Privacy Policy

This Privacy Policy describes how Halla LLC ("Halla Meds," "we," "us," "our") collects, uses, and protects information you provide when using hallameds.com and our services ("Services"). By using the Services, you agree to the practices described here.

1. Who We Are

Halla LLC
3555 Gwinnett Pl Dr NW, Duluth, GA 30096
Contact us via our contact page.

2. Information We Collect

Information you provide:

• Name, email address, phone number, and date of birth
• Mailing address (for medication shipments)
• Health history, current medications, allergies, and health goals provided in your intake form
• Consultation notes and communications with affiliated Providers
• Payment information (processed by our payment processor; we do not store raw card data)

Information collected automatically:

• IP address, browser type, and device information
• Pages visited and time spent on the site
• Referring URLs
• Cookies and similar tracking technologies (see Section 7)

3. How We Use Your Information

We use your information to:

• Facilitate your intake, Provider consultation, and treatment workflow
• Process program enrollment and billing
• Communicate with you about your account, orders, and care coordination
• Send appointment reminders, health updates, and program-related messages
• Improve our platform, services, and member experience
• Comply with legal obligations and respond to regulatory inquiries
• Prevent fraud and protect the security of our platform

4. Protected Health Information & HIPAA

Because Halla Meds facilitates telehealth services involving Protected Health Information (PHI), we operate in compliance with the Health Insurance Portability and Accountability Act (HIPAA). Your health information is:

• Shared with affiliated licensed Providers, including Elite Care Health, only as necessary to deliver your care
• Stored on HIPAA-compliant platforms with encryption at rest and in transit
• Accessible to third-party service providers only under written Business Associate Agreements (BAAs)

5. Third-Party Service Providers

We share your information with third parties who assist in operating our services, including:

• A payment processor, to process billing. Data shared: name, email, billing address, payment method. [Placeholder — confirm actual payment processor.]
• Rx Ave Health, our pharmacy fulfillment partner. Data shared: name, address, prescription details.
• [Placeholder — confirm any CRM/communications platform used for account and appointment messaging.]

All third parties with access to PHI are bound by BAAs or equivalent data protection agreements. We do not sell your personal information to any third party.

6. SMS & Email Communications

By providing your phone number and consenting during enrollment, you consent to receive text messages from Halla Meds related to your account, appointments, health updates, and program.

To opt out of SMS: Reply STOP to any message. Standard message and data rates may apply.

To opt out of marketing emails: Click "Unsubscribe" in any marketing email. Transactional messages (billing, appointment confirmations) may still be sent as necessary to manage your account.

7. Cookies & Analytics

We use cookies and similar technologies to:

• Keep you logged in to your account
• Understand how members use our site
• Improve site performance and personalization

[Placeholder — specific analytics vendors and opt-out mechanisms to be confirmed.] You can disable cookies in your browser settings, though some features may not function properly.

8. Your Rights

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your personal data (subject to legal retention requirements)
• Opt out of SMS and marketing email communications
• Receive a copy of your data in a portable format upon request

To exercise any of these rights, contact us via our contact page. We will respond within 30 days.

9. Data Security

We implement administrative, physical, and technical safeguards to protect your information, including:

• Encryption for data in transit
• Encrypted storage for PHI and payment data
• Access controls limiting data access to authorized personnel
• Regular security reviews and vendor assessments

No system is 100% secure. If you believe your account has been compromised, contact us immediately via our contact page.

10. Data Retention

We retain personal information for as long as your account is active and for a minimum of seven (7) years after your last interaction with our Services, consistent with applicable healthcare recordkeeping laws. [Placeholder — confirm retention period against the specific state(s) where Halla Meds operates.] Payment records are retained as required by applicable financial regulations.

11. Children

Our Services are not directed at anyone under the age of 18. We do not knowingly collect personal information from minors. If we learn that a minor has submitted information, we will delete it promptly.

12. Data Breach Notification

In the event of a security breach involving your personal information or PHI, we will notify affected individuals without unreasonable delay and in accordance with applicable federal and state breach notification laws, including HIPAA's Breach Notification Rule.

13. Governing Law & Dispute Resolution

This Privacy Policy is governed by the laws of the State of Georgia. Any dispute arising out of or relating to this policy shall be resolved by binding arbitration under the American Arbitration Association's Consumer Arbitration Rules, in Georgia. You waive your right to participate in class action litigation.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date above. If changes are material, we will notify you by email. Continued use of the Services after changes take effect constitutes your acceptance of the revised policy.

15. Contact

Halla LLC
3555 Gwinnett Pl Dr NW, Duluth, GA 30096
Questions about this policy can be directed to us via our contact page.