Privacy Policy

    Last updated September 15, 2026

    This policy explains what information we collect, how we use it, who we share it with, and the choices available to you. We have written it in plain language so that it can be read and understood without difficulty. If any part of it is unclear, please contact us at privacy@yourera.com and we will be glad to explain.

    Summary

    We collect the information you provide to us, information your device provides when you use our site, and a small amount of information from the companies that refer you to us.

    Advertising and measurement technologies are active from your first visit and remain active while you use the site. They record which pages you view, the steps you reach, and identifiers that allow those companies to recognize you, including your email address and telephone number in scrambled form. They do not receive your questionnaire answers, your prescription or anything about your care.

    You can switch all of that off at any time through Privacy Choices at the foot of every page, and if your browser sends a Global Privacy Control signal we treat it as the same instruction. Turning it off changes nothing about your account, the prices you pay or your care.

    When you create an account we ask one question, with a box that is not ticked for you, which is whether we may send you marketing by email, text message and telephone. Declining it means you receive only messages about your order and your care.

    If you start and do not finish, we keep what you have entered so that our support team can help you complete it, and a representative may contact you about it.

    We do not use your health questionnaire answers, your prescriptions or information about your care for advertising, and we do not provide them to advertising companies. No action is required from you for this to be so.

    If you live in Washington, Nevada, Maryland or New Jersey, none of the advertising sharing applies to you and we share nothing about you with those companies.

    We receive no payment in exchange for your information.

    This summary is provided for convenience. The full policy that follows is the operative document.

    1. Who we are

    YourEra is a service of Your Era Management, L.L.C., whose address is 1331 Ochsner Blvd., Suite 200, Covington, Louisiana 70433. When this policy says we, us or YourEra, it means that company.

    2. What this policy covers, and what it does not

    This policy covers the information YourEra collects through yourera.com, our mobile application, and the emails and messages we send you.

    YourEra is not a medical practice and does not provide medical care. We build and administer the platform, and we provide management and administrative services to Thryv Telehealth by Lavin, P.C. and to Galleria Medical Pharmacy, LLC. Decisions about your care, including whether a medication is prescribed, are made solely by the licensed clinicians at Thryv Telehealth by Lavin, P.C.

    Your medication is dispensed by one of three pharmacies, Diversified Pharmacy, Inc., doing business as MediVera Compounding Pharmacy, LLC (MediVera), Galleria Medical Pharmacy, LLC, or VitalRX, LLC, doing business as VialsRx (VialsRx), depending on what is prescribed and where you live. MediVera and VialsRx are independent pharmacies that we do not manage.

    Your records are held in a medical records system that YourEra contracts for and administers. The clinicians and the pharmacies reach your information through that system. Accordingly, while your care is provided by those companies, the records are held by us, and everything this policy says about how we handle and protect your information applies to them.

    Which health privacy laws apply, and to whom

    The federal health privacy law commonly known as HIPAA does not apply to every company that handles health information. It applies to health care providers that conduct certain standard electronic transactions with health plans, to health plans and clearinghouses, and to the companies that handle information on their behalf under a written agreement.

    Your Era Management, L.L.C. is not a health care provider and does not conduct those transactions, so HIPAA does not apply to YourEra. Thryv Telehealth by Lavin, P.C. is a medical practice, but because it is paid directly by its patients and does not conduct those transactions either, HIPAA does not apply to it. We state this because people reasonably assume the opposite, and we would rather you knew than assumed.

    That does not leave the records of your care unprotected. They are protected by this policy, by the state privacy laws described later in it, by the professional and licensing obligations of the clinicians who create them, and by the arrangements described under How we protect it. What the position determines is which body of law governs, not whether anything does.

    The pharmacies that fill prescriptions may each be subject to HIPAA in their own right, because a pharmacy that bills a pharmacy benefit manager for any of its patients is covered in respect of all of them. Where that is so, the records that pharmacy creates about your prescription are protected health information in its hands, and where we hold any of those records on its behalf we do so under a written agreement that requires us to protect them to the standard HIPAA sets, limits what we may do with them, and prohibits us from using them for advertising. A pharmacy that is subject to HIPAA will provide you with its own notice of privacy practices covering the records it holds.

    We do not describe this website, or our own services, as HIPAA compliant, because that description would not be accurate as applied to us.

