StarMedsGet started

Privacy Policy

Effective date: October 8, 2026

This Privacy Policy explains how Velcrest Holdings LLC, a Texas limited liability company doing business as StarMeds ("StarMeds," "we," "us"), collects, uses, and shares information through the StarMeds website, online questionnaire, and care portal (together, the "Service").

Health information and HIPAA

Health information that the licensed clinicians and the licensed pharmacy create, receive, or use in providing your care is protected under the Health Insurance Portability and Accountability Act ("HIPAA"). How that information is used and disclosed, and the rights you have over it, are described in a separate Notice of Privacy Practices. You can request a copy of the Notice of Privacy Practices by contacting us using the details at the end of this policy.

Where HIPAA or the Notice of Privacy Practices applies to your information, it controls. This Privacy Policy covers the rest of the information we handle.

Information we collect

Information you give us

  • Contact and account details, such as your name, email address, phone number, shipping address, date of birth, and login credentials.
  • Health information, such as your answers to the medical questionnaire, medical history, current medications, allergies, and any photos, documents, or messages you send to the clinician or our support team.
  • Payment information. Payments are handled by a third-party payment processor. The processor receives your card details directly. We receive limited information, such as the transaction status, the card type, and the last four digits of the card, but we do not store your full card number.
  • Communications, such as emails, messages, and records of your contact with support.

Information collected automatically

  • Device and log data. When you use the Service, our servers and those of our hosting providers record technical information such as your IP address, browser type, device type, pages requested, and the date and time of your visit.
  • Google Fonts. Our website loads fonts from Google Fonts. When your browser requests these fonts, Google receives your IP address and standard browser information. Google's use of this information is governed by Google's own privacy policy.

Our website does not currently use analytics tools or advertising pixels. If that changes, we will update this policy first.

How we use information

  • To provide the Service, including creating your account and sending your questionnaire to a licensed clinician for review.
  • To let the pharmacy prepare and ship any medication the clinician prescribes.
  • To process payments and keep order records.
  • To communicate with you about your account, orders, care, and support requests.
  • To operate, maintain, secure, and improve the Service, and to detect and prevent fraud or misuse.
  • To comply with legal, regulatory, and professional obligations, and to enforce our Terms of Service.

How we share information

We do not sell your personal information, and we do not sell or rent your health information. We share information only as described below.

  • Licensed clinicians who review your questionnaire and decide whether a prescription is appropriate.
  • A state-licensed U.S. pharmacy that prepares and ships prescribed medication.
  • Our technology and service providers, such as hosting, telehealth software, payment processing, communications, and shipping providers, who handle information on our behalf and only as needed to provide their services to us.
  • Legal requirements. When we believe disclosure is required by law, subpoena, or court order, or is needed to protect the rights, property, or safety of you, us, or others.
  • Business transfers. In connection with a merger, sale, financing, or transfer of all or part of our business, subject to applicable law.
  • With your consent or at your direction.

Cookies and local storage

The care portal uses your browser's session storage to keep you signed in and to remember your progress while you complete the questionnaire. Session storage is cleared when you close the browser tab or window. The Service may also use cookies or similar technologies that are strictly necessary for it to work, such as for security and sign-in.

You can block or delete cookies and stored data in your browser settings, but parts of the Service, including the care portal, may not work without them.

How long we keep information

We keep information for as long as needed to provide the Service and for the periods required by law, including medical-record and pharmacy record-keeping rules. When information is no longer needed, we delete or de-identify it.

How we protect information

We use administrative, technical, and physical safeguards designed to protect your information, including encryption in transit. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please keep your login details confidential and contact us if you think your account has been compromised.

Your choices and rights

  • Account information. You can review and update certain information in the care portal or by contacting us.
  • Email. You can unsubscribe from any marketing emails using the link in the email. We will still send messages about your account, orders, and care.
  • Text messages. If you agree to receive text messages, you can reply STOP to opt out.

State privacy rights

Depending on where you live, state law may give you rights over your personal information, including consumer health data. Residents of states such as California and Washington (under Washington's My Health My Data Act) may have the right to:

  • know or access the information we hold about them;
  • correct inaccurate information;
  • delete information, subject to legal exceptions such as medical record retention requirements;
  • withdraw consent to the collection or sharing of health data; and
  • not be discriminated against for exercising these rights.

To make a request, contact us using the details below. We may need to verify your identity before we respond. You may use an authorized agent where state law allows. If we deny your request, you may be able to appeal by replying to our decision. Rights over health information covered by HIPAA are described in the Notice of Privacy Practices.

Children

The Service is not directed to anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has given us information, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. We will post the updated version on this page with a new effective date. If we make material changes, we will give additional notice, such as by email or a notice in the care portal.

Contact us

Questions about this policy, requests to exercise your rights, or requests for the Notice of Privacy Practices can be sent to: