Privacy Policy

Meridian Vitality LLC ("Meridian," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit meridian-vitality.com, create or use an account, complete an online assessment or intake, use our technology and administrative services, enroll in a membership or other offering, communicate with us, or otherwise interact with us (collectively, the "Services").

1. Meridian's role and the scope of this Policy

Meridian provides technology, administrative, care-coordination, and membership services. Meridian is not a medical practice and does not independently diagnose, prescribe, dispense medication, or make treatment decisions. Medical services are provided by licensed healthcare professionals affiliated with an independent physician group supported through MD Integrations ("MDI") or another disclosed clinical partner. Those healthcare professionals exercise independent clinical judgment.

This Privacy Policy applies to information controlled by Meridian. A treating provider, physician group, pharmacy, laboratory, payment processor, or other independent organization may control information under its own privacy notice. In particular, a healthcare provider's Notice of Privacy Practices describes how that provider uses and discloses protected health information under the Health Insurance Portability and Accountability Act ("HIPAA"), when HIPAA applies. This Privacy Policy does not replace a provider's Notice of Privacy Practices.

When Meridian handles protected health information on behalf of a HIPAA-covered healthcare provider under a business associate agreement, Meridian uses and discloses that information as permitted by the agreement, the provider's Notice of Privacy Practices, and applicable law.

Our separate Consumer Health Data Privacy Notice provides additional information about consumer health data and rights under state consumer health privacy laws. Our Privacy Choices page explains how to submit a request.

2. Personal information we collect

Depending on how you use the Services, we may collect the following categories of personal information:

• Contact and identity information, such as your name, email address, telephone number, mailing address, date of birth, age, and other information used to identify or contact you.
• Account information, such as your username, password or authentication credentials, account settings, membership status, and communication preferences.
• Assessment, intake, and health-related information, such as height, weight, body-composition information, health history, symptoms, allergies, current and prior medications or supplements, pregnancy-related information, safety-screening responses, laboratory information, lifestyle information, nutrition, activity, sleep, goals, provider communications, treatment response, and information you choose to place in notes or messages.
• Transaction and payment information, such as products or services selected, billing address, payment status, transaction history, refunds, and limited payment-card information. Our payment processor generally receives and processes full payment-card details on our behalf.
• Communications, including messages, support requests, call or chat details, survey responses, and records of your consent or preferences.
• Device and usage information, such as IP address, browser type, device identifiers, operating system, referring pages, pages viewed, links clicked, approximate location derived from IP address, session information, and diagnostic or security logs.
• Organized information and inferences, such as summaries, trends, or classifications created from information you provide so it can be displayed or presented for review. Technology may organize information, but it does not independently diagnose conditions, prescribe medication, or replace a licensed provider's clinical judgment.

Please do not send Social Security numbers, full payment-card numbers, medical records, or other sensitive information through ordinary email unless we specifically ask you to use an approved secure method.

3. Sources of personal information

We may collect personal information:

• directly from you, including through forms, assessments, account activity, messages, and customer-support interactions;
• automatically from your browser or device through cookies, logs, and similar technologies;
• from healthcare providers, MDI, pharmacies, laboratories, and other care participants when necessary to provide a service you request or when you authorize the exchange;
• from payment processors, identity-verification, fraud-prevention, communications, hosting, analytics, and other service providers;
• from a connected device, wearable, or third-party service only if you choose to connect it or direct that information be provided; and
• from public or legally available sources when needed for security, fraud prevention, compliance, or business administration.

4. How we use personal information

We may use personal information to:

• provide, maintain, personalize, and improve the Services;
• create and secure accounts and authenticate users;
• process an assessment or intake and make information available to licensed providers for their review;
• coordinate requested services among you, licensed providers, MDI, pharmacies, laboratories, and other service participants;
• organize and display submitted information, results, communications, and changes over time for you and licensed providers to review;
• process payments, maintain transaction records, prevent fraud, and administer memberships or other purchases;
• communicate about accounts, appointments, orders, safety information, support, policy changes, and other service-related matters;
• send marketing communications where permitted and consistent with your choices, without using consumer health data for targeted advertising;
• understand general website use, troubleshoot, protect the Services, and improve performance;
• enforce our agreements, protect rights and safety, investigate suspected misuse, and comply with legal, regulatory, licensing, accreditation, and certification obligations; and
• create aggregated or de-identified information that is not reasonably linkable to an individual, and use that information as permitted by law.

We will not collect, use, or disclose additional categories of consumer health data for materially different purposes without providing any notice and obtaining any consent required by law.

