Privacy, health data, and accessibility

Our

is incorporated into these Terms by reference. It governs how Varietly.com collects, uses, discloses, retains, and protects personal information when you use Varietly.

Even though HIPAA does not apply to us, we treat health-related input as sensitive. If you submit an email address to track the price of a GLP-1 medication, that request may imply an interest in weight loss, diabetes care, metabolic health, or another health condition. We do not ask you to create an account, complete a health questionnaire, or send medical history.

Do not send us health information. Do not include diagnoses, prescriptions, lab results, insurance details, body measurements, symptoms, treatment history, or other medical details in correction reports, support emails, or other messages to us. Varietly is an information and comparison service only. We do not practice medicine, make clinical recommendations, endorse a provider, or decide whether any medication or provider is appropriate for you.

Some laws regulate consumer health data held by companies that are not covered by HIPAA. Where the Washington My Health My Data Act, Nevada SB 370, or similar laws apply, we will provide the required consumer health data privacy notice and obtain any separate consent those laws require before collecting or sharing covered consumer health data. We acknowledge that the Washington My Health My Data Act carries a private right of action.

US state privacy laws may give you rights over personal information. These laws include the CCPA and CPRA in California, and privacy regimes in Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and successor states. Depending on the state and context, an inference about a health condition or medication interest may be treated as sensitive personal information. You may have rights to access, correct, or delete personal information, and to opt out of sale, sharing, targeted advertising, or certain profiling.

We are based in British Columbia, Canada. Personal information you submit to Varietly is collected and stored by a Canadian entity and may be processed in Canada and the United States. It is handled subject to Canadian privacy law, including PIPEDA, and may also be subject to British Columbia privacy law and applicable US state privacy laws. Personal information stored or processed in Canada may be accessible to Canadian courts, law enforcement, regulators, or government authorities under lawful process. You should understand this cross-border processing before you submit personal information.

Today, we do not use advertising cookies, analytics cookies, third-party tracking pixels, or third-party tracking scripts on Varietly. The staff admin area uses a session cookie for staff sign-in only. If we later introduce analytics, advertising technology, pixels, or similar tools on pages about specific medications, providers, symptoms, conditions, or treatment interests, we will re-review the tool and obtain consent where required. We will account for FTC and HHS OCR enforcement positions on tracking technologies on health-related pages.

The FTC Health Breach Notification Rule can apply to non-HIPAA health data. If we experience a breach of security involving covered health information under that rule, we will provide the notices required by law.

Provider and pricing records on Varietly are business information from public sources, provider sites, or partners. They do not contain personal information about users. Prices are informational only, are not offers, may change, and remain the responsibility of the provider. We do not currently have affiliate compensation arrangements with any provider; if that changes, we will update our Terms and disclosures before any arrangement takes effect. Commercial relationships do not influence rankings or comparisons.

When you click a provider link or leave Varietly, that provider controls what happens next. The provider may collect health information, payment details, insurance information, identity information, or other data under its own terms and privacy policy. We do not control the provider, we are not responsible for its privacy practices, and we do not have visibility into the information you submit to that provider.

To exercise privacy rights or ask privacy questions, contact us at info@varietly.com. We may need information from you to verify and process the request. Do not include health information in the request unless we specifically ask for it and provide a secure method.

We want Varietly to be usable by people with disabilities. We target the Web Content Accessibility Guidelines version 2.1, Level AA, as our accessibility conformance standard for the parts of the service we control.

Accessibility is ongoing work. We do not claim that every page, feature, data table, or archived item fully conforms today. We will make reasonable efforts to improve accessibility as we build, test, and update the service.

If you experience an accessibility barrier, contact us at info@varietly.com. Please describe the page, feature, assistive technology, browser, and barrier if you can. We will review the report, respond, and work to provide the information or function in an alternative accessible format on request.

Third-party provider sites, checkout pages, apps, documents, and support channels are outside our control. We are not responsible for the accessibility of those third-party services. If you encounter a barrier after leaving Varietly, contact the provider directly.