Privacy Policy

Effective date: September 30, 2026 · Issued by: Forever Health Rx LLC

This Privacy Policy explains how Forever Health Rx LLC ("Forever Health Rx", "we", "us") collects, uses, shares and protects information when you visit our website, create an account, complete an online visit or otherwise use our services (the "Services"). Protected health information created or received by the medical group and its providers is governed by our Notice of Privacy Practices.

1. Information we collect

• Information you provide: name, date of birth, contact details, government ID used for identity verification, shipping address, payment information (processed by our payment processor; we do not store full card numbers), and the health information you enter in the online visit questionnaire, messages and follow-up forms.
• Information collected automatically: IP address, device and browser type, pages viewed, referring URLs, approximate location and interaction data collected through cookies and similar technologies.
• Information from others: identity-verification services, the medical group and its providers, dispensing pharmacies, shipping carriers and payment processors, limited to what is needed to deliver the Services.

2. How we use information

• To create and manage your account, verify your identity and location, and route your online visit to a provider licensed for your state.
• To coordinate prescriptions with the medical group and dispensing pharmacies, process payments and ship orders.
• To send transactional communications (visit status, prescription and shipping updates, billing notices) and, with your consent, marketing communications you can opt out of at any time.
• To operate, secure, analyze and improve the website and Services, and to comply with legal obligations.

3. Cookies and analytics

We use essential cookies required for the website to work and, where permitted, analytics cookies to understand how the site is used. We do not use advertising or tracking pixels on pages where you enter health information. You can control cookies through your browser settings; disabling essential cookies may affect site functionality. A list of the analytics and service vendors in use is available on request at info@foreverhealthrx.com.

4. How we share information

• Medical group and providers: Arora Health & Aesthetics, LLC and its licensed providers receive the information needed to evaluate and treat you.
• Pharmacies and carriers: dispensing pharmacies and shipping carriers receive prescription and delivery details.
• Service providers: technology platform, identity verification, payment processing, customer support, analytics and hosting vendors bound by contractual confidentiality and, where required, business associate agreements.
• Legal: when required by law, subpoena or regulator, to protect rights and safety, or in connection with a merger, acquisition or sale of assets, subject to this Policy.
• We do not sell personal information and do not share health information for third-party advertising.

5. Retention and security

We retain information for as long as needed to provide the Services, meet legal, medical-record and accounting requirements, and resolve disputes. We use administrative, technical and physical safeguards, including encryption in transit and at rest, access controls and audit logging. No method of transmission or storage is completely secure; contact us immediately if you believe your account has been compromised.

6. Your rights and choices

Depending on your state, you may have the right to access, correct, delete or obtain a copy of your personal information, to opt out of certain processing and to appeal a decision. You can exercise these rights by emailing info@foreverhealthrx.com. We will verify your identity before responding and will not discriminate against you for exercising your rights. Marketing emails include an unsubscribe link; SMS consent can be withdrawn by replying STOP (see SMS Terms).

7. Children

The Services are intended for adults 18 years of age or older. We do not knowingly collect information from minors.

8. Changes to this Policy

We may update this Policy from time to time. The effective date at the top indicates the latest revision; material changes will be announced on the website or by email.

Contact

Forever Health Rx LLC
(786) 457-2677 · info@foreverhealthrx.com

---

HIPAA Privacy Policy

Effective date: September 30, 2026 · Issued by: Forever Health Rx LLC

Forever Health Rx LLC HIPAA Privacy Statement — Notice of Privacy Practices for Protected Health Information (PHI). This Notice describes how Forever Health Rx LLC ("we", "us", or "our") may use and disclose your Protected Health Information (PHI) to carry out treatment, payment, or healthcare operations and for other purposes that are permitted or required by law. This Notice also describes your rights regarding your PHI. We are required by law to maintain the privacy of your PHI, provide you with this Notice of our legal duties and privacy practices, and to abide by the terms of this Notice. Medical services are provided by independently licensed healthcare professionals through Arora Health & Aesthetics, LLC.

