PRIVACY POLICY

Effective Date: September 15, 2026
Last Updated: September 15, 2026

YFP Health LLC (“YFP Health,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit www.yfphealth.com or use a YFP Health-branded webpage, marketplace, member experience, or online service that links to this Privacy Policy (collectively, the “Site”).

This Privacy Policy also explains the choices and rights that may be available to you. By using the Site, you acknowledge the practices described here.

​

1. Scope of This Privacy Policy

YFP Health provides a private wellness marketplace and technology platform through which eligible members of participating fitness organizations, membership communities, employers, associations, and other organizations (“Partner Organizations”) may discover and access wellness products and services offered by independent providers and vendors.

This Privacy Policy applies to personal information YFP Health collects or controls. It does not replace the privacy notices of independent healthcare professionals, medical groups, pharmacies, laboratories, payment processors, fulfillment companies, or marketplace vendors (“Third-Party Providers”). Those parties may collect information directly from you and process it under their own privacy policies, Notices of Privacy Practices, terms, and legal obligations.

​

2. YFP Health and Healthcare Information

YFP Health is a marketplace and technology company and does not itself provide medical advice, diagnosis, treatment, or prescriptions. Clinical services are provided by independent licensed healthcare professionals and other Third-Party Providers.

Some information collected in connection with clinical care may be protected health information (“PHI”) under the Health Insurance Portability and Accountability Act (“HIPAA”). When HIPAA applies, the applicable healthcare provider’s Notice of Privacy Practices—not this Privacy Policy—describes how that provider may use and disclose PHI.

HIPAA does not apply to every type of health-related information collected through a consumer website, wellness platform, or application. Information YFP Health collects outside a HIPAA-covered relationship may instead be governed by this Privacy Policy, the Federal Trade Commission Act, state consumer-health privacy laws, and other applicable laws.

​

3. Personal Information We Collect

The information we collect depends on how you interact with the Site.

A. Information You Provide

We may collect:

• Contact information, such as your name, email address, telephone number, and mailing or shipping address.

• Account information, such as login credentials, account preferences, and authentication details.

• Membership and eligibility information, such as your Partner Organization, membership code, invitation link, membership status, or other information used to verify access.

• Transaction information, such as products or programs selected, purchase date, transaction amount, order status, shipping information, and limited payment details. Full payment-card information may be collected directly by a payment processor rather than YFP Health.

• Communications, including messages, inquiries, feedback, customer-support requests, survey responses, and records of your communications with us.

• Marketing preferences, including email or text-message preferences and records of consent.

• Health and wellness information, if you choose to provide it directly to YFP Health. Clinical intake forms, medical history, test results, prescription information, and treatment communications may instead be collected directly by a Third-Party Provider through a separate portal.

Please do not send medical records or other sensitive health information through a general website contact form or ordinary email unless we specifically request it and identify an appropriate secure method.

B. Information Collected Automatically

When you use the Site, we and service providers acting on our behalf may automatically collect:

• IP address;

• browser type, device type, operating system, and device identifiers;

• pages viewed, links selected, referring webpage, and time spent on the Site;

• approximate location derived from IP address;

• cookie identifiers and similar technical data; and

• information about Site errors, performance, and security events.

We collect this information through cookies, pixels, software development kits, server logs, and similar technologies. See Section 8, Cookies and Similar Technologies.

C. Information From Other Sources

We may receive personal information from:

• Partner Organizations, such as information needed to confirm membership eligibility;

• Third-Party Providers, such as limited order, fulfillment, payment, eligibility, or customer-service information;

• payment processors and fraud-prevention services;

• marketing and analytics service providers;

• publicly available sources; and

• business partners involved in administering a member benefit or program.

We do not request that a Partner Organization provide us with employee medical records or clinical information.

​

4. How We Use Personal Information

We may use personal information to:

• operate, maintain, secure, and improve the Site;

• create and manage accounts;

• verify eligibility through a Partner Organization;

• connect users with selected products, programs, and Third-Party Providers;

• process and support purchases, payments, subscriptions, shipping, returns, and refunds;

• communicate about accounts, transactions, service updates, security, and customer support;

• personalize content and display relevant marketplace offerings;

• administer Partner Organization programs and calculate qualifying compensation;

• send marketing communications where permitted and honor communication preferences;

• analyze Site usage and performance;

• detect, investigate, and prevent fraud, misuse, security incidents, and unlawful activity;

• comply with legal obligations and respond to lawful requests;

• establish, exercise, or defend legal claims; and

• complete a merger, financing, acquisition, reorganization, sale of assets, or similar business transaction.