    The information you give us and that we collect before you become a patient, such as the pages you view, the fact that you began the questionnaire and the email address you enter, is not part of that arrangement. It is handled under this policy and under the state privacy laws described later in it. We draw the distinction here because it determines which rules govern which information, and because we have set our practices so that the records of your care stay out of advertising entirely, whichever law happens to require it.

    3. What we collect

    Information you give us

    Information we collect automatically when you use the site

    Information we receive from others

    Information we create about you

    4. Sensitive information

    Several states treat some categories of personal information as sensitive and give them additional protection. Of the information described above, the categories treated as sensitive are your health questionnaire answers, your prescriptions and the records of your care, your photographs where they show a health condition, precise location if we ever collect it, and the credentials that let you into your account.

    We collect sensitive information for one reason, which is to provide the service you asked for. We do not use it to advertise to you, we do not use it to build advertising audiences, and our systems are designed so that it is not included in what we send to advertising or measurement companies. The session recording described under Companies that help us measure and improve the site obscures what you type before the recording leaves your browser, for the same reason. Where you live in a state that gives you the right to limit how sensitive information is used, that right is described under Your rights depending on where you live.

    5. Cookies and similar technologies

    A cookie is a small file placed in your browser. We and the companies we work with also use related technologies such as pixels and tags, which work in a similar way. We use them in three ways.

    Some are necessary to operate the site. They keep you signed in, hold the contents of your order, and protect against fraud. The site does not function without them and they cannot be turned off.

    Some help us understand how the site is used, such as which pages people find difficult and where they stop. One of them records the movement of the cursor, clicks and scrolling during your visit, which is described under Companies that help us measure and improve the site.

    Some are used for advertising and measurement, and these are the ones described under Who we share it with. They are active by default and you can switch them off at any time through Privacy Choices.

    You can change your choice at any time through Privacy Choices at the foot of any page. You can also block or delete cookies through your browser settings, although doing so may prevent parts of the site from working.

    Do Not Track

    Some browsers offer a Do Not Track setting. There is no common industry standard for what a Do Not Track signal means or how it should be honored, and for that reason we do not respond to it. We do respond to the Global Privacy Control signal, which is described under Your choices.

    6. Why we collect it

    To provide the service you have requested. This includes creating your account, providing your questionnaire to a clinician, arranging your prescription and its dispatch, taking payment, sending you updates about your order, answering your questions and keeping your account secure.

    To improve the service, to understand which parts of the site people find difficult, and to prevent fraud and misuse.

    To understand whether our advertising works, and to show you our advertising, in the way described in the next section.

    To produce information that no longer identifies anyone, which we use to understand our business and which is described under De-identified and aggregated information.

    To meet legal obligations, including record keeping rules that apply to health care and to payments, and to establish, exercise or defend legal claims.

    7. Who we share it with

    Companies that work for us

    We engage other companies to perform parts of the service. They are permitted to use your information only to carry out the work we have engaged them for, and are not permitted to use it for their own purposes, to sell it, or to disclose it further. The categories of company we use are:

    Your clinicians and the pharmacies

    Your questionnaire answers, your photographs and your messages go to the clinicians at Thryv Telehealth by Lavin, P.C. who review your care.

    If a clinician prescribes something, the prescription and the details needed to fill and ship it go to whichever of our pharmacies fills it. That will be MediVera, Galleria Medical Pharmacy, LLC or VialsRx. If you would like to know which pharmacy filled a particular order, please contact us and we will tell you.

    This sharing is necessary in order to provide the service, and it takes place regardless of the choices you make elsewhere in this policy.

    Advertising and measurement companies

    This section is set out in detail because it addresses the question we are asked most often. It describes what leaves our site, when it leaves, and who receives it. It works in two stages, divided by the point at which you create an account.

    What we send, and when

    These technologies are active from your first visit and stay active while you use the site, unless you switch them off. We send a message at each of six points. None of them contains any answer you have given us.

    We share this without asking you first, and we would rather state that plainly than leave it to be discovered. You can switch all of it off at any time through Privacy Choices at the foot of every page, and we will not ask you to reconsider afterwards. Turning it off costs you nothing, which is set out under Your choices.

    What those messages contain

    The first three carry identifiers that allow those companies to recognize the browser you are using, which are cookies they have set themselves and your IP address, together with the coded page reference and, for the third, your email address in scrambled form. The last three carry the following.

