Privacy Policy

Privacy Policy

Last revised: September 9, 2026

Who We Are and What This Policy Covers

Glow Med Inc. operates OliveBird Med ("we," "us," or "our"). This policy describes our handling of personal information in connection with olivebirdmed.com, our branded online-visit service at go.olivebirdmed.com, our patient portal at my.olivebirdmed.com, and customer-support communications.

The public website provides information and links to the patient platform. Patient registration, health questionnaires, clinical communications, and payment take place through the patient platform, which uses Bask technology.

Independent medical professionals and pharmacies are responsible for the healthcare and dispensing services they provide. This policy describes Glow Med Inc.'s practices; it does not replace the applicable healthcare organization's Notice of Privacy Practices or authorize uses of health information that otherwise require your consent.

Information Handled Through the Services

The information involved depends on the service you use and the role of the organization processing it:

Clinical information is collected through the patient platform for the responsible healthcare organizations. Glow Med Inc. may process information to support the services only to the extent permitted by its role, applicable agreements, and law. Listing a category here does not mean that all Glow Med Inc. staff have access to your clinical record.

Payment-card information is handled through the checkout's payment service. Do not send full payment-card details to customer support.

Information may come from you, your authorized representative, your use of the services, or healthcare and service partners involved in fulfilling your request, as permitted by law.

How Information Is Used

We use information within our authorized role to operate the website, respond to requests, administer accounts and orders, coordinate requested services, resolve billing or delivery issues, protect against misuse, and meet applicable recordkeeping and legal obligations.

Healthcare professionals use clinical information to evaluate and provide care under their own responsibilities and privacy notices. Administrative support does not give Glow Med Inc. authority to make clinical decisions.

Any marketing use that requires consent is subject to a separate choice. Acceptance of this policy is not a blanket authorization to disclose medical information for advertising.

Disclosures and Service Providers

Information may be provided to the medical group, pharmacy, or other care organization involved in your request, as permitted by applicable law. Technology, hosting, communications, payment, and other service providers may process information needed for their assigned services.

Information may also be disclosed at your direction, with legally required authorization, or in response to a lawful obligation. A subpoena or other request does not remove applicable protections for health information.

Any disclosure connected with a business transfer remains subject to applicable privacy restrictions. This policy does not authorize unrestricted transfer or reuse of clinical records.

Cookies, Storage, and Advertising

Browser storage supports functions such as remembering language preferences, maintaining account sessions, and protecting access to the patient platform. Technical request information also supports delivery, security, and troubleshooting of the services. You can remove saved site data using your browser's controls; doing so may sign you out or reset preferences.

Our policy is not to sell personal information, share it for cross-context behavioral advertising, or use patient intake, account, payment, or clinical pages for advertising pixels or advertising session replay. Health-questionnaire answers, prescription information, clinical messages, and identity documents are not authorized for advertising use. Providers processing information solely to supply requested services are subject to their assigned role and applicable restrictions.

Any future optional analytics or advertising use outside those restrictions requires an updated disclosure and the consent or opt-out controls required by applicable law before that use begins. Merely accepting this Privacy Policy does not supply a separate health-data or marketing authorization. Contact contact@olivebirdmed.com with the subject "Privacy request" to raise a concern or exercise an applicable choice; we do not require you to create an account to make that request.

Blocking storage may affect account access or other features. Browser settings alone may not exercise every privacy right available under applicable law.

Health Information and HIPAA

HIPAA applies according to the information and the organization's legal role; not every website interaction is automatically protected health information under HIPAA.

For clinical records, consult the responsible medical group's and dispensing pharmacy's Notices of Privacy Practices. Those notices explain their permitted uses and disclosures, legal responsibilities, and how to exercise health-privacy rights. This document is not itself a replacement Notice of Privacy Practices for those organizations.

Within the responsible healthcare organization's authority, protected health information may be used for treatment and care coordination, payment administration, and healthcare operations such as quality review and required recordkeeping. Legally permitted public-health, oversight, or other mandatory disclosures remain subject to the applicable conditions. Glow Med Inc. does not acquire unrestricted permission to use clinical records merely because it coordinates a service.