We will not use personal health information for purposes that are materially different from those described at collection without providing any notice or consent required by law.

​

5. How We Disclose Personal Information

We may disclose personal information to the following categories of recipients:

A. Service Providers

We may disclose information to companies that perform services on our behalf, such as website hosting, cloud storage, payment processing, identity verification, analytics, communications, customer support, fraud prevention, cybersecurity, shipping, and professional services. These companies are authorized to use information only as permitted by their contracts and applicable law.

B. Third-Party Providers You Select

When you choose a product, service, or clinical program, we may disclose information needed to connect you with the applicable Third-Party Provider or complete your transaction. A Third-Party Provider may also collect information directly from you. Once a Third-Party Provider receives or directly collects your information, its own privacy policy and legal obligations apply.

C. Partner Organizations

We may disclose limited information to the Partner Organization through which you receive access when reasonably necessary to:

• confirm or administer your eligibility;

• attribute an eligible transaction to that Partner Organization;

• calculate or report compensation associated with eligible transactions;

• prevent misuse of membership access; or

• provide aggregated program reporting.

YFP Health’s intended practice is not to provide Partner Organizations with clinical intake responses, diagnoses, medical records, test results, treatment communications, or prescription details unless you direct or authorize the disclosure or the disclosure is otherwise legally permitted.

​

D. Legal, Safety, and Compliance Disclosures

We may disclose information when we reasonably believe disclosure is required by law, legal process, regulation, or governmental request; is necessary to protect rights, safety, or security; is necessary to investigate fraud or unlawful activity; or is appropriate to enforce our agreements.

E. Business Transactions

We may disclose information in connection with an actual or proposed merger, financing, acquisition, reorganization, sale of assets, bankruptcy, or similar transaction. Any successor will be required to handle personal information consistently with applicable law.

F. At Your Direction

We may disclose information with your consent or at your direction.

​

6. Sale, Sharing, and Targeted Advertising

YFP Health does not sell personal information or consumer health data for money. YFP Health does not sell or share personal health information with data brokers and does not use personal health information for targeted advertising.

Certain privacy laws define “sale,” “sharing,” or “targeted advertising” broadly and may include some disclosures involving advertising cookies or analytics technologies, even when no money changes hands.

​

We do not knowingly sell or share the personal information of individuals under 16.

​

7. Consumer Health Data

Some information processed through the Site may qualify as “consumer health data” under state law even if it is not PHI under HIPAA. Depending on applicable law, consumer health data may include information that identifies or could be used to infer a person’s physical or mental health status, treatments, medications, reproductive or sexual health, biometric data, precise location near healthcare facilities, or health-related purchases.

YFP Health may collect consumer health data that you provide, information reflecting the wellness or clinical program you select, and inferences that may be drawn from your activity or purchases. We use that information to provide requested services, administer transactions and member benefits, maintain security, comply with law, and for other purposes disclosed at collection.

We do not sell consumer health data. We do not disclose consumer health data except to service providers and Third-Party Providers needed to provide the service you request, to Partner Organizations in the limited manner described above, with your authorization, or as permitted or required by law.

Residents of certain states may have rights to access, confirm, correct, or delete consumer health data; obtain a list of third parties or affiliates receiving it; withdraw consent; or appeal a denial of a request. See Section 12, Your Privacy Rights.

Important implementation note: If YFP Health is subject to the Washington My Health My Data Act or a similar state law, the law may require a separate Consumer Health Data Privacy Policy, a prominent homepage link, collection consent, and a separate authorization before any sale of consumer health data. This general Privacy Policy should not be treated as a substitute for those separate requirements.

​

8. Cookies and Similar Technologies

We may use the following types of cookies and similar technologies:

• Essential technologies needed for security, authentication, checkout, account functions, and core Site operation.

• Preference technologies that remember settings and choices.

• Analytics technologies that help us understand Site traffic, performance, and usage.

