Privacy Policy
Glo Health, Inc. (“Glo,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal and health information you share with us. This Privacy Policy explains what information we collect, how we use and share it, and the choices and rights you have regarding your information.
This Policy applies to information collected through the Glo website, mobile applications, and any related services (collectively, the “Services”). By using the Services, you agree to the practices described in this Policy. If you do not agree, please do not use the Services.
This Policy should be read together with our Terms of Use and, where applicable, our Consumer Health Data Privacy Policy.
1. Overview
Because Glo connects you with licensed healthcare Providers, we may collect sensitive categories of information, including health information, as part of providing the Services. We take this responsibility seriously and have built our privacy practices around three principles:
- Transparency — we tell you what we collect and why.
- Minimization — we collect only what’s needed to provide the Services and improve your experience.
- Protection — we apply administrative, technical, and physical safeguards designed to protect your information from unauthorized access, use, or disclosure.
2. Information We Collect
We collect information in the following ways:
2.1 Information You Provide Directly
| Category | Examples |
|---|---|
| Account information | Name, email address, password, date of birth, phone number |
| Health information | Medical history, current medications, allergies, lab results, height, weight, photos you choose to upload, and responses to intake questionnaires |
| Payment information | Billing address and payment details (processed by our third-party payment processors — Glo does not store full card numbers) |
| Communications | Messages you send to Providers or our support team, survey responses, and customer feedback |
| Shipping information | Delivery address and contact details for medication shipments |
2.2 Information Collected Automatically
| Category | Examples |
|---|---|
| Device information | Browser type, operating system, device identifiers, IP address |
| Usage information | Pages visited, features used, time spent on the Services, referring URLs |
| Approximate location | Derived from your IP address, used to determine service availability in your area |
2.3 Information From Third Parties
We may receive information about you from third parties, such as:
- Pharmacies and laboratories that fulfill prescriptions or process lab tests on your behalf;
- Health insurance providers, if you choose to use insurance for your treatment;
- Identity verification services, used to confirm your age and identity where required; and
- Marketing and analytics partners, who help us understand how people find and use our Services.
3. How We Use Your Information
We use the information we collect to:
- Create and manage your account;
- Facilitate consultations between you and licensed Providers, and support their clinical decision-making;
- Process payments, prescriptions, and medication shipments;
- Communicate with you about your account, orders, and treatment, including appointment reminders and refill notifications;
- Operate, maintain, and improve the Services, including our calculators, educational tools, and the GLP-1 Supply Tracker;
- Personalize your experience and provide relevant recommendations;
- Detect, prevent, and address fraud, abuse, security issues, and technical problems;
- Comply with applicable laws, regulations, and legal processes; and
- With your consent, send you marketing communications about Glo products and services, which you may opt out of at any time.
4. Health Information & HIPAA
When you use Glo to connect with a licensed Provider, certain information you share — such as your medical history, lab results, and treatment details — may be considered “protected health information” (PHI) under the Health Insurance Portability and Accountability Act (HIPAA).
How HIPAA applies: Providers and pharmacies that you connect with through Glo are independently responsible for complying with HIPAA with respect to the PHI they create and maintain. Glo implements safeguards designed to protect health information consistent with HIPAA’s requirements where Glo itself functions as a business associate or covered entity.
For health information that does not fall under HIPAA (for example, general wellness data you enter into our calculators without creating a clinical record), this information is protected under this Privacy Policy and, where applicable, state consumer health data privacy laws described in our Consumer Health Data Privacy Policy.
5. How We Share Information
We do not sell your personal or health information. We may share information in the following circumstances:
- With Providers and pharmacies — to facilitate your consultation, prescription, and medication fulfillment;
- With service providers — vendors who help us operate the Services, such as payment processors, cloud hosting providers, customer support platforms, and shipping carriers, under contracts that limit their use of your information;
- With your insurance provider — if you choose to submit claims through Glo;
- For legal reasons — to comply with a subpoena, court order, or other legal obligation, or to protect the rights, property, or safety of Glo, our users, or the public;
- In connection with a business transaction — such as a merger, acquisition, financing, or sale of assets, in which case information may be transferred as part of that transaction, subject to standard confidentiality protections; and
- With your consent — for any other purpose disclosed to you at the time of collection.
Aggregated or de-identified information such as that used to power our community-reported GLP-1 Supply Tracker may be shared publicly or with partners, as it does not identify you individually.
6. Cookies & Tracking Technologies
We use cookies, pixels, and similar technologies to operate the Services, remember your preferences, and understand how the Services are used. These may include:
- Essential cookies — required for core functionality, such as keeping you logged in;
- Analytics cookies — help us understand usage patterns so we can improve the Services; and
- Advertising cookies — used to measure the effectiveness of our marketing campaigns on other platforms.
You can manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Services. Where required by law, we will request your consent before placing non-essential cookies.
7. Data Security
We implement administrative, technical, and physical safeguards designed to protect your information, including encryption of data in transit and at rest, access controls limiting who can view sensitive information, and regular security assessments. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security. If we become aware of a security incident affecting your information, we will notify you and relevant authorities as required by applicable law.
8. Data Retention
We retain your information for as long as your account is active or as needed to provide the Services. We may also retain information for longer periods where required to comply with legal, regulatory, tax, or accounting obligations for example, medical and prescription records may be retained for the period required under applicable healthcare recordkeeping laws, even after you close your account. When information is no longer needed, we take steps to securely delete or de-identify it.
9. Your Privacy Rights
Depending on where you live, you may have certain rights regarding your personal information, which may include the right to:
- Access — request a copy of the personal information we hold about you;
- Correct — request that we correct inaccurate or incomplete information;
- Delete — request deletion of your personal information, subject to certain exceptions (such as records we are required to retain for legal or medical recordkeeping purposes);
- Restrict or object — request that we limit certain uses of your information, or object to processing based on legitimate interests;
- Data portability — request a copy of your information in a portable format; and
- Withdraw consent — withdraw consent for processing that is based on consent, such as marketing communications, at any time.
To exercise any of these rights, please contact us at privacy@glo.com. We may need to verify your identity before processing certain requests. We will respond to your request within the timeframe required by applicable law.
10. Children’s Privacy
The Services are not directed to, and are not intended for use by, individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child without appropriate consent, we will take steps to delete that information promptly.
11. International Users
The Services are intended for individuals located in the United States. If you access the Services from outside the United States, your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country. By using the Services, you consent to this transfer.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. If we make material changes, we will notify you by posting a notice on our website, updating the “Last updated” date above, or, where required by law, by direct notice such as email. We encourage you to review this Policy periodically.
13. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, or if you would like to exercise any of your privacy rights, please contact us:
Glo Health, Inc.
Email: info@glo.com
Phone:(xxx) xxx xxxx