Clover Meds Privacy Policy and Notice of Privacy Practices

Effective Date: October 2, 2026

Clover Meds LLC ("Clover Meds," "we," "us," or "our") is a telehealth practice. This document explains how we collect, use, share, and protect your information when you use clovermeds.com, our patient portal, Clover Chat, our virtual assistant, text messages, email, phone calls, and our other services (together, the "Services").

It has two parts:

• Part 1, Privacy Policy, applies to everyone who uses the Services.
• Part 2, Notice of Privacy Practices, explains how we use and protect your health information as a patient, and your rights regarding it. If the two parts conflict about health information, Part 2 controls.

Part 1: Privacy Policy

1. Information We Collect

Information you give us.

• Contact and account information, such as your name, email address, phone number, shipping address, date of birth, and sex.
• Health information, such as your questionnaire answers, medical history, current medications, allergies, height, weight, symptoms, prior treatment, and messages with your provider.
• Identity verification information: a photo of your government-issued ID and a selfie.
• Documents you upload, such as a photo of a prior prescription.
• Payment information, which is collected and processed by our payment processor.
• Communications with us, including Clover Chat messages, virtual assistant conversations, emails, text messages, and phone calls.

Information from others. Laboratories send us your test results (for example, for testosterone therapy). Pharmacies and carriers send us order, fulfillment, and shipping status. Our payment processor sends us payment status.

Information collected automatically. When you use our website or portal, we and our service providers collect device and usage information, such as IP address, browser and device type, pages visited, referring links, ad click identifiers, and the date and time of your visit, using cookies and similar technologies (see Section 5).

2. Identity Verification

To confirm your identity before treatment, we ask for a photo of your government-issued ID and a selfie. A member of our care team visually compares them. We do not use facial recognition technology and do not create or store biometric identifiers, such as face geometry scans.

3. How We Use Information

• To provide care and the Services, including provider review, prescriptions, pharmacy orders, laboratory testing, shipping, and customer support.
• To communicate with you about your account, orders, appointments, follow-ups, refills, and care.
• To tell existing patients about our own treatments, services, and offers. You can opt out at any time (see Section 11).
• To process payments, prevent fraud, and keep the Services secure.
• To understand how our website is used and to measure and improve our advertising, without using your health information (see Section 5).
• To improve the Services, train our team, and maintain quality.
• To comply with law, respond to legal requests, and protect our rights and the safety of others.

4. How We Share Information

We do not sell your personal information. We share information only as described here:

• Your providers and care team, to provide and coordinate your care.
• Pharmacies, to fill and ship your prescriptions.
• Laboratories, to perform tests your provider orders.
• Payment processors, to process payments and refunds.
• Service providers that help us operate, such as hosting, patient portal, customer relationship management, email, text messaging, phone, customer support, and analytics vendors. They may use information only to provide services to us. Vendors that handle health information on our behalf sign business associate agreements or equivalent written agreements requiring them to protect it.
• Advertising and analytics partners, limited to device and usage information and the fact that a sign-up or purchase occurred, with its value. We do not send these partners your questionnaire answers, treatment, prescriptions, or other health information, and we do not send them your name, email address, or phone number.
• Legal and safety, when required by law, in response to valid legal process, to protect the rights, property, or safety of you, us, or others, or as described in Part 2.
• Business transfers, as part of a merger, acquisition, or sale of assets, subject to this Policy, with notice to you.
• With your permission, for any other purpose you authorize.

5. Cookies and Tracking Technologies

We use cookies, pixels, tags, and similar technologies, including server-side tools that let us control what data is sent, for these purposes:

• Essential: to sign you in, keep your session secure, and run checkout and the patient portal.
• Functional: to remember your preferences.
• Analytics and testing: to understand how our website is used and to test improvements.
• Advertising measurement: to understand which ads lead to sign-ups and purchases, using partners such as Google and Meta. As described in Section 4, we configure these tools so that they do not send your health information, name, email address, or phone number.

Your choices. You can block or delete cookies in your browser settings; some parts of the Services may not work without essential cookies. You can also adjust ad settings with Google (adssettings.google.com) and Meta (in your Facebook or Instagram ad preferences). Our website does not currently respond to "Do Not Track" browser signals.

6. Text Messages

If you provide your mobile number, we send text messages about your account and care, such as sign-in codes, order and shipping updates, and refill and follow-up reminders. If you separately opt in, we may also send marketing texts. Message frequency varies, and message and data rates may apply. Reply STOP to opt out or HELP for help.

We do not share or sell your mobile number or text messaging opt-in consent with third parties or affiliates for their marketing purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, except with service providers that help us deliver our messages.

7. Virtual Assistant

Our website uses an AI virtual assistant to answer general questions. Your conversations are stored and processed by our AI service provider to generate responses. The assistant is not a medical provider. Please do not share detailed health information with the virtual assistant; for questions about your health or care, message your provider through the patient portal.

8. Phone Calls

Calls with Clover Meds may be recorded and transcribed, including by automated tools, for quality, training, and record keeping. We tell you at the start of the call.

9. How Long We Keep Information

We keep medical records and related information for as long as required by federal and state law and our professional obligations, even if you close your account. We keep other information only as long as needed for the purposes described in this Policy, to comply with law, resolve disputes, and enforce our agreements. We keep identity verification images only as long as needed to verify your identity and meet our record-keeping obligations.

