Members Privacy Notice

Privacy Notice for Everlywell Enterprise Program

Last Updated: June 25, 2026

https://www.drimzoxel.pro/members and related webpages (the “Website”) is owned and operated by Everly Health, Inc. (“Everlywell”) (collectively “Everlywell,” “us,” “we,” or “our”). This Privacy Notice, together with our Terms of Use (collectively, the “Agreement”), forms a legally binding agreement between you (“you” or “your”) and Everlywell, its parents, subsidiaries, affiliates, related companies, representatives, officers, and directors. By using the Website or our products and services (collectively, “Your Use”), you consent to this Agreement as if you had signed it.

SCOPE OF THE NOTICE
INFORMATION WE COLLECT
HOW WE USE YOUR INFORMATION
HOW WE SHARE YOUR INFORMATION
HOW WE STORE AND PROTECT YOUR INFORMATION
DATA ROLES AND RESPONSIBILITIES
YOUR RIGHTS AND CHOICES REGARDING YOUR DATA
THIRD-PARTY LINKS AND BEHAVIORAL TRACKING
CHILDREN’S DATA
CHANGES TO THIS PRIVACY NOTICE
CONTACT US

1. SCOPE OF THE NOTICE

This Privacy Notice applies to individuals who access or use the Services, including through a health plan, employer, or other sponsoring organization (“Program Sponsor”), as well as limited visitors to the Website where applicable. Your use of the Services is also subject to our Terms of Use.

In those cases, Everlywell may process personal information on behalf of, or in connection with, the Program Sponsor’s provision of benefits or services.

Depending on the context in which you use the Services, Everlywell may act as a service provider, processor, or business associate (where applicable), and a Program Sponsor or other third party may determine the purposes and means of processing your information.

HIPAA and Certain State Health Privacy Laws

Some of our products and services may involve the collection or use of protected health information (PHI) and may be subject to the Health Insurance Portability and Accountability

To the extent HIPAA applies, our HIPAA Notice of Privacy Practices describes how PHI may be used and disclosed and explains individuals’ rights with respect to PHI.

When Services are provided through Clinical Providers, laboratories, pharmacies, or Program Sponsors, those entities may collect, use, and disclose your PHI in accordance with their own privacy notices.

Everlywell may receive or process PHI as a business associate or service provider, as applicable, and will handle such information in accordance with applicable law and contractual obligations.

Not all information collected through the Services is subject to HIPAA. Information collected outside of clinical or covered services may be governed solely by this Privacy Notice and applicable consumer privacy laws.

2. INFORMATION WE COLLECT

A. Information You Provide

We may collect personal information you provide, such as your name, phone number, address, transaction history, health history, and messages or attachments sent to us.

We may also collect information provided by or on behalf of a Program Sponsor, such as eligibility information, enrollment data, or demographic details necessary to provide Services.

B. Information Collected Automatically

We may collect data using cookies, tracking pixels, analytics tools (e.g., Google Analytics), software development kits (SDKs), and other technologies to improve your experience and provide relevant advertisements. You can modify cookie settings in your browser, though certain features may be affected.

We also may collect anonymous data, including IP addresses, referral data, browser type, and platform information. Log files help us analyze trends, administer the Website, and improve user experience.

We may also receive information from third parties involved in providing Services to you, such as laboratories, healthcare providers, or pharmacies.

3. HOW WE USE YOUR INFORMATION

This section describes how we may use personal information, including sensitive personal information, collected through the Services and related interactions. This includes information collected directly from you, from Program Sponsors, and from third parties involved in providing Services.

We may use your information to:

Communicate with you about products, services, and inquiries.
Provide products or services that you are eligible for.
Provide customer support to assist with issues.
Personalize content for a better customer experience.
Protect the security of our Website by processing personal information to prevent spam, malware, malicious activity, and other security risks.
Develop new products or services based on customer need and demand.
For any other purpose disclosed to you prior to providing the personal information which is reasonably necessary to provide products and services
Verify your eligibility for Services provided through a Program Sponsor.
Administer and fulfill services made available through a health plan, employer, or other Program Sponsor.
Communicate with you regarding benefits, testing, telehealth services, or other offerings made available through a Program Sponsor.
Perform our contractual obligations to Program Sponsors and service partners.

Where required by law (e.g., California), you may have the right to limit the use and disclosure of sensitive personal information. However, this right may be limited where such information is necessary to provide the Services you request or where Everlywell processes information on behalf of a Program Sponsor. In such cases, you may need to direct your request to the applicable Program Sponsor or healthcare provider. To exercise this right, please submit a request using the contact methods listed in Section 7(C).

