Privacy policy

Effective date: September 30, 2026

This Privacy Policy explains how DreamHug Medical, a division of Ashley Bridget LLC ("DreamHug Medical," "we," "us," or "our"), collects, uses, discloses, and protects information about you when you visit dreamhugmedical.com or easyrxnow.com (the "Sites") or use our telehealth-enabled services (the "Services"). By using the Sites or Services, you agree to this Privacy Policy.

1. Who We Are and How Care Is Provided

DreamHug Medical operates the Sites and arranges access to telehealth consultations with independent, U.S.-licensed healthcare providers. Prescribing decisions are made solely by those providers. Prescriptions, including compounded medications, are prepared and dispensed by independent, state-licensed pharmacies. DreamHug Medical does not compound or manufacture any medication.

2. Information We Collect

a. Information you provide: name, email address, phone number, shipping and billing address, date of birth, gender, and payment information (processed by our payment processor; we do not store full card numbers).

b. Health information: information you submit in eligibility questionnaires, intake forms, and consultations, such as height, weight, BMI, medical history, current medications, allergies, and treatment goals, together with prescription and order information. When this information is created or received by a healthcare provider or its business associates in connection with your care, it is Protected Health Information ("PHI") under the Health Insurance Portability and Accountability Act of 1996 and its regulations ("HIPAA").

c. Information collected automatically: IP address, browser and device type, pages viewed, referring URLs, and similar usage data collected through cookies, pixels, and similar technologies.

3. How We Use Information

We use information to: provide and coordinate the Services, including connecting you with a licensed provider and transmitting prescriptions to a licensed pharmacy; process payments and ship orders; communicate with you about your account, orders, and care; provide customer support; verify eligibility, including your state of residence; maintain the security of the Sites; comply with legal obligations; and, for non-health information only, improve and market our Sites and Services.

4. Protected Health Information and HIPAA

a. We treat all health information you submit as confidential. Health information is used and disclosed only to provide, coordinate, and pay for your care, and as otherwise permitted or required by HIPAA and applicable state law.

b. Section 7 below is our HIPAA Notice of Privacy Practices. Your treating provider and dispensing pharmacy may also provide their own notices.

c. We do not sell PHI or health information, and we do not use or disclose PHI for marketing without your prior written authorization.

5. How We Share Information

We share information only as follows:

  • With independent licensed healthcare providers who evaluate you and, if appropriate, prescribe treatment.
  • With licensed pharmacies that fill and ship prescriptions.
  • With service providers that operate on our behalf (for example, hosting, e-commerce, payment processing, shipping, telehealth technology, and customer support). Service providers that handle PHI must protect it as HIPAA and applicable state law require.
  • When required by law, subpoena, or court order, or to protect the rights, safety, or property of patients, us, or others.
  • In connection with a merger, acquisition, or sale of assets, subject to this Privacy Policy.

We do not sell your personal information.

6. How We Ensure Compliance with Privacy and PHI Laws

DreamHug Medical maintains the following safeguards to comply with HIPAA and applicable federal and state privacy laws:

  • Administrative safeguards: a designated privacy contact responsible for this policy; written privacy and security procedures; privacy and security training for personnel who handle health information; and access limited to personnel who need it to perform their role (minimum necessary standard).
  • Written agreements: where HIPAA requires, business associate agreements with providers, pharmacies, and vendors that create, receive, maintain, or transmit PHI on our behalf, requiring them to safeguard it.
  • Technical safeguards: encryption of data in transit using SSL/TLS; access controls and authentication for systems that store health information; and use of hosting and technology vendors that maintain industry-standard security.
  • Breach response: procedures to investigate suspected security incidents and to notify affected individuals and regulators as required by HIPAA and state breach-notification laws.
  • Review: periodic review of this policy and of our practices as laws and our Services change.

7. HIPAA Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

a. Uses and disclosures of PHI. PHI may be used and disclosed for:

  • Treatment: to allow licensed providers to evaluate you, prescribe, and coordinate your care, and to allow licensed pharmacies to fill and ship your prescriptions.
  • Payment: to process payment for the services and medications you purchase.
  • Health care operations: for quality assessment, compliance audits, customer support, and administration of the Services.
  • Refill reminders and care communications: to contact you about your prescriptions, refills, and treatment.
  • As permitted or required by law without your authorization: to public health authorities (for example, to report adverse events), health oversight agencies, in response to court orders or subpoenas, to law enforcement as required by law, to avert a serious threat to health or safety, and for workers' compensation.

Any other use or disclosure, including marketing and any sale of PHI, will be made only with your written authorization, which you may revoke in writing at any time.

b. Your rights regarding PHI. You have the right to:

  • Request restrictions on certain uses and disclosures of your PHI (we are not required to agree, except for services you paid for in full out of pocket that you ask us not to disclose to a health plan).
  • Request confidential communications by alternative means or at an alternative location.
  • Access, inspect, and obtain a copy of your PHI, including in electronic form.
  • Request an amendment of PHI you believe is incorrect or incomplete.
  • Receive an accounting of certain disclosures of your PHI made in the six years before your request.
  • Receive notice if a breach of your unsecured PHI occurs.
  • Obtain a paper copy of this notice on request.

c. Complaints. If you believe your privacy rights have been violated, you may file a complaint with us using the contact details below, or with the Secretary of the U.S. Department of Health and Human Services, Office for Civil Rights, 200 Independence Avenue SW, Washington, D.C. 20201, or at www.hhs.gov/ocr/complaints. You will not be retaliated against for filing a complaint.

8. Cookies and Tracking Technologies

We use cookies, pixels, and similar technologies, including those provided by advertising and analytics partners such as Meta and Google, to operate the Sites, remember your preferences, and measure site performance and advertising. These technologies may collect information about your visit, such as pages viewed, products viewed, and whether you started or completed checkout. You can accept or decline non-essential cookies through our cookie banner and can control cookies through your browser settings.

9. Your Privacy Rights

Depending on your state of residence, you may have the right to: access the personal information we hold about you; correct inaccurate information; request deletion (subject to medical-record retention and other legal requirements); opt out of targeted advertising and the "sale" or "sharing" of personal information; withdraw consent; and appeal a denial of your request. Under HIPAA, you may also request access to and amendment of your medical records from your treating provider.

California residents: you have the rights described in the California Consumer Privacy Act, as amended, and the California Confidentiality of Medical Information Act. Washington and Nevada residents: we collect, use, and share consumer health data only as needed to provide the Services you request or with your consent, and you may request access to or deletion of your consumer health data and a list of third parties with which it was shared. Residents of other states with consumer privacy laws (including Colorado, Connecticut, Virginia, Texas, Oregon, and others) may exercise the rights those laws provide.

To exercise any right, contact us as described below. We will verify your identity before responding and will not discriminate against you for exercising your rights.

10. Data Retention

We keep personal information for as long as needed to provide the Services and as required by law. Medical records are retained by treating providers and pharmacies for the periods required under applicable state and federal law.

11. Data Security

We use reasonable administrative, technical, and physical safeguards to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Children

The Sites and Services are intended only for adults 18 and older. We do not knowingly collect information from children under 18.

13. Where We Operate

The Services are available only to residents of the states listed on our Where We Serve page. Information is processed and stored in the United States.

14. Changes to This Policy

We may update this Privacy Policy from time to time. The effective date above shows when it was last revised. Material changes will be posted on this page.

15. Contact Us

DreamHug Medical (Ashley Bridget LLC)

Attn: Privacy

750 SW 12th Avenue, Pompano Beach, FL 33069

Email: support@dreamhugmedical.com

Phone: 1-833-794-8463