10. How We Protect Information

We use administrative, technical, and physical safeguards designed to protect your information, including encrypted connections, access controls, and written agreements with vendors that handle health information. No system is completely secure, but if a breach affects your health information, we will notify you as required by law.

11. Your Choices and Rights

• Access and correction: you can request a copy of your health information or ask us to correct it, as described in Part 2.
• Marketing: unsubscribe from marketing emails using the link in any email, reply STOP to marketing texts, or contact us. You will still receive messages about your account and care.
• Cookies: see Section 5.
• Closing your account: contact us to close your account. We will delete or de-identify information we are not required to keep; medical records are retained as required by law.
• State rights: depending on where you live, you may have additional rights under state law. Contact us to make a request; we will verify your identity before responding and will not discriminate against you for exercising your rights.

12. Adults Only

The Services are for adults 18 and older. We do not knowingly collect information from anyone under 18. If you believe a minor has given us information, contact us and we will delete it as permitted by law.

13. Where Information Is Stored

We provide the Services in the United States, and your information is stored and processed in the United States.

14. Changes to This Document

We may update this document. The Effective Date at the top shows when it was last changed. If we make a material change, we will notify you by email or through the patient portal before it takes effect.

Part 2: Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Our Responsibilities

• We are required to maintain the privacy and security of your protected health information ("health information").
• We will let you know promptly if a breach occurs that may have compromised the privacy or security of your health information.
• We must follow the duties and privacy practices described in this notice and give you a copy of it.
• We will not use or share your health information other than as described here unless you tell us we can in writing. If you give us permission, you may change your mind at any time by telling us in writing.

How We Use and Share Your Health Information

Treatment. We use your health information and share it with others involved in your care. Example: your provider reviews your questionnaire and sends your prescription to a pharmacy, or orders labs from a laboratory.

Payment. We use your information to bill and collect payment for your care. We do not bill health insurance.

Health care operations. We use your information to run our practice, improve your care, and contact you when necessary. Examples: quality reviews, training, customer support, and service provider (business associate) support.

Our own services and reminders. We may contact you about follow-ups, refills, and other treatments and services we offer. You can opt out of promotional messages at any time.

Other Ways We May Share Your Health Information

We are allowed or required to share your information in other ways, usually in ways that contribute to the public good, such as public health and research. We have to meet many conditions in the law before we can share it for these purposes:

• Public health and safety: for example, reporting adverse reactions to medications to the FDA, or preventing a serious threat to someone's health or safety.
• Research: only as permitted by law.
• Comply with the law: including with the Department of Health and Human Services if it wants to confirm we are complying with federal privacy law.
• Health oversight: to agencies for activities authorized by law, such as audits, inspections, and licensure.
• Law enforcement and legal actions: in response to a court or administrative order, subpoena, or other lawful process, or for law enforcement purposes as permitted by law.
• Other government requests: such as workers' compensation claims, coroners or medical examiners, and special government functions such as national security, as permitted by law.

Uses That Require Your Written Permission

We will never sell your health information or use it for marketing (as defined by federal law) unless you give us written permission. Any other use or sharing not described in this notice requires your written permission, which you may revoke at any time.

Your Choices

You can tell us whether we may share information with family members, close friends, or others involved in your care or payment. If you are not able to tell us your preference, for example if you are unconscious, we may share information if we believe it is in your best interest, or when needed to lessen a serious and imminent threat to health or safety.

Your Rights

• Get a copy of your health records. You can ask to see or get an electronic or paper copy of your medical record and other health information we have about you. We will provide it, usually within 30 days of your request, and may charge a reasonable, cost-based fee.
• Ask us to correct your records. You can ask us to correct health information you think is incorrect or incomplete. We may say no, but we will tell you why in writing within 60 days.
• Request confidential communications. You can ask us to contact you in a specific way (for example, by email only) or at a different address. We will say yes to all reasonable requests.
• Ask us to limit what we use or share. You can ask us not to use or share certain health information for treatment, payment, or operations. We are not required to agree if it would affect your care. If you pay for a service in full out of pocket, you can ask us not to share that information with your health insurer, and we will say yes unless a law requires us to share it.
• Get a list of those with whom we've shared information. You can ask for a list (accounting) of the times we've shared your health information for six years before the date you ask, who we shared it with, and why. It will include all disclosures except those for treatment, payment, and health care operations, and certain others (such as any you asked us to make). We provide one list a year free and may charge a reasonable, cost-based fee for additional lists within 12 months.
• Get a copy of this notice. You can ask for a paper copy at any time, even if you agreed to receive it electronically.
• Choose someone to act for you. If you have given someone medical power of attorney or someone is your legal guardian, that person can exercise your rights. We will confirm the person has this authority before we take any action.
• File a complaint if you feel your rights are violated. Contact our Privacy Official (below). You can also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights at 200 Independence Avenue, S.W., Washington, D.C. 20201, by calling 1-877-696-6775, or at www.hhs.gov/ocr/complaints. We will not retaliate against you for filing a complaint.

To exercise any of these rights, contact our Privacy Official in writing at the address or email below.

State Law

Where state law gives your health information more protection than federal law (for example, for certain sensitive information), we follow the more protective law.

Changes to This Notice

We can change the terms of this notice, and the changes will apply to all information we have about you. The new notice will be available on our website and in the patient portal, and we will provide a copy on request.

Contact Us and Privacy Official

Irene Vinokur, FNP-C
Privacy Official, Clover Meds LLC
8051 N Tamiami Trail, Suite E6
Sarasota, FL 34243
(888) 618-8820
[email protected]