4. HOW WE SHARE YOUR INFORMATION

A. Business Purposes

Personal information may be shared with:

Trusted businesses processing data on our behalf under confidentiality agreements.
Third-party service providers for advertising and analytics.
Clinical Providers, laboratories, pharmacies, and other healthcare-related entities to facilitate the Services. These entities are responsible for their own privacy practices.

B. Program Sponsors

If you access Services through a Program Sponsor, we may share personal information with that Program Sponsor as necessary to administer services, verify eligibility, support program operations, or fulfill contractual obligations.

We do not share protected health information with Program Sponsors except as permitted by applicable law (including HIPAA) or with your authorization.

We may provide Program Sponsors with de-identified and/or aggregated information for reporting, analytics, and program evaluation purposes.

C. Legal Requirements

We may disclose your data to comply with legal obligations, respond to legal processes, enforce our Terms, cooperate with law enforcement, or protect our rights and safety.

D. Corporate Transactions

Your data may be shared in connection with a merger, sale, or corporate restructuring.

E. With Your Consent

We may share your information as directed by you.

5. HOW WE STORE AND PROTECT YOUR INFORMATION

A. Security

We implement security measures to prevent unauthorized access, alteration, disclosure, or destruction of your data. Access to personal information is restricted to employees and service providers who require it for business operations.

B. Data Retention

We retain your personal information only for as long as reasonably necessary to fulfill our legitimate business purposes, including to meet legal, regulatory, tax, accounting, or reporting requirements.

To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process your personal information, and whether we can achieve those purposes through other means.

When personal information is no longer required, we will delete or de-identify it in accordance with applicable laws and internal policies.

In cases where you access Services through a Program Sponsor, retention periods may also be determined by our contractual obligations with that Program Sponsor or by applicable legal or regulatory requirements.

6. DATA ROLES AND RESPONSIBILITIES

Everlywell may act as a “service provider” or “processor” under applicable privacy laws when processing personal information on behalf of a Program Sponsor. Program Sponsors may act as “controllers” or “businesses” that determine the purposes and means of processing personal information.

Clinical Providers may act as independent covered entities under HIPAA and are responsible for their own privacy practices.

To the extent Everlywell processes personal information on behalf of a Program Sponsor, Everlywell does so only for the limited and specific purposes set forth in its agreements with the Program Sponsor and as permitted by applicable law.

As a result, your privacy rights and how your information is handled may vary depending on your relationship with Everlywell, a Program Sponsor, or a Clinical Provider.

7. YOUR RIGHTS AND CHOICES REGARDING YOUR DATA

A. All Users

Reviewing and Updating Your Information To review or update your personal data, contact [email protected].
Email Preferences You can unsubscribe from non-transactional emails via the unsubscribe link, but you will continue receiving transactional emails.
Cookie Preferences Adjust cookie settings in your browser to manage tracking.
“Do Not Track” Signals We honor “Do Not Track” browser requests and do not track users who enable this setting.
SMS Communications We will not share your opt-in to an SMS campaign with any third party for purposes unrelated to providing you with the services of that campaign. We may share your data, including your SMS opt-in or consent status, with third parties that help us provide our messaging services, including but not limited to platform providers, phone companies, and any other vendors who assist us in the delivery of text messages

Depending on your relationship with a Program Sponsor or healthcare provider, you may need to direct certain requests regarding your personal information to that entity.

B. State-Specific Privacy Rights

Residents of California, Colorado, Connecticut, Delaware, Indiana, Iowa*, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia have additional rights regarding their personal information under their respective privacy laws. These rights generally include:

Right to Know: You may request confirmation of whether we process your personal data and access details, including the categories of data collected, sources, purposes, and third-party sharing.
Right to Correct: You may request corrections to inaccurate personal data we hold about you.
Right to Delete: You may request the deletion of your personal information, subject to exemptions under state law.
Right to Obtain a Copy: You may request a copy of the personal data we have collected about you.
Right to Opt-Out: You may opt out of (i) targeted advertising, (ii) the sale of personal data, or (iii) profiling that produces legal or similarly significant effects.
Right to Appeal: If we deny your request, you may appeal our decision. To appeal a decision, please reply to our original response or email [email protected] with the subject line “Privacy Request Appeal”.
Non-Discrimination: You will not be discriminated against for exercising your privacy rights.

*Iowa does not require a right to correct.

C. California-Specific Rights

In addition to the rights above, California residents have:

Shine the Light: Under Cal. Civ. Code § 1798.83 (“Shine the Light”), you may request details about certain disclosures of personal information to third parties for their own direct marketing purposes during the prior 12 months. We do not disclose personal information to third parties for their own direct marketing purposes. Accordingly, we do not maintain a list of such disclosures.

