Effective Date: Aug 29, 2025

​
Introduction

Blend Innovations, Inc. and its subsidiaries and affiliates (“Blend,” “we,” “us,” or “our”) operate a technology-enabled compounding pharmacy platform, including our website, platform, and APIs (the “Services”). This Notice of Privacy Practices and Privacy Policy (“Notice”) explains how we collect, use, share, and protect your personal and health information. It also describes the rights you have regarding your health information and how you can exercise them. This Notice applies to all of our Services and is incorporated into our Terms of Service.

​
Information We Collect

We collect information that is necessary to provide our pharmacy services and operate our platform, including:
  • Information you provide: such as your name, contact details, shipping address, and payment information.
  • Health information: including prescriptions, prescriber details, medical history, allergies, and other information required to dispense medications.
  • Information from others: including prescribers, clinics, or telehealth platforms who send us your prescription or related information.
  • Automatically collected information: such as device/browser type, IP address, and site usage analytics.
  • Marketing prospect data: collected separately through cookies, analytics, and similar tools. This data is not combined with your health information.

​
How We Use Information

We use your information for purposes allowed by law, including:
  • Filling, dispensing, and shipping your prescriptions.
  • Communicating with you and your prescriber about your medications.
  • Meeting our legal and regulatory obligations as a pharmacy.
  • Conducting internal analytics and improving our services using only de-identified and aggregated data.
  • Managing business operations such as audits, quality assurance, and compliance.
We do not use your health information for marketing purposes, and we do not sell your information.

​
How We Share Information

We may share your information in the following situations:
  • With your prescribers or clinics as needed to fulfill your prescriptions.
  • With service providers that help us operate (such as shipping companies, technology providers, and communication tools).
  • As required by law for audits, inspections, reporting, or in response to valid legal processes.
  • For safety or public health purposes, if disclosure is needed to prevent a serious threat to health or safety.
  • In business transactions, such as a merger, acquisition, or transfer of assets.

​
Your Rights

You have important rights with respect to your health information, including the right to:
  • Access: You can request a copy of your health information.
  • Amend: You may request corrections if your information is inaccurate or incomplete.
  • Accounting of disclosures: You may request a list of certain disclosures we have made of your information.
  • Request restrictions: You can ask us to limit how your information is used or shared, though we may not always be able to agree when restricted by law.
  • Confidential communications: You may request that we communicate with you in a specific way (for example, by using a different address).
  • Paper copy: You may request a paper copy of this Notice at any time.
To exercise these rights, please first contact your prescriber. If your prescriber cannot resolve your request, you may contact us directly at privacy@byblend.com.

​
Cookies & Tracking

We use cookies, pixels, and analytics tools on our website to understand how visitors interact with our Services. This information is used for business prospecting and operational purposes and is never linked with patient health information. Marketing prospect data is retained for 5 years and then securely deleted.

​
Data Retention

  • Prescription and medical records are retained for 10 years as required by pharmacy law.
  • Health information cannot be deleted early, even if requested, because of legal retention requirements.
  • Prospect marketing data is retained for 5 years.
  • De-identified data may be retained for analytics purposes.

​
California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under California law:
  • Right to know: You can request details about the personal information we collect, use, and disclose.
  • Right to delete: You can request deletion of personal information, subject to pharmacy record retention laws.
  • Right to correct: You can request that we correct inaccurate personal information.
  • Right to opt-out of sale/sharing: You can request that we do not sell or share your personal information. (Blend does not sell patient health information.)
  • Right to non-discrimination: You will not be treated differently for exercising your privacy rights.
To make a request under CCPA/CPRA, email us at privacy@byblend.com. We will take steps to verify your identity before fulfilling your request.

​
Children’s Privacy

Blend does not knowingly collect personal information directly from children under 13 years of age through its websites, apps, or digital Services. Our digital Services are directed to adults, including parents and legal guardians, and are not designed for use by children. If you are under 13, you may not register for or directly use Blend’s digital Services. At the same time, as a licensed pharmacy, Blend does dispense medications to patients under the age of 13. In those cases, all prescription and account activity occurs through the child’s parent or legal guardian, who is responsible for managing the child’s prescription orders. Any personal or health information we maintain for pediatric patients is collected and used solely to provide pharmacy services in coordination with the child’s prescriber and parent or guardian, and is protected under our Privacy Policy. If Blend learns that we have inadvertently collected information directly from a child under 13 through our digital Services, we will promptly delete such information. Parents or guardians who believe we may have information collected directly from a child through the website should contact us at privacy@byblend.com.

​
Security

We implement reasonable administrative, technical, and physical safeguards to protect the confidentiality, integrity, and availability of personal and patient-related information. These include access controls, encryption in transit and at rest, secure storage practices, auditing of system access, and regular monitoring for unauthorized activity. However, no system or method of data storage is completely secure. While we take steps to reduce risk, we cannot guarantee that information will never be accessed, disclosed, altered, or lost in a manner inconsistent with this Privacy Policy. Where the Services allow individuals to submit content directly (e.g., forms or messages), we recommend excluding any sensitive information not required for appropriate treatment. Personal and health-related data should be submitted only through Blend-provided secure forms, not via external messaging applications.

​
Changes to this Notice

We may update this Notice from time to time. When we do, we will post the updated version on our website with a new Effective Date. If we make material changes to how we use or share your information, we will notify you by email.

​
Contact Us

If you have any questions about this Notice or your privacy rights, you can contact us at:
  • Chief Privacy Officer
  • Blend Innovations, Inc.
  • 6171 Huntley Rd STE J
  • Columbus, OH 43229
  • Email: privacy@byblend.com