Solaya MD Privacy Policy

Solaya MD Privacy Policy

Last Updated: June 1, 2026

This Privacy Policy describes how Solaya MD (“Solaya MD,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information when you visit our website, complete an assessment, communicate with us, purchase or request services, or otherwise interact with Solaya MD (collectively, the “Services”).

Solaya MD is not a medical provider and does not itself provide medical diagnosis, treatment, or prescribing services. Clinical services, including medical evaluations, eligibility determinations, treatment decisions, and prescriptions, are provided by independent U.S.-licensed healthcare providers through Bask Health, Solaya MD’s telehealth provider (“Bask Health” or “Healthcare Provider”).

Because healthcare, telehealth, prescription fulfillment, and privacy laws can vary by state and relationship, this Policy is intended to describe Solaya MD’s general privacy practices. Bask Health, licensed providers, pharmacies, laboratories, payment processors, and other third parties may also maintain their own privacy policies and notices that apply to information they collect or process.

Key Privacy Points

Solaya MD may collect contact information, account information, assessment responses, payment and order details, communications, and website usage data.

Bask Health and affiliated licensed providers may collect and process information needed to evaluate your eligibility for treatment and provide telehealth services.

Prescription fulfillment may involve licensed pharmacy partners, shipping providers, and related service providers.

We may use cookies, pixels, analytics tools, and advertising technologies to understand website activity and support marketing, subject to applicable law and your choices.

You may have privacy rights depending on your state, including rights to access, correct, delete, or opt out of certain uses of your personal information.

1. Information We Collect

We may collect information directly from you, automatically through our website, from Bask Health and healthcare partners, and from other third parties where permitted by law.

Information you provide to us may include:

Name, email address, phone number, mailing address, date of birth, and similar contact or identifying information.

Assessment responses, health goals, lifestyle information, treatment interests, and basic health information you choose to submit through Solaya MD forms or intake flows.

Account credentials, preferences, customer support messages, survey responses, feedback, and other communications.

Payment, subscription, billing, shipping, refund, and transaction-related information. Payment card details may be handled by our payment processors rather than stored directly by Solaya MD.

Photos, testimonials, reviews, or other content you choose to submit, where applicable.

Information collected automatically may include:

Device information, browser type, operating system, IP address, general location information, referring URLs, pages viewed, links clicked, session activity, and similar website usage data.

Information collected through cookies, pixels, local storage, SDKs, analytics tools, advertising tags, and similar technologies.

Email, SMS, and advertising engagement information, such as whether you opened a message, clicked a link, abandoned a checkout flow, or interacted with an advertisement.

Information from Bask Health, healthcare providers, pharmacies, and service partners may include:

Confirmation of eligibility, treatment status, prescription status, order status, refill status, shipping status, payment status, or other information needed to coordinate Services.

Information shared with us by Bask Health or other service partners under applicable agreements and legal permissions.

Operational information needed for customer support, billing, compliance, fraud prevention, service improvement, or account administration.

2. How We Use Information

We may use personal information for the following purposes:

To operate, provide, personalize, and improve the Solaya MD website and Services.

To help connect users with Bask Health and affiliated licensed healthcare providers for telehealth evaluation and treatment consideration.

To process payments, subscriptions, refunds, orders, shipping, customer support requests, and account administration.

To communicate with you about assessments, account activity, treatment-related operational updates, subscription notices, shipping updates, customer support, and other service-related matters.

To send marketing communications, promotions, educational content, abandoned cart reminders, and advertising, where permitted by law and subject to your opt-out choices.

To analyze website performance, understand customer behavior, improve user experience, measure advertising effectiveness, and develop new features or offerings.

To protect the safety, security, and integrity of our Services; prevent fraud; enforce our agreements; comply with legal obligations; and establish, exercise, or defend legal claims.

To create aggregated, de-identified, or anonymized information that no longer reasonably identifies you, which may be used for lawful business purposes.

3. How We Disclose Information

We may disclose personal information as described below, subject to applicable law and contractual safeguards where appropriate:

Bask Health and Healthcare Providers: We may disclose information to Bask Health and affiliated licensed healthcare providers so they can evaluate eligibility, provide telehealth services, make clinical decisions, issue prescriptions where appropriate, and support ongoing care.

Pharmacies, Fulfillment Partners, and Shipping Providers: We may disclose information needed to support prescription fulfillment, order processing, delivery, refill coordination, and related support.

Vendors and Service Providers: We may disclose information to companies that help us operate our business, including website hosting, customer support, payment processing, email and SMS delivery, analytics, advertising, security, fraud prevention, data storage, and operational tools.

Advertising and Analytics Partners: We may disclose or make available certain website usage data to advertising, analytics, and measurement partners through cookies, pixels, and similar technologies, subject to applicable law and your choices.

Professional Advisors: We may disclose information to attorneys, auditors, insurers, accountants, consultants, and other professional advisors.

Legal and Safety Purposes: We may disclose information to comply with law, subpoenas, court orders, law enforcement requests, regulatory obligations, or to protect rights, safety, privacy, property, and security.

Business Transactions: We may disclose information in connection with a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar corporate transaction.

With Consent or Direction: We may disclose information when you instruct us to do so, authorize us to do so, or otherwise consent.

4. Bask Health, Telehealth Services, and Medical Information

Bask Health is Solaya MD’s telehealth provider. Clinical services are provided by independent U.S.-licensed healthcare providers through Bask Health, not by Solaya MD. Information you provide through Bask Health portals, intake forms, medical questionnaires, provider communications, or related telehealth systems may be subject to Bask Health’s privacy practices, provider privacy notices, HIPAA notices, and other applicable healthcare privacy rules.