Uses and Disclosures of PHI

We may use and disclose your PHI for the following purposes:

• a. Treatment: We may use and disclose your PHI to provide, coordinate, or manage your healthcare and related services. This may include communication with other healthcare providers about your treatment and coordinating your care with other providers.
• b. Payment: We may use and disclose your PHI to obtain payment for healthcare services provided to you. This may include contacting your insurance company to verify your coverage, billing and collection activities, and sharing PHI with other healthcare providers, insurance companies, or collection agencies.
• c. Healthcare Operations: We may use and disclose your PHI for healthcare operations, including quality assessment, improvement activities, case management, accreditation, licensing, credentialing, and conducting or arranging for medical reviews, audits, or legal services.
• d. As Required by Law: We may use and disclose your PHI when required to do so by federal, state, or local law.
• e. Public Health and Safety: We may use and disclose your PHI to prevent or control disease, injury, or disability, to report child abuse or neglect, to report reactions to medications or problems with products, and to notify persons who may have been exposed to a communicable disease or may be at risk of spreading a disease or condition.
• f. Health Oversight Activities: We may disclose your PHI to health oversight agencies for activities authorized by law, such as audits, investigations, inspections, and licensure.
• g. Judicial and Administrative Proceedings: We may disclose your PHI in response to a court or administrative order, subpoena, discovery request, or other lawful process.
• h. Law Enforcement: We may disclose your PHI for law enforcement purposes, such as to report certain types of wounds or injuries, or to comply with a court order, warrant, or other legal process.
• i. Research: We may use and disclose your PHI for research purposes when the research has been approved by an institutional review board and privacy protections are in place.
• j. Organ and Tissue Donation: If you are an organ donor, we may disclose your PHI to organizations that handle organ procurement, transplantation, or donation.
• k. Workers' Compensation: We may disclose your PHI for workers' compensation or similar programs that provide benefits for work-related injuries or illnesses.
• l. Military and Veterans: If you are a member of the armed forces, we may disclose your PHI as required by military authorities.
• m. Inmates: If you are an inmate, we may disclose your PHI to the correctional institution or law enforcement official having custody of you.

Your Rights Regarding PHI

You have the following rights with respect to your PHI:

• a. Right to Inspect and Copy: You have the right to inspect and copy your PHI that we maintain, with certain exceptions. To request access, submit a written request to our Privacy Officer. We may charge a reasonable fee for the costs of copying, mailing, or other supplies associated with your request.
• b. Right to Amend: You have the right to request an amendment to your PHI if you believe it is incorrect or incomplete. To request an amendment, submit a written request to our Privacy Officer, specifying the information you believe is incorrect and why. We may deny your request if we believe the information is accurate and complete, or if we did not create the information.
• c. Right to an Accounting of Disclosures: You have the right to request an accounting of disclosures of your PHI made by us in the past six years, except for disclosures made for treatment, payment, or healthcare operations, and certain other disclosures. To request an accounting, submit a written request to our Privacy Officer.
• d. Right to Request Restrictions: You have the right to request a restriction on our use or disclosure of your PHI for treatment, payment, or healthcare operations. We are not required to agree to your request but will consider it. To request a restriction, submit a written request to our Privacy Officer, specifying the restriction you are requesting and to whom it applies.
• e. Right to Request Confidential Communications: You have the right to request that we communicate with you about your PHI in a certain way or at a certain location. To request confidential communications, submit a written request to our Privacy Officer, specifying how or where you wish to be contacted.
• f. Right to a Paper Copy of This Notice: You have the right to receive a paper copy of this Notice, even if you have agreed to receive it electronically. To obtain a paper copy of this Notice, contact our Privacy Officer.
• g. Right to be Notified of a Breach: You have the right to be notified in the event that we discover a breach of your PHI.

Transmission of PHI

We are committed to protecting the privacy of your PHI and will ensure that any electronic transmission of PHI complies with the Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule (45 CFR 164). This includes the use of Secure-Socket Layer (SSL) or equivalent technology for the transmission of PHI, as well as adherence to all applicable security standards for online transmissions of PHI.