5. How we disclose personal information

We may disclose personal information to the following categories of recipients when reasonably necessary for the purposes described above:

• Licensed providers, physician groups, and MDI. We disclose information needed to evaluate an intake, provide requested clinical services, coordinate care, and support provider communications. Clinical decisions remain solely with the treating provider.
• Pharmacies, laboratories, and care-support organizations. If a provider orders or you request an applicable service, information may be disclosed to the selected licensed pharmacy, laboratory, shipping provider, or other organization needed to fulfill that service.
• Service providers and processors. These may include cloud-hosting, security, communications, customer-support, payment-processing, identity-verification, analytics, document-management, and professional-adviser vendors. They may use information only to provide contracted services or as otherwise permitted by law.
• Business transaction participants. Information may be disclosed in connection with a proposed or completed financing, merger, acquisition, reorganization, sale of assets, bankruptcy, or similar transaction, subject to applicable confidentiality and legal requirements.
• Government, legal, and safety recipients. We may disclose information when required by law, legal process, licensing or regulatory obligations, or when reasonably necessary to protect rights, safety, security, or the integrity of the Services.
• Recipients you direct or authorize. We may disclose information when you ask us to, provide consent, or intentionally use a feature designed to send information to another person or service.

Meridian does not sell consumer health data. Meridian does not use or disclose consumer health data for targeted advertising. Meridian does not sell personal information for money. We may use limited, non-health website activity for analytics and service improvement. If applicable law treats a particular non-health disclosure as a "sale" or "sharing," we will honor legally required opt-out requests and browser-based preference signals.

6. Cookies and similar technologies

We and service providers acting on our behalf may use cookies, pixels, local storage, and similar technologies for functions such as security, authentication, preferences, performance measurement, and general analytics. You can adjust browser settings to restrict cookies, but doing so may prevent some Services from working correctly.

We do not use information entered into health intake forms or authenticated health-related areas for targeted advertising. Where required by law, we honor recognized browser-based opt-out preference signals, such as Global Privacy Control, for the browser or device sending the signal.

7. Data retention

We retain personal information for as long as reasonably necessary to provide the Services, complete transactions, maintain appropriate business and security records, meet legal and regulatory obligations, resolve disputes, and enforce agreements. Retention periods vary based on the type of information, the purpose for which it was collected, the sensitivity of the information, and applicable legal requirements.

When information is no longer reasonably necessary, we may delete, de-identify, or securely archive it as permitted by law. Clinical records controlled by a healthcare provider are retained under the provider's policies and applicable medical-record laws, not Meridian's general retention schedule.

8. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encrypted transmission where appropriate, access controls, logging, vendor management, and security monitoring. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for protecting account credentials and promptly notifying us if you suspect unauthorized access.

9. Your privacy rights and choices

Depending on where you live and subject to legal exceptions, you may have rights to:

• confirm whether we process personal information about you;
• access or obtain a copy of personal information;
• correct inaccurate personal information;
• delete personal information;
• obtain information about categories of information, sources, purposes, and recipients;
• withdraw consent for future collection or disclosure where processing is based on consent;
• opt out of a sale, sharing for cross-context behavioral advertising, or targeted advertising, if applicable;
• appeal a denial of a privacy request; and
• exercise rights without unlawful discrimination.

To exercise a right, visit Privacy Choices, email support@meridian-vitality.com with the subject line "Privacy Request," call 404-805-5761, or write to the address in Section 15. We may need to verify your identity and authority before completing a request. We will respond within the time required by applicable law.

Certain information may be exempt from a request, including information governed by HIPAA or another medical-privacy law, information maintained by an independent healthcare provider, records we must retain to comply with law, and information needed for security, fraud prevention, legal claims, or completion of a transaction you requested.

10. Communications choices

You may unsubscribe from marketing email by using the unsubscribe link in the message. You may opt out of marketing text messages by replying STOP. Even if you opt out of marketing, we may continue to send non-marketing messages about your account, requested services, safety, transactions, or our relationship with you.

11. Children and eligibility

The Services are intended for adults age 18 and older. We do not knowingly collect personal information through the Services from children under 18. If you believe a child has provided personal information, contact us so we can review and take appropriate action.

12. Third-party services

The Services may link to or interoperate with websites and services controlled by other organizations. Their privacy practices are governed by their own notices. We encourage you to review those notices before providing information.

13. International use

The Services are intended for use in the United States. If you access the Services from another country, information may be processed in the United States, where privacy laws may differ from those in your location.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version and revise the effective date. If a change materially affects how we use previously collected personal information, we will provide any additional notice or obtain any consent required by law.

15. Contact the Privacy Officer

Privacy Officer
Meridian Vitality LLC
11175 Cicero Drive, Ste. 100
Alpharetta, GA 30022
Email: support@meridian-vitality.com
Phone: 404-805-5761