Privacy Policy
OZIO Privacy Policy & Notice of Privacy Practices
Last Updated: October 1, 2026
This Privacy Policy and Notice of Privacy Practices (“Policy”) describes how OZIO and Ozio Medical (“OZIO,” “we,” “us,” or “our”) collect, use, process, and disclose information about you, including personal information collected through our store, website, products, services, and communications, as well as Protected Health Information (“PHI”) subject to applicable healthcare privacy laws.
OZIO operates this store and website, including related information, content, features, tools, products, and services, to provide customers with a curated shopping experience (collectively, the “Services”). Our store is powered by Shopify, which enables us to provide certain Services to you.
This Policy also serves as our Notice of Privacy Practices with respect to PHI and describes how Ozio Medical may use and disclose PHI for treatment, payment, healthcare operations, and other purposes permitted or required by law. It also describes your rights regarding your PHI.
We are required by applicable law to maintain the privacy of PHI, provide notice of our legal duties and privacy practices, and abide by the terms of the Notice currently in effect.
If there is a conflict between our Terms of Service and this Policy concerning the collection, processing, use, or disclosure of personal information, this Policy controls.
Please read this Policy carefully. By using or accessing the Services, you acknowledge that you have read this Policy and understand the collection, use, and disclosure practices described here.
1. Personal Information We Collect or Process
When we use the term “personal information,” we mean information that identifies or can reasonably be linked to you or another person. Personal information does not include information collected anonymously or de-identified so that it cannot identify or reasonably be linked to you.
Depending on how you interact with the Services, where you live, and as permitted or required by applicable law, we may collect or process the following categories of personal information, including inferences drawn from this information:
Contact Information. Your name, address, billing address, shipping address, telephone number, and email address.
Financial Information. Credit or debit card information, financial account information, transaction details, form of payment, payment confirmation, and other payment details.
Account Information. Your username, password, security questions, preferences, and settings.
Transaction Information. Products you view, place in your cart, add to a wishlist, purchase, return, exchange, or cancel, as well as information regarding past transactions.
Communications. Information you provide when communicating with us, including customer support inquiries.
Device Information. Information about your device, browser, network connection, IP address, and other unique identifiers.
Usage Information. Information concerning your interaction with the Services, including how and when you interact with or navigate the Services.
Certain information we collect in connection with prescription medications may constitute Protected Health Information. PHI is addressed separately in the “Protected Health Information and Notice of Privacy Practices” section below.
2. Sources of Personal Information
We may collect personal information:
Directly from you, including when you create an account, visit or use the Services, communicate with us, make a purchase, or otherwise provide information to us;
Automatically through the Services, including from your device and through cookies and similar technologies;
From service providers that provide technology or other services on our behalf; and
From partners and other third parties.
3. How We Use Personal Information
Depending on how you interact with us and the Services you use, we may use personal information for the following purposes.
Providing, Tailoring, and Improving the Services
We may use personal information to provide the Services and perform our contractual obligations to you, including to:
Process payments;
Fulfill orders;
Remember preferences and products that interest you;
Send account-related notifications;
Process purchases, returns, exchanges, and other transactions;
Create, maintain, and manage your account;
Arrange shipping;
Facilitate returns and exchanges;
Enable reviews;
Customize your shopping experience;
Recommend products related to your purchases; and
Tailor and improve the Services.
Marketing and Advertising
We may use personal information for marketing and promotional purposes, including sending marketing, advertising, and promotional communications by email, text message, or postal mail.
We may also use information to display advertisements for products or services on the Services or other websites, including advertisements based on products you previously purchased, products you added to your cart, and other activity involving the Services.
Security and Fraud Prevention
We may use personal information to authenticate accounts, provide secure payment and shopping experiences, detect and investigate potentially fraudulent, illegal, unsafe, or malicious activity, protect public safety, and secure our Services.
If you create an account, you are responsible for protecting your account credentials. You should not share your username, password, or other access credentials with others.
Communications and Customer Support
We may use personal information to provide customer support, respond to you, provide effective Services, and maintain our business relationship with you.
Legal Purposes
We may use personal information to comply with applicable law and valid legal process, including requests from law enforcement or government agencies; participate in civil discovery, litigation, or other legal proceedings; and enforce or investigate potential violations of our terms and policies.
4. How We Disclose Personal Information
Subject to this Policy and applicable law, we may disclose personal information in certain circumstances, including:
Service Providers. We may disclose information to Shopify and vendors or other third parties performing services on our behalf, such as IT management, payment processing, data analytics, customer support, cloud storage, fulfillment, and shipping.
Business and Marketing Partners. We may disclose information to business and marketing partners to provide marketing services and advertising. For example, we use Shopify to support personalized advertising through third-party services based on online activity involving different merchants and websites.
Our business and marketing partners may process information in accordance with their own privacy notices. Depending on where you reside, you may have the right to direct us not to share certain information for targeted advertising or marketing based on your online activity across different merchants and websites.
At Your Direction or With Your Consent. We may disclose information when you direct or request us to do so or otherwise consent, including when information must be provided to another party to ship a product or when you use social-media widgets or login integrations.
Affiliates. We may disclose information to our affiliates or within our corporate group.
Business Transactions and Legal Requirements. We may disclose information in connection with a merger, bankruptcy, or other business transaction; to comply with applicable legal obligations, subpoenas, search warrants, or similar requests; to enforce applicable terms and policies; or to protect or defend the Services, our rights, or the rights of users or others.
5. Relationship With Shopify
The Services are hosted by Shopify.
Shopify collects and processes personal information concerning access to and use of the Services to provide and improve the Services. Information submitted through the Services may be transmitted to and shared with Shopify and third parties that may be located outside the country where you reside.
To help protect, grow, and improve our business, we may use Shopify enhanced features incorporating information obtained through your interactions with our store, other merchants, and Shopify.
When these enhanced features are used, Shopify may process personal information concerning your interactions with our store, other merchants, and Shopify. In those circumstances, Shopify is responsible for its processing of your personal information, including responding to requests concerning rights applicable to Shopify's processing.
You may review Shopify's consumer privacy materials and privacy portal for additional information about Shopify's processing practices and applicable privacy rights.
6. SMS Communications
We use SMS messaging for service-related communications, including notifications, reminders, and account updates.
Message frequency may vary. Message and data rates may apply.
We do not share mobile numbers with third parties for the SMS uses described in this section.
You may opt out of SMS communications at any time by replying STOP.
7. Email Marketing and Online Advertising Technologies
When you visit our website, log in, register, or open an email, cookies, advertising beacons, and similar technologies may be used by our online data partners or vendors to associate those activities with information that they or others maintain about you, including your email address.
We or service providers acting on our behalf may use that information to send communications and marketing to those email addresses.
You may opt out of the advertising described above through the applicable database opt-out mechanism identified by OZIO.
If you wish to opt out of email marketing from a particular brand with which we work, you may use the “opt-out” or “unsubscribe” link located in the footer of the applicable marketing email.
You may also unsubscribe from promotional emails from OZIO using the unsubscribe option provided in those emails. Even after opting out of promotional emails, we may continue to send non-promotional communications concerning matters such as your account or orders.
8. Protected Health Information and Notice of Privacy Practices
The following provisions apply specifically to Protected Health Information maintained by Ozio Medical.
PHI is subject to healthcare privacy requirements that differ from the rules applicable to ordinary consumer personal information.
Ozio Medical may use and disclose PHI to carry out treatment, payment, healthcare operations, and other activities permitted or required by law.
9. Uses and Disclosures of PHI
We may use and disclose PHI for the following purposes.
Treatment
We may use and disclose PHI to provide, coordinate, or manage treatment and related activities. This may include communicating with healthcare providers regarding treatment and coordinating with other providers as appropriate.
