California Privacy
Last updated
1.Scope
This Notice does not apply to information governed by HIPAA or the California Confidentiality of Medical Information Act (“CMIA”), or to other information exempt from the CCPA (such as certain employment and financial information). Your protected health information is handled under our HIPAA Notice of Privacy Practices.
2.Categories of Personal Information We Collect
In the prior 12 months we have collected the following categories of personal information from California residents:
- Identifiers — name, address, email, phone number, account ID, IP address.
- Customer records — billing address, payment card information, government-issued identification when required for prescription dispensing.
- Protected classifications — age, sex, and other characteristics relevant to clinical eligibility.
- Commercial information — products and subscriptions purchased, transaction history.
- Health & biometric information — intake responses, weight, height, vital signs, photos you submit, and lab results (much of which is also PHI governed by HIPAA).
- Internet activity — browser type, device, pages viewed, referrer, cookie identifiers.
- Geolocation — approximate location derived from IP address.
- Inferences — preferences and characteristics derived from the above.
We do not knowingly collect: precise geolocation, biometric identifiers used to identify a person, education records subject to FERPA, or genetic data.
3.Sources of Personal Information
We collect information directly from you (intake forms, account, messaging, support requests), automatically from your device, and from service providers acting on our behalf (pharmacies, payment processors, identity verification, analytics, shipping carriers, lab vendors).
4.Business & Commercial Purposes
We use personal information to provide clinical and pharmacy services; verify identity and eligibility; process payments and subscriptions; ship medications; communicate appointment, shipping, and care updates; provide customer support; secure the Service and detect fraud; improve and personalize the Service; and comply with legal obligations.
5.Sharing & Disclosure
We disclose personal information to: the Affiliated Medical Group and its Clinicians; partner pharmacies and laboratories; payment processors; shipping carriers; identity-verification providers; cloud, hosting and security vendors; analytics and customer-support tools; and as required by law or to protect rights and safety. We require service providers to limit their use of personal information to the purposes for which they were engaged.
6.No Sale of Personal Information
We do not sell personal information for money. We do not knowingly “share” personal information for cross-context behavioral advertising as that term is defined by the CCPA. If we ever change this practice, we will update this Notice and provide an opt-out.
7.Your California Rights
Subject to verification, California residents have the right to:
- Know what personal information we collect, use, disclose, and (if applicable) sell or share about you.
- Access and obtain a portable copy of your personal information.
- Delete personal information we collected from you, subject to legal exceptions (including medical-record retention).
- Correct inaccurate personal information.
- Limit the use and disclosure of sensitive personal information to what is necessary to provide the Service.
- Opt out of any sale or sharing of personal information (we do not currently engage in either).
- Non-discrimination for exercising any of these rights.
8.Sensitive Personal Information
The CCPA defines certain information as “sensitive” (such as government identifiers, account log-in credentials, precise geolocation, racial or ethnic origin, the contents of private communications, and health information). We use sensitive personal information only to provide the Service you requested, to comply with the law, and for other purposes permitted by the CCPA.
9.Minors
Our Service is intended for adults 18 and older. We do not knowingly collect personal information from minors and do not sell or share the personal information of minors.
10.How to Exercise Your Rights
Submit a request by emailing hello@zepym.com with “California Privacy Request” in the subject line, or by calling +1 (877) 959-3796. You may use an authorized agent; we will require written authorization and verification.
11.Verification
To protect your information, we will ask you to verify your identity before fulfilling a request. The verification we ask for will be proportionate to the sensitivity of the information involved.
12.Appeals & Non-Discrimination
If we deny your request, you may appeal by replying to our decision. We will not deny services, charge different prices, or provide a different level of quality because you exercised your privacy rights.
13.Changes to This Notice
We may update this Notice from time to time. The “Effective Date” above will reflect the most recent change.
14.Contact
Questions about this Notice? Email hello@zepym.com or write to WYNTON LLC d/b/a Zepym Health, Attn: Privacy, at the address listed in our Privacy Policy.





