Privacy Policy

This policy explains how WellSpry LLC (“WellSpry,” “we,” “us”) handles information on wellspry.com and in the WellSpry payment, order-support, and order-intake workflow.

WellSpry sells and supports eligible panel orders. Choose Health operates the patient-account and testing workflow. After purchase, Choose Health handles secure account activation and email verification, its own consent, lab processing, clinician review, result-ready email, and secure portal delivery. Choose Health's privacy notice and consent also govern the information it handles in that service.

Public website information. We collect information you choose to provide for marketing subscriptions, contact requests, or employer enquiries. The free quiz uses the answers entered to generate an on-screen educational result; quiz answers are not added to a Klaviyo marketing profile.

Order and payment information. For an available panel order, we receive the purchaser email, selected panel, amount and payment status, Stripe transaction references, and the contact and shipping information needed to fulfil the order. Stripe collects payment-method information on its hosted checkout. WellSpry receives payment status and identifiers, not the full payment-card number.

Order-intake and kit information. A verified purchaser may submit name, email, date of birth, sex at birth, phone number, mailing address, optional height, weight, and waist measurements, kit barcode, collection date, and a typed data-sharing authorization. The purchaser email must match the paid order.

Technical and security information. We may process IP address, request and device information, security events, and limited operational records needed to protect the service, rate-limit sensitive actions, troubleshoot, and reconcile an order.

We use information to provide the requested website feature; create and verify an order; process payment status; submit a paid kit order; create or match a Choose Health patient account; register a kit; provide order support; prevent duplicate or unauthorized activity; reconcile ambiguous fulfilment records; secure the site; comply with law; and resolve disputes.

WellSpry's intake authorization permits collection and sharing for account creation, fulfilment, and kit registration. It is not Choose Health's testing or clinical consent. The patient must separately activate and verify the Choose Health account and complete Choose Health's consent in its secure portal before Choose Health processes the kit or makes results available.

WellSpry does not use order-intake information to prescribe, provide Protocol Management, or make treatment decisions. WellSpry's results portal and result-notification service remain unavailable; reviewed results are delivered directly by Choose Health in its secure portal.

We disclose information only as needed for the requested feature, the testing workflow, support, security, or legal obligations. The principal providers and roles are:

• Choose Health — patient-account creation, secure activation and email verification, testing consent, kit fulfilment and registration, lab processing, clinician review, result-ready email, and secure portal delivery. We send the order, contact, shipping, intake, and kit information needed for those functions. We do not submit the WellSpry data-sharing acknowledgement as Choose Health's consent.
• Stripe — hosted checkout and payment processing. Stripe returns payment and transaction status needed to confirm and support the order.
• Vercel — website hosting, security, and aggregate performance analytics
• Google Analytics and Vercel Analytics — public-site traffic and performance measurement when enabled. Checkout, testing, intake, account, and results route families are excluded from these analytics.
• Klaviyo — non-sensitive marketing subscriptions and employer business enquiries only; no quiz answers, purchases, order intake, kit identifiers, biomarkers, or results

WellSpry and Choose Health have executed data-protection terms, including a business associate agreement, covering this partner workflow. We may also disclose information when required by law, to protect rights or safety, or in connection with a business transaction subject to appropriate safeguards.

We do not sell personal information or use health, intake, payment, or results information for targeted advertising.

Creating a Choose Health patient record causes Choose Health to send its secure account-activation and email-verification process directly to the submitted address. Choose Health separately presents its consent and provides its result-ready communication and secure portal. WellSpry does not control the credentials, consent screen, account recovery, result-ready email, or result display in that portal.

The WellSpry results page does not fetch, host, or deliver results while its results-access gate remains disabled. Use Choose Health's secure portal for the testing account and reviewed results. Contact WellSpry for WellSpry payment, order, intake, or kit-registration support.

WellSpry keeps limited order, payment-status, fulfilment-status, security, and support records for as long as reasonably necessary to provide the service, reconcile transactions, meet contractual or legal obligations, prevent abuse, and resolve disputes. Sensitive entitlement and kit-matching records use limited identifiers, hashes, and vendor references rather than serving as a local intake or results record.

Stripe and Choose Health retain information under their own notices, agreements, and legal obligations. WellSpry cannot delete a record held independently by those providers, but we can direct you to the appropriate provider or pass along a request when appropriate.

We use safeguards designed for the sensitivity of the workflow, including encrypted transmission, access controls, same-origin request checks, private browser credentials, rate limits, restricted analytics, limited logging, and data minimisation. Contractual protections apply to the Choose Health partner workflow. No system or transmission method can be guaranteed completely secure.

Do not send biomarker values, result documents, or other unnecessary health information through ordinary WellSpry support email. Use Choose Health's secure portal for its testing-account and results workflow.

Public pages may use cookies or similar technologies for site operation, aggregate performance measurement, and traffic analysis. Sensitive route families — including checkout, testing and intake, account, eligibility, protocol-engine, quiz, and results routes — are excluded from Google Analytics, Vercel Analytics, and Speed Insights in the site's analytics gate.

Private cookies used for checkout return status and order-intake authorization are scoped to the relevant workflow. They are not marketing cookies.

You may unsubscribe from marketing by using the link in a marketing email. Depending on where you live and subject to legal exceptions, you may have rights to request access, correction, deletion, or a copy of personal information handled by WellSpry. Submit a request to hello@wellspry.com. We may need to verify the request and may retain records when required for payment, fulfilment, security, legal obligations, or disputes.

Requests concerning Choose Health's patient account, consent, or results should also be submitted through the privacy or support options in Choose Health's secure portal. Requests concerning Stripe's payment service may also need to be directed to Stripe.

WellSpry's panel-order and intake workflow is intended only for adults aged 18 or older. We do not knowingly collect order-intake or health information from a minor. If you believe a minor submitted information, email hello@wellspry.com so we can investigate and take action consistent with applicable law and required records.

We investigate suspected security incidents and provide notices when applicable law requires them. To report a suspected issue, contact hello@wellspry.com with the subject line “Security Report.”

We may update this policy when the website, testing workflow, providers, or law changes. The updated date above identifies the current version.

For privacy-related inquiries: hello@wellspry.com

WellSpry LLC, United States