Privacy Policy
1. About this policy
This Privacy Policy explains how Brand Merchants Network LLC, doing business as Yucca Health (“Yucca Health,” “we,” “us,” “our”), collects, uses, shares, and protects personal information when you visit tryyucca.com, use our patient portal, or otherwise interact with us.
This policy applies to people in the United States. If you are outside the United States, the Services are not directed to you.
What this policy does not cover
Your medical records and the information your treating clinician and pharmacy hold about your care are handled by those organizations under their own privacy practices and applicable health privacy law. Their Notice of Privacy Practices, not this policy, governs that information. We will make that notice available to you in connection with your care.
If you are a resident of Washington or Nevada, our Consumer Health Data Privacy Notice provides additional information and rights specific to consumer health data. That notice supplements this one.
2. Information we collect
Identifiers. Name, email address, phone number, postal and billing address, date of birth, and account credentials.
Commercial information. Orders, plans, purchase history, and records of what you’ve been charged.
Payment information. Payment card details are collected and processed by our payment processor. We receive a token and limited details such as the card type and last four digits. We do not store full card numbers.
Identity verification information. Where verification is required, an image of a government-issued identification document and related information.
Health-related information you provide. Information you enter during intake or in your portal, including medical history, current medications, allergies, treatment goals, weight and related measurements, and messages you send about your care.
Internet and device activity. IP address, device and browser type, operating system, pages visited, links clicked, referring pages, time spent, and similar information collected automatically through cookies and similar technologies.
Approximate location, derived from your IP address or the address you provide.
Communications. Records of your messages, calls, and support interactions with us.
Inferences drawn from the above, such as product preferences.
Some of this is treated as sensitive personal information under California law, including account credentials, government identification numbers, precise health information, and information about health conditions. We use and disclose sensitive personal information only for the purposes permitted under California law and as described in this policy, and we do not use or disclose it to infer characteristics about you.
3. How we collect information
Directly from you, when you create an account, complete intake, place an order, contact us, or respond to a survey.
Automatically, through cookies, pixels, tags, and similar technologies when you use the Services.
From others involved in your care or our operations, including provider organizations, pharmacies, payment processors, shipping carriers, and identity verification providers.
4. How we use information
To provide the Services, create and maintain your account, and coordinate your care
To transmit information you’ve asked us to share with a clinician or pharmacy
To process payments and manage plans, renewals, refunds, and pricing
To arrange shipping and respond to delivery issues
To provide customer support
To send transactional messages about your account, orders, and shipments
To send marketing communications where you’ve consented, and to measure how our advertising performs
To operate, secure, troubleshoot, and improve the Services
To detect and prevent fraud and misuse
To comply with law, respond to lawful requests, and establish or defend legal claims
5. How we share information
We share personal information with the following categories of recipients:
Provider organizations and clinicians, so that a clinician can review your information and provide care.
Pharmacies, so that a prescription can be filled and dispensed to you.
Service providers who perform functions on our behalf, including hosting and infrastructure, payment processing, shipping and logistics, identity verification, customer support tooling, communications delivery, and data storage. They are permitted to use the information only to perform services for us.
Advertising and analytics partners. We work with third-party advertising and analytics companies that use cookies and similar technologies on our site. These partners receive information about your device and your activity on our site, including the pages you visit, and may combine it with information they already hold to measure our advertising and to show you advertising on other sites and apps. Under California law, this is considered “sharing” personal information for cross-context behavioral advertising, and may be considered a “sale.” You can control this — see Section 6.
Because the pages you visit on our site can indicate an interest in a particular treatment, information shared with these partners may relate to health topics. If you would prefer that not happen, use the controls in Section 6.
Legal and regulatory recipients, where required by law or legal process, to protect rights and safety, or in connection with an investigation.
Business transfers. If we are involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred as part of that transaction, subject to this policy.
We do not sell personal information in exchange for money.
6. Cookies, tracking, and your choices
We use cookies and similar technologies for purposes that fall into two categories:
Strictly necessary — required for the site to function, including sign-in, session security, payment processing, fraud prevention, and accessibility. These cannot be turned off.
