Application
PEPMAX LLC (PepMax) provides this separate policy for consumer health data it controls in connection with pepmax.com and related nonclinical services, including where the Washington My Health My Data Act, Nevada consumer-health-data law or other applicable state health-data law applies. It supplements the general Privacy Policy. It does not replace the Medical Group's or dispensing pharmacy's HIPAA notice.
Consumer health data includes personal information linked or reasonably linkable to you that identifies or supports an inference about physical or mental health, treatment, medications or an effort to obtain healthcare. A treatment-page interaction or purchase may reveal health interests even without a diagnosis.
Categories collected and sources
We may collect identity and contact information associated with a treatment request; treatment interests and requested products; information voluntarily supplied in support communications; account, consultation, and prescription-status information; billing, refund, and fulfillment information associated with care; and device, IP address, approximate location, and website-interaction information that may reveal a health interest. Limited inferences may be used to administer or route your requested service, not to diagnose or prescribe.
Sources include you, your browser or device, the Medical Group and Providers, dispensing pharmacies, and vendors supporting payments, verification, communications, and delivery. Clinical intake is submitted directly to the Medical Group. PepMax's access to information supplied by professional providers is limited by the applicable role, authorization and law.
Purposes and collection basis
We collect and use these categories to provide or facilitate services you request, verify identity and location, coordinate clinical access and authorized dispensing, administer payments and refunds, arrange delivery, respond to support, maintain security, and satisfy legal obligations where permitted. Collection and sharing beyond what is necessary to provide your requested service require the consent or other authorization mandated by applicable law. Acceptance of general Terms is not substituted for a required separate health-data consent.
Categories shared and recipients
The categories above may be shared to the extent needed for their stated purpose with the Medical Group and Providers, dispensing pharmacies, and contracted providers of hosting, payments, identity verification, communications, support, shipping, and security. Disclosure may also occur to legally authorized authorities, professional advisers or business-transaction counterparties where permitted and subject to health-data restrictions.
Payment providers receive only information needed for payment processing, verification, refunds, disputes, fraud prevention, and legal obligations. Clinical intake responses, medical records, laboratory results, photographs, and clinical messages are not included in payment descriptions or transaction metadata. Payment records may nevertheless reveal a relationship with PepMax and are handled subject to applicable health-data restrictions.
We do not share consumer health data with a corporate affiliate for its independent use. If that changes, we will identify the relevant affiliates and provide required notice and consent before sharing. We do not sell consumer health data or share it for targeted advertising, and do not authorize third parties to collect it across unrelated services for their own advertising purposes. We do not use healthcare-facility geofencing to identify, track, or advertise to people seeking care.
Access, deletion, withdrawal, and appeal
Email support@pepmax.com with "Consumer Health Data Request" to request confirmation and access, information about recipients as required by law, correction where applicable, deletion or withdrawal of consent to future collection or sharing. Include enough information to locate the account, without sending unnecessary medical or identity documents. An authorized representative may act where law permits, subject to verification.
We will authenticate and respond within the applicable statutory period, advise of any lawful extension or exception, and direct deletion requests to processors and other recipients where required. Withdrawal does not undo lawful prior processing and may prevent continued provision of the requested service. Requests for clinical or pharmacy records belong with the entity controlling those records.
If a request is denied, email "Consumer Health Data Appeal" to support@pepmax.com. We will respond within the statutory period and explain available complaint rights. Washington residents may contact the Washington Attorney General at https://www.atg.wa.gov/file-complaint. Other residents may contact their state attorney general. Exercising rights will not result in unlawful discrimination.
Contact by mail: PEPMAX LLC, 1925 Lovering Avenue, Wilmington, DE 19806, US. Questions may also be sent to support@pepmax.com.