Privacy Policy

Last Updated: August 18, 2026

Nova GLP-1 (“Nova GLP-1,” “we,” “us,” or “our”) respects your privacy and takes the protection of personal information seriously. This Privacy Policy explains what information we may collect when you visit our website, communicate with us, use our online services, or otherwise interact with Nova GLP-1, as well as how we may use, disclose, protect, and retain that information.

This Privacy Policy applies to information collected through our website, online forms, customer service communications, and other digital services that link to or reference this Privacy Policy.

This Privacy Policy does not replace any separate privacy notice that may be provided by an independent healthcare provider, medical practice, pharmacy, laboratory, or other third party that separately provides healthcare or related services to you. Those entities may maintain their own privacy policies and may have independent legal obligations concerning your information.

By using our website or submitting information to us, you acknowledge the practices described in this Privacy Policy.

1. About Nova GLP-1 and Healthcare Services

Nova GLP-1 provides non-clinical technology, administrative, informational, and customer-support services in connection with its programs.

Nova GLP-1 is not itself your healthcare provider and does not independently diagnose medical conditions, prescribe medications, determine medical eligibility, or make treatment decisions.

Where healthcare services are made available through our platform or programs, those services are provided by appropriately licensed healthcare professionals who operate independently from Nova GLP-1. The independent healthcare provider is responsible for evaluating patients, determining whether treatment is medically appropriate, issuing prescriptions when appropriate, and making other clinical decisions.

Because healthcare providers and pharmacies may have their own privacy obligations, information provided directly to those entities may be governed by their respective privacy notices and applicable federal and state law.

2. Information We May Collect

The information we collect depends on how you interact with Nova GLP-1. For example, we may receive information when you create an account, complete a form, contact customer support, request information, purchase a service, or otherwise communicate with us.

Information we may collect includes:

• Contact and identification information, such as your name, email address, telephone number, mailing address, date of birth, and similar identifying information.
• Account information, such as login credentials, account preferences, and information associated with your Nova GLP-1 account.
• Transaction information, including products or services requested or purchased, payment-related information, billing information, and transaction history.
• Communications, including emails, text messages, customer-service communications, and information you provide when contacting us.
• Website and device information, such as IP address, browser type, operating system, device identifiers, pages viewed, referring websites, approximate location information, and information about how you interact with our website.
• Health-related information, when voluntarily provided through an assessment, questionnaire, form, customer-service interaction, or other feature of our services.
• Information provided in connection with healthcare services, where applicable and as permitted by law.

We may also receive information from service providers or other parties who assist us with website operations, payment processing, marketing, analytics, fraud prevention, customer support, or other legitimate business functions.

3. Health and Sensitive Information

Some information you provide may be considered sensitive personal information under applicable law. This may include information relating to physical or mental health, medical history, treatment, medications, weight, or other health-related circumstances.

We recognize that health-related information deserves heightened protection.

Nova GLP-1 may receive certain health-related information when you voluntarily provide it through our website or services. When healthcare services are provided by an independent licensed healthcare provider, that provider may separately collect, maintain, use, and disclose protected health information pursuant to applicable federal and state law, including HIPAA where applicable.

We do not use health information to make independent medical or prescribing decisions.

For Minnesota residents, certain health-related information may constitute sensitive data under the Minnesota Consumer Data Privacy Act. Minnesota law provides additional protections for certain sensitive data, including information revealing physical or mental health.

4. How Information Is Collected

We obtain information in several ways.

Information You Provide

You may provide information directly to us when you:

• complete a website form or health assessment;
• create or update an account;
• request information;
• contact customer support;
• communicate with us by email, telephone, or text;
• make a purchase or payment;
• subscribe to communications;
• participate in surveys or other website features; or
• otherwise voluntarily provide information.

Information Collected Automatically

When you visit our website, certain technical information may be collected automatically through cookies, pixels, tags, logs, and similar technologies.

This may include information about your browser, device, IP address, pages visited, the date and time of your visit, navigation patterns, and interactions with the website.

