Privacy Policy

AmalfiDuo™ is operated by BeMediq LLC, doing business as AmalfiDuo™ (“AmalfiDuo,” “we,” “our,” or “us”).

This Privacy Policy explains how we collect, use, disclose, and protect personal information when you:
- Visit an AmalfiDuo website that links to this policy;
- Create or use an AmalfiDuo account;
- Complete an online intake or request telehealth services;
- Purchase or manage a treatment program;
- Communicate with AmalfiDuo; or
- Otherwise interact with our websites, patient portal, or related services.

We refer to these collectively as the “Services.”

AmalfiDuo coordinates access to telehealth services through the Nexu Health platform. Medical services are provided independently by licensed healthcare professionals practicing through Beluga Health, P.A. Pharmacy services are provided by independent licensed pharmacies.

This Privacy Policy is incorporated into the AmalfiDuo Terms of Service.

Please read this Privacy Policy carefully. If you do not agree with it, do not use the Services.

Some information collected through the Services may constitute protected health information (“PHI”) under the Health Insurance Portability and Accountability Act (“HIPAA”).

PHI maintained by Beluga Health, participating healthcare providers, dispensing pharmacies, or their business associates is governed by the applicable Notice of Privacy Practices and HIPAA, rather than solely by this Privacy Policy.

Consumer health information that is not governed by HIPAA may be subject to state consumer-health privacy laws and is addressed in the separate AmalfiDuo Consumer Health Data Privacy Policy.

This Privacy Policy applies primarily to personal information collected or maintained by BeMediq LLC in operating AmalfiDuo’s website, accounts, payments, communications, customer support, and administrative services.

The information we collect depends on how you interact with AmalfiDuo.

Information You Provide

We may collect:

‍Contact and account information

- NameDate of birth
- Email address
- Telephone number
- Mailing and shipping address
- Account credentials

‍Health and treatment information
- Medical history
- Symptoms and health concerns
- Current medications and supplements
- AllergiesBlood-pressure information and other health measurements
- Pregnancy, breastfeeding, reproductive, menstrual, or menopause information
- Sexual-health concerns and treatment goals
- Responses to intake forms and eligibility questions
- Provider communications, prescription status, and refill information

‍Transaction information
- Treatment or service requested
- Order history
- Refill or recurring-order preferences
- Payment status
- Shipping and fulfillment information
- Cancellation or support requests
Payment-card information is generally collected and processed directly by an authorized payment processor. AmalfiDuo may receive limited information such as payment status, card type, expiration date, and transaction identifiers.

‍Communications
- We collect information you provide when you:
- Contact customer support;
- Send an email, form, or text message;
- Communicate through the patient portal;
- Respond to a survey; or
- Submit feedback.

Information Collected Automatically
When you use the Services, we and our authorized service providers may automatically collect:
- IP addressBrowser and device type
- Operating system
- Referring and exit pages
- Pages viewed
- Links or buttons selected
- Access dates and times
- Approximate location derived from an IP address
- Session and authentication information
- Error logs
- Website-performance information
- Security and fraud-prevention data
We do not knowingly collect precise GPS location unless it is needed for a requested service and appropriate notice or consent has been provided.

Information From Providers, Pharmacies, and Vendors
‍We may receive information from:
- Beluga Health and participating healthcare professionals;
- Dispensing pharmacies;
- Nexu Health;Payment processors;
- Identity or eligibility-verification providers;
- Hosting and cybersecurity providers;
- Communications and customer-support vendors; and
- Shipping and delivery providers.
This information may include provider-review status, prescription status, refill information, payment confirmation, pharmacy-processing updates, and shipment status.

We and authorized service providers may use cookies, server logs, pixels, tags, local storage, and similar technologies to:
- Operate and secure the Services;Authenticate users;
- Maintain account sessions;Remember preferences;
- Prevent fraud;Understand website performance;Identify technical problems;
- Measure communications; and
- Evaluate marketing on public website pages, where permitted.

You may manage optional cookies through the website’s cookie-preference or Privacy Choices tool and through your browser settings. Disabling certain cookies may affect website functionality.

Sensitive and Authenticated Areas
We do not permit advertising technologies to collect information entered into:
- Clinical intake forms;
- Authenticated patient accounts;
- Provider communications;
- Prescription records; orPatient-portal pages.
We do not use clinical intake responses, diagnoses, prescriptions, provider communications, or authenticated patient information for targeted advertising.

