Legal
Privacy Policy
Last updated: October 26, 2026
This Privacy Policy applies to the websites and services operated by Bespoke (“Bespoke,” “we,” “us,” or “our”), including this website, the partner and prescriber portals, and the websites of partner brands that use Bespoke to arrange consultations and prescriptions and on which this Privacy Policy is posted (collectively, the “Sites”). This Privacy Policy does not apply to personal information collected offline. We encourage you to review this Privacy Policy periodically to stay up to date on how we handle your personal information.
Please read this Privacy Policy carefully. By using the Sites, you signify that you have read, understood, and agreed to be bound by this Privacy Policy, which is incorporated into our Terms and Conditions. If you do not agree to the Terms and Conditions or this Privacy Policy, please do not use the Sites.
Please note the arbitration provision set forth below, requiring you to arbitrate any claims you may have against Bespoke on an individual basis. Except where and to the extent prohibited by law, arbitration on an individual basis means that you will not have, and you waive, the right for a judge or jury to decide your claims, if any, and that you may not proceed in a class, consolidated, or representative capacity.
Your information. Your rights. Our responsibilities.
This Privacy Policy describes how medical information about you may be collected, used, and disclosed by Bespoke and how you can get access to this information. If you do not agree with any provision of this Privacy Policy, please do not use the Sites, register for an account, or otherwise provide your medical information to Bespoke. This Privacy Policy does not apply to websites or applications that display or link to different privacy policies.
Bespoke does not collect your medical information without your authorization. You authorize our collection of your medical information by submitting it through the Sites, including through a partner brand’s website or application (your “Electronic Medical Record”). Any information you provide is voluntary. Medical information is information that may be used to identify you and that relates to your past, present, or future physical or mental health or condition, the provision of care to you, or your past, present, or future payment for the provision of health care. Your Electronic Medical Record may include:
- Contact information, including name, email address, mailing address, and phone number, and personal identification information; and
- Health or medical information, including age, gender, health background, health status, medications, laboratory or other health testing results, and photographs.
Where we provide services
Bespoke currently provides services to patients located in the following 36 states:
- Alabama (AL)
- Arizona (AZ)
- California (CA)
- Colorado (CO)
- Connecticut (CT)
- Florida (FL)
- Georgia (GA)
- Illinois (IL)
- Iowa (IA)
- Kansas (KS)
- Kentucky (KY)
- Maryland (MD)
- Massachusetts (MA)
- Michigan (MI)
- Minnesota (MN)
- Mississippi (MS)
- Missouri (MO)
- Montana (MT)
- Nebraska (NE)
- Nevada (NV)
- New Jersey (NJ)
- New York (NY)
- North Carolina (NC)
- Ohio (OH)
- Oklahoma (OK)
- Oregon (OR)
- Pennsylvania (PA)
- South Carolina (SC)
- Tennessee (TN)
- Texas (TX)
- Utah (UT)
- Virginia (VA)
- Washington (WA)
- West Virginia (WV)
- Wisconsin (WI)
- Wyoming (WY)
Services are not available to patients located in any other state or outside the United States. Treatment depends on where you are located at the time of your consultation.
Our commitment to your privacy
We understand that your medical information is personal, and we are dedicated to taking all reasonable steps to maintain its privacy. Bespoke employs reasonable physical, administrative, and technical security measures to safeguard your medical information.
Bespoke operates in an encrypted and secure cloud hosting network that is continuously monitored. Certain data is separated from other data that the Bespoke platform runs on. Communications within the platform and between servers are encrypted, including information that patients and prospective patients send to Bespoke.
Please be aware that no method of data transmission over the Internet or method of electronic storage is perfectly secure. While Bespoke takes the measures described above to protect your medical information, we do not guarantee the security of any information you transmit to us or through the Sites. Bespoke does not covenant, represent, or warrant that the transmission of your medical information online will be secure, and you transmit such information at your own risk.
To help keep your account secure, carefully choose your account name and password. Anyone with access to your account will be able to view your medical information and communicate with your provider. Keep your account name and password private, and change your password if you believe it has been compromised.
Opting out of marketing communications
If you would like to unsubscribe from any of our services or be removed from commercial communications, such as our mailing lists, email support@bespokeprescriptions.com. Please include your name and email address in the body of the message.
We will process your request as soon as possible and in compliance with applicable law. In some cases you may receive a few more messages before your request is processed.
Cookies
What is a cookie?
Cookies are small text files stored on your device by your web browser when you visit a website. Each time you return to that website, your browser sends the cookie back to the website’s server, which allows the website to recognize your device. You can find more information about cookies at www.allaboutcookies.org.
Why does Bespoke use cookies?