We use this information to operate our website, understand how visitors use it, improve functionality, maintain security, troubleshoot technical issues, and, where permitted, support advertising and marketing activities.

Information From Other Sources

We may receive information from companies and service providers that assist with advertising, analytics, payment processing, fraud prevention, customer communications, or other business functions.

Those third parties may collect information independently and provide certain information to us as part of their services.

5. Cookies and Similar Technologies

Nova GLP-1 may use cookies and related technologies to make our website function properly and to understand how visitors interact with it.

Depending on how our website is configured, these technologies may be used for:

• essential website functionality;
• maintaining account sessions;
• remembering preferences;
• website analytics;
• security and fraud prevention;
• measuring advertising effectiveness; and
• delivering or measuring interest-based advertising where permitted.

You can generally control cookies through your browser settings. Disabling certain cookies may affect the functionality of portions of our website.

Where required by applicable law, we will honor legally recognized opt-out signals, including Global Privacy Control (“GPC”) signals, for applicable processing activities.

6. How We Use Information

We may use information for purposes permitted by applicable law, including to:

• provide and administer our services;
• respond to questions and customer-service requests;
• facilitate access to independent healthcare services;
• process payments and transactions;
• communicate with you about your account or services;
• send requested notices and administrative communications;
• send promotional communications where permitted and where required consent has been obtained;
• maintain and improve our website;
• personalize or improve your online experience;
• analyze website usage and performance;
• detect, investigate, and prevent fraud, abuse, or security incidents;
• maintain the security of our systems;
• comply with legal and regulatory requirements;
• enforce our agreements and policies; and
• protect our rights, users, employees, and business operations.

We do not use information collected through a health assessment to independently determine whether you should receive medical treatment. Clinical eligibility and treatment decisions remain with the independent licensed healthcare provider.

7. When We May Share Information

We may disclose information to third parties when reasonably necessary to operate our business, provide requested services, comply with legal obligations, or for other purposes permitted by law.

These parties may include:

Service Providers

We may use vendors that assist with hosting, website management, technology, communications, analytics, payment processing, customer support, security, and other business operations.

Healthcare Providers

Where necessary to facilitate services you request, information may be provided to the independent licensed healthcare provider responsible for providing healthcare services.

The healthcare provider independently determines how healthcare information is handled in connection with the provision of medical services.

Pharmacies and Other Healthcare Organizations

Where applicable, information may be shared with pharmacies, laboratories, or other healthcare organizations involved in fulfilling services you have requested or supporting your care.

Payment Processors

Payment information may be processed through third-party payment companies. Those companies may maintain their own privacy policies governing their handling of payment information.

Marketing and Advertising Providers

Where permitted by law, we may work with advertising, analytics, and marketing providers to understand the effectiveness of our marketing and to present information about our services.

We do not sell your medical information.

Legal and Regulatory Disclosures

We may disclose information when we reasonably believe disclosure is required or permitted by law, including in response to subpoenas, court orders, legal processes, governmental requests, regulatory requirements, or to protect the rights, safety, or property of Nova GLP-1 or another person.

Business Transactions

If Nova GLP-1 undergoes a merger, acquisition, financing, restructuring, sale of assets, bankruptcy, or similar transaction, information may be transferred as part of that transaction, subject to applicable law.

8. Consumer Health Data

Certain information collected through our services may constitute consumer health data under applicable state law.

Depending on the circumstances, consumer health data may include information concerning your health condition, treatment, medications, weight, medical history, or other information that is reasonably linked or linkable to you.

We may collect and use consumer health data to provide or facilitate services you request, communicate with you, operate our business, maintain security, comply with legal obligations, and for other purposes permitted by applicable law.

We will not sell consumer health data without obtaining any consent required by applicable law.

We also will not use consumer health data for purposes that are prohibited by applicable law.

9. Minnesota Privacy Rights

If you are a Minnesota resident and applicable provisions of the Minnesota Consumer Data Privacy Act (“MCDPA”) apply to our processing of your information, you may have rights that include requesting access to personal data, requesting correction of inaccurate information, requesting deletion of personal data, and opting out of certain processing activities, including targeted advertising, sale of personal data, and certain profiling.