• Marketing technologies, if used, that help measure campaigns or provide advertising.

Where required, we will request consent before using nonessential cookies. You may be able to manage choices through our cookie banner or settings tool and through your browser settings. Blocking some technologies may affect Site functions.

Browser-based Global Privacy Control signals will be honored when required by applicable law.

​

9. Marketing Communications

You may unsubscribe from marketing emails using the link in the message. You may still receive nonmarketing communications concerning your account, purchases, security, or requested services.

If you separately consent to text messages, you may opt out as described in the message or applicable text-message terms. Consent to marketing messages is not a condition of purchase unless clearly disclosed and legally permitted.

​

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide services, maintain transaction and business records, administer Partner Organization compensation, resolve disputes, enforce agreements, prevent fraud, and comply with legal, tax, accounting, and regulatory obligations.

Retention periods vary based on the type of information, the relationship involved, legal requirements, and whether information is maintained by YFP Health or an independent Third-Party Provider. Clinical Providers, pharmacies, and laboratories may retain medical and prescription records under separate legal requirements.

When information is no longer required, we may delete, deidentify, or aggregate it. Deidentified or aggregated information may be retained and used where permitted by law, provided we do not attempt to reidentify it.

​

11. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information. No website, transmission, storage system, or security measure is completely secure, and we cannot guarantee absolute security.

You are responsible for maintaining the confidentiality of your account credentials and for using an appropriate secure method when transmitting sensitive information. Notify us promptly at hello@yfphealth.com if you believe your account or information may have been compromised.

If a security incident occurs, we will investigate and provide notifications as required by applicable law.

​

12. Your Privacy Rights

Depending on where you live and subject to legal exceptions, you may have the right to:

• know or access the personal information we maintain about you;

• receive information about the categories, sources, purposes, and recipients of personal information;

• correct inaccurate personal information;

• delete personal information;

• obtain a portable copy of certain information;

• opt out of sale, sharing, targeted advertising, or certain profiling;

• limit certain uses or disclosures of sensitive personal information;

• withdraw consent where processing is based on consent; and

• appeal our decision concerning a privacy request.

To submit a request, contact us at hello@yfphealth.com. Please state your name, state of residence, the right you wish to exercise, and sufficient information for us to locate your records.

We may take reasonable steps to verify your identity before completing a request. We will use information submitted for verification only for that purpose. You may use an authorized agent where permitted by law, but we may require proof of authorization and direct verification with you.

We will respond within the period required by applicable law. We may deny or limit a request when a legal exception applies and will explain the decision when required. You will not be discriminated against for exercising applicable privacy rights.

If we deny an appealable request, you may appeal by emailing hello@yfphealth.com with the subject line “Privacy Request Appeal.”

 

13. California Privacy Notice

If the California Consumer Privacy Act, as amended (“CCPA”), applies to YFP Health, California residents may have the rights described in Section 12, including rights to know, delete, correct, opt out of sale or sharing, limit certain uses of sensitive personal information, and receive equal service and pricing when exercising their rights.

During the preceding 12 months, YFP Health may have collected the categories of personal information described in Section 3, used them for the purposes described in Section 4, and disclosed them to the categories of recipients described in Section 5.

YFP Health does not sell personal information for money. 

​

14. Children’s Privacy

The Site is not directed to children under 13, and we do not knowingly collect personal information from children under 13 through the Site. Accounts, purchases, and clinical-service requests are intended for individuals who are at least 18 unless an applicable provider expressly permits otherwise and obtains legally required consent.

If you believe a child provided personal information to YFP Health in violation of this section, contact us at hello@yfphealth.com so we can review and take appropriate action.

​

15. External Links and Third-Party Services

The Site may contain links to or integrations with third-party websites, portals, applications, pharmacies, laboratories, providers, and vendors. We do not control their privacy or security practices. Review their policies before providing personal information.

​

16. International Visitors

YFP Health is operated in the United States and is intended primarily for users in the United States. If you access the Site from another country, your information may be transferred to and processed in the United States, where privacy laws may differ from those in your jurisdiction.

​

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the revised policy and update the “Last Updated” date. If a change is material, we may provide additional notice or request consent when required by law.

​

18. Contact Us

Questions, privacy requests, or complaints may be submitted to:

hello@yfphealth.com