We may use personal information to:
- Operate, maintain, and improve the Services;
- Create and manage accounts;
- Present relevant intake questions and treatment pathways;
- Facilitate evaluation by independent healthcare providers;
- Communicate provider requests and treatment updates;
- Coordinate prescriptions with dispensing pharmacies;
- Process payments and payment authorizations;
- Manage orders, refills, cancellations, and account preferences;
- Coordinate pharmacy fulfillment and delivery;
- Provide customer and technical support;
- Verify identity, eligibility, and service availability;
- Send account, provider, pharmacy, payment, safety, and shipping communications;
- Detect and prevent fraud, misuse, and security incidents;
- Conduct internal analytics and service evaluation;
- Comply with legal, tax, regulatory, and recordkeeping obligations;
- Establish, exercise, or defend legal rights; and
- Create aggregated or de-identified information.
We may combine information collected from different sources for the purposes described in this Privacy Policy.

We may send communications related to:
- Account registration;
- Online intake and provider review;
- Requests for additional information;
- Treatment and prescription status;
- Payments and receipts;Refills;
- Pharmacy processing;
- Shipping;Safety notices; and
- Customer support.

These operational communications may be necessary to provide requested Services.

With appropriate consent, we may also send promotional emails or text messages concerning AmalfiDuo services.
You may:
- Unsubscribe from promotional emails using the link in the message; and
- Opt out of promotional text messages by replying STOP.

Opting out of marketing will not stop communications necessary for your account, treatment request, provider care, order, safety, or legal notices.

Ordinary email and SMS messages may not be encrypted. Sensitive clinical information should be communicated through the secure patient portal whenever available.

We may use limited analytics and advertising technologies on public portions of the AmalfiDuo website to understand general website traffic, measure marketing performance, and promote AmalfiDuo on other websites or platforms.

These technologies may collect information such as:
- Online identifiers;
- IP address;
- Browser and device information;
- Public pages viewed; and
- General interactions with public website content.
Under certain state privacy laws, disclosing online identifiers or browsing activity to advertising providers may be considered a “sale” or “sharing,” even when no money is exchanged.

AmalfiDuo does not sell personal information for monetary payment.

Where required, you may opt out of sale, sharing, or targeted advertising through:
- The website’s Privacy Choices or cookie-preference tool;
- A qualifying browser-based opt-out signal, such as Global Privacy Control; or
- A privacy request submitted using the contact information below.
California requires covered businesses to honor qualifying opt-out requests concerning sale or sharing, including legally recognized browser signals.

We disclose personal information only as reasonably necessary for the purposes described below.
‍
Healthcare Providers
We may disclose information to Beluga Health and participating healthcare professionals so they can:
- Review treatment requests;
- Communicate with patients;
- Make independent clinical decisions;
- Prescribe when medically appropriate; and
- Provide follow-up care.

Dispensing Pharmacies
If treatment is prescribed, we may disclose information necessary for a licensed pharmacy to:
- Receive and process the prescription;
- Verify patient information;
- Compound medication when applicable;
- Dispense treatment;
- Provide pharmacy support;
- Process payment or order information; and
- Arrange delivery.

Nexu Health and Service Providers
We may disclose limited information to Nexu Health and vendors providing:
- Telehealth and patient-platform technology;
- Website hosting;Data storage;
- Cybersecurity;Identity or eligibility verification;
- Payment processing;
- Email and text communications;
- Customer support;Analytics;
- Fraud prevention;
- Pharmacy coordination; and
- Shipping and delivery.
These providers may use information only for authorized purposes and are subject to applicable contractual privacy and security requirements.

Professional Advisers
We may disclose limited information to attorneys, accountants, auditors, insurers, and compliance advisers when reasonably necessary.

Legal and Safety Purposes‍
We may disclose information when reasonably necessary to:
- Comply with applicable law or valid legal process;
- Respond to a court order, subpoena, warrant, or regulatory request;
- Protect the rights, safety, and property of patients, providers, AmalfiDuo, or others;
- Investigate fraud or security incidents;
- Enforce agreements; orEstablish or defend legal claims.

PHI is disclosed only as permitted or required under applicable health-privacy laws and the relevant Notice of Privacy Practices.

Business Transactions
Information may be disclosed in connection with a proposed or completed merger, acquisition, financing, restructuring, bankruptcy, sale of assets, or transfer of the AmalfiDuo business, subject to applicable privacy and confidentiality requirements.

At Your Direction
We may disclose information when you direct us to do so or provide legally valid consent.

We may aggregate or de-identify information so that it is no longer reasonably capable of being associated with you.