We use, and may allow certain third parties to use, cookies and similar technologies to provide our services and to help collect information. Session cookies last only for your visit and are deleted when you close your browser. Persistent cookies remain on your device until you delete them or they expire. We use the following categories:
- Essential. Required to move around the Sites and use their features, such as signing in to secure areas and remembering your cookie choice. These are always on.
- Analytics. Help us see how the Sites are used so we can improve their performance. These run only if you allow them.
- Advertising. Used for advertising and measurement, and may share information with third parties. These run only if you allow them.
When you first visit, a cookie banner lets you Accept All Cookies, Reject All non-essential cookies, or choose categories in Cookie Settings. Non-essential cookies do not run until you choose. You can change your choice at any time:
You can also set most browsers to notify you when you receive a cookie, or to block cookies. If you block cookies, some features of the Sites may not work. Blocking or deleting essential cookies will prevent access to certain features, such as signing in. We honor the Global Privacy Control (GPC) browser signal as a request to opt out of targeted advertising and the sale or sharing of personal information. See our Cookie Policy for more detail.
In the United States, the Network Advertising Initiative offers a way to opt out of a number of advertising cookies at www.networkadvertising.org. Opting out does not mean you will no longer see online advertising; it means the companies you opted out of will no longer deliver ads tailored to your preferences and usage patterns.
Our uses and disclosures
We may use and share your information to:
- Treat you. We can use your health information and share it with other professionals who are treating you, such as your primary care provider, and with the licensed pharmacy that fills your prescription.
- Run our organization. We can use and share your health information to operate our telemedicine services, improve your care, and contact you when necessary.
- Work with the partner brand you used. If you requested treatment through a partner brand, we share the status of your consultation and prescription with that partner so it can provide the service you requested.
- Bill for your services. We can use and share your health information to bill for our services.
- Help with public health and safety issues. We can share information about you in certain situations, such as disease prevention, reporting adverse reactions to medications, reporting suspected abuse, neglect, or domestic violence, and preventing or reducing a serious threat to anyone’s health or safety.
- Comply with the law. We will share information about you if state or federal laws require it, including with the Department of Health and Human Services if it wants to see that we are complying with federal privacy law.
- Address law enforcement and other government requests. We can use or share health information about you for law enforcement purposes, with health oversight agencies, and for special government functions.
- Respond to lawsuits and legal actions. We can share health information about you in response to a court or administrative order, or in response to a subpoena.
- Share with our subsidiaries and affiliates, if any.
- Communicate with third parties for a corporate reorganization, including mergers, acquisitions, and sales of all, substantially all, or part of our assets.
We do not participate in the following activities, and will not use or share your health information for them:
- Creating or managing a hospital directory
- Creating or maintaining psychotherapy notes
- Fundraising
- Disaster relief efforts
- Research
- Corresponding with organ procurement organizations
- Working with a medical examiner or funeral director
We may also collect information about your use of the Sites that does not contain medical information, and we may aggregate or de-identify your medical information by removing information that personally identifies you. Bespoke reserves the right to use or share de-identified information without restriction, subject to applicable law.
The Sites may link to third-party websites whose information, privacy, and security practices differ from ours. Before using those sites or providing them any medical information, review their privacy notices and terms. Bespoke does not control and is not responsible for third-party website use of your medical information. Bespoke and its officers, directors, employees, consultants, and agents expressly disclaim all liability relating to the accuracy, quality, availability, reliability, or security of any third-party websites, and are not liable for any unauthorized use or disclosure of your medical information by any third party if the medical information is provided to the third party in compliance with this Privacy Policy.
Your rights
You have the right to:
- Get a copy of your Electronic Medical Record. You can ask to see or get an electronic or paper copy of your medical record and other health information we have about you. We will usually provide a copy or summary within 30 days of your request, and may charge a reasonable, cost-based fee.
- Correct your Electronic Medical Record. You can ask us to correct health information about you that you think is incorrect or incomplete. We may say no, but we will tell you why, if appropriate.
- Request confidential communication. You can ask us to contact you in a specific way (for example, at a certain phone number) or to send mail to a different address. We will agree to all reasonable requests.
- Ask us to limit the information we share. You can ask us not to use or share certain health information for treatment or our operations. We are not required to agree and may say no if it would affect your care.
- Get a list of those with whom we’ve shared your information. We will include all disclosures except those about treatment, payment, and health care operations, and certain other disclosures you asked us to make. We may charge a reasonable, cost-based fee.
- Get a copy of this privacy notice. We will provide a paper copy on request, even if you agreed to receive it electronically.
- Choose someone to act for you. If you have given someone medical power of attorney, or someone is your legal guardian, that person can exercise your rights and make choices about your health information. We will confirm the person has this authority.
