

We do not permit third-party advertising technologies to collect or process health-related information or PHI.

B. Cancellation of Automatic Renewal: You can cancel the automatic renewal of your purchase transactions, including the associated purchase transaction data, at any time by contacting us at email address support@savvyhealthrx.com or by using the self-service tools (where available).

C. Payment Security: All direct payment gateways follow the standards set by PCI-DSS, which is managed by the PCI Security Standards Council. This council is a joint effort of major credit card brands like Visa, MasterCard, American Express, and Discover. PCI-DSS requirements ensure that our site and service providers securely handle your credit card information.

B. Phone Calls and Text Messages: When you give your consent as per the Telephone Consumer Protection Act (TCPA) or any applicable law, you agree to receive phone calls, including artificial voice calls, pre-recorded messages, and calls delivered via automated technology, as well as text and SMS messages to the phone number(s) you provided. Message frequency varies. Mobile carriers are not responsible for delayed or undelivered messages. Consent is voluntary and not a condition of purchase.

C. Privacy: Be aware that text messages we send may be seen by anyone with access to your phone. To maintain privacy, take steps to protect your phone and text messages.

D. Opting Out: To stop receiving text messages, reply "STOP", "END", or "QUIT" to any text message we've sent. You can also request to stop receiving text messages by calling or emailing us at support@savvyhealthrx.com.

E. Help and Support: For our contact information or instructions on stopping text messages, reply "HELP" to any text message we've sent or contact us at support@savvyhealthrx.com. Message and data rates may apply to any text/SMS communication.

We use SSL/TLS and other reasonable administrative, technical, and physical safeguards designed to protect personal information and health-related information against unauthorized access, loss, misuse, or disclosure.

If our Company is acquired or merged with another company, we may disclose your Personal Data with our prospective or actual purchasers, investors, or successor entities in connection with a contemplated reorganization or an actual reorganization of our business, in connection with financing, a sale, or other transaction involving the disposal of all or part of our business or assets, including for the purpose of permitting the due diligence required to decide whether to proceed with a transaction, pursuant to assurances of sufficient data handling practices and safeguards.

For residents of the European Economic Area, our disclosure is limited to situations where we are permitted to do so under applicable European and national data protection laws and regulations.

Section headings are for convenience only and don't affect interpretation. References to parties, persons, entities, or corporations include appropriate gender and number as needed.

B. No Waiver

Failure to enforce any provision of this Privacy Policy does not constitute a waiver of that provision or any other provision in the Privacy Policy.

291 Franklin Ave, Ste 7, Wyckoff, NJ 07481

support@savvyhealthrx.com
—---------------