Privacy Policy.

Who we are

Goprolean (“we”, “us”) operates goprolean.com and the patient portal at member.goprolean.com. Goprolean is operated by Prolean Wellness Management LLC, 9360 E Raintree Dr, Scottsdale, AZ 85260.

Two environments

goprolean.com is our public website. You can read about treatments, browse plans and create an account. It is a commercial website and we measure how it is used.

member.goprolean.com is our patient portal. Your medical intake, your photographs, your messages with clinicians, your prescriptions and your records live there. It is a HIPAA-compliant environment. It carries no advertising pixels and no third-party analytics, and nothing you enter there is ever sent to an advertising platform.

Clinical care is provided by licensed clinicians and professional entities engaged to treat patients in your state. They are covered entities under HIPAA and hold your medical record under their own Notice of Privacy Practices, which is provided to you when you begin your intake. Where we handle protected health information on their behalf, we do so as a business associate under written agreement.

What we collect

You give us: your name, email, phone, shipping and billing address, date of birth, and the state you are in. In your intake and follow-ups you give us your health history, current medications, allergies, height, weight, symptoms and treatment goals, together with photographs and video you upload — including images of the areas being treated, injection sites, and identification documents where required.

We collect automatically on the public website: IP address and the approximate location and state derived from it, device and browser type, the pages you view, the advertisement or page that referred you, advertising click identifiers present in your session, and cookie identifiers.

Others give us: confirmation of payment outcomes from Stripe, our payment processor; care coordination information from clinicians and pharmacies; and referral information from marketing and referral partners.

We ask for your state because telehealth is regulated state by state — including whether a clinician may treat you asynchronously or must speak with you live — and because privacy rights differ by state.

What we do with it

We operate the service, confirm we can lawfully treat you in your state, route your intake to a licensed clinician, fulfil and ship your prescription, take payment, prevent fraud, support you, send service messages about your orders and treatment, send marketing where you asked for it, improve the website, measure whether our advertising works, and meet our legal and pharmacy obligations.

We do not use clinical information for marketing or advertising. Your intake answers, photographs, diagnoses and prescribed medications are never used to target advertising, build an audience, or measure a campaign.

Who we share it with

• Licensed clinicians and professional entities providing your care
• Licensed pharmacies dispensing your prescription, and laboratories where testing is involved
• Service providers under contract — Stripe for payment processing, and providers of shipping, cloud hosting, customer support, and email and SMS delivery. Those handling protected health information do so under Business Associate Agreements.
• Advertising and measurement platforms, limited strictly to the signals below
• Regulators, law enforcement and courts where legally required or necessary for someone’s safety
• A successor entity if Goprolean is acquired or merged, with notice to you beforehand

We do not sell your personal information for money. Some state laws define “sale” and “sharing” broadly enough to cover disclosures to advertising platforms. Where they do, the signals below may count, which is why we offer the choices below and honour opt-out signals.

Advertising

Advertising is how most people find us, and measuring which advertisements work is what makes it sustainable — it is how we stop paying for the ones that do not. The platforms we use may include Google, Microsoft, Meta, Reddit, Pinterest and Taboola. We may not use all of them at any given time, and we may add or stop using others.

We may send them: an advertising click identifier already in your session; a random opaque reference for an order or payment attempt, not derived from your identity or health information; the transaction amount and currency; and a generic event name such as purchase or subscription renewal.

We never send, in any circumstance: your name, email, phone or address used as an identifier; any diagnosis, symptom, medication, dose, lab result, photograph or intake answer; any product or content identifier that would reveal which treatment you viewed or received; or any value derived from those.

These are sent from our servers, not your browser, and the system sends nothing if any part of it fails.

Even so: a platform receiving a click identifier and a purchase event learns that a person it can identify transacted with Goprolean. Because we are a telehealth provider, that carries an implication about your health interests, even though we send nothing about your treatment. We would rather say that than let you discover it.

Your choices

Washington and Nevada residents: advertising and analytics are off unless you turn them on. We ask when you first visit, through a choice separate from accepting our Terms, and we ask separately about collecting your information and about sharing it.

California residents: you may stop us sharing your information for cross-context behavioural advertising, and limit our use of your sensitive personal information. Use Your Privacy Choices in the footer.

Everywhere else: measurement is on by default. Change it any time through Your Privacy Choices.

Everywhere: we honour the Global Privacy Control. If your browser sends it, no advertising signals are sent.

If you decline, we do not track you. A single cookie records your preference so we do not have to ask again.

You can unsubscribe from marketing email using the link in any message.

Your rights

Depending on your state, you may have the right to know what we hold and get a copy, correct it, delete it, obtain a portable copy, opt out of targeted advertising and of the sale or sharing of your information, limit our use of sensitive personal information, and appeal if we say no.

Email privacy@goprolean.com. We verify identity before acting and respond within 45 days, extendable once by 45 days where reasonably necessary. To appeal a denial, reply with “Appeal” in the subject line. We will not discriminate against you for exercising a privacy right — no different pricing, no different standard of care.

Medical and pharmacy records must be retained under state law and professional regulation, and cannot be deleted on request.

California specifically

We collect the categories described above: identifiers, customer records, protected classifications, commercial information, internet activity, approximate geolocation, sensitive personal information (health information, photographs, government identification), and inferences. Sources, purposes and recipients are as described in this policy. We do not use or disclose sensitive personal information for advertising or to infer characteristics, and never send it to an advertising platform. We do not knowingly sell or share the information of anyone under 16. You may use an authorised agent with proof of authorisation.

Washington specifically

See our Consumer Health Data Privacy Policy, linked in our footer.

Cookies

We use cookies and similar technologies in four groups.

• Necessary — sign you in, keep your session, route your requests, and help our payment processor prevent fraud. These cannot be turned off.
• Preferences — remember choices you have made, including your privacy choices.
• Analytics — tell us how the website is used, so we can improve it.
• Advertising — measure whether our advertisements work.

Analytics and advertising cookies follow the choices described above. You can change your choices at any time, or set your browser to refuse cookies.

Security

We use administrative, technical and physical safeguards designed to protect your information, and require our service providers to do the same by contract. Protected health information is held in systems covered by Business Associate Agreements. No system is perfectly secure. If a breach affects your information we will notify you and the authorities as required by law.

Retention

We keep information as long as needed for the purposes above and as long as the law requires. Medical and pharmacy records follow state retention schedules. Marketing contacts are kept until you unsubscribe.

Children

Our services are for adults 18 and over. We do not knowingly collect information from anyone under 18. Contact privacy@goprolean.com if you believe we have.

Where we operate

We serve patients in the United States, and store and process information in the United States.

Changes

We will post changes here and update the date. If a change materially affects how we use your information we will tell you before it takes effect, and ask for consent again where the law requires.

Contact

privacy@goprolean.com · Prolean Wellness Management LLC, 9360 E Raintree Dr, Scottsdale, AZ 85260