1. Who we are and what this covers
PureMuze LLC (“PureMuze,” “we,” “us”) operates puremuze.com (the “Website”). This policy explains what we collect through the Website and what we do with it.
It does not apply to protected health information created or received when you become a patient. Clinical services are delivered by independent licensed clinicians and pharmacies through our HIPAA-compliant infrastructure partner, OpenLoop Health, under a Business Associate Agreement. Once you enter the clinical intake at care.puremuze.com you are in OpenLoop's environment, and their Notice of Privacy Practices governs.
2. Information we collect
- Information you give us. Name, email address, and state, when you use the fit check, register for a webinar, or contact us.
- Information collected automatically. IP address, approximate location derived from it, browser and device type, pages viewed, referring source, and, on marketing pages only, an advertising click identifier (such as the
fbclidorrdt_cidparameter an ad platform appends to a link) if you arrived from an ad.
What we deliberately do not collect. The fit check asks about symptoms and history so it can suggest a program. Those answers are never transmitted to us or stored. They are evaluated in your browser and discarded. Only your name, email, state and the program you matched with are recorded. Your clinician asks these questions again, properly, inside the clinical intake.
We do not ask for or store payment card details. Payment is processed by OpenLoop.
3. Cookies, analytics and advertising measurement
The Website uses the cookies required to make it function, and Google Analytics 4, loaded through Google Tag Manager, to understand how people find and move around the site. Google Analytics sets cookies and receives your IP address, the pages you view, and general device and browser information. We do not send it your name, email address or any answer you give us. Google Signals is switched off, so your activity here is not joined to your Google advertising profile, and we do not share Analytics data with Google for its own products or for advertising. Analytics data is retained for 14 months and then deleted.
Advertising measurement. We advertise on Meta (Facebook and Instagram) and Reddit, and we need to know whether an ad brought you here and whether you registered for a webinar. We do this without loading any advertising script in your browser. When you view a marketing page (the home page, program pages, webinar pages and blog) or register for a webinar, our own server sends Meta a record containing the fact that you visited puremuze.com (not which page), your IP address, your browser type, the click identifier from the ad if there was one and, for a registration, a one-way hash of your email address so Meta can count the registration. Reddit receives the same kind of record when you view a marketing page: the fact that you visited puremuze.com (not which page), your IP address, your browser type and the click identifier from the ad if you arrived from a Reddit ad. Reddit receives a record of a registration only if you arrived from a Reddit ad. We never send your name, phone number, any form answer, the fit check, or anything about your symptoms, health or the program you are interested in. Nothing is sent from the fit check, the clinical intake, or any page where clinical information is collected; those pages load no analytics and no measurement code at all. This is enforced in the code that builds this Website, not by a setting someone could switch on by accident.
Your choices. If your browser sends the Global Privacy Control signal, we send nothing to advertising platforms. You can also opt out at any time on our Your Privacy Choices page. You can control Meta’s use of data at facebook.com/adpreferences, Reddit’s at reddit.com/settings/privacy, and industry-wide at aboutads.info/choices.
We will not place advertising or analytics trackers on pages where clinical information is collected. If we add a new measurement method we will describe it here before it goes live.
4. Where your form submissions go
Submissions from the contact form, webinar registration and fit check are stored in Google Workspace (Google Sheets) under our control, and are used to reply to you and to operate the service. Google acts as a service provider and is contractually restricted from using the data for its own purposes.
5. How we use information
To operate and improve the Website; to respond to you; to direct you to the right program and clinical intake; to send service messages about your account or a request you made; and, where you have not opted out, to send you marketing about PureMuze. You can unsubscribe from marketing at any time using the link in any email.
6. Disclosure of information
We share information with: service providers under contract who perform work on our behalf; OpenLoop Health and the licensed clinicians and pharmacies delivering your care; a successor entity in a merger, acquisition or sale of assets; and where required to comply with legal process, enforce our agreements, or protect the rights and safety of any person.
We do not sell your personal information. Because the advertising measurement described in section 3 sends limited information to Meta and Reddit, some state laws treat that as “sharing” for cross-context behavioural advertising or as targeted advertising. You can opt out on our Your Privacy Choices page or by sending the Global Privacy Control signal. We do not share your name, phone number, health information or form answers with any advertising platform.
7. Retention
We keep Website submissions for as long as needed for the purpose they were given, and no longer than 24 months from your last interaction with us, unless a longer period is required by law. You can ask us to delete them sooner.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete or obtain a portable copy of your personal information, to opt out of targeted advertising, sale, or profiling, and to appeal a refusal. These rights are available to residents of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia, among others.
To exercise a right, email privacy@puremuze.com. We will acknowledge within 10 business days and respond within 45 days, extendable once by a further 45 days where the law allows. We may need to verify your identity before acting. We will not discriminate against you for exercising any of these rights. If we decline your request you may appeal by replying to our decision; if we deny the appeal you may complain to your state Attorney General.
To opt out of targeted advertising or the sharing described in section 6, use the Your Privacy Choices link in the footer or turn on Global Privacy Control in your browser; no email is needed.
You may use an authorised agent to submit a request on your behalf where the law permits, with written proof of authorisation.
9. California Privacy Notice
This section supplements the above for California residents under the CCPA as amended by the CPRA.
Categories of personal information we collect: identifiers (name, email, IP address); geolocation inferred from IP at state level; internet activity (pages viewed, referring source); and commercial information (the program you expressed interest in).
Sensitive personal information: we do not collect it through this Website. Health information you provide during clinical intake is protected health information handled by OpenLoop under HIPAA, not under the CCPA. The fit check answers are not transmitted to us.
Sources: directly from you, and automatically from your device.
Business purposes: as described in section 5.
Disclosure: as described in section 6. In the preceding twelve months we have shared the following categories with advertising platforms for cross-context behavioural advertising: identifiers (IP address, advertising click identifiers, and a hashed email address for webinar registrations) and internet activity (that you visited our marketing site). We have not sold personal information. We do not sell or share the personal information of consumers we know to be under 16. Opt out via Your Privacy Choices or Global Privacy Control.
Retention: as described in section 7.
10. Children
The Website is intended for adults 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us information, email privacy@puremuze.com and we will delete it.
11. Security
We use administrative, technical and physical safeguards designed to protect information, including encryption in transit. No method of transmission over the internet is completely secure, and you are responsible for keeping your account credentials confidential.
12. Changes
We may update this policy. The date at the top reflects the most recent revision. Where a change is material we will give notice before it takes effect.
13. Contact
Privacy questions and rights requests: privacy@puremuze.com. For protected health information, see OpenLoop Health's Notice of Privacy Practices. General enquiries: hello@puremuze.com.
All PureMuze policies
- Privacy Policy (you are here)
- Your Privacy Choices
- Consumer Health Data Privacy Policy
- Terms of Use
- Cancellation & Refund Policy
- Medication Safety Information
- Compounded Medication Disclosure
- About Telehealth Care
- Accessibility Statement
- Telehealth Informed Consent (OpenLoop Health, the consent of record)
- Notice of Privacy Practices (OpenLoop Health)
PureMuze LLC, a Texas limited liability company. Clinical services are provided by independent licensed clinicians and pharmacies through our clinical infrastructure partner, OpenLoop Health. PureMuze does not practice medicine and does not compound or manufacture medication.