Overview
This Privacy Policy explains how ECM One, LLC, a Delaware limited liability company doing business as Ody Health (“Ody Health,” “Ody,” “we,” “us,” or “our”), collects, uses, discloses, and protects information when you visit odyhealth.co, use our intake flow, communicate with us, or access services made available through our platform.
Ody Health is a technology and administrative platform that helps adults connect with independent licensed medical providers and third-party pharmacies, laboratories, and related health service providers. Ody Health does not practice medicine, prescribe medication, dispense medication, operate a pharmacy, or make clinical decisions. Medical services are provided only by independent licensed clinicians, including clinicians affiliated with OpenLoop or similar provider networks.
By using Ody Health, you acknowledge that you have read this Privacy Policy and understand how we handle information as described below.
Information we collect
We collect information that you provide directly, information generated through your use of our platform, and information we receive from service providers, clinical partners, pharmacies, laboratories, payment processors, and other third parties involved in making services available to you.
This may include your name, email address, phone number, date of birth, sex, shipping address, billing details, account credentials, identity verification information, health goals, symptoms, medical history, medications, allergies, lab information, clinician communications, order status, customer support communications, and other information you choose to submit through the platform.
We also collect technical and usage information, including IP address, device identifiers, browser type, operating system, pages viewed, referring URLs, session activity, approximate location derived from IP address, and other analytics or log data used to operate, secure, improve, and measure the performance of the platform.
How we use information
We use information to operate Ody Health, maintain your account, support the intake and eligibility process, coordinate with independent licensed providers, facilitate lab testing and pharmacy fulfillment where ordered by a provider, process payments, provide customer support, communicate with you, maintain records, prevent fraud, improve the platform, and comply with legal, regulatory, contractual, and safety obligations.
We may also use non-health contact information to send service updates, renewal notices, administrative messages, educational content, and marketing communications. You may opt out of marketing emails at any time by using the unsubscribe link in the email or contacting us. Even if you opt out of marketing, we may still send transactional or service-related messages.
Health information and protected health information
Some information you provide may be health-related information and, in some circumstances, may be protected health information (“PHI”) under the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations (“HIPAA”). HIPAA may apply to certain information when it is created, received, maintained, or transmitted by or on behalf of a covered health care provider or another HIPAA-regulated entity.
Ody Health may receive, maintain, or transmit health information in order to help facilitate services between you and independent licensed providers, laboratories, pharmacies, and related service providers. We use and disclose health information only as permitted by applicable law, contractual obligations, provider instructions, your authorizations, and operational needs related to providing and supporting the platform.
We do not sell PHI. We do not use PHI for advertising targeting where prohibited by law. We do not make clinical decisions or determine whether a medication, lab test, or treatment is medically appropriate for you.
Independent providers, pharmacies, and laboratories
Ody Health works with independent third parties, including licensed medical providers, provider networks, laboratories, and pharmacies. These parties are separate from Ody Health and may maintain their own privacy practices, legal obligations, patient records, consent forms, and notices of privacy practices.
When you receive clinical services, the clinical relationship is between you and the applicable licensed provider. When a provider orders a prescription, the pharmacy is responsible for dispensing and shipping medication directly to you if the prescription is accepted and fulfilled. Ody Health does not possess, compound, dispense, or ship medications.
Service providers and subprocessors
We use third-party vendors to operate the platform and support the services. These may include OpenLoop, Rupa Health, Olympia, Klaviyo, Stripe, SendGrid, Amazon Web Services, Google Cloud Platform, Vercel, and other vendors that provide hosting, communications, payments, analytics, infrastructure, operational, clinical coordination, pharmacy, laboratory, or support services.
Our vendor list may change as our business changes. We require service providers to use information only for the purposes for which it is provided and to maintain reasonable safeguards appropriate to the nature of the information they process.
Your privacy rights
Depending on where you live and the type of information involved, you may have rights to access, correct, delete, restrict, or receive a copy of certain personal information. You may also have the right to opt out of certain uses or disclosures, including some marketing communications.
If information is PHI maintained by or on behalf of a covered health care provider, your HIPAA rights may include the right to request access, amendments, restrictions, confidential communications, an accounting of disclosures, and a copy of the applicable Notice of Privacy Practices.
To exercise privacy rights, contact us at info@odyhealth.co. We may need to verify your identity before fulfilling a request. We may deny or limit requests where permitted by law, including where information must be retained for legal, clinical, safety, fraud prevention, tax, accounting, or compliance purposes.
California privacy rights
California residents may have additional rights under California privacy laws, including rights to know, access, correct, delete, and receive information about certain categories of personal information collected, used, disclosed, or shared. California residents may also have the right to opt out of certain sharing or selling of personal information, where applicable.
Ody Health does not sell PHI. We do not sell personal information for money. We may use analytics, advertising, or marketing technologies that could be considered a “share” of personal information under some privacy laws. Where required, we will provide an appropriate opt-out mechanism.
We will not discriminate against you for exercising privacy rights. To submit a California privacy request, contact info@odyhealth.co.
Data retention
We retain information for as long as reasonably necessary to provide the platform, maintain your account, support clinical coordination, comply with legal and regulatory obligations, resolve disputes, prevent fraud, enforce agreements, maintain business records, and satisfy tax, accounting, security, and operational needs.
Clinical records, prescription records, laboratory records, payment records, and related service records may be retained by independent providers, pharmacies, laboratories, and other third parties according to their own legal and professional obligations.
Security
We use reasonable administrative, technical, and physical safeguards designed to protect information against unauthorized access, loss, misuse, alteration, and disclosure. These safeguards may include encryption, access controls, logging, vendor review, network security, secure hosting, and internal policies appropriate to the nature of the information.
No method of transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying us promptly if you believe your account has been accessed without authorization.
Children
Ody Health is intended only for adults who are at least 18 years old. We do not knowingly collect personal information from children under 18. If you believe a minor has provided information to us, contact info@odyhealth.co so we can review and take appropriate action.
U.S. use only
Ody Health is intended for use only in the United States. If you access the platform from outside the United States, you understand that information may be processed and stored in the United States, where privacy laws may differ from those in your jurisdiction.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date and provide notice as required by law, which may include posting the revised policy on odyhealth.co or sending a notice to the email address associated with your account.
Contact us
If you have questions about this Privacy Policy or our privacy practices, contact us at info@odyhealth.co or by mail at:
ECM One, LLC
Attn: Privacy
1049 Havenhurst Dr
West Hollywood, CA 90046