Privacy Policy

Last updated: September 8, 2026

Overview

This Privacy Policy governs your access to and use of the website and services provided by Embody, doing business as Embody ("Embody," "we," "us," or "our"). By accessing or using our website, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the website and services.

This Privacy Policy is intended for users residing in the United States. If you access the website from outside the United States, this Privacy Policy may not apply.

Minors

Our website and services are not intended for individuals under the age of 18. We do not knowingly collect personal information from anyone under 18 without verified parental or guardian consent. If we become aware that we have collected personal information from a minor without such consent, we will promptly delete that information. If you believe we may have collected information from a minor, please contact us at support@bloome.health.

Personal Information We Collect

We may collect the following categories of information:

  • Personal Information: Name, email address, phone number, mailing address, demographic data, and billing information.
  • Account Information: Username and password.
  • Device Information: IP address, browser type, operating system, and browsing activity.
  • Location Information: Approximate geographic location based on your device.
  • Usage Information: Information about how you interact with the website and services.

Medical Information

If you request or receive telehealth services through Embody, we may collect medical information, including:

  • Medical history and demographic information necessary for diagnosis or treatment
  • Information regarding current health conditions, medications, or symptoms shared with healthcare providers

How We Collect Information

We collect information directly from you when you:

  • Register for an account
  • Complete forms or surveys
  • Purchase products or services
  • Communicate with us through the website

We also use cookies and similar technologies to collect usage and technical data. Cookies help us understand user preferences, enhance website functionality, and improve overall performance.

How We Use Personal Information

We may use your information to:

  • Provide, operate, and improve our services and products
  • Process transactions and fulfill requests
  • Communicate important service-related updates and, where permitted, marketing communications
  • Analyze usage trends to improve website performance and user experience
  • Comply with applicable laws, regulations, and legal obligations

Information Sharing

We may share your information with:

  • Healthcare Providers to facilitate telehealth services
  • Pharmacies within our network for prescription fulfillment
  • Third-Party Service Providers that support our operations
  • Regulatory or Legal Authorities when required by law

Text messaging originator opt-in data and consent will not be shared with third parties. We do not sell personal information. Mobile information will not be sold or shared for marketing or promotional purposes.

Your Choices

You may opt out of marketing communications, manage cookies through browser settings, and request updates or deletion of your account by contacting support@bloome.health.

Security

We implement reasonable safeguards to protect personal information; however, no system can be guaranteed to be completely secure.

Updates to This Privacy Policy

We may update this Privacy Policy periodically. Continued use of the website constitutes acceptance of the updated policy.

HIPAA Notice of Privacy Practices

Where applicable, this Notice describes how Embody may use and disclose your Protected Health Information (PHI) and how you can access this information.

Where HIPAA applies to a healthcare provider or other covered participant in your care, that participant must protect your protected health information and provide the notices required by law. The applicable provider notice governs those activities; this website notice does not represent that every storefront activity is subject to HIPAA.

Uses and Disclosures of PHI

We may use and disclose PHI for:

  • Treatment
  • Payment
  • Healthcare Operations
  • Legal and regulatory compliance
  • Public health and safety activities
  • Health oversight activities
  • Judicial and administrative proceedings
  • Law enforcement purposes
  • Organ and tissue donation
  • Workers' compensation programs
  • Military and veterans' activities
  • Correctional institution disclosures

Your Rights Regarding PHI

You have the right to:

  • Access and obtain copies of your PHI
  • Request amendments to your PHI
  • Receive an accounting of disclosures
  • Request restrictions on use or disclosure
  • Request confidential communications
  • Obtain a paper copy of this Notice
  • Be notified of breaches of unsecured PHI

Transmission of PHI

Applicable healthcare participants are responsible for safeguards required by law. Please consult the relevant provider's privacy notice for details about protected health information.

Changes to This Notice

We may revise this Notice at any time. Revisions apply to all PHI we maintain.

Complaints

You may file a complaint with our Privacy Officer or the U.S. Department of Health and Human Services without fear of retaliation.