Privacy Policy - Liat Concierge Wellness

Concierge Wellness, LLC | Effective Date: November 4, 2026

1. Introduction and Scope

Concierge Wellness, LLC (“Concierge Wellness,” “we,” “us,” or “our”) operates sdconciergewellness.com and coordinates access to wellness programs and services offered by independent medical practices and other third parties. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information through our website, customer communications, account and enrollment processes, and administrative services. It does not replace the privacy notices of independent medical practices, pharmacies, or other third parties. Our services are offered to eligible adults across the United States, subject to applicable law and provider availability.

2. Information We Collect

Depending on how you interact with us, we may collect: (a) identifiers and contact details, such as name, email, phone number, mailing address, and date of birth; (b) account and enrollment information; (c) order, subscription, payment-status, billing, and shipping information; (d) messages and customer support requests; (e) health-related information you voluntarily submit through intake, screening, or coordination forms, such as treatment interests, medical history, medications, weight, or other wellness details; (f) identity and eligibility verification information when necessary; and (g) technical data such as IP address, device information, browser type, pages visited, and website interactions. Payment card details may be collected and processed by third-party payment processors; the precise information accessible to us depends on the payment system used.

3. Sources of Information

We collect information directly from you, automatically through your use of our website, and, when appropriate and legally permitted, from medical practice partners, pharmacies, payment processors, customer support vendors, and other service providers. We may also receive information when you authorize another party to share it with us.

4. How We Use Information

We use personal information to operate our website; respond to inquiries; manage accounts, purchases, memberships, subscriptions, and billing; verify eligibility and identity; coordinate appointments, communications, prescription fulfillment logistics, and customer support with independent partners; detect fraud and maintain security; comply with legal obligations; improve our services; and send marketing communications where permitted. We use sensitive health-related information only for appropriate, disclosed purposes and subject to applicable privacy restrictions. We do not use medical intake information for targeted advertising without a valid legal basis and any required authorization or consent.

5. Independent Medical Practices, Pharmacies, and HIPAA

Concierge Wellness is a wellness coordination and administrative company, not itself the treating medical practice. Licensed clinicians associated with independent medical practices make all medical decisions. Those practices and dispensing pharmacies may maintain separate medical records and provide their own privacy notices. Some health information may be protected health information (“PHI”) under the Health Insurance Portability and Accountability Act (“HIPAA”). Whether Concierge Wellness is acting as a HIPAA business associate or in another regulated capacity depends on the actual services performed and contractual arrangements. Where we handle PHI on behalf of a HIPAA-covered entity, we will do so in accordance with applicable law and required agreements. This Policy does not replace a covered provider’s Notice of Privacy Practices.

6. When We Disclose Information

We may disclose information, as reasonably necessary and legally permitted, to independent medical practices and licensed healthcare professionals; dispensing pharmacies and fulfillment partners; payment processors; technology, hosting, communications, security, and customer support vendors; professional advisers; and government or legal authorities when required or permitted by law. We may disclose information in connection with a merger, reorganization, or sale of business assets, subject to applicable legal requirements. We may share information at your direction or with your consent. Service providers are expected to use information only for authorized purposes under applicable agreements.

7. Cookies, Analytics, and Advertising

Our website may use essential cookies and similar technologies to operate the site, remember preferences, measure performance, and understand visitor activity. Nonessential analytics, advertising pixels, retargeting, and session-replay technologies, if used, must be configured consistently with applicable privacy and consent laws. We will provide legally required disclosures and opt-out or consent mechanisms where applicable. We will not intentionally transmit health intake details, patient portal activity, or other sensitive medical information to advertising platforms in violation of applicable law. Browser controls may allow you to block cookies, though some website functions may not work correctly.

8. Marketing, Email, and Text Messages

We may send service-related communications about purchases, appointments, billing, account activity, and administrative updates Promotional emails may be stopped using the unsubscribe mechanism or by contacting us. If we offer promotional text messages, we will obtain consent when required and provide an opt-out method, such as replying STOP. Opting out of marketing does not necessarily stop essential service or transaction notices. We do not condition medical treatment on agreement to receive promotional messages.

9. Privacy Rights and Choices

Depending on your state of residence and applicable exemptions, you may have rights to access, correct, delete, or obtain a copy of certain personal information; opt out of certain sales, sharing, or targeted advertising; limit certain uses of sensitive personal information; or appeal a denied request. To submit a request, email info@sdconciergewellness.com. We may verify your identity before responding and may retain information when required or permitted by law. Requests concerning medical records maintained by an independent practice should be directed to that practice.

10. California Privacy Disclosures

California residents may have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, subject to statutory thresholds, exemptions, and applicability. Categories potentially collected include identifiers, commercial information, internet activity, geolocation inferred from IP address, and sensitive personal information such as health-related information. Sources, uses, and recipient categories are described above. We do not represent that we sell personal information. Any cross-context behavioral advertising or “sharing” under California law must be assessed against the actual website technology and business practices, with required opt-out mechanisms implemented if applicable. We will not discriminate unlawfully against individuals for exercising applicable privacy rights.

11. Other State Health and Consumer Privacy Laws

Certain states impose additional requirements for consumer health data and other sensitive information. Where applicable, we will provide required notices, obtain consent for collection or sharing, honor consumer requests, and maintain appropriate contractual and security protections. This Policy must be supplemented or revised if our actual data practices trigger state-specific consumer health data requirements.

12. Data Retention

We retain information for as long as reasonably necessary to provide services, manage transactions and subscriptions, respond to requests, comply with legal and recordkeeping obligations, resolve disputes, protect security, and enforce agreements. Retention periods depend on the type of information and applicable requirements. Independent medical practices and pharmacies determine retention of their own clinical and dispensing records under applicable law.

13. Security

We use reasonable administrative, technical, and physical safeguards appropriate to the information and risks involved. No internet transmission or storage system can be guaranteed completely secure. Please use secure channels for sensitive information when available and notify us if you believe your account or information has been compromised.

14. Minors

Our consumer wellness services are intended for adults age 18 or older (or the applicable age of majority, if higher). We do not knowingly solicit personal information from children through our consumer enrollment services. If you believe a minor has provided information improperly, contact us so we can evaluate and address the issue consistent with applicable law.

15. Third-Party Sites and Services

Our website may link to external websites, medical practice portals, pharmacy services, or payment systems. Their collection and handling of information are governed by their own privacy notices and applicable law. Please review those notices before providing information directly to those parties.

16. Changes to This Policy

We may update this Privacy Policy as our services, technology, or legal obligations change. We will post an updated version with a revised effective date and provide additional notice or obtain consent when required by law. Material changes will not retroactively authorize uses of information that require additional permission.

17. Contact Us

Concierge Wellness, LLC
5352 Morning Sage Way
San Diego, CA 92130
Email: info@sdconciergewellness.com
Website: sdconciergewellness.com

For privacy questions or requests, contact us at the email address above.