Privacy Policy
Last updated: June 30, 2025. This Privacy Policy describes how Sculpt Health, Inc. (
1. Information We Collect
We collect information you provide when completing our health evaluation, including: name, email address, date of birth, health history, medications, allergies, and symptoms. We also collect usage data (IP address, browser type, pages visited) through cookies and analytics tools. We do not sell your personal information to third parties.
2. HIPAA Notice — How We Handle Your Health Information
Sculpt is a covered entity under the Health Insurance Portability and Accountability Act (HIPAA). Your Protected Health Information (PHI) is used only to: (1) provide or coordinate treatment, (2) process payment for healthcare services, and (3) operate our healthcare services. We implement administrative, technical, and physical safeguards to protect your PHI from unauthorized access, use, or disclosure. In the event of a breach of unsecured PHI, we will notify you as required by the HIPAA Breach Notification Rule (45 CFR Parts 160 and 164). As a patient, you have the right to: access your health records, request corrections, receive an accounting of disclosures, and request restrictions on how your information is used.
3. How We Use Your Information
We use your information to: evaluate your eligibility for prescription GLP-1 medications; connect you with a licensed healthcare provider; process your orders; communicate about your treatment; comply with legal and regulatory requirements; and improve our services. We never sell your data or share it with advertisers.
4. Information Sharing
We share your information only with: licensed healthcare providers who review your case; partner pharmacies that dispense your prescription medication (FDA-registered 503A/503B compounding pharmacies); payment processors to complete your transaction; and regulatory authorities when required by law. All partners are bound by HIPAA Business Associate Agreements where applicable.
5. Cookies and Analytics
We use cookies and similar technologies for essential site functionality, security, and analytics. We may use tools like Google Analytics to understand site usage. You can disable cookies in your browser settings, though this may affect site functionality.
6. Security
This website is served entirely over HTTPS. We use industry-standard encryption to protect data in transit and at rest. All data is stored in secure, access-controlled environments. We conduct regular security reviews and employee training on data privacy.
7. Contact Us
For privacy inquiries, HIPAA requests, or to exercise your patient rights, contact us at: privacy@joinsculpt.com. Sculpt Health, Inc. — [Address to be added]. For healthcare questions, please use the patient portal or contact your assigned provider.