Do Not Share My Personal Information: We may share certain categories of personal information with marketing and advertising vendors to deliver targeted advertisements on our behalf or on behalf of third parties. These categories include identifiers (such as IP address, device or browser identifiers, and mobile ad IDs), internet or network activity information (such as browsing and search activity, interactions with websites, applications, or advertisements, page views, clicks, and time spent), and, to the extent inferred from your interactions, information related to health or diagnostic topics, including symptoms, conditions, treatments, or wellness-related interests reflected by the content you view, search for, or engage with.

You may request that we do not share your personal information, including for advertising purposes.

Limit the Use of My Sensitive Personal Information We limit our use and disclosure of your sensitive personal information to what is necessary to provide the Services and as permitted by California law.

You have the right to request further limitation of such use and disclosure. To exercise this right, you may use “Your Privacy Choices” link provided on our homepage or contact us at 888-813-0230 or [email protected].

Where we process sensitive personal information on behalf of a Program Sponsor, your ability to limit such use may be restricted, and you may need to direct your request to the applicable Program Sponsor or healthcare provider.

Categories of Collected and Disclosed Personal Information: The below outlines the categories of personal information Everlywell and its affiliates may have collected from and about California residents over the past 12 months, as well as the categories of recipients to whom we have disclosed this information for business or commercial purposes.

Category of Personal Information Collected	Categories of Sources	Business or Commercial Purpose for Collection	Categories of Third Parties to Whom Disclosed	Sold or Shared?
Identifiers (e.g., name, email, IP address)	Directly from consumer; cookies and analytics tools	To provide you with products and services and for internal purposes	Service providers, advertising partners, analytics vendors	Shared
Customer Records Information (e.g., name, phone, address)	Directly from consumer	Fulfilling transactions, verifying identity, providing services	Logistics vendors	Shared
Commercial Information (e.g., order history)	Transaction history	Order fulfillment, internal analytics, marketing	Advertising partners, analytics platforms, service providers	Shared
Internet/Network Activity (e.g., browsing history, ad interactions)	Cookies, pixels, tracking scripts	Site analytics, targeted advertising, fraud prevention	Ad networks, analytics platforms	Shared
Geolocation Data (e.g., IP-based location)	Device/browser tools	Localized services, site security, analytics	Service providers, analytics vendors, advertising partners	Shared
Inferences (e.g., profiles or scores)	Directly from consumer, cookies, pixels, tracking scripts	Internal analytics, targeted advertising	Service providers, advertising partners	Shared

D. Additional Rights for Nevada and Washington Residents

Residents of Nevada and Washington may have specific privacy rights related to their consumer health data as provided under the Washington My Health My Data Act and the Nevada Consumer Health Data Privacy Law. To the extent we collect or process consumer health data subject to these laws, such rights will apply. For more information, please see our Consumer Health Data Privacy Notice.

E. Global Privacy Control and Opt-Out Preference Signals

We recognize and honor browser-based opt-out preference signals, such as the Global Privacy Control (GPC), where required by law (including California, Colorado, and Connecticut). When we receive a valid GPC signal, we treat it as a request to opt out of the sale or sharing of your personal information and/or targeted advertising, as applicable.

F. Exercising Your Rights

To submit a request regarding your privacy rights, please contact us via:

Email: [email protected] – Include your full name, residential address, email, phone number, and the nature of your request.
Toll-Free Telephone Number: Call 888-813-0230 to make a request.

We will respond within 45 days and notify you if an extension is needed. If your request relates to information processed on behalf of a Program Sponsor, we may direct you to submit your request to that Program Sponsor or assist in forwarding your request, as required by applicable law.

8. THIRD-PARTY LINKS AND BEHAVIORAL TRACKING

Third-Party Links

Our website may include links to third-party products or services. These external sites operate independently and have their own privacy policies. We are not responsible for their content or activities.

Third-Party Information Gathering

Everlywell may display content from third parties that track user activity beyond what is described in this notice. These third parties may place cookies on your device, collect data, or solicit personal information. For details on third-party tracking, cookies, and how to opt out, please review the privacy policies of the respective third-party providers.

9. CHILDREN'S DATA

To use this website, you must be 18 years or older and legally able to enter a binding contract. The website is not intended for children under 13, and no one under 13 may use it.

10. CHANGES TO THIS PRIVACY NOTICE

We may update this notice periodically as our website evolves and privacy laws change. Updates will be posted online, and by continuing to use the website, you agree to the latest version of this notice.

Where required by law or where material changes are made that affect how personal information is handled in connection with Program Sponsor–provided Services, we will provide additional notice or obtain consent as required.

11. CONTACT US

For any questions or concerns about this notice or your privacy, please contact us at:

Everly Health, Inc. Attn: Privacy Office 5209 Burnet Road, Suite 300 Austin, Texas 78756 888-813-0230 [email protected]

If you access Services through a Program Sponsor, you may also contact your employer, health plan, or other sponsoring organization for questions about how your information is handled in connection with those Services.