Advertising and analytics — used by us and our partners to collect information about you and your interactions with this site, personalize ads, and improve our services.
Advertising and analytics technologies are active by default when you visit the site. You can turn them off at any time using the controls below.
Your controls
Privacy preference center. Use the “Your Privacy Choices” link in the footer of any page to turn advertising and analytics off, or back on, at any time. Your choice applies to that browser and takes effect immediately.
Global Privacy Control. We honor the Global Privacy Control (GPC) browser signal. If your browser sends it, we treat it as a request to opt out of the sale and sharing of your personal information for that browser, automatically and without any action from you.
Browser settings. You can also block or delete cookies through your browser, though this may affect how the site works.
Marketing messages. Reply STOP to any marketing text, or use the unsubscribe link in any marketing email.
7. Your privacy rights
Depending on where you live, you may have the following rights:
Know and access — what personal information we’ve collected, the categories of sources, the purposes, and the categories of third parties we disclose it to, and to receive a copy
Delete — ask us to delete personal information we’ve collected from you
Correct — ask us to correct inaccurate personal information
Opt out of sale or sharing — direct us not to sell or share your personal information for cross-context behavioral advertising
Limit use of sensitive personal information — direct us to limit use to what’s necessary to provide the Services
Portability — receive your information in a portable format
Withdraw consent — where we rely on your consent
Non-discrimination — we will not deny you services, charge you a different price, or provide a different level of service because you exercised a privacy right
Some rights have exceptions. For example, we may need to retain information to complete a transaction, comply with a legal obligation, or defend a legal claim. Records relating to your medical care are subject to retention requirements under health and pharmacy law and are held by the organizations responsible for that care.
How to exercise your rights
Use the “Your Privacy Choices” link in the footer of any page
Email hello@tryyucca.com
Call (888) 388-1878
We will acknowledge your request within 10 business days and respond within 45 calendar days. If we need more time, we’ll tell you why and how much longer we expect to take, up to an additional 45 days.
We will need to verify your identity, and the verification we ask for will depend on the sensitivity of what you’ve requested. We don’t require an account to make a request.
Authorized agents. You may use an authorized agent. We will ask for proof of authorization and may ask you to verify your own identity directly.
If we deny your request, you may appeal by replying to our response or writing to hello@tryyucca.com with the subject line “Privacy Appeal.” We will respond to an appeal within 45 days and explain our reasoning. If we deny your appeal, we will tell you how to contact your state attorney general.
8. Retention
We keep personal information for as long as needed for the purposes described in this policy, and then for as long as required to comply with legal obligations, resolve disputes, and enforce our agreements.
In general: account and transaction records are kept for the life of the account plus the period required by applicable tax, consumer protection, and healthcare law; marketing and advertising data is kept for a shorter period; and records relating to your medical care are retained by the organizations responsible for that care under the retention periods their professional obligations require.
9. Security
We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit and at rest, access controls, and monitoring.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately.
10. Minors
The Services are for adults 18 and older. We do not knowingly collect personal information from anyone under 18, and there is no parental consent pathway.
If we learn we’ve collected information from someone under 18, we will delete it. If you believe a minor has provided us information, contact hello@tryyucca.com.
We do not sell or share the personal information of anyone under 16.
11. State-specific information
California. California residents have the rights in Section 7 under the CCPA as amended by the CPRA. The categories of personal information we collect, the purposes, the categories of sources, and the categories of recipients are described in Sections 2 through 5. Our “Your Privacy Choices” link is available in the footer of every page. We honor Global Privacy Control.
Washington and Nevada. See our Consumer Health Data Privacy Notice for information and rights specific to consumer health data.
Other states. Residents of other states with comprehensive privacy laws have similar rights, including access, deletion, correction, portability, opt-out of targeted advertising and sale, and appeal. Use the methods in Section 7.
12. Changes to this policy
We may update this policy. If a change is material, we will provide notice before it takes effect. The “last updated” date above reflects the most recent revision. Prior versions are available on request.
13. Contact
Brand Merchants Network LLC d/b/a Yucca Health
9350 Wilshire Blvd, Suite 203
Beverly Hills, CA 90212
(888) 388-1878
hello@tryyucca.com