    The order message is sent only for a customer's first order. Repeat orders are not sent, and neither are cancellations or refunds.

    When the order message is sent

    The order message is sent when you complete the payment step and authorize the transaction. That is before a clinician has reviewed your questionnaire, before any prescription is issued, and before any money is taken. It therefore records that you completed a payment step. It does not record any clinical decision, whether a prescription was ultimately issued, or whether you were charged at all.

    The value we send with an order

    With the order message we send a figure representing what we expect an order of that size to be worth over time, rather than only the amount paid on the day. It is produced by applying an average drawn from our customers as a whole to the amount of your order. It is an estimate about orders of that size and not a prediction about you. Advertising companies use it to direct our advertising toward people likely to be worth more to us. If you would prefer that we not do this, Privacy Choices prevents the order message from being sent at all.

    Orders completed with our support team

    We intend to introduce the following and describe it here in advance so that the position is clear before it begins. When you arrive from an advertisement, the identifier that advertisement placed in your browser is kept with your record. If you do not complete your order on the site and later complete it with our support team, we send the advertising companies a message recording that an order was completed, carrying that identifier so that they can attribute it to the advertisement you originally clicked. It is covered by Privacy Choices in the same way as everything else in this section, and if you have switched sharing off, no such message is sent.

    What this allows these companies to infer

    We set this out so that the list above is not read as offering more protection than it does.

    We do not send the name of any medication, any part of your questionnaire, or anything recorded by a clinician, and the page references we send carry no condition or product name. These companies are nonetheless aware of the nature of this website, so the fact that you visited it at all, and that you reached a particular stage, indicates something about the reason for your visit even though nothing we send names it. That is not something we are able to design away. It is the principal reason the controls described under Your choices exist, and the reason they may be used without any loss of service.

    Why we share this information

    So that these companies can report whether our advertising is effective, present our advertising to you after you leave the site, and identify others who may be interested in what we offer. The last of these works by treating a group of people who reached a particular step as a starting point, from which the company identifies others on its own platform who resemble them. We receive no payment for any of this. The purpose is to advertise our own service.

    These are the companies that receive this information today, and what each uses it for.

    We expect to add other advertising, analytics, attribution and affiliate companies over time. Any company we add will receive the same categories of information, for the same purposes, subject to the same choices, and will be added to the table above before it receives anything from us. The date at the head of this policy will change when that happens.

    Each of these companies handles the information it receives under its own privacy terms, which you can read at facebook.com/privacy/policy, policies.google.com/privacy and katalys.com/privacy. Our payment processor's terms are at stripe.com/privacy.

    Legal requests

    We will disclose information to a court, a regulator or a law enforcement authority where the law requires it, or where we believe in good faith that we are legally obliged to do so. Where we are permitted to notify you first, we will.

    If our business is sold

    If YourEra is bought by or merged with another company, your information may transfer as part of that. The acquiring company would be bound by this policy in respect of information collected before the sale, unless we notified you otherwise and gave you an opportunity to object.

    8. Information we keep out of advertising

    The following is not sent to Meta, Google or any other advertising, analytics or measurement company, and our systems are designed to exclude it from the messages we do send:

    The labels we use for the messages, and the page references we send, are designed so that they do not describe a health condition or name a medication. Our own page addresses and page titles are written for readers and for search engines, and some of them do refer to weight management, but they are not what we transmit.

    No action is required from you in this respect, and we will not ask for your permission to share it. Should we become aware that information of this kind has reached a company that should not have received it, we will stop the transmission, request its deletion, and notify those affected.

    9. Companies that help us measure and improve the site

    Separately from advertising, we use a small number of companies to understand how the site is used and to make it work better. What these companies receive is used for that purpose. It is not passed on by them to Meta, Google Ads or any other advertising company, and it is not used to advertise to you.

    These technologies are active from your first visit in the same way as advertising technologies, and Privacy Choices at the foot of any page turns them off. We may add other companies for the same internal purposes, on the same terms and subject to the same choice.

    Recording of site visits

    Microsoft Clarity records what happens on the screen during your visit, including where you move the cursor, what you click and how far you scroll, so that we can see where people struggle. Text that you type into a form is obscured in your browser before the recording leaves it, so the recording does not show your questionnaire answers, your email address, your telephone number or your payment details.

