Privacy Policy

This Privacy Policy explains how Veradene collects, uses, discloses, stores, and protects information when you access our website, use our platform, complete assessments, request services, or otherwise interact with us.

Veradene is a brand operated by Benchline Health, Inc., Delaware file number 10681125, incorporated June 30, 2026. For formal legal notices, the company’s registered agent is Agents and Corporations, Inc., 1201 Orange St Ste 600, One Commerce Center, Wilmington, DE 19801. That registered agent address is not a customer-support, clinical provider, pharmacy, or principal-office address; privacy requests should use the contact method in section 14.

1. Scope

This Privacy Policy applies to information collected through the Veradene website, account surfaces, communications, and related services. It does not govern the separate privacy practices of the independent doctors, clinical partners, pharmacies, or laboratories involved in your care, except where we expressly say otherwise.

Some information handled by the doctors and clinical partners delivering your care may also be subject to HIPAA, state medical-privacy laws, and a separate Notice of Privacy Practices.

2. Information we collect

We may collect information directly from you, automatically, and from third parties.

Information you provide directly

• name, email address, phone number, mailing information, and account credentials
• assessment and intake responses, symptom information, preferences, and history you submit
• payment and billing information processed through payment vendors
• messages, support requests, uploaded documents, and survey responses

Information we collect automatically

• IP address, device identifiers, browser type, operating system, and language settings
• pages viewed, links clicked, sessions, referring URLs, and interaction patterns
• diagnostic and performance data such as error logs and site-speed information
• request identifiers, route metadata, and service logs used to troubleshoot intake, result access, and security events
• cookie, analytics, and similar tracking data described below

Information we may receive from other sources

• information from clinical partners, pharmacies, labs, or support vendors needed to coordinate services
• information from analytics, fraud-prevention, advertising, or infrastructure providers
• information from referral, affiliate, or partner sources where applicable

3. Notice of Privacy Practices and cookies

Some health information handled by the doctors and clinical partners delivering your care may also be governed by a separate Notice of Privacy Practices. That notice describes how protected health information is used and disclosed for treatment, payment, healthcare operations, legal compliance, and other purposes permitted by law, as well as how you may request access, amendment, an accounting of disclosures, confidential communications, or additional restrictions where applicable.

Veradene’s website privacy and cookie practices are described below. These site-level practices do not replace any provider-specific notice that may apply to clinical records or care delivery.

Cookies and similar technologies

We use cookies, local storage, pixel tags, web beacons, session tokens, and similar technologies to operate the platform, remember preferences, analyze usage, measure communications, and help detect misuse or fraud.

On private assessment and result routes, we may also use short-lived, server-issued session identifiers or result-access cookies to confirm that the browser opening a personalized result page is the same browser that completed the assessment or otherwise received authorized access.

These technologies may include:

• strictly necessary cookies used for security, login state, routing, and core functionality
• preference cookies used to remember settings such as consent choices
• analytics tools used to understand traffic, site performance, and usability
• advertising or attribution technologies used on permitted educational pages only

You can control cookies in your browser settings. If you disable them, some features may not work correctly. Where legally required, we honor applicable browser privacy signals and consent choices, including the Global Privacy Control. We do not use a cookie banner to waive rights the law requires us to honor.

Third-party tools

We may use third-party vendors such as payment processors, analytics tools, communications vendors, and technical monitoring services. Those tools may place their own cookies or similar identifiers as needed for fraud prevention, security, and service delivery.

We also keep structured operational logs for our web application, edge runtime, and assessment-routing services. Those logs may include request IDs, response status, route names, and limited browser or referrer metadata so we can diagnose failures, detect abuse, and confirm that private result pages remain accessible only to the intended browser session.

Third-party tools may include hosting and edge infrastructure, payment processing, customer communications, observability, and limited analytics providers. Each third party uses its own contractual and technical controls, and its own notices may also apply.

4. How we use your information

We may use your information to:

• create and manage your account
• operate the website and platform
• process transactions and coordinate the services you request
• route information to clinical partners, pharmacies, labs, or support teams
• communicate with you about services, account activity, support, and operational notices
• improve the site, products, workflows, and user experience
• analyze usage, site performance, and service effectiveness
• detect, prevent, and investigate fraud, abuse, or security incidents
• personalize content and measure the effectiveness of permitted communications
• create aggregated or de-identified insights where lawful
• comply with legal, regulatory, contractual, and enforcement obligations

5. How we disclose your information

We may disclose information as reasonably necessary to:

• the doctors and clinical partners involved in your care or intake review
• pharmacies, laboratories, testing providers, and operational vendors supporting the services you request
• payment processors and billing vendors
• cloud infrastructure, communications, security, analytics, and technical support vendors
• affiliates, successors, or acquirers in connection with a merger, sale, financing, or restructuring
• government authorities, regulators, courts, or law enforcement when required by law or legal process
• other parties where you direct us to share information or where you separately consent

We may also disclose de-identified or aggregated information without restriction where permitted by law.

6. Your choices and controls

You may have choices about how we collect and use your information, including:

• managing cookies through your browser or consent settings
• opting out of marketing emails using the unsubscribe link in those emails
• requesting account access, correction, deletion, or data portability where applicable
• using available privacy controls such as the Global Privacy Control where required by law

7. Data security

We use administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, alteration, and disclosure. These include encryption in transit, access controls, vendor restrictions, logging, and security monitoring.

No internet or storage system can be guaranteed to be completely secure. You use the platform and transmit information at your own risk.

8. Data retention

We retain personal information for as long as reasonably necessary for the purposes described in this policy, including service delivery, safety review, legal compliance, billing, dispute resolution, recordkeeping, and fraud prevention. Different categories of data may be retained for different periods depending on legal requirements and operational necessity.

Assessment and result-routing data may be retained in a shorter-lived form when used only to generate personalized educational output or to coordinate an initial intake flow.

9. Third-party platforms and links

The platform may contain links to third-party websites or services. This Privacy Policy does not apply to those environments. We encourage you to review their privacy notices and legal terms separately.

10. Children’s privacy

Veradene is not directed to anyone under the age of 18, and we do not knowingly collect personal information from minors.

11. California resident privacy rights

If you are a California resident, California privacy law may give you additional rights regarding certain personal information we collect, use, or disclose about you.

Depending on the information involved and applicable exemptions, those rights may include the right to know, access, correct, and delete personal information, opt out of certain sharing or sale activities, limit the use of sensitive personal information where applicable, and receive equal service without unlawful discrimination.

Some health-related information may be excluded from California privacy statutes when it is governed instead by HIPAA, medical-privacy laws, or other legal exemptions.

To submit a California privacy request, contact care@veradene.com. We may need to verify your identity and authority before fulfilling the request. Authorized agents may submit requests on your behalf where permitted by law, subject to verification.

12. Notice of Privacy Practices

When Veradene coordinates care with the doctors and clinical partners delivering your care, those providers may issue a separate Notice of Privacy Practices describing how protected health information is used, disclosed, and safeguarded. That notice may provide additional rights relating to access, amendment, an accounting of disclosures, and confidential communications.

Our current site-level summary of those rights is available at our Notice of Privacy Practices.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the date at the top of this page. Your continued use of the platform after an updated version is posted is your acknowledgment of the revised policy.

14. Contact

Questions or requests about this Privacy Policy may be sent to care@veradene.com.

Formal legal notices may be sent through the registered agent listed above. Please do not send medical records, prescriptions, or other sensitive health information to the registered-agent address.