Privacy Policy

Eros MD LLC, doing business as Eros MD ("Company," "we," "us," or "our"), operates this website and the services described in this policy. Eros MD is committed to protecting your privacy and the confidentiality of your personal and health information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at erosmd.com (the "Site") or use our telehealth services.

1. Information We Collect

Personal Information

We may collect the following personal information when you interact with our Site or services:

• Name, date of birth, and contact information (email address, phone number, mailing address)
• State of residence
• Payment and billing information

Protected Health Information (PHI)

In the course of providing telehealth services, we collect health-related information including:

• Medical history and current health conditions
• Current medications and supplements
• Lab results and bloodwork
• Lifestyle information (exercise, stress, sleep habits)
• Treatment goals and preferences
• Provider notes and consultation records

Automatically Collected Information

When you visit our Site, we may automatically collect:

• IP address and approximate geolocation
• Browser type and version
• Device type and operating system
• Pages visited, referring URLs, and browsing behavior
• Cookies and similar tracking technologies (see our Cookie Notice)

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our telehealth services
• Process and fulfill consultations and prescriptions
• Communicate with you about your care, appointments, and account
• Process payments and manage billing
• Send service-related notices and updates
• Comply with legal and regulatory requirements
• Analyze usage patterns to improve our Site and services
• Protect against fraud and unauthorized activity

3. HIPAA Compliance

As a provider of telehealth services, Eros MD is committed to compliance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and its implementing regulations. Your Protected Health Information is handled in accordance with HIPAA's Privacy Rule, Security Rule, and Breach Notification Rule.

We maintain appropriate administrative, physical, and technical safeguards to protect the confidentiality, integrity, and availability of your health information. A separate Notice of Privacy Practices may be provided to you as part of the patient onboarding process, detailing your rights under HIPAA.

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Healthcare providers: Licensed providers involved in your care.
• Service providers: Third-party vendors who assist in operating our business (e.g., payment processors, email services, pharmacy partners), subject to contractual obligations to protect your information.
• Legal requirements: When required by law, subpoena, court order, or government regulation.
• Business transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
• With your consent: We may share information when you have given us explicit consent to do so.

5. Data Security

We implement industry-standard security measures to protect your personal and health information, including:

• Encryption of data in transit and at rest
• Secure server infrastructure with access controls
• Regular security assessments and monitoring
• Employee training on data privacy and security practices

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your personal information and health records for as long as necessary to provide our services and fulfill the purposes outlined in this policy, or as required by applicable law. Medical records are retained in accordance with state and federal retention requirements, which may require retention for a minimum of seven (7) years after the last date of service.

7. Your Rights

Depending on your state of residence, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to legal retention requirements.
• Portability: Request a copy of your data in a portable format.
• Opt-out: Opt out of marketing communications at any time.

To exercise any of these rights, contact us at info@erosmd.com. We will respond to your request within 30 days.

8. SMS / Text Messaging

If you opt in to receive text messages from Eros MD by checking the separate, optional SMS consent box on our website forms, we will send messages about your consultation request, appointment scheduling and reminders, follow-ups on your inquiry, and occasional offers. Consent is not a condition of purchase.

• Message frequency varies.
• Message and data rates may apply.
• Reply STOP to cancel at any time. Reply HELP for help, or contact info@erosmd.com.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

9. State-Specific Disclosures

California Residents (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act, including the right to know what personal information is collected, the right to delete personal information, the right to opt out of the sale of personal information (we do not sell personal information), and the right to non-discrimination for exercising privacy rights.

Other State Privacy Laws

Residents of states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, and others) may have similar rights. Contact us to learn more about your state-specific rights.

10. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If we learn that we have collected information from a minor, we will take steps to delete it promptly.

11. Third-Party Links

Our Site may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically. Your continued use of the Site after changes constitutes acceptance of the revised policy.

13. Contact

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

Eros MD LLC (d/b/a Eros MD)
401 E. Jackson Street, Suite 3300
Tampa, FL 33602
Registered office: 30 N Gould St Ste R, Sheridan, WY 82801
info@erosmd.com