How MOVA handles personal information

This Privacy Policy applies to personal information handled by MOVA through the MOVA website, checkout experience, communications, and related support services. It does not replace a clinician’s or pharmacy’s own privacy notice.

MOVA provides technology, coordination, education, checkout, and support services. When clinical care is available, licensed healthcare professionals make independent decisions about diagnosis, treatment, and prescribing.

Depending on how you use MOVA, information may include:

• identity, age, contact details, and account information;
• health goals, measurements, medical history, medications, allergies, treatment preferences, and intake responses;
• order, transaction, billing, and payment-token information supplied by authorized third-party payment processors;
• messages, support requests, telehealth interactions, and records supplied by participating providers;
• device, browser, IP address, security, and website usage information.

Do not submit information about another person unless you have lawful authority to do so.

MOVA may receive information directly from you, from your device and use of the service, and from participating clinicians, pharmacies, payment processors, support providers, and other parties you direct or authorize.

Information may be used to:

• operate, secure, personalize, and support the service;
• coordinate eligibility review and clinical services;
• process product-order transactions and prevent fraud;
• communicate about care, orders, billing, and support;
• maintain records, comply with law, and protect legal rights;
• improve service quality using information appropriately limited or de-identified where feasible.

Information may be disclosed as needed to participating licensed healthcare providers and their medical practices, participating pharmacies and fulfillment partners, authorized third-party payment processors, hosting, security, communications, customer-support, analytics, and other service providers operating under appropriate contractual or legal obligations.

Information may also be disclosed when you direct it, during a business transaction, to comply with legal process, to protect safety and rights, or with your consent. MOVA does not sell or share personal information for cross-context behavioral advertising as those terms are defined by applicable privacy law. MOVA does not use sensitive health information for targeted advertising.

Health-related information is collected and used to provide the service you request, coordinate care, communicate with you, maintain security, and satisfy legal obligations. Depending on applicable law, you may have rights to access, correct, delete, or withdraw consent for certain health-data processing. See Privacy Choices.

This website Privacy Policy is not, by itself, a HIPAA Notice of Privacy Practices. A participating healthcare provider or other HIPAA-regulated entity will provide its own notice when required. That notice explains how protected health information may be used and disclosed and how to exercise HIPAA rights.

If a provider notice applies, it will be supplied during the clinical workflow.

MOVA may use cookies and similar technologies that are necessary for authentication, security, preferences, and service operation. When enabled by MOVA and allowed by the visitor, one or more Meta Pixels may be used on the public homepage for basic advertising measurement. It is not used on product-detail, health-intake, checkout, payment, patient, or administrative areas, and MOVA does not intentionally send health questionnaire answers, contact details, payment details, or order identifiers to Meta. Visitors can decline or reopen Cookie preferences from the site footer. Health intake, checkout, and patient areas are not used for cross-context behavioral advertising.

Information is retained for as long as reasonably necessary for the purposes described here, including providing services, maintaining clinical and transaction records, resolving disputes, preventing fraud, and meeting legal requirements. Different records may have different required retention periods.

MOVA uses administrative, technical, and physical safeguards designed to protect information. No system can guarantee absolute security, so use a strong password, protect your devices, and contact MOVA if you suspect unauthorized access.

Depending on your location, you may request access, correction, deletion, or portability; withdraw certain consent; opt out of certain sales, sharing, targeted advertising, or profiling; limit certain sensitive-data uses; or appeal a denied request. MOVA will not discriminate against you for exercising a legally protected right. See Privacy Choices for request methods.

MOVA is intended for people age 18 and older. MOVA does not knowingly offer the service to younger children. If you believe a child submitted information contrary to this policy, contact the privacy team.

Services are intended for jurisdictions where the relevant clinicians, pharmacies, and services are legally available. If information is processed outside your state or country, MOVA will use safeguards required by applicable law. Accessing the public website from another location does not mean clinical services are available there.

MOVA may update this policy as practices or laws change. The updated version will be posted with a new effective date, and material changes may be highlighted through the service before they take effect.