Privacy Policy

Wellorithm, a Miami-based company specializing in remote weight loss treatment programs, maintains a Privacy Policy to inform users about how it collects, uses, discloses, and protects personal information. This policy applies to all interactions via the company's website (wellorithm.com), mobile applications, and related services (collectively, the "Site" and "Services"). It emphasizes transparency, user rights, and data security, while outlining the company's practices regarding personal and health information.

Purpose of the Privacy Policy

The primary goal of the Privacy Policy is to describe how Wellorithm manages personal data, including information that can identify users ("Personal Information"). It details the types of data collected, the methods of collection, how data is used, with whom it is shared, and the protections in place. By accessing or using the Services, users acknowledge that they have read, understood, and consented to these practices. Wellorithm reserves the right to update the policy at any time—any significant changes will be posted conspicuously on the Site or communicated directly to users, with updates becoming effective immediately upon posting.

Scope and Limitations

This Privacy Policy applies solely to data collected within the United States. It does not cover third-party websites linked within the Services, which are governed by their own privacy policies. If a user visits the Site from outside the U.S., their data is transferred to, stored, and processed within U.S. servers, which may have different privacy standards. Users are encouraged to review third-party privacy policies before submitting personal data to external sites.

Children's Privacy

Wellorithm's services are not intended for minors under 18, and the company does not knowingly collect personal information from children under that age. If the company discovers it has inadvertently collected data from a child under 16 without parental consent, that information will be deleted. Users or guardians should contact support@wellorithm.com if they believe there is any such data.

Types of Information Collected

The company collects various categories of personal data, both directly from users and automatically through their interactions:

Account, Demographic, and Contact Data:

Users may browse the informational parts of the Site without registering, but account creation requires providing personal details such as name, date of birth, address, email, and phone number. The provided email address is used for all communications, including sensitive medical and prescription information. Users understand that third-party access to their email could compromise confidentiality.

Service Usage Data:

When using the Services, users may share preferences, appointment details, health-related information, and payment details. This includes data submitted through online forms, feedback, or inquiries.

Web and Device Data:

Information such as usernames, passwords, browser type, operating system, IP addresses, referring URLs, pages viewed, click behaviors, and session timestamps is collected to facilitate site functionality and security.

Log Data:

Usage logs record which pages users visit, search terms entered, and buttons clicked, allowing for analytics and service improvement.

Location Data:

Derived from IP addresses, device location settings, or user-selected options, location data helps provide relevant content or features.

Payment Data:

When users make payments, data such as credit card type, number, expiration date, and billing address are collected securely for processing transactions.

Social Media Interaction:

If users engage with Wellorithm's social media pages or accounts, information they share publicly or submit via interactions may be collected, governed by respective social media platforms' policies.

Multimedia Data:

For services involving video recordings or photographs (e.g., weight verification videos), the company collects this Personal Information to deliver services.

Support and Feedback Data:

When contacting customer support, submitting feedback, or participating in surveys, any information shared through these channels is collected and stored.

Third-Party Data:

Wellorithm may also obtain Personal Information from healthcare providers, pharmacies, advertising partners, or data analytics providers, subject to applicable laws.

How Data Is Collected

Data collection occurs through multiple means:

• Direct Input: Users provide data via online forms, registration, or interactions with the platform.
• Automatically: System logs, cookies, tracking technologies, and analytics tools gather information during site visits.
• Third Parties: Data from healthcare providers, pharmacies, advertising partners, and other third-party sources supplement user information.
• Multimedia: Video and photographic inputs are collected when users opt to submit visual verification.

Cookies and Tracking Technologies

Wellorithm and its service providers use cookies and similar technologies to enhance user experience, track usage, and gather analytics. Cookies help personalize content, improve site navigation, and analyze traffic patterns. Users can manage cookie preferences through their browser settings or visit the preferences page on the Site. However, rejecting cookies may limit certain functionalities. The company does not respond to "Do Not Track" signals from browsers at this time.

Use of Personal Information

Wellorithm uses collected data for numerous purposes, including:

• Providing Services: To deliver telehealth consultations, prescriptions, and related support.
• Account Management: To create, maintain, and secure user accounts.
• Communication: To respond to inquiries, send health updates, appointment reminders, or support messages.
• Marketing and Advertising: To inform users about new features, services, or promotional offers, subject to user preferences and legal restrictions.
• Payment Processing: To bill users accurately and securely.
• Service Improvement: To analyze user interactions, troubleshoot issues, and optimize platform functionality.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.
• Security and Fraud Prevention: To detect and prevent fraudulent or malicious activity.
• Business Transfers: In case of mergers, acquisitions, or asset sales, user data may be transferred as part of the transaction.

