Privacy Policy
How Bright Water Peptides collects, uses, shares and protects your information.
This Privacy Policy explains how Bright Water Peptides LLC, a Wyoming limited liability company ("Bright Water," "we," "us"), handles information when you visit www.brightwaterpeptides.com, complete our intake, use the patient portal, or communicate with us. The clinicians you see through Bright Water are independent licensed providers. When they treat you, the health information in your medical record is also protected by our Notice of Privacy Practices, which controls if it conflicts with this policy.
1. Information we collect
Information you give us.
- Identity and contact details: first and last name, email, mobile phone, date of birth, and the state you'll be in during your visit.
- Health information: height, weight, medical conditions, safety-screen answers, pregnancy status, current medications, prior GLP-1 use, goals and treatment preferences.
- Visit and treatment records: clinician notes, video-visit details, prescriptions, dose changes and portal messages.
- Payment information: payment is handled by our payment processor. We receive a confirmation and the last four digits of your card, not your full card number.
- Pharmacy choice and shipping or pickup details.
Information collected automatically. When you use the site, our hosting provider records standard technical data such as IP address, browser type, pages requested and timestamps for security and reliability. We use only the browser storage needed for the site to work, such as remembering that you closed a banner. We do not use advertising cookies or third-party tracking pixels on pages where you enter health information.
2. How we use information
- To match you with a clinician licensed in your state, schedule your video visit and support your care.
- To send prescriptions to the pharmacy you choose and coordinate refills and dose changes.
- To process payments and refunds, including the full refund if you are not approved.
- To send care messages, visit reminders and account notices.
- To keep the service secure, prevent fraud, meet legal and licensing obligations, and keep required medical records.
- To improve the site using aggregated or de-identified information that no longer identifies you.
We will send you marketing only if you opt in, and you can opt out at any time. We never use your health information for marketing without your written authorization.
3. How we share information
We do not sell your personal information or your health information, and we do not share it for targeted advertising. We share it only:
- With your treating clinicians and the medical practice they work under.
- With the licensed pharmacy that fills and ships your prescription, including the information it needs to dispense, ship and be paid for your medication.
- With service providers that host, store, secure, message or process payments for us. They may use it only to provide services to us, under written contracts. Providers that handle protected health information sign business associate agreements.
- When required by law, such as to respond to a valid subpoena or court order, report to public health authorities, or protect someone from a serious threat.
- As part of a merger, sale or reorganization, subject to this policy.
- With anyone else you direct us to, with your consent.
4. Consumer health data
Some state laws, including Washington's My Health My Data Act, Nevada's consumer health data law and Connecticut's data privacy law, give you extra rights over consumer health data. We collect consumer health data only to provide the care you request, and we share it only as described in Section 3. You may ask us to confirm what consumer health data we hold, to delete it, or to withdraw consent for its collection or sharing, subject to medical-record retention laws. We will not sell consumer health data.
5. Your choices and rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you and get a copy.
- Correct information that is inaccurate.
- Delete information, except records we must keep by law, such as medical records.
- Opt out of marketing messages.
- Appeal a decision we make about your request.
To make a request, email support@brightwaterpeptides.com. We will verify your identity before acting and respond within the time the law requires, usually 45 days. We will not discriminate against you for using your rights. You can have an authorized agent make a request for you if you give them written permission.
6. Text messages and email
If you give us your mobile number, we may text you about visits, prescriptions and your account. Message and data rates may apply. Reply STOP to stop texts or HELP for help. We do not share your mobile number or text-messaging consent with third parties for their marketing.
7. How we protect information
We use administrative, technical and physical safeguards, including encryption in transit, access controls limited to people who need the information for your care, and audit logs of clinician actions. No system is perfectly secure. If a breach affects your information, we will notify you as the law requires.
8. How long we keep information
We keep medical records for as long as the law in your state requires, often seven to ten years after your last visit and longer for minors. We keep other information only as long as needed for the purposes above.
9. Children
Bright Water serves adults 18 and older. We do not knowingly collect information from children under 18. If you believe a child has given us information, contact us and we will delete it.
10. Changes to this policy
We will post any changes on this page and update the effective date. If we make a material change, we will notify you by email or through the portal before it takes effect.
11. Contact us
Questions or requests: support@brightwaterpeptides.com.