Privacy Policy

This Privacy Policy describes how MDside LLC ("MDside," "we," "us," or "our") collects, uses, discloses, and protects information you provide through the MDside website located at www.mdside.shop (the "Site") and the telehealth services offered through it (the "Services").

Health information you provide in connection with care from the licensed providers in the MDside network is also subject to our HIPAA Notice of Privacy Practices. Where the HIPAA Notice and this Policy differ as to protected health information, the HIPAA Notice controls.

Information We Collect

Information you provide directly:

• Identity & contact data — name, date of birth, email, phone, and shipping address.
• Government-issued photo ID — uploaded to verify your identity and age.
• Health information — intake responses, medical history, current medications, allergies, symptoms, blood pressure and other vitals, and treatment preferences.
• Payment information — processed by our payment processor (Stripe). We do not store full card numbers on our servers.

Information collected automatically:

• Device and usage data (IP address, browser type, pages viewed, timestamps) and cookies or similar technologies, subject to your consent where required. See Cookies below.

How We Use Your Information

• To provide the Services: route your intake to a licensed provider for review, support prescribing decisions, and fulfill approved prescriptions through a licensed pharmacy.
• To verify your identity, age, and state of residence.
• To process payments and authorize charges (you are charged only if a provider approves treatment).
• To communicate with you about your care, orders, and account.
• To operate, secure, and improve the Services, and to comply with legal obligations.

How We Share Your Information

• Treating providers in the MDside network, to evaluate and treat you.
• Pharmacies that fill approved prescriptions.
• Service providers / business associates — hosting, payment processing, e-prescribing, identity verification, and communications vendors. Vendors that handle protected health information sign Business Associate Agreements requiring them to safeguard it.
• Legal and safety — when required by law, to respond to legal process, or to protect rights, safety, and the integrity of the Services.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

We do not sell your personal or health information, and we do not share it for cross-context behavioral advertising.

Cookies & Tracking

We use strictly necessary cookies to operate the Site. Non-essential analytics or marketing technologies load only after you consent through our cookie banner. You can change your choice at any time by clearing the consent setting in your browser.

Data Security

We use administrative, technical, and physical safeguards — including encryption in transit and at rest for sensitive data — designed to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Data Retention

We retain information for as long as needed to provide the Services, meet medical-record retention requirements under applicable state law, comply with legal obligations, resolve disputes, and enforce our agreements.

Your Privacy Rights

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information, and to opt out of certain processing. California residents have rights under the CCPA/CPRA, including the rights to know, delete, correct, and limit use of sensitive personal information, and the right not to receive discriminatory treatment for exercising these rights. To exercise any right, contact us using the details below. Rights regarding protected health information are addressed in our HIPAA Notice.

Children's Privacy

The Services are intended only for individuals 18 and older. We do not knowingly collect information from anyone under 18.

Changes to This Policy

We may update this Policy from time to time. We will post the revised Policy with a new "Last Updated" date and, where required, provide additional notice.

Contact Us

MDside LLC Attn: Privacy Team 401 E Jackson St, Ste 2340, Tampa, FL 33602 support@mdside.com