Minnesota law also provides enhanced protections for certain sensitive data, including information revealing physical or mental health.

These rights are subject to exceptions and limitations established by law. Certain information may be exempt from particular provisions of the MCDPA, including certain information subject to other healthcare privacy requirements.

10. Privacy Rights in Other States We Serve

Residents of South Dakota, North Dakota, Iowa, and Nebraska may have privacy rights under applicable federal or state law depending on the nature of the information collected, the services involved, and whether a particular statutory threshold or exemption applies.

Because privacy laws differ among these states and may change over time, Nova GLP-1 will process privacy requests in accordance with the laws applicable to the individual and the information involved.

Nothing in this Privacy Policy is intended to limit any privacy right that cannot lawfully be waived.

11. Exercising Your Privacy Rights

If you would like to request access to, correction of, or deletion of personal information, or if you would like to ask about our privacy practices, contact us using the information at the end of this Privacy Policy.

When appropriate, we may need to verify your identity before completing a request. This is intended to prevent unauthorized individuals from obtaining, changing, or deleting personal information.

If you submit a request through an authorized representative, we may require reasonable documentation confirming the representative’s authority.

Certain requests may be denied or limited where permitted or required by applicable law.

12. Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing services, maintaining business records, resolving disputes, enforcing agreements, maintaining security, and satisfying legal, regulatory, tax, accounting, or other obligations.

The length of time information is retained depends on the type of information, why it was collected, how it is used, and applicable legal requirements.

When information is no longer reasonably required, we may delete, destroy, anonymize, or deidentify it in accordance with our practices and applicable law.

13. Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, use, alteration, disclosure, or destruction.

However, no website, electronic transmission, database, or storage system can be guaranteed to be completely secure. You should use appropriate care when submitting information online and protect your account credentials from unauthorized access.

14. Third-Party Websites and Services

Our website may contain links to websites, applications, social media platforms, or other services operated by third parties.

Nova GLP-1 does not control the privacy practices of those third parties. Once you leave our website or interact with an external service, that third party’s privacy policy and terms may apply.

We encourage you to review the privacy practices of third-party services before providing them with personal information.

15. Communications and Marketing Choices

If you elect to receive promotional communications from Nova GLP-1, we may contact you by email, telephone, or text message using the contact information you provide.

You may unsubscribe from marketing emails by using the unsubscribe mechanism contained in the applicable message.

For text messages, you may generally reply STOP to request that promotional text messages cease.

Opting out of marketing communications does not prevent us from sending transactional, account-related, security, or other legally required communications.

Your consent to receive promotional communications is not a condition of purchasing our services.

16. Children’s Privacy

Our services are intended for individuals who are at least 18 years old.

We do not knowingly collect personal information from individuals under 18 for the purpose of providing our services. If we learn that we have collected personal information from an individual under 18 in circumstances where collection was not permitted, we will take reasonable steps to delete the information as required by applicable law.

17. Deidentified Information

We may create or receive information that has been deidentified so that it is no longer reasonably capable of being associated with a particular individual.

Where permitted by law, we may use deidentified or aggregated information for purposes such as analytics, research, business operations, quality improvement, and understanding trends.

We will not attempt to reidentify deidentified information except as permitted or required by applicable law.

18. Information Maintained by Healthcare Providers

Some information associated with your healthcare services may be maintained by an independent healthcare provider or medical practice rather than Nova GLP-1.

If you have questions regarding medical records, clinical documentation, treatment information, or protected health information maintained by your healthcare provider, you may need to contact that provider directly.

The independent healthcare provider may have a separate privacy notice describing its handling of health information.

19. Changes to This Privacy Policy

We may revise this Privacy Policy periodically to reflect changes in our services, technology, business practices, or applicable laws.

When we make changes, we will update the “Last Updated” date at the beginning of this Privacy Policy. We encourage you to review this page periodically so you are aware of how we handle personal information.