Payment
We may use and disclose PHI to obtain payment for services provided to you. This may include contacting an insurance company to verify coverage, conducting billing and collection activities, and sharing PHI with healthcare providers, insurance companies, or collection agencies as appropriate.
Healthcare Operations
We may use and disclose PHI for healthcare operations, including quality assessment and improvement activities, case management, accreditation, licensing, credentialing, and conducting or arranging medical reviews, audits, or legal services.
As Required by Law
We may use or disclose PHI when federal, state, or local law requires us to do so.
Public Health and Safety
We may use or disclose PHI for legally permitted public-health and safety purposes, including preventing or controlling disease, injury, or disability; reporting child abuse or neglect; reporting reactions to medications or problems with products; and notifying people who may have been exposed to a communicable disease or who may be at risk of spreading a disease or condition.
Health Oversight Activities
We may disclose PHI to health oversight agencies for activities authorized by law, including audits, investigations, inspections, and licensure activities.
Judicial and Administrative Proceedings
We may disclose PHI in response to a court or administrative order, subpoena, discovery request, or other lawful process.
Law Enforcement
We may disclose PHI for legally permitted law-enforcement purposes, including reporting certain wounds or injuries or complying with a court order, warrant, or other legal process.
Research
We may use and disclose PHI for research purposes when the research has been approved by an institutional review board and appropriate privacy protections are in place.
Organ and Tissue Donation
If you are an organ donor, we may disclose PHI to organizations involved in organ procurement, transplantation, or donation.
Workers' Compensation
We may disclose PHI for workers' compensation or similar programs providing benefits for work-related injuries or illnesses.
Military and Veterans
If you are a member of the armed forces, we may disclose PHI as required by military authorities.
Inmates
If you are an inmate, we may disclose PHI to the correctional institution or law-enforcement official having custody of you as permitted by law.
10. Your Rights Regarding PHI
Subject to applicable law and certain exceptions, you have the following rights concerning PHI.
Right to Inspect and Copy
You have the right to inspect and obtain a copy of PHI that we maintain about you, with certain exceptions.
To request access, submit a written request to our Privacy Officer. We may charge a reasonable fee for copying, mailing, or other supplies associated with the request.
Right to Amend
You may request an amendment to PHI if you believe the information is incorrect or incomplete.
Submit a written request to our Privacy Officer identifying the information you believe is incorrect and explaining why.
We may deny an amendment request in certain circumstances, including when we believe the information is accurate and complete or when we did not create the information.
Right to an Accounting of Disclosures
You may request an accounting of certain disclosures of your PHI made during the previous six years.
The accounting generally does not include disclosures for treatment, payment, or healthcare operations and certain other disclosures.
Submit a written request to our Privacy Officer to exercise this right.
Right to Request Restrictions
You may request restrictions on our use or disclosure of PHI for treatment, payment, or healthcare operations.
We are not required to agree to every requested restriction but will consider your request.
Submit a written request to our Privacy Officer specifying the restriction requested and to whom it applies.
Right to Request Confidential Communications
You may request that we communicate with you about PHI in a particular way or at a particular location.
Submit a written request to our Privacy Officer explaining how or where you would like to be contacted.
Right to a Paper Copy
You have the right to obtain a paper copy of this Notice even if you previously agreed to receive it electronically.
Contact our Privacy Officer to request a paper copy.
Right to Breach Notification
You have the right to be notified if we discover a breach of your PHI when notification is required by applicable law.
11. Electronic Transmission of PHI
We are committed to protecting the privacy of PHI and will ensure that electronic transmission of PHI complies with applicable HIPAA requirements.
This includes the use of Secure Socket Layer (“SSL”) or equivalent technology for transmission of PHI, as well as adherence to applicable security standards governing online transmission of PHI.
12. General Privacy Rights and Choices
Depending on where you live, you may have some or all of the following rights regarding personal information.