Subject to applicable conditions and exceptions, HIPAA rights include requesting access and copies, requesting amendments, receiving an accounting of certain disclosures, requesting restrictions, requesting confidential communications, and obtaining a paper copy of the applicable notice. Restrictions are not always required to be granted; special rules may apply to disclosures to a health plan for care paid in full out of pocket. The responsible organization also provides breach notifications when required.

You may complain to the responsible healthcare organization or the U.S. Department of Health and Human Services Office for Civil Rights without retaliation. Information about the federal complaint process is available at https://www.hhs.gov/hipaa/filing-a-complaint/index.html. For records handled by Glow Med Inc. on behalf of a healthcare organization, we assist or route your request according to our role rather than independently changing the clinician's record.

Medical group: WASEF HEALTH, P.A., 7359 Sawgrass Point Drive N, Pinellas Park, FL 33782; contact@wasef-health.com.

Where an affiliated Wasef professional entity is identified for your encounter, use that entity's applicable notice and records contact.

For help obtaining Wasef Health's applicable Notice of Privacy Practices or reaching its clinical-records or privacy office, contact contact@wasef-health.com. Wasef Health also publishes privacy information at https://wasef-health.com/privacy.

Dispensing pharmacy: The Pharmacy Hub, 15600 NW 15th Ave, Suite C, Miami, FL 33169; telephone (888) 958-1382. Its published privacy contact is privacy@thepharmacyhub.com and its website privacy policy is https://www.thepharmacyhub.com/legal/privacy. Ask the pharmacy for the Notice of Privacy Practices applicable to your prescription; a website privacy policy is not necessarily that notice.

Requests and Choices

Contact us about personal information handled by Glow Med Inc. using the details below. Depending on applicable law and the circumstances, you may have rights to access, correct, delete, obtain a copy of, or restrict certain processing of your information, and to opt out of certain disclosures or withdraw consent. Legal exceptions may apply, including required record retention.

We may need information reasonably necessary to verify your identity and authority. Do not send identification documents or clinical records by ordinary email; ask for an appropriate secure method. If a request concerns records controlled by your medical group or pharmacy, we will explain where to direct it.

Where applicable, you may use an authorized agent and appeal a refusal by contacting us and stating that you wish to appeal. We will handle requests within the applicable legal timeframes. You may contact the relevant regulator about a privacy concern.

We do not retaliate or unlawfully discriminate against you for exercising a privacy right. State consumer-health privacy protections may apply even when HIPAA does not. This policy does not waive those protections or permit processing for which separate consent is required.

Closing an account or withdrawing from telehealth does not necessarily require deletion of a clinical record. Use the responsible organization's notice for health-record requests and complaints.

Communications

Use the patient portal for medical records and clinical messages. Ordinary email and text messages may be accessible to others who use your device or account and may not provide the same protection as portal communications.

You may ask about available communication alternatives. Marketing choices are separate from essential account or service notices. Withdrawing permission for marketing messages does not itself cancel an order or subscription.

You may unsubscribe from marketing email through its unsubscribe link or by contacting us. We do not sell or share mobile opt-in information with third parties for their own marketing. A separate marketing consent is not a condition of receiving care or purchasing a service.

Security and Retention

We use administrative, technical, and physical safeguards appropriate to the information we handle. No online system can guarantee complete security. Protect your credentials and report suspected unauthorized access.

Information is retained according to the service purpose, applicable recordkeeping duties, security needs, and legitimate dispute-resolution requirements. Healthcare organizations may have separate mandatory retention periods. We provide any incident notifications required by law.

Children and International Access

The OliveBird Med services described here are intended for adults aged 18 and older in eligible U.S. locations. They are not directed to children under 18. Contact us if you believe a child has supplied information inappropriately.

Accessing the website from another country does not establish eligibility for care or change the restrictions on service availability.

Changes and Contact

We will identify changes using the revision date and provide additional notice or obtain consent where required.

For website and administrative privacy requests, email contact@olivebirdmed.com with the subject "Privacy request." For clinical or pharmacy records, use the organization-specific contacts above.

Glow Med Inc., operator of OliveBird Med
1500 N Grant St, Suite R
Denver, CO 80203, United States
Email: contact@olivebirdmed.com
Website: https://olivebirdmed.com/
Patient portal: https://my.olivebirdmed.com/login

This is the website operator's company address, not a clinic, pharmacy, or medication-return address.