Privacy Policy

Privacy Policy
Website, Checkout, and GLP-1 Exit Strategy™ Online Course
EFFECTIVE DATE September 28, 2026

OUR APPROACH
This Policy explains what Med-Fit, PLLC collects through the public website, checkout, and GLP-1 Exit Strategy™ online course, why the information is used, when it is disclosed, and the choices available to you.

1. Scope and Who We Are
This Privacy Policy ("Policy") applies to personal information Med-Fit, PLLC ("Med-Fit," "we," "us," or "our") handles through medfit-weightloss.com, related landing and checkout pages, and the GLP-1 Exit Strategy™ online course, including ThriveCart Academy access, course emails, downloads, optional add-on purchases, and billing, login, or technical support (collectively, the "Services").

This Policy does not replace any Notice of Privacy Practices that may apply when Med-Fit provides healthcare services as a HIPAA-covered healthcare provider. Information submitted within a clinical relationship or through a designated clinical system such as Healthie may be governed by that Notice and applicable health-privacy law. Ordinary website visits, marketing interactions, and educational-course purchases are not automatically protected health information under HIPAA.

2. Information We Collect

Information you provide
Contact and account information, such as your first and last name, email address, phone number, billing address, and course-account identifiers.
Transaction information, such as the product, add-on, or upgrade selected; purchase amount; order date; payment-plan and payment status; and limited payment details received from our payment processor. Med-Fit does not receive or store your full payment-card number through the course checkout.
Communications you send to us, such as billing, login, or technical-access requests, survey responses, feedback, and other correspondence.
Information you voluntarily enter into a form, calculator, or survey made available through the Services. Please review Section 3 before entering health-related information.

Course and account activity
When you use ThriveCart Academy or related course tools, Med-Fit and its service providers may receive information about enrollment, account access, logins, lessons viewed or completed, downloads, and the dates and times of those activities.

Information collected automatically
When you use the Services, Med-Fit and its service providers may automatically collect device and usage information, such as IP address, browser and device type, operating system, referring pages, pages viewed, dates and times, approximate location derived from IP address, checkout events, and interactions with emails or pages. This information may be collected through cookies, pixels, tags, logs, and similar technologies.

3. Please Do Not Submit Sensitive Health Information
The GLP-1 Exit Strategy™ Implementation Workbook, calculators, scorecards, and other course resources are educational tools intended primarily for your personal use. Med-Fit does not ask you to submit completed workbook pages, calculator results, medical records, diagnoses, medication details, laboratory results, photographs, or other sensitive health information through the public website, ThriveCart checkout, ThriveCart Academy, ordinary email, or billing and technical-support channels. Please do not use those channels to send such information.

If you are an established patient and Med-Fit directs you to communicate through Healthie or another designated clinical channel, follow the privacy notice and instructions provided for that clinical service.

4. How We Use Information
Process purchases, payments, refunds when applicable, and order records.
Create and administer your ThriveCart Academy account and provide access to the course, the What If? Vault, downloads, and any optional add-on you purchase.
Send receipts, access instructions, account and security notices, course-delivery messages, content updates, and other service communications.
Provide billing, login, and technical-access support and respond to requests.
Operate, troubleshoot, secure, personalize, and improve the Services.
Measure website, course, campaign, checkout, and email performance and understand how the Services are used.
Prevent fraud, abuse, security incidents, and violations of our Terms.
Comply with law, enforce agreements, protect rights and safety, and establish or defend legal claims.
Send promotional email about Med-Fit offerings where permitted by law. You may unsubscribe from promotional email at any time, but will still receive transactional messages needed to fulfill your purchase.

5. Course Accounts and Activity Data
ThriveCart Academy and related providers may record enrollment, account access, login activity, lesson progress or completion, downloads, and other course interactions. Med-Fit may use this information to administer access, troubleshoot technical issues, secure accounts, measure engagement, and improve course delivery.

The course does not include Med-Fit monitoring or reviewing your personal workbook entries, calculator results, or health decisions unless a separate service expressly states otherwise and you choose to provide the information through an appropriate channel.

Your course access is personal. Do not share your login credentials or access links.