These rights are not absolute, may apply only in certain circumstances, and may be denied where permitted by applicable law.
Right to Access or Know
You may have the right to request access to personal information we maintain about you.
Right to Delete
You may have the right to request deletion of personal information we maintain about you.
Right to Correct
You may have the right to request correction of inaccurate personal information.
Right to Portability
In certain circumstances and subject to applicable exceptions, you may have the right to receive a copy of personal information we maintain about you and request that it be transferred to a third party.
Right to Opt Out of Sale, Sharing, or Targeted Advertising
Depending on where you reside, you may have the right to opt out of the “sale” or “sharing” of personal information or processing of personal information for purposes considered “targeted advertising” under applicable privacy laws.
Exercising Your Rights
You may exercise applicable privacy rights using mechanisms provided through the Services or by contacting us using the information provided below.
We will not discriminate against you for exercising applicable privacy rights.
We may need to verify your identity before processing a request, as permitted or required by law.
Where permitted, you may designate an authorized agent to submit requests on your behalf. Before accepting such a request, we may require the agent to provide proof that you authorized the agent to act for you, and we may require you to verify your identity directly with us.
We will respond to requests within the time required by applicable law.
13. State-Specific PHI Privacy Protections
In addition to the privacy practices described in this Notice, we comply with applicable state-specific privacy laws concerning PHI.
Certain states may provide privacy protections in addition to those provided under federal law.
California
California residents may have additional rights regarding PHI.
Access. California residents may request access to PHI in a readily usable electronic format and may be entitled to additional information required under California law.
Restrictions on Certain Disclosures. California residents may request restrictions on certain disclosures of PHI to health plans when the individual has paid out-of-pocket in full for a particular healthcare item or service.
Confidentiality of Medical Information Act. California residents are protected by the California Confidentiality of Medical Information Act (“CMIA”), which provides additional privacy protections for medical information.
Marketing and Sale of PHI. California residents may have rights regarding the use of PHI for marketing purposes or its sale to third parties without authorization.
Minors' Rights. Minors may have additional privacy rights regarding certain sensitive information and services under applicable California law.
New York
For New York residents, we comply with applicable New York confidentiality requirements providing additional protections for certain information, including HIV-related information, mental-health records, and genetic-testing information.
Texas
For Texas residents, we comply with applicable Texas medical privacy requirements, including requirements concerning certain disclosures of PHI, safeguards for electronic PHI, destruction of PHI, mental-health records, and substance-use-treatment records.
Florida
For Florida residents, we comply with applicable Florida privacy requirements providing additional protections for certain medical information.
Illinois
For Illinois residents, we comply with applicable Illinois privacy requirements concerning certain medical and health-related information.
Massachusetts
For Massachusetts residents, we comply with applicable Massachusetts privacy requirements concerning certain medical and health-related information.
Residents of other states may have additional rights under their state's privacy laws. Contact our Privacy Officer for additional information regarding rights under specific state laws.
14. Third-Party Websites and Links
The Services may contain links to websites or online platforms operated by third parties.
If you follow a link to a website that is not affiliated with or controlled by us, you should review that website's privacy and security policies and other terms and conditions.
We do not guarantee and are not responsible for the privacy or security practices of third-party websites, including the accuracy, completeness, or reliability of information available through those sites.
Information you provide in public or semi-public venues, including information shared on third-party social-networking platforms, may be visible to users of the Services or users of those third-party platforms.
Our inclusion of a link does not by itself constitute an endorsement of the linked platform, its content, or its owner or operator, except as otherwise disclosed through the Services.
15. Children's and Minors' Information
Certain prescription medications offered through OZIO may be available to children and minors. In connection with these medications, we may collect and process personal information and Protected Health Information (“PHI”) about a child or minor as necessary to determine eligibility for a requested medication, process and fulfill prescriptions and orders, communicate about the medication or order, process payments, and comply with applicable legal and regulatory requirements.
