Privacy Policy

Information you give us

• Contact details: your name, email address, phone number and state.
• Health information from the eligibility quiz: your sex, date of birth, height and weight (and the BMI calculated from them), goal weight, goals and motivation, sleep, current or recent GLP-1 medication and dose, diabetes medications, whether you are pregnant, nursing or trying to conceive, history of medullary thyroid cancer, MEN-2, pancreatitis, type 1 diabetes or an eating disorder, allergies, and anything you write for your provider.
• Order details: your shipping address, the products and plan you choose, the amounts paid and your order history.
• Payment details: the card you enter at checkout is sent directly to Authorize.net, our payment processor. We keep only the last four digits and the transaction ID (needed for refunds). We never receive or store your full card number or security code.
• Appointment details: your name, email, phone number, the time you book and any notes you add.
• Messages you send us by email.

Information collected automatically

• Log data: like most websites, our servers and our network provider record technical details of each request, such as your IP address, browser type, the page requested and the time. We use it to keep the site secure, stop abuse (for example, limiting repeated sign-in attempts) and fix problems.
• Cookies: the public site does not use advertising or analytics cookies. The only cookies involved are ones needed to run it: a sign-in cookie for our staff dashboard, and security cookies that our network provider, Cloudflare, may set to protect the site from bots and attacks.
• We do not track you across other websites.

How we use your information

• To let a Provider assess whether treatment is right for you, and to support your care.
• To process your payment, fill and ship your order, and issue refunds.
• To schedule your provider call and send confirmations and reminders.
• To answer your questions and send messages about your order and care.
• To keep the site secure, prevent fraud and fix problems.
• To keep records and meet our legal, tax and accounting obligations.

Who we share it with

We share your information only as needed to provide the service you ask for, or as the law requires:

• Our affiliated medical practice and its Providers, to evaluate you and provide your care.
• Licensed pharmacies, to fill and ship your prescription.
• Service providers that handle data for us under contract and only for that purpose: our website host (servers in the United States), Cloudflare (network and security), Authorize.net (payments), Amazon Web Services (sending email), Microsoft (our email inbox) and Google (our appointment calendar).
• Shipping carriers, who receive your name and delivery address.
• Authorities or others when the law requires it, for example to answer a valid legal request, or when needed to protect someone's safety or prevent fraud.
• A buyer or successor if Tika Meds is sold or merged. This policy would continue to apply to your information.
• Anyone else, only with your permission.

We do not sell your personal information, and we do not share it for targeted or cross-context behavioral advertising.

Health information and HIPAA

Tika Meds is not a health care provider or health plan, and does not operate as a covered entity under HIPAA (the federal Health Insurance Portability and Accountability Act). The information you give us through this website is protected by this Privacy Policy and by the privacy laws of your state, not by HIPAA.

We still treat your health information as sensitive. We use it only to provide the services you request, share it only as described above, and never sell it or use it for advertising. Information that becomes part of your medical record with our affiliated medical practice is also subject to the practice's own legal obligations for medical records.

Consumer health data

Residents of Washington, Nevada and Connecticut have additional rights over their health information. Our Consumer Health Data Privacy Policy explains what we collect, why, who we share it with and how to use those rights.

How long we keep it

• Order and payment records are kept for as long as tax, accounting and other laws require.
• Quiz answers that do not lead to an order are kept only as long as we need them to follow up with you, and you can ask us to delete them at any time.
• Medical records held by our affiliated medical practice are kept for the period your state's medical records laws require.

How we protect it

The site is served only over encrypted HTTPS connections. Access to customer information is limited to authorized staff, each with their own account and a hashed password, and our systems never store full card numbers. No method of transmission or storage is completely secure, but we work to protect your information and review our safeguards as the service changes.

If a data breach happens

If your personal or health information is accessed or disclosed without authorization, we will notify you without unreasonable delay, and within the time the law requires (no later than 60 days after we discover it). Where the law requires, we will also notify the Federal Trade Commission, state authorities and, for large breaches, the media.

Your choices and rights

Depending on where you live, you may have the right to:

• Know what personal and health information we hold about you, and get a copy.
• Get a list of the third parties and affiliates we have shared your health information with.
• Correct information that is wrong.
• Ask us to delete your information.
• Withdraw consent you have given us.
• Appeal our decision if we refuse a request.

To make a request, email [email protected] from the address you used with us. We will confirm your identity before acting and reply within 45 days (or tell you within that time if we need up to 45 more days). We may need to keep some information even after a deletion request, for example records the law requires us to keep, or medical records held by the practice. If we deny your request, you can appeal by replying to our decision. We will answer your appeal in writing within 45 days, and if you are still not satisfied you can contact your state attorney general. You may also use an authorized agent to make a request for you. We will never treat you differently for using these rights.

Emails about your order, appointments and care are part of the service. We do not currently send marketing emails. If we start, we will ask first, and every marketing email will include an unsubscribe link.

Children

Tika Meds is only for adults 18 and older. We do not knowingly collect information from anyone under 18, and we will delete it if we learn we have.

Changes to this policy

We may update this policy as our service changes. The date at the top of this page shows when it last changed. If we make a significant change to how we use or share health information, we will ask for your consent again where the law requires it.

Contact us

Questions or requests about your privacy? Email [email protected].