Sharing of Personal Data

Wellorithm may disclose Personal Information to third parties for legitimate purposes, including:

• Healthcare Providers: To facilitate medical treatment and prescriptions.
• Employees and Affiliates: To operate and support the platform.
• Third-Party Service Providers: Such as hosting, payment processors, or customer support providers, who process data on the company's behalf.
• Legal and Regulatory Authorities: When required by law or to protect rights and safety.
• Business Transitions: In cases of mergers, acquisitions, or bankruptcy, where data may be transferred as part of the business assets.
• Advertising Partners: To deliver targeted ads, subject to user opt-out options and applicable laws.
• De-identified Data: Aggregated or anonymized data that does not identify individuals may be shared or used freely.

Data Security and Protections

Wellorithm employs commercially reasonable security measures to safeguard personal data from unauthorized access, alteration, or disclosure. However, no method guarantees complete security, and users are responsible for protecting their account credentials and devices. Users should choose strong passwords, keep login details confidential, and promptly notify Wellorithm of suspected breaches.

User Rights and Data Control

Users have rights concerning their personal data, including:

• Access: To view the data collected about them.
• Correction: To update or correct inaccurate information.
• Deletion: To request that their data be deleted from active systems.
• Account Management: To deactivate or delete their account.
• Opt-Out: To withdraw consent for marketing communications or targeted advertising, which can be done via email or site preferences.
• Data Portability: To obtain a copy of their data in a portable format.

Requests should be sent to support@wellorithm.com. The company will verify identities before processing requests, which may involve providing additional information. Specific requests may be denied if they conflict with legal obligations or security concerns. Users may authorize agents or guardians to exercise these rights on their behalf, with proper authorization.

Kids' Privacy

The Site and Services are not directed at children under 13, and Wellorithm does not knowingly collect data from minors. If a parent or guardian believes their child's information has been collected, they should contact support@wellorithm.com for deletion.

Marketing Communications

Users can opt out of promotional emails and messages by following unsubscribe links or contacting support@wellorithm.com. Even if unsubscribed, users may still receive necessary transactional or account-related notifications.

California and State-Specific Rights

For California residents, additional rights are provided under the California Consumer Privacy Act (CCPA). These include:

• Access: To request a list of personal data collected about them.
• Deletion: To request the removal of personal data.
• Opt-Out: To prevent the sale or sharing of personal data for targeted advertising or profiling.
• Data Portability: To obtain their data in a portable format.
• Correction: To correct inaccurate data.

Residents of other states, such as Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Nevada, Oregon, Texas, Virginia, and Utah, also have rights to access, correct, delete, or opt out of targeted advertising, as outlined in their respective state laws.

Opt-Out of Targeted Advertising

Users can opt out of targeted advertising through the "Privacy Choices" link on the Site or browser settings, which limits the use of cookies and tracking technologies for interest-based ads.

Handling of Sensitive Personal Data

Wellorithm primarily collects health-related information with user consent, solely for providing services. If state laws classify this data as "Sensitive Personal Information," the company will honor applicable privacy rights, including the right to limit its use for advertising purposes.

Verification and Enforcement

When users submit privacy rights requests, Wellorithm verifies their identity via multiple steps to prevent unauthorized access. This may involve requesting additional information or documentation. If verification fails, requests may be denied, and users are notified of the reasons. Authorized agents or guardians can also submit requests on behalf of users, with proof of authorization. Users can appeal denials within 30 days.

Data Retention and Deletion Policies

Personal data is retained only as long as necessary to fulfill the purposes for which it was collected or as required by law. Once data is no longer needed, it is securely deleted from active systems but may remain in archives. De-identified or aggregated data may be retained indefinitely without the possibility of re-identification.

In the End

Wellorithm's Privacy Policy underscores a commitment to transparency, user rights, and data security. It clearly defines how personal and health information is collected, used, disclosed, stored, and protected. Users are empowered to access, correct, delete, and control their data, including exercising rights under applicable laws such as the CCPA and state privacy statutes. The policy emphasizes that the company only processes sensitive health data with explicit consent and implements safeguards to protect user information. Overall, Wellorithm aims to foster trust through clear communication, responsible data management, and compliance with relevant privacy regulations.