When required by applicable law, a parent, legal guardian, or other legally authorized representative must provide information or authorization on behalf of a child or minor. We may collect information about both the child or minor and the parent, guardian, or other authorized representative in connection with an order.
Personal information that is not PHI will be collected, used, disclosed, and protected as described in this Policy and applicable law. PHI concerning children and minors will be used and disclosed in accordance with this Notice of Privacy Practices and applicable federal and state privacy laws.
Parents, legal guardians, and other legally authorized representatives may have rights regarding a child's or minor's personal information and PHI, subject to applicable law. In certain circumstances, applicable law may provide a minor with independent privacy rights or may limit a parent or guardian's access to certain information. We will handle requests concerning a minor's information in accordance with applicable law.
We do not knowingly collect personal information directly from children or minors for purposes unrelated to the medications, products, or associated services offered through OZIO, except as permitted or required by applicable law.
16. Security and Retention
No security measures are perfect or impenetrable, and we cannot guarantee perfect security.
Information transmitted to us may not be secure while in transit. You should not use unsecured communication channels to send sensitive or confidential information.
The length of time we retain personal information depends on various factors, including whether the information is required to maintain your account, provide the Services, comply with legal obligations, resolve disputes, or enforce applicable contracts and policies.
PHI is additionally handled in accordance with applicable healthcare privacy and security requirements as described in this Notice.
17. International Transfers
We may transfer, store, and process personal information outside the country in which you reside.
If we transfer personal information outside the European Economic Area or United Kingdom, we may rely on recognized transfer mechanisms such as the European Commission's Standard Contractual Clauses or equivalent contracts issued by the relevant UK authority, as applicable, unless the information is transferred to a country determined to provide an adequate level of protection.
18. Complaints
If you have concerns or complaints about how we process your personal information, please contact us using the information below.
Depending on where you live, you may have the right to appeal a decision concerning a privacy request or submit a complaint to your local data-protection authority.
If you believe your rights concerning PHI have been violated, you may file a complaint with our Privacy Officer or with the Secretary of the U.S. Department of Health and Human Services.
You will not be retaliated against for filing a complaint concerning your PHI privacy rights.
19. Changes to This Policy and Notice
We may update the general privacy provisions of this Policy from time to time to reflect changes to our practices or for operational, legal, or regulatory reasons.
When we update the Policy, we will post the revised version on our website, update the “Last Updated” date, and provide any additional notice required by applicable law.
With respect to our Notice of Privacy Practices for PHI, we reserve the right to change the Notice. A revised Notice may apply to PHI we already maintain as well as information we receive in the future.
We will make the current Notice available through our website and, as applicable, our office.
20. Refunds, Cancellations, and Returns
Because our products are prescription medications, all sales are generally final once an order has been placed.
Orders may be eligible for a refund if they have not yet been approved by the physician team or processed for shipment by our pharmacy.
Once an order has been approved by the physician team or has shipped, it is considered non-refundable.
If an order has been approved but has not yet shipped, we may be able to provide a partial refund. In those circumstances, the cost of the medication may be refunded minus the $19.00 Provider Fee, which covers administrative and processing costs associated with the required medical review.
If our physician team determines that the requested treatment is not appropriate based on your medical history, you will receive a full refund for the order.
We do not accept returns of products that have shipped, regardless of whether the product has been opened, used, or remains sealed.
Due to the nature of prescription medications and applicable health regulations, all fulfilled orders are final and non-refundable.
21. Contact Information
For questions about this Policy, our privacy practices, or your general privacy rights, you may contact OZIO at:
Phone: 888-996-8922
Email: support@ozio.com
For questions about PHI, this Notice of Privacy Practices, or the exercise of your PHI rights, contact our support team above.
This Notice of Privacy Practices is intended to apply across the United States, subject to additional rights and requirements that may apply under federal or state law.
