Who this covers
This policy covers medirawellness.com — the public website where you browse products and place an order. The Medira member app at app.medirawellness.com is a separate application with its own accounts; information you provide there supports your orders and your account.
This Privacy Policy does not govern information you provide directly to an independent healthcare professional or pharmacy. Their handling of that information is subject to their own practices and applicable law.
What we collect when you place an order
The order form asks for, and we store:
- Your name. First name required, last name optional.
- Your email address. Required — this is where your order reference and your link to create an account are sent.
- Your phone number. Optional.
- Your shipping address. Street, optional second line, city, state and ZIP code. United States only.
- What you ordered. The product and the quantity, plus the price at the time you ordered.
- Your confirmations. That you confirmed you are at least 21 years old, that you accepted this policy and the Terms of Use and Shipping & Refund Policy, when you did so, and which published versions of those documents you accepted.
We also generate and store a reference number for your order, and short-lived credentials that let you see your confirmation page and attach the order to an account. Those credentials are stored only as one-way hashes.
As your order moves through review, payment and fulfilment, records about it — its status, staff notes, payment records, and shipping details — are kept in the member app alongside your account.
What we deliberately do not collect
No date of birth. The age question is a confirmation, not an identity check. There is no field for a birthdate anywhere in the order flow, and no database column to hold one.
No health information. This website does not ask for and must never collect diagnoses, medical history, symptoms, medications, test results, or prescription information. Please do not include any of it in an email to us. Where a product requires a medical evaluation, that information is collected by the independent licensed healthcare professional conducting it — not by this website.
No payment card details. This website has no checkout and takes no payment. Payment instructions are provided separately after your order is reviewed, and no card or bank account number is entered on this site.
Why we use it
- To record and review your order request.
- To contact you about that order, including next steps and anything the review raises.
- To verify payment when payment is arranged.
- To ship what you ordered, and to keep a record of your orders.
- To answer your questions and provide support.
- To protect the service from abuse. We apply rate limits to order submissions; the limiter stores a one-way digest rather than your email address or IP address.
- To keep the records the business is required to keep, and to resolve disputes.
Marketing
Medira does not currently run any marketing email or text message programme, and placing an order does not sign you up for one. Your phone number, if you give one, is used for communications about your order. If Medira introduces marketing messages, it will ask for your agreement separately — accepting the Terms at checkout is not that agreement, and this page will be updated before any such programme begins.
Who else handles it
Medira uses a small number of service providers to run the website and the member app. They process information on Medira’s behalf, for the purposes above:
- Vercel — hosts this website and the member app.
- Neon — hosts the PostgreSQL database where orders and accounts are stored.
- Cloudflare — sits in front of the sites, handling DNS and traffic.
- Resend — sends transactional email, such as your order confirmation and account links.
- Google Fonts — this site loads its typefaces from Google’s servers, so Google receives technical information such as your IP address when those fonts are requested.
Beyond these, information may be shared with an independent healthcare professional or pharmacy where that is necessary to fulfil an order that requires one, with a shipping carrier to deliver it, and where the law requires it.
We do not sell your information
Medira does not sell your personal information and does not share it for advertising. There are no advertising trackers, analytics tags, marketing pixels, or session recording tools on this website.
Cookies and browser storage
This site sets no advertising or analytics cookies. It uses three things:
medira_order_confirmation— set when you place an order so the confirmation page can show you that order. It cannot be read by scripts, and it expires after 15 minutes.medira_order_ref— carries your order reference to the same page, on the same terms.medira_age_confirmed— stored in your browser, not sent to us, recording that you answered the age question. It holds only a yes and is cleared when that browser tab or page session ends.
Our hosting and network providers may also set cookies necessary to serve and secure the site.
How long we keep it
Order records are kept for as long as we need them to run the business — to support you, to keep accurate financial and fulfilment records, and to meet legal and record-keeping obligations. Short-lived credentials expire on their own, in minutes or days depending on what they are for. Medira has not yet set a fixed retention period for order records; when it does, this page will say what it is rather than describing one that is not in place.
Security
Information travels over encrypted connections, credentials are stored as one-way hashes rather than as readable values, and access to order and account data is restricted to Medira staff who need it. No system is perfectly secure, and we do not claim otherwise.
Your choices, and California residents
You can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it. Email [email protected] and we will respond. We may need to keep some records to meet legal, financial, or safety obligations even after a deletion request, and we will tell you if that applies.
If you are a California resident, you may have rights under California privacy law to know what personal information is collected about you, to have it deleted, to correct it, and not to be discriminated against for exercising those rights. Medira will honor those requests through the same email address. As stated above, Medira does not sell your personal information and does not share it for cross-context behavioral advertising.
Age
The Medira storefront is intended for adults age 21 and older. It is not directed to children, and Medira does not knowingly collect personal information from anyone under 21. If you believe someone under that age has given us information, email us and we will delete it.
Changes to this policy
If this policy changes, the date at the top of this page changes with it. When you accepted this policy at checkout, we recorded which version you accepted, and that record is not altered when the policy is later updated.
Questions
Email [email protected]. Please do not include medical information in your message.