Consumer Health Data Privacy Policy
Effective October 30, 2026
This Consumer Health Data Privacy Policy explains how DSO Fine Shrimp LLC d/b/a CoreAge Rx (“CoreAge Rx,” “we,” “us”) collects, uses and shares consumer health data, and how you can exercise your rights over it. It is our consumer health data privacy policy under Washington’s My Health My Data Act (RCW 19.373) and Nevada’s consumer health data law (NRS 603A.400 to 603A.550). It covers our websites at www.coreagerx.com, app.coreagerx.com, try.coreagerx.com and pay.coreagerx.com, our landing pages on other domains that name CoreAge Rx as their operator, and our GLP-1 Shot Tracker app. Our Privacy Policy covers personal information more generally.
“Consumer health data” means personal information that is linked or reasonably linkable to you and that identifies your past, present or future physical or mental health status. With us, that includes your answers to our health questions, the treatments you look at, order or are prescribed, and the fact that you are seeking care from us. Medical records kept by the licensed providers who treat you are also protected by federal law (HIPAA), as described in our HIPAA Notice of Privacy Practices.
Consumer health data we collect, and why
Health questionnaire answers
What it includes: The answers you give in the questionnaires on app.coreagerx.com and on our landing pages. Depending on the treatment, these include your date of birth, age or age range and sex at birth; your height, current and goal weight and BMI; whether you take prescription weight-loss medication, and which GLP-1 medication you use now and what you pay for it; medical conditions you have, such as pregnancy or trying to conceive, breastfeeding, diabetes, kidney or liver disease, heart disease, pancreatitis, thyroid cancer, other cancer, an eating disorder, suicidal thoughts, an organ transplant or a serious stomach or bowel condition; medicines you take, such as blood thinners, and substance use; for NAD+ and sermorelin, your goals and symptoms such as fatigue, poor sleep or low mood; for erectile dysfunction, how often you have trouble with erections, the treatments you have tried, your heart and blood-pressure history, and medicines or drugs (such as nitrates) that would make treatment unsafe; and for testosterone therapy, your symptoms, past test results, related diagnoses, plans to have children and current hormone use.
Why we collect it and how we use it: To check whether a treatment may suit you before you pay, show you the options that fit your answers, and follow up with you about your consultation.
Medical intake
What it includes: Your answers to the medical intake your provider reviews, and the photos you upload with it. The intake runs on WhiteLabel MD, our medical platform, on www.coreagerx.com and in our member portal.
Why we collect it and how we use it: So a licensed provider can evaluate you, decide whether a treatment is appropriate, prescribe it and care for you.
Treatments and orders
What it includes: The treatments you look at, choose and buy, such as compounded semaglutide or tirzepatide, NAD+, sermorelin, erectile dysfunction treatment, testosterone therapy and the lab test that goes with it, or prescription skin creams; your dose, plan and add-ons; the status of your order, payment, refunds, subscription and shipment; and your refill check-ins and cancellation requests.
Why we collect it and how we use it: To take, bill, fill, ship and renew your order, handle refunds and cancellations, and answer your questions.
In Your Corner coaching
What it includes: If you join our In Your Corner coaching program: your goals; your answers about your health, medicines and supplements, GLP-1 medication and dose, height and weight, eating, movement, sleep and recent health events; an emergency contact if you give one; and, if you authorize it, the parts of your CoreAge Rx record you agree to share with your coaching team. Your questionnaire goes to our customer record system.
Why we collect it and how we use it: So your coaching team, who are CoreAge Rx staff, can build and adjust your plan and prepare for your calls.
Contact and shipping details
What it includes: Your name, email address, phone number, state and shipping address, which are linked to your answers and orders, and whether your email address and phone number can receive messages. If you sign in to your member account with Google or Apple, the name and email address they give us.
Why we collect it and how we use it: To create your consultation and order, ship your treatment, sign you in, and contact you by email, phone and text message.
Your activity on our sites
What it includes: The pages you visit and the steps you reach (a page’s address can name the treatment, such as /ed2 or /trt1, and some show why a questionnaire ended); the link or advertisement that brought you here, with its campaign and click identifiers; our own identifiers for your browser and visit (see Our own measurement); your IP address and approximate location; and your browser and device.