- File a complaint if you believe your privacy rights have been violated. Contact us at support@bespokeprescriptions.com. You can also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights by writing to 200 Independence Avenue, S.W., Washington, D.C. 20201, calling 1-877-696-6775, or visiting www.hhs.gov/ocr/privacy/hipaa/complaints. We will not retaliate against you for filing a complaint.
You also have the right to delete your Bespoke account. Bespoke may retain copies of medical information you previously provided in order to comply with applicable law. Any retained information will be used or shared in accordance with this Privacy Policy. Residents of certain states have additional rights described in our Consumer Health Data Privacy Policy.
Your choices
For certain health information, you can tell us your choices about what we share. You have the right and the choice to share your information with your family, close friends, or others involved in your care. If you are unable to tell us your preference, we may share your information if we believe it is in your best interest, or if needed to lessen a serious and imminent threat to health or safety.
Except as otherwise described in this Privacy Policy, we will not share your information without your written permission for marketing purposes or to sell your information. You can use to opt out of targeted advertising and the sale or sharing of personal information, and to limit the use of your sensitive information.
Our responsibilities
- We are required by law to maintain the privacy and security of your protected health information.
- We will let you know promptly if a breach occurs that may have compromised the privacy or security of your information.
- We must follow the duties and privacy practices described in this notice and give you a copy of it.
- We will not use or disclose your information other than as described here unless you tell us we can in writing. If you tell us we can, you may change your mind at any time by letting us know in writing.
For more information, see the HHS guide to notices of privacy practices.
Children under the age of 18
The Sites are not intended for use by anyone under the age of 18. Bespoke does not knowingly collect information from visitors under 18. If we learn that a person under 18 has provided us with personal information, we will delete it.
Disputes and agreement to arbitrate
Except where and to the extent prohibited by law, by using the Sites you and we agree that if there is any controversy, claim, action, or dispute arising out of or related to your use of the Sites, or the breach, enforcement, interpretation, or validity of this Privacy Policy or any part of it (“Dispute”), both parties will first try in good faith to settle the Dispute by giving written notice to the other party describing the facts and circumstances, and allowing the receiving party thirty (30) days to respond to or settle the Dispute. Notice will be sent to you at the email or mailing address we have on file for you, and to us at support@bespokeprescriptions.com.
Both you and we agree that this dispute resolution procedure is a condition precedent that must be satisfied before initiating any litigation or filing any claim against the other party. If any Dispute cannot be resolved by the above procedure, you agree that the sole and exclusive jurisdiction for the Dispute will be binding arbitration on an individual basis. Arbitration on an individual basis means that you will not have, and you waive, the right for a judge or jury to decide your claims, and that you may not proceed in a class, consolidated, or representative capacity. Other rights that you and we would otherwise have in court will not be available or will be more limited in arbitration, including discovery and appeal rights. All such Disputes will be submitted exclusively to JAMS (www.jamsadr.com) for binding arbitration under its rules then in effect, before one arbitrator mutually agreed upon by both parties.
The arbitrator, and not any federal, state, or local court or agency, will have exclusive authority to resolve any dispute relating to the interpretation, applicability, enforceability, or formation of this Privacy Policy, including any claim that all or part of it is void or voidable, except for disputes related to or involving Bespoke’s intellectual property.
Choice of law
For U.S. residents, this Privacy Policy is made in, and will be construed in accordance with, the laws of the State of Utah, without giving effect to any conflict of law principles. The parties acknowledge that this Privacy Policy evidences a transaction involving interstate commerce. Any arbitration conducted under this Privacy Policy is governed by the Federal Arbitration Act (9 U.S.C. §§ 1–16).
Your California privacy rights and Do Not Track
California Civil Code § 1798.83 permits visitors who are California residents to request certain information about our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, email support@bespokeprescriptions.com.
We do not share personal information with third parties for their direct marketing purposes unless you consent, typically by opting in to receive information from a third party participating in a promotion on the Sites. If you ask us to share your personal information with a third party for its marketing purposes, we will share it only in connection with that promotion. We treat the Global Privacy Control signal as a valid opt-out request.
Assignment
If all or part of our assets are sold or acquired by another party, or in the event of a merger, you grant us the right to assign the personal information collected through the Sites.
Changes to this Privacy Policy
We can change the terms of this notice, and the changes will apply to all information we have about you. The new notice will be available on request and on this website, with the “Last updated” date at the top revised.
Contacting us
If you have any questions, comments, or concerns about our privacy practices or this Privacy Policy, email us at support@bespokeprescriptions.com.
Effective date of notice: October 26, 2026