    The recording does show which pages you passed through and in what order, and that sequence indicates that you were using this site. We mention it for the same reason we describe what advertising companies can infer, which is that we would rather you knew than assumed otherwise. Privacy Choices turns the recording off.

    10. If you do not complete your order

    If you begin the questionnaire or reach the checkout page and do not finish, what you have already entered is kept, including your contact details and the answers you have given. It is held in the customer record system operated for us by HubSpot.

    Our support team can see that information so that they can help you complete your order. The support team includes an outside company engaged for that purpose, whose representatives speak with customers on our behalf. This means a representative may see the answers you have already given, including answers concerning your health, before speaking with you. They are permitted to use that information only to help you complete your order, and for no other purpose.

    A representative may contact you about an order you did not finish. If you have not agreed to marketing contact, any such contact will be a call placed by a person, made within a limited period after your visit, and you may ask at any time that we not contact you again. If you have agreed to marketing contact, the arrangements described under Your choices apply instead.

    If you would prefer that we not keep an unfinished order at all, please email privacy@yourera.com and we will delete it.

    11. De-identified and aggregated information

    We produce information that does not identify you and cannot reasonably be used to identify you, either by removing the parts that identify you or by combining your information with other people's. Examples are the number of people who completed an order in a given week, or the proportion of visitors who stop at a particular step.

    We use that information to understand and improve the business, and we may share it with others. We maintain it in a form that does not identify anyone and we do not attempt to re-identify it, except where we need to test that the process worked.

    12. Automated decisions

    We use automated checks in two places. Our fraud prevention providers score orders and accounts automatically, and an order flagged by those checks may be delayed or declined. Our systems also apply eligibility rules from your questionnaire before a clinician sees it, which can affect what is presented to you.

    Neither of these makes a clinical decision. Whether a medication is prescribed is decided by a licensed clinician exercising their own judgment. If an automated check has affected you and you would like it looked at by a person, write to privacy@yourera.com and we will arrange that.

    13. Your choices

    Turning off sharing with advertising companies

    Privacy Choices at the foot of any page turns off everything described under Advertising and measurement companies, together with the measurement companies described after it. It is available before you have an account and afterwards, and you do not need to be signed in to use it. It takes effect immediately and applies on both routes by which information is sent, from your browser and from our servers, so a single action is sufficient.

    Turning it off does not affect your access to the site, your ability to purchase, the prices you pay, delivery times or your care, and no aspect of your account changes. We will not repeatedly ask you to reconsider.

    If your browser or a browser extension sends a Global Privacy Control signal, we read it as the same instruction and no further action is needed.

    Turning it off prevents future sharing. It does not recall information shared previously. If you would like us to request deletion of information already held by those companies, please email privacy@yourera.com and we will make that request on your behalf.

    Marketing by email, text message and telephone

    At account creation we ask, with a box that is not ticked for you, whether we may send you marketing. It is separate from your acceptance of our terms, and it is never a condition of purchasing from us or of receiving care. Declining it changes nothing about your account, the prices you pay, delivery or your care.

    If you agree, we may send you marketing by email and by text message, and may call you, including by automated or prerecorded call, at the address and number you gave us. Message frequency varies and your carrier's message and data rates may apply.

    You may withdraw that agreement at any time and by any reasonable means. Reply STOP to any marketing text message to stop all of them, or HELP for assistance. Every marketing email carries an unsubscribe link at the foot. You may also write to privacy@yourera.com, or tell a representative during a call, and we will act on it.

    Messages about your order and your care, such as dispatch notices, refill reminders, notice of a payment that did not go through and messages from your care team, form part of the service and are sent whether or not you agree to marketing. You may stop them by replying STOP, although some contain information you are likely to want.

    Seeing, correcting and deleting your information

    You may request a copy of the information we hold about you, ask us to correct it if it is inaccurate, or ask us to delete it. Please email privacy@yourera.com. We will verify your identity before acting, which ordinarily means confirming access to the email address associated with the account, and we will respond within 45 days. Where the law requires us to retain something and we are unable to delete it, we will tell you what has been retained and why. Exercising any of these rights will never affect your access to the service or the prices you pay.

    14. How long we keep it

    We retain information for as long as it is needed for the purpose for which it was collected, after which we delete it or remove the elements that identify you. How long that is depends on the information in question.

    If you ask us to delete your information we will do so, except where one of the requirements above obliges us to retain it, in which case we will tell you.