Why we collect it and how we use it: To run our sites, keep your answers and checkout together, prevent fraud, learn which links and advertisements bring us patients, find pages that confuse people, and for analytics and advertising (see below).
Reviews, feedback and messages
What it includes: The ratings and comments you send us about your treatment, and the emails and text messages you exchange with us.
Why we collect it and how we use it: To answer you and improve our service.
Consent records
What it includes: Your choices on our cookie banner (with the page, your browser, part of your IP address and the state or country it places you in), whether you agreed to emails and text messages, and when you agreed to our terms, with the IP address and browser you used.
Why we collect it and how we use it: To keep a record of what you agreed to and honor your choices.
GLP-1 Shot Tracker app
What it includes: The injections you log (date, time, dose, injection site and notes), your weight, side effects, medication and dosing schedule, reminder settings, and your account details.
Why we collect it and how we use it: To keep your history, charts and reminders, and sync them to your account.
Where we get it
- From you, when you answer our questionnaires, complete the medical intake, place an order, use the GLP-1 Shot Tracker app, or write, text or call us.
- From your browser and device, automatically, through cookies and similar technologies, as you use our sites.
- From the link that brought you to us, which can carry the name of an advertising campaign and an advertising platform’s click identifier, and from advertising platforms’ reports of which campaign an ad click came from.
- From WhiteLabel MD, our medical platform, and the providers and pharmacies who treat you: your order numbers, and the status of your order and its shipment.
- From our payment processors and Chargeblast: your payments, refunds, subscriptions and payment disputes.
- From our customer record and verification services: whether you are already a customer, and whether your email address and phone number can receive messages.
- From Google or Apple, if you use them to sign in to your member account: your name and email address.
Our own measurement
Outside Washington and Nevada, from your first page view and before you make any cookie choice, we record for our own use which link or advertisement brought you to us and the pages and steps you visit. In Washington and Nevada, or if we can’t tell where you are, we record which link or advertisement brought you, and connect your visits to it, only if you allow our own measurement (see Washington and Nevada). We do this with our own cookies (coreage_bid, a random identifier for your browser, kept for one year; coreage_track and coreage_click, the campaign and ad-click details of the link you arrived on, kept for 90 days; and, on our landing pages, lp_vid, kept for one year), a session identifier, and the ad-click details we record with your visit.
We use these records only for our own attribution: to learn which links and advertisements bring us patients. We do not sell them, and we do not send them to advertising platforms. If you allow advertising cookies, an advertising tag can see the address of the page you are on, which may include the campaign details that were in the link.
Tracking across other websites
Third parties can collect consumer health data about you over time and across other websites and apps: our analytics and advertising partners above can combine what their tags record on our sites with your activity elsewhere. Our payment and fraud-prevention services use their own cookies to recognize devices across the websites that use them.
How we ask for your consent
On app.coreagerx.com, pay.coreagerx.com and try.coreagerx.com, none of the analytics or advertising partners above receive anything from our pages until you allow them on our cookie banner. Outside Washington and Nevada, analytics and advertising are separate choices there, so you can allow one without the other; in Washington and Nevada the banner asks the questions described below instead. You can change or withdraw your choice at any time from Your Privacy Choices in the footer of those pages, and we treat a Global Privacy Control signal from your browser as an opt-out of advertising. Our website at www.coreagerx.com uses a separate cookie tool (Cookiebot), which loads Meta’s pixel only after you accept; see its cookie settings there. Its intake pages (such as /onboarding/) load no advertising tags. Reply STOP to any of our text messages to stop them.
Outside Washington and Nevada, the cookie banner does not control our own measurement (above). It never controls the services that run our sites and handle your consultation, order and messages: the medical platform, providers, pharmacies and lab, our payment processors, our customer record and messaging services, and the service providers that run our systems. In the GLP-1 Shot Tracker app, your device’s settings control advertising identifiers.
Washington and Nevada
If we locate you in Washington or Nevada, or can’t tell where you are, the cookie banner on app.coreagerx.com, pay.coreagerx.com and try.coreagerx.com asks for your consent to two things separately, and both stay off until you choose:
- Our own measurement: the
coreage_bidcookie, and the advertisement, campaign and link details we record about how you reached us (see Our own measurement). - Sharing with our analytics and advertising partners: the partners listed above and what those entries say they receive, including your contact details where they say so.
