Privacy Policy
Last updated: May 13, 2026
Our commitments
Varatron Health ("Varatron", "we", "us") provides telehealth services through this website. Your trust matters more than your data, and this policy is meant to be plain about what we do and don't do.
What we will never do
- We will never sell your personal or health information. Not to data brokers, not to advertisers, not to anyone, for any price.
- We will never use customer data to train artificial intelligence or machine-learning models — neither our own models nor any third party's. Your visits, messages, lab results, and provider notes are not training data.
- We will never share your information for advertising or marketing purposes outside of the care you've signed up for.
What we collect
To provide care, we collect: identifying information (name, date of birth, address), contact information (email, phone), health information you submit during a visit, payment information processed by our PCI-compliant payment processor, and limited technical information (IP address, device/browser type) needed to operate the site securely.
How we use it
We use your information solely to: provide medical care through licensed clinicians, fulfill prescriptions through licensed pharmacies, process payments, communicate with you about your care, comply with applicable law (including HIPAA where it applies), and protect the security of our systems.
Who we share it with
Limited and only as needed to provide your care: the licensed clinician who treats you, the pharmacy that fulfills your prescription, the payment processor that handles your transaction, and service providers under written confidentiality agreements (e.g., hosting, secure email). Each is contractually prohibited from selling your data or using it to train AI models. We may also disclose information if compelled by law (subpoena, court order) or to protect against fraud or harm.
How long we keep it
Medical records are retained for the period required by applicable state and federal law. Other information is retained only as long as needed for the purposes described above.
Your rights
You may request access to, correction of, or deletion of your personal information by emailing privacy@varatron.com. Some information (e.g., medical records) may need to be retained to comply with law. Residents of California, Colorado, Virginia, and other states with comprehensive privacy laws have additional rights, including the right to opt out of "sale" or "sharing" of personal information — though as stated above, we do not sell or share your information for those purposes.
Security
We use industry-standard administrative, technical, and physical safeguards: encryption in transit (TLS) and at rest, access controls, audit logging, and regular review of our security practices. No system is perfectly secure, but we treat your information with appropriate care.
Children
This service is intended for adults 18 and older. We do not knowingly collect information from children under 13.
Changes to this policy
If we update this policy, we will post the new version here and update the "Last updated" date. Material changes will be communicated to active patients by email.
Contact
Questions about this policy: privacy@varatron.com.