6. How We Disclose Information
Med-Fit may disclose personal information to the following categories of recipients for the purposes described in this Policy:

Service providers that support website hosting, checkout and order management, payment processing, course and video delivery, email delivery, customer-relationship management, workflow automation, analytics, security, and customer support. These may include ThriveCart and ThriveCart Academy, payment processors, GoHighLevel or LeadConnector, Zapier, and providers used to host the website, videos, documents, or email.
Professional advisers, auditors, insurers, and legal or regulatory authorities when reasonably necessary.
A buyer, successor, or other relevant party in connection with a merger, financing, reorganization, sale of assets, or similar business transaction, subject to appropriate protections.
Other parties when you request or consent to the disclosure, or when disclosure is necessary to comply with law, protect rights or safety, investigate fraud, or enforce agreements.

Med-Fit does not sell personal information for money. If Med-Fit uses personal information for targeted advertising or another activity treated as a "sale" or "sharing" under applicable law, Med-Fit will provide any legally required notice and opt-out method.

7. Cookies, Analytics, and Advertising Technologies
Med-Fit and its providers may use essential cookies to operate checkout, account, and access features; functional cookies to remember choices; analytics technologies to measure use and performance; and advertising technologies, including pixels, to understand campaign results or present relevant advertising. These technologies may collect page views, clicks, referral or campaign information, checkout events, purchases, and email interactions. The specific technologies may change as providers change.

You can control many cookies through your browser settings and, where offered, the website's consent or privacy controls. Blocking some cookies may affect site functionality. Where applicable law requires Med-Fit to recognize a qualifying universal opt-out signal, Med-Fit will process it as required.

8. Email and Communication Choices
You may unsubscribe from promotional email using the link in the message or by contacting Med-Fit. Unsubscribing from marketing does not stop receipts, access instructions, payment notices, account-security messages, course-delivery emails, or other communications needed to provide a purchase. Purchasing the course does not by itself enroll you in text-message marketing.

9. Data Retention
Med-Fit retains personal information only for as long as reasonably necessary for the purposes described in this Policy, including completing transactions, maintaining course accounts and access, providing support, maintaining business and tax records, resolving disputes, enforcing agreements, preventing fraud, and meeting legal obligations. Retention periods vary by the type of information, the service involved, legal requirements, and security needs. Med-Fit may delete or de-identify information when it is no longer needed.

10. Security
Med-Fit uses reasonable administrative, technical, and physical safeguards appropriate to the nature of the information it handles. No system, transmission, or storage method is completely secure, so Med-Fit cannot guarantee absolute security. Protect your course password and use caution when sending information by ordinary email.

11. Your Privacy Rights
Depending on where you live and subject to legal exceptions, you may have rights to request access to, correction of, deletion of, or a portable copy of personal information about you; to opt out of certain targeted advertising, sale, or profiling activities; to withdraw consent where processing relies on consent; and to appeal a decision on a privacy request.

To make a request, email [email protected] with the subject "Privacy Request" or call 720-487-7688. Describe your request and provide enough information for Med-Fit to reasonably verify that you are the person concerned. Med-Fit will use information provided for verification only to process the request. Authorized agents may submit requests where permitted by law, subject to verification of their authority. Med-Fit will not unlawfully discriminate against you for exercising a privacy right.

If Med-Fit denies a request and your jurisdiction provides an appeal right, you may appeal by emailing the same address with the subject "Privacy Appeal" and explaining why you believe the decision should be reconsidered. Where required, Med-Fit will also honor a qualifying browser-based universal opt-out signal.

12. Children's Privacy
The Services and course are intended for adults age 18 or older. Med-Fit does not knowingly collect personal information through these Services from children. If you believe a child has provided personal information through the Services, contact Med-Fit so the information can be reviewed and deleted as appropriate.

13. Third-Party Sites and Services
The Services may link to or depend on third-party sites and platforms, including checkout, payment, course-hosting, video-hosting, email, analytics, automation, and document-hosting providers. Their privacy policies and terms govern their independent handling of information. Med-Fit encourages you to review those policies before providing information to a third party.

14. U.S. Processing
Med-Fit is based in the United States. If you access the Services from another country, your information may be processed in the United States or other locations where Med-Fit's providers operate, subject to applicable law.

15. Changes to This Policy
Med-Fit may update this Policy to reflect changes in practices, services, providers, or legal requirements. The revised Policy will be posted with a new effective date. If a change is material, Med-Fit will provide additional notice where required by law.

16. Contact Us
For privacy questions, requests, or accessibility assistance with this Policy, contact:
Med-Fit, PLLC
Email: [email protected]
Phone: 720-487-7688
Website: https://medfitmedicalweightloss.com/