You can choose Allow both, Decline both, or tick one and choose Save my choices. Until you choose, and if you decline, we keep only what we need to serve you: your session and the steps you reach in it, your questionnaire answers, the treatment, plan and price you choose, your checkout, your state, and the technical details of each page view (your browser and approximate location). If you said OK on our standard cookie banner, for example in another state, that doesn’t count in Washington or Nevada, and we ask you again. You can withdraw or change your consent at any time from Your Privacy Choices.
Until you choose, and if you decline our own measurement, we may still keep de-identified, aggregate campaign totals (weekly counts of visits, checkout page visits, sign-ups and orders, and order revenue, per advertising campaign, for Washington and Nevada combined, including visitors whose location we can’t determine) that contain nothing identifying you, your device or any single order; we keep and use these totals only in de-identified form, we will not attempt to re-identify them, and we do not share them.
We tell where you are from your IP address, which can be wrong, for example when you use a VPN. Wherever we place you, you can decline sharing with our partners from Your Privacy Choices. These choices don’t cover www.coreagerx.com (see above). You may also withdraw consent or ask us to delete your consumer health data at any time; see Your rights.
How we process it
We collect consumer health data through the pages, forms and app described above, store it in our database, use it for the purposes in this policy, and send it to the recipients listed above. It travels between your browser or phone, our servers and those recipients over encrypted (HTTPS) connections.
Your rights
Washington and Nevada consumers have the right to:
- Confirm whether we collect, share or sell consumer health data about you, and get a copy of it.
- Get a list of all third parties and affiliates with which we have shared or sold your consumer health data, with an email address or other online way to contact each of them.
- Withdraw your consent to our collection and sharing of your consumer health data, and ask us to stop collecting, sharing or selling it.
- Have your consumer health data deleted. We delete it from our records, including archived and backup systems, and tell the processors and third parties we shared it with to delete it too. Deleting it from backups can take longer, as those laws allow: up to six months for a Washington request and up to two years for a Nevada request.
- Review the consumer health data we hold about you and ask us to correct it.
If you withdraw consent or ask us to stop sharing, we cannot keep providing a treatment that depends on that sharing: a provider cannot evaluate you without your intake, and a pharmacy cannot fill a prescription without your details.
How to make a request
Email support@coreagerx.com with “Consumer health data request” in the subject line, or write to us at the address below, and tell us which right you want to use. To protect your information we confirm that a request comes from you: send it from the email address you used with us, or include the name, email address and phone number you gave us. If we cannot confirm it, we may ask for more information. You do not need an account.
We respond within 45 days of receiving your request. If we need more time, we may extend that once by another 45 days, and we will tell you why within the first 45 days. For a Nevada consumer, we delete consumer health data within 30 days of confirming the request. Responses are free of charge for at least two requests a year.
Appeals
If we decline to act on your request, you can appeal by replying to our decision or by emailing support@coreagerx.com with “Consumer health data appeal” in the subject line. Within 45 days of receiving your appeal, we will tell you in writing what we did or decided not to do, and why. If we deny your appeal, you can contact your state’s Attorney General:
- Washington: the Office of the Attorney General, at atg.wa.gov/file-complaint or 1-800-551-4636 (206-464-6684 from outside Washington).
- Nevada: the Office of the Attorney General, at ag.nv.gov/Complaints, or its Bureau of Consumer Protection at 702-486-3132.
No discrimination
We will not discriminate against you for using these rights. We will not deny you service, charge you a different price or give you a different level of service because you made a request, apart from the limits on treatment described under “Your rights.”
Changes to this policy
When we change this policy, we post the new version on this page and update the effective date at the top. We will not collect, use or share consumer health data in a new category, for a new purpose or with a new kind of recipient without first telling you and getting your consent.
Contact us
Email support@coreagerx.com or call (307) 405-1638 (Monday to Friday, 9 AM to 6 PM Eastern). You may also write to us at:
DSO Fine Shrimp LLC d/b/a CoreAge Rx
Attn: Privacy Team/Regulatory Compliance
1309 Coffeen Avenue, Suite 1200
Sheridan, WY 82801