Changes to This Notice

We reserve the right to change this Notice and the revised Notice will be effective for PHI we already have about you, as well as any information we receive in the future. We will post a copy of the current Notice on our website. The Notice will contain the effective date on the first page.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with our Privacy Officer or with the Secretary of the Department of Health and Human Services, Office for Civil Rights (200 Independence Avenue SW, Washington, DC 20201; 1-877-696-6775; www.hhs.gov/ocr). You will not be retaliated against for filing a complaint.

Contact Information

To exercise any of your rights, or if you have any questions about this Notice or our privacy practices, please contact our Privacy Officer at: Forever Health Rx LLC, foreverhealthrx.com, info@foreverhealthrx.com. This Notice is provided in accordance with the Notice of Privacy Practices for Protected Health Information from the Department of Health and Human Services' Model and is applicable across all US states.

Rights of Specific Jurisdictions within the US

Certain states may have additional privacy protections that apply to your PHI. If you reside in a state with additional privacy protections, you may have additional rights related to your PHI. The following are examples of states with additional protections. If you reside in a state not listed here, please consult your state's specific privacy laws or contact our Privacy Officer for more information about your rights under specific state laws.

California Residents

• a. Right to Access: In addition to the rights described above, California residents have the right to request access to their PHI in a readily usable electronic format, as well as any additional information required by California law. To request access, submit a written request to our Privacy Officer.
• b. Right to Restrict Certain Disclosures: California residents have the right to request restrictions on certain disclosures of their PHI to health plans if they paid out-of-pocket for a specific healthcare item or service in full. To request such a restriction, submit a written request to our Privacy Officer.
• c. Confidentiality of Medical Information Act (CMIA): California residents are protected by the Confidentiality of Medical Information Act (CMIA), which provides additional privacy protections for medical information. We are required to comply with CMIA in addition to HIPAA.
• d. Marketing and Sale of PHI: California residents have the right to request that their PHI not be used for marketing purposes or sold to third parties without their authorization. To request a restriction on the use of your PHI for marketing or the sale of your PHI, submit a written request to our Privacy Officer.
• e. Minor's Rights: If you are a minor (under the age of 18), you have the right to request that certain information related to certain sensitive services, such as reproductive health, mental health, or substance use disorder treatment, not be disclosed to your parent or guardian without your consent. To request a restriction on the disclosure of such information, submit a written request to our Privacy Officer.

New York Residents

For residents of New York, we comply with the New York State Confidentiality of Information Law, which provides additional privacy protections for HIV-related information, mental health records, and genetic testing results. We will obtain written consent before disclosing such information, even for treatment, payment, or healthcare operations.

Texas Residents

For residents of Texas, we comply with the Texas Medical Privacy Act, which offers privacy protections beyond HIPAA, including requiring consent for certain disclosures of PHI, additional safeguards for electronic PHI, and specific requirements for the destruction of PHI. We also adhere to Texas's specific privacy protections for mental health records and substance use treatment records.

Florida Residents

For residents of Florida, we comply with Florida's privacy laws, which offer additional protections for mental health records, HIV/AIDS-related information, and substance abuse treatment records. We will obtain written consent before disclosing such information, even for treatment, payment, or healthcare operations. We also implement specific security measures to protect electronic PHI, as required by Florida law.

Illinois Residents

For residents of Illinois, we comply with Illinois's specific privacy laws related to mental health records, HIV/AIDS-related information, and genetic testing results. We will obtain written consent before disclosing such information, even for treatment, payment, or healthcare operations. In addition, we will notify patients of any unauthorized access to their electronic PHI, as required by Illinois law.

Massachusetts Residents

For residents of Massachusetts, we comply with Massachusetts's specific privacy laws related to mental health records, HIV/AIDS-related information, and genetic testing results. We will obtain written consent before disclosing such information, even for treatment, payment, or healthcare operations. We also implement specific security measures to protect electronic PHI, as required by Massachusetts law.

Contact

Forever Health Rx LLC
(786) 457-2677 · info@foreverhealthrx.com