Privacy Policy

DemaFora Health

Effective date: [EFFECTIVE DATE]

Last updated: [LAST UPDATED DATE]

This Privacy Policy explains how [LEGAL ENTITY NAME] ("DemaFora Health," "DemaFora," "we," "us," or "our") collects, uses, and shares information when you visit our websites, demaforahim.com and demaforaher.com (together, the "Sites"), or join our waitlist.

Please read this first — two different kinds of information. DemaFora Health is a cash-pay telehealth membership brand. DemaFora does not practice medicine. Medical care is provided by independent, licensed clinicians in Elite Care Health, using a technology platform operated by Karpa Health. That means your information is handled in two separate places:

Website informationHealth information (PHI)
What it isName, email address (waitlist), and standard cookie, device, and analytics data from our SitesMedical intake answers, health history, lab results, prescriptions, clinician notes, and communications with your care team
Where it's collecteddemaforahim.com and demaforaher.comIntake (start.demaforahim.com / start.demaforaher.com), operated on Karpa Health's platform
Who is responsibleDemaFora (this Privacy Policy)Elite Care Health and its service providers, including Karpa Health, under HIPAA and the Elite Care Health Notice of Privacy Practices

This Privacy Policy covers website information. Your health information is protected under the HIPAA Notice of Privacy Practices of Elite Care Health, available at [LINK TO HIPAA NOTICE].


1. Information we collect on our Sites

Information you give us

Information collected automatically

When you visit our Sites, we and our service providers may automatically collect:

What we do not collect on our Sites

DemaFora's Sites do not ask for medical history, symptoms, medications, lab results, insurance, or other health information. Those are collected only within the intake on Karpa Health's platform on behalf of Elite Care Health.

2. How we use website information

We use website information to:

3. How we share website information

We do not sell your name or email address for money. We may share website information with:

4. Cookies, analytics, and advertising pixels

We use cookies, pixels, and similar technologies on our Sites to make them work, understand usage, and measure and personalize advertising.

No health information goes to ad platforms. We do not place advertising pixels on the intake (start.) pages, and we do not share protected health information with advertising platforms. We configure our tools to avoid sending information about the specific health programs you view in a way that identifies you. [COUNSEL/ENGINEERING TO CONFIRM PIXEL CONFIGURATION AND PAGE SCOPE]

Your choices:

5. Your privacy rights

Depending on where you live (for example, California, Colorado, Connecticut, Virginia, Washington, and other states with consumer privacy laws), you may have the right to:

Consumer health data laws. Some states (such as Washington's My Health My Data Act and Nevada's similar law) regulate "consumer health data," which can include some information outside HIPAA. [COUNSEL TO ASSESS WHETHER A SEPARATE CONSUMER HEALTH DATA PRIVACY POLICY IS REQUIRED.]

California residents. In the past 12 months we may have collected these categories of personal information: identifiers (name, email, IP address, cookie IDs); internet or network activity; and approximate geolocation. Purposes and recipients are described in Sections 2–4. We may "share" identifiers and internet activity with advertising partners for cross-context behavioral advertising; you can opt out as described above. We do not knowingly sell or share personal information of consumers under 16. [COUNSEL TO CONFIRM CCPA CATEGORIES AND RETENTION PERIODS.]

How to make a request: email [PRIVACY EMAIL] or call [SUPPORT PHONE] or use [WEB FORM LINK]. We will verify your request using information you provide (such as confirming your email address). You may use an authorized agent, subject to verification. If we deny your request, you may appeal by replying to our decision or emailing [PRIVACY EMAIL] with "Appeal" in the subject line.

Requests about your health information (medical records, prescriptions, etc.) should go to Elite Care Health as described in its Notice of Privacy Practices.

6. Marketing emails

You can unsubscribe from marketing emails using the link in any message. We may still send you non-marketing messages about your account or requests.

7. Children

Our Sites and services are intended only for adults 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact [PRIVACY EMAIL] and we will delete it.

8. Data security

We use reasonable administrative, technical, and physical safeguards designed to protect website information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Data retention

We keep website information for as long as needed for the purposes described above — for example, while you remain on our waitlist or subscribed to emails — and as required by law. [RETENTION PERIODS TO BE CONFIRMED]

10. Third-party sites

Our Sites may link to the intake on Karpa Health's platform, and may link to other websites. Those sites are governed by their own privacy policies and notices.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version with a new "Last updated" date and, where required, notify you of material changes.

12. Contact us

[LEGAL ENTITY NAME] (DemaFora Health) [MAILING ADDRESS] Email: [PRIVACY EMAIL] / [SUPPORT EMAIL] Phone: [SUPPORT PHONE]