    15. How we protect it

    We encrypt information in transit and at rest, restrict internal access to those whose work requires it, require multi-factor authentication for access to our systems, and review those controls. We require the companies that work for us to maintain comparable protections and to tell us promptly if something goes wrong on their side.

    No system can be entirely secure, and we do not suggest otherwise. If information about you is exposed, we will notify you and explain what was involved, who received it, and the steps we are taking, within the time the law allows and in any event without unnecessary delay.

    16. Where we process information

    We are based in the United States and the information described in this policy is processed here. Our service is offered to people in the United States and is not directed to people in other countries. Some of the companies that work for us may process information in other countries, and where they do we require them to protect it to the standard described in this policy.

    17. Sites we do not control

    Our site and our messages may contain links to websites operated by other companies, including the clinicians and pharmacies named above. This policy does not apply to those sites, and we are not responsible for how they handle your information. We suggest reading their privacy terms before providing information to them.

    18. Our services are for adults

    You must be 18 or older to use YourEra. We do not knowingly collect information from anyone under 18, and where we become aware that we have, we delete it. We do not knowingly sell or share the personal information of anyone under 16 for advertising.

    19. Your rights depending on where you live

    Several states give their residents specific rights over personal information. Depending on where you live, you may have the right to know what we collect and who we share it with, to get a copy, to correct it, to delete it, to opt out of targeted advertising and of any sale or sharing of your information, to limit how sensitive information is used, to opt out of profiling, and to appeal if we turn a request down.

    You may exercise any of these rights by emailing privacy@yourera.com, regardless of the state in which you live. There is no charge, the service will not be degraded, and we will not hold the request against you.

    Authorized agents

    You may appoint another person or a business to make a request on your behalf. We will ask for written permission signed by you, and we will separately confirm with you that the appointment is genuine before we act. An agent acting under a valid power of attorney does not need to provide separate written permission.

    If we decline a request

    If we decline a request in whole or in part, we will tell you why and how to ask us to reconsider. To appeal, reply to our decision or email privacy@yourera.com with the word appeal in the subject line. We will respond to an appeal within 45 days and explain the reasons for our decision. If we decline the appeal, we will tell you how to submit a complaint to your state attorney general.

    California notice at collection

    The table below sets out the categories of personal information we collect, why we collect each, and whether each is shared with advertising companies. We do not receive payment in exchange for any category.

    How long we keep each category is described under How long we keep it. The categories marked as shared are shared for what California law calls cross context behavioral advertising, and you may stop that at any time through Privacy Choices.

    California residents may also ask us, once in a twelve month period, for the categories of personal information we disclosed for a business purpose in the preceding twelve months and the categories of recipient. That information is set out above and we will confirm it in writing on request.

    Other states

    Where the state you live in requires our consent before we process sensitive information, we do not process your sensitive information for anything other than providing the service you asked for, which is described under Sensitive information.

    Where the state you live in requires us to recognize a universal opt out signal, we recognize the Global Privacy Control signal as described under Your choices.

    Where the state you live in gives you the right to obtain a list of the third parties to which we disclosed your personal information, we will provide it on request to privacy@yourera.com.

    Nevada residents may also direct us not to sell certain personal information. We do not sell personal information for money, and a request under that law will be honored in any event.

    20. If you live in Washington, Nevada, Maryland or New Jersey

    We share nothing about residents of these four states with advertising or measurement companies. Nothing in the section headed Who we share it with applies to you, whether or not you agree to anything, and there is no setting for you to change. Washington and Nevada additionally require us to publish a separate policy about consumer health data, which is at yourera.com/consumerhealthdata. If you live in either of those two states, or are using our site from there, please read it as well.

    21. Changes to this policy

    If we change this policy we will post the revised version here and update the date at the top. Previous versions are available on request from privacy@yourera.com. Where a change is material, in particular where it alters what we share or with whom, we will notify you before it takes effect, and where the law requires your agreement we will ask for it rather than assume it.

    22. How to contact us

    Please email privacy@yourera.com, or write to the Privacy Officer, Your Era Management, L.L.C., 1331 Ochsner Blvd., Suite 200, Covington, Louisiana 70433. If you are not satisfied with the way a matter has been handled, you may contact your state attorney general.

    If you need this policy in another format, please contact us and we will provide one.