Solaya MD may receive limited information from Bask Health or related healthcare partners to operate the Services, such as eligibility status, prescription/order status, payment status, support needs, and other information needed to coordinate your experience. Where Solaya MD receives health-related information, we use and disclose it only as permitted by applicable law, applicable agreements, and this Policy.

If you have questions about clinical records, provider communications, protected health information, or medical privacy rights related to care delivered through Bask Health, you may need to contact Bask Health or the applicable healthcare provider directly.

5. Cookies, Pixels, Analytics, and Advertising Technologies

We and our service providers may use cookies, pixels, tags, local storage, analytics tools, advertising technologies, and similar technologies to operate our website, remember preferences, understand website performance, measure campaigns, personalize content, and deliver or measure advertising.

Types of technologies we may use include:

Necessary technologies: Used to operate the website, enable core functionality, maintain security, and process requests.

Performance and analytics technologies: Used to understand how visitors use the website and improve functionality.

Functionality technologies: Used to remember choices and personalize your experience.

Advertising technologies: Used to deliver, measure, and improve advertisements and marketing campaigns.

Most browsers allow you to remove or reject cookies through settings. Blocking cookies may affect website functionality. Some advertising partners also offer opt-out tools. Because opt-outs may be browser- or device-specific, you may need to repeat your choices on each browser and device you use.

We may not respond to browser-based “Do Not Track” signals unless required by law.

6. Email, SMS, and Marketing Communications

If you provide your email address or phone number, we may use it to send service-related communications, customer support messages, appointment or assessment reminders, order updates, subscription notices, educational content, promotions, and marketing communications, where permitted by law.

You may opt out of marketing emails by using the unsubscribe link in the email. You may opt out of SMS marketing by replying STOP to a text message. After opting out, you may still receive transactional or service-related communications, such as account, payment, order, shipping, support, or legally required notices.

Text messaging originator opt-in data and consent will not be shared with third parties for their own marketing purposes, except as necessary to provide messaging services or as otherwise permitted by law.

7. Consumer Health Data

Certain state laws, including the Washington My Health My Data Act and Nevada consumer health data laws, may define “consumer health data” broadly. Depending on how you interact with the Services and where you reside, information we collect may be considered consumer health data.

Categories of consumer health data we may collect may include information related to health goals, treatment interests, peptide therapy or wellness interests, medication use or interest, symptoms, medical history, measurements, provider eligibility decisions, prescription or order status, and information that could identify a person seeking health-related services.

We may collect, use, and disclose consumer health data to provide and coordinate Services, connect you with Bask Health and healthcare providers, process transactions and fulfillment, communicate with you, support customer service, improve the Services, maintain security, comply with law, and for other purposes described in this Policy or with your consent.

Subject to applicable law, you may have rights to confirm whether we collect, share, or sell consumer health data; access such data; delete such data; or withdraw consent for certain collection or sharing. You may submit a request using the contact information below.

8. Your Privacy Rights and Choices

Depending on where you live and how you interact with Solaya MD, you may have rights to:

Request access to personal information we maintain about you.

Request correction of inaccurate personal information.

Request deletion of certain personal information.

Request a copy of certain personal information in a portable format.

Opt out of certain targeted advertising, sale, or sharing activities where applicable.

Withdraw consent where processing is based on consent.

Appeal our decision if we deny a privacy request, where required by law.

To exercise privacy rights, contact us using the information in the “Contact Us” section below. We may need to verify your identity before processing a request. We will not discriminate against you for exercising privacy rights.

Some requests may be limited where fulfilling the request would interfere with legal obligations, medical record retention requirements, fraud prevention, security, another person’s rights, or our ability to provide requested Services.

9. California Privacy Notice

If you are a California resident, California privacy laws may provide additional rights regarding personal information. The categories of personal information we may collect include identifiers, customer records, commercial information, internet or electronic network activity, geolocation data, inferences, sensitive personal information where voluntarily provided or legally permitted, and other information described in this Policy.

We may collect, use, and disclose these categories for the purposes described in this Policy. We do not knowingly sell personal information in the traditional sense of exchanging it for money. However, certain uses of advertising cookies, pixels, and similar technologies may be considered “sharing,” “selling,” or targeted advertising under some state privacy laws. You may have the right to opt out of those activities where applicable.

We do not knowingly collect, sell, or share personal information of individuals under 18.

10. Data Retention

We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Policy, including to provide Services, maintain records, comply with legal, regulatory, tax, accounting, pharmacy, healthcare, and contractual obligations, resolve disputes, prevent fraud, and enforce agreements. Retention periods may vary based on the type of information, sensitivity of information, legal requirements, and business needs.

11. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. However, no website, system, transmission, or storage method is completely secure. We cannot guarantee absolute security. You are responsible for protecting your account credentials and notifying us if you believe your account or information may be compromised.

12. Children’s Privacy

The Services are intended for adults age 18 and older. We do not knowingly collect personal information from children under 18. If you believe a child has provided personal information to us, please contact us so we can take appropriate action.

13. Third-Party Websites and Services

Our website and Services may link to or integrate with third-party websites, platforms, payment processors, Bask Health systems, pharmacy partners, shipping providers, social media platforms, analytics providers, or advertising partners. We are not responsible for the privacy practices of third parties. Their privacy policies apply to their collection and use of information.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or Services. The updated version will be posted on our website with a revised “Last Updated” date. Where required by law, we will provide additional notice or obtain consent.

15. Contact Us

If you have questions about this Privacy Policy or would like to submit a privacy request, please contact:

Solaya MD

Email: support@solayamd.com

Website: https://solayamd.com

For questions about clinical records, protected health information, provider communications, or medical privacy rights related to care provided through Bask Health or its affiliated healthcare providers, please contact Bask Health or the applicable healthcare provider directly.