We may use and disclose properly aggregated or de-identified information for lawful purposes, including:
- Internal analytics;
- Service improvement;
- Research;
- Security analysis;
- Business planning; and
- General marketing insights.
We will not attempt to reidentify properly de-identified information except where permitted by law to test or verify the effectiveness of the de-identification process.

The Services may contain links to or integrate with independent third-party services, including healthcare providers, pharmacies, payment processors, shipping companies, and social-media platforms.

This Privacy Policy does not govern the independent privacy practices of those third parties, except where they process information directly on AmalfiDuo’s behalf under contract.

We encourage you to review the applicable third party’s privacy policy or Notice of Privacy Practices.

We maintain administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, disclosure, alteration, loss, or destruction.

Safeguards may include:
- Encryption;Access controls;
- Authentication measures;
- Security monitoring;Vendor agreements;
- Workforce confidentiality obligations; and
- Incident-response procedures.
No electronic transmission or storage system is completely secure, and we cannot guarantee absolute security.

You are responsible for protecting your password, securing your device and email account, and notifying us promptly if you suspect unauthorized access.

We retain personal information only for as long as reasonably necessary to:
- Provide requested Services;
- Maintain account and transaction records;
- Coordinate provider and pharmacy services;
- Meet legal, tax, regulatory, security, and fraud-prevention obligations;
- Resolve disputes; and
- Enforce agreements.
When information is no longer required, we delete, anonymize, or de-identify it in accordance with our retention practices and applicable law.

Healthcare providers and pharmacies maintain their own records under separate legal and professional retention requirements.

AmalfiDuo Services are intended only for adults aged 18 and older.

We do not knowingly collect personal information from individuals under 18. If we learn that such information was submitted, we will take appropriate steps to delete it.

Depending on your state of residence and whether the applicable law applies to AmalfiDuo, you may have the right to:
- Confirm whether we process your personal information;
- Access personal information maintained about you;
- Correct inaccurate information;
- Request deletion;
- Receive a portable copy of certain information;
- Opt out of sale, sharing, or targeted advertising;
- Limit certain uses of sensitive personal information;
- Withdraw consent where processing is based on consent;
- Appeal a denied privacy request; and
- Exercise your rights without unlawful discrimination.
California privacy law provides rights that may include access, correction, deletion, and opting out of the sale or sharing of personal information. Texas law also provides qualifying residents with access, correction, deletion, portability, and certain opt-out rights.

These rights may be subject to exceptions, including information governed by HIPAA, information required to provide requested Services, security and fraud-prevention needs, and legal recordkeeping obligations.

Submitting a Request
To submit a privacy request, email: legal@amalfiduo.com

‍Use the subject line: Privacy Request
‍Include:
- Your full name;
- The email address associated with your account;
- Your state of residence;
- The right you wish to exercise; and
- Information reasonably necessary to locate your records and verify your identity.

We may request additional information to authenticate your request.

Authorized agents may submit requests where permitted by law, subject to verification of their authority.

If your request is denied and applicable law gives you a right to appeal, email the same address with the subject line:

‍Privacy Request Appeal
‍Requests for medical records may need to be directed to Beluga Health or your treating provider. Pharmacy-record requests may need to be submitted directly to the dispensing pharmacy.

California
AmalfiDuo does not sell personal information for monetary payment.Certain disclosures of public-page online identifiers or browsing activity to analytics or advertising providers may constitute a sale or sharing under California law. Where applicable, California residents may opt out through Privacy Choices or a qualifying Global Privacy Control signal.We do not knowingly sell or share personal information belonging to individuals under 16.We do not disclose personal information to independent third parties for their own direct-marketing purposes as contemplated by California’s Shine the Light law.

Nevada
AmalfiDuo does not sell covered personal information for monetary consideration to third parties for those third parties to license or sell to additional persons.Nevada residents may submit a verified request to opt out of future sales using the contact information below. Nevada law provides qualifying consumers with an opt-out mechanism concerning certain sales of covered information.

We may update this Privacy Policy to reflect changes in:
- Our Services;Technology;Providers, pharmacies, or vendors;
- Legal requirements; or
- Privacy and security practices.
We will post the updated policy with a revised “Last Updated” date.Where required, we will provide additional notice through the website, account, email, or another appropriate method and obtain consent before using information for a materially different purpose.

If you have questions regarding this Privacy Policy or our privacy practices, please contact us:

• Email: support@amalfiduo.com

• Address: 8911 N Capital of Texas Hwy suite 4200/1013, Austin, TX 78759