Privacy Policy

Introduction

At UroSure (operated by Envoice Media LLC), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you purchase and use our at-home STI testing products. We are committed to protecting your personal and health information with the highest standards of confidentiality and security.

Information We Collect

Personal Information

When you purchase UroSure, we collect:

• Name and contact information (email, phone number, shipping address)
• Payment information (processed securely through our payment processor)
• Order history and product preferences

How We Use Your Information

We use your information to:

• Process and fulfill your orders
• Send order confirmations and shipping notifications
• Provide customer support
• Improve our products and services
• Send marketing communications (with your consent, which you can withdraw at any time)
• Comply with legal obligations

Health Information Privacy

Important: UroSure is designed for at-home use, and test results are read by you privately. We do not collect, store, or have access to your test results. Your health information remains completely private and under your control. We do not share any information about your purchase with third parties except as necessary to process and ship your order.

HIPAA and Medical Privacy

HIPAA Does Not Currently Apply to UroSure

Important Clarification: Envoice Media LLC (operating as UroSure) is not a covered entity under the Health Insurance Portability and Accountability Act (HIPAA). We are not a healthcare provider, health plan, or healthcare clearinghouse as defined by HIPAA. We also do not act as a business associate because we do not receive, maintain, store, or transmit protected health information (PHI) on behalf of any HIPAA-covered entity.

Why HIPAA Does Not Apply to UroSure

• At-Home Testing: UroSure is an at-home screening test that you perform yourself in the privacy of your own home.
• Results Are Not Collected: Test results are read by you privately and are not collected, stored, transmitted to, or accessed by UroSure or any third party.
• No Health Information Collected: We collect only order fulfillment information (name, shipping address, email address, payment details), not health information or test results.
• No Healthcare Services Provided: We do not provide medical diagnosis, treatment, consultation, or other healthcare services that would make us a healthcare provider under HIPAA.

Because HIPAA does not apply to UroSure, your purchase and use of our products are governed by this Privacy Policy and applicable consumer privacy laws (such as state privacy laws and the FTC Act), not by HIPAA.

If HIPAA May Apply in the Future

If we introduce new services in the future that would subject us to HIPAA—such as:

• Telehealth consultations with healthcare providers
• Physician review or interpretation of test results
• Confirmatory laboratory testing where results are transmitted to or through us
• Online patient portals where test results are stored or transmitted electronically
• Any service where we receive, maintain, or transmit protected health information

Then HIPAA or similar health privacy laws may apply. If this occurs, we will:

• Update this Privacy Policy to reflect our HIPAA compliance obligations
• Provide you with a Notice of Privacy Practices as required by HIPAA
• Obtain any necessary written authorizations for use or disclosure of your health information
• Implement administrative, physical, and technical safeguards required by the HIPAA Security Rule
• Notify you in advance of any changes that would subject your information to HIPAA protections

Your Privacy Remains Our Priority

Whether or not HIPAA applies, we are committed to protecting your privacy and maintaining the confidentiality of any information you provide to us. The fact that HIPAA does not currently apply does not diminish our commitment to responsible data practices and transparent disclosure of how we collect, use, and protect your personal information.

Information Sharing and Disclosure

We only share your information with:

• Service Providers: Shipping companies, payment processors, and other vendors who assist in order fulfillment
• Legal Requirements: When required by law, court order, or government regulation
• Business Transfers: In connection with a merger, acquisition, or sale of assets

Advertising and Marketing Partners: We use third-party advertising and analytics technologies (such as Google Analytics and Meta/Facebook Pixel) that automatically collect information about your browsing activity on our site for advertising and analytics purposes. These technologies load when you visit our site and may share information such as your IP address, device identifiers, pages viewed, and browsing patterns with advertising and analytics platforms.

While we do not sell your contact information, order details, or customer lists to data brokers or marketing list companies in the traditional sense, the use of advertising pixels may be considered a "sale" or "share" of information under the technical legal definitions used in certain state privacy laws. You can control these technologies through your browser settings, Global Privacy Control (GPC), and third-party opt-out tools—see our Cookie Policy for more information and specific instructions.

Data Security

We implement industry-standard security measures to protect your personal information, including encryption, secure servers, and restricted access to personal data. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Your US State Privacy Rights

Several US states have enacted comprehensive privacy laws that provide residents with specific rights regarding their personal information. These laws include the California Consumer Privacy Act (CCPA/CPRA), Colorado Privacy Act (CPA), Connecticut Data Privacy Act (CTDPA), Virginia Consumer Data Protection Act (VCDPA), Utah Consumer Privacy Act (UCPA), Texas Data Privacy and Security Act (TDPSA), and similar laws in other states.

Applicability and Thresholds

Most US state privacy laws include applicability thresholds based on business size, revenue, and volume of personal information processed. These thresholds typically include criteria such as processing personal information of 100,000 or more state residents per year, or having annual gross revenues of $25 million or more.

At this time, UroSure may not meet the thresholds that trigger certain obligations under these laws, such as providing a formal opt-out mechanism for the sale or sharing of personal information. However, we are committed to transparency and respecting your privacy rights regardless of legal requirements.

Your Rights (Current and Future)

Depending on your state of residence and our applicability status under state laws, you have (or may have in the future) the following rights:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you in the past 12 months.
• Right to Delete: Request deletion of your personal information, subject to certain exceptions (such as completing transactions, security purposes, or legal obligations).
• Right to Correct: Request correction of inaccurate personal information we maintain about you.
• Right to Opt-Out (where applicable): Opt out of the sale or sharing of your personal information and targeted advertising, if and when legal thresholds requiring such opt-out are met.
• Right to Non-Discrimination: Exercise your privacy rights without receiving discriminatory treatment, such as being denied service or charged different prices.

How to Exercise Your Rights

To exercise any of the rights described above, please contact us at:

We will verify your identity before processing your request and will respond within the timeframes required by applicable law (typically 45 days, with possible extension).

Current Opt-Out Mechanisms

Even if formal state-law opt-out requirements do not yet apply to UroSure, you can still control tracking and advertising technologies through the following mechanisms:

• Browser Cookie Settings: Block or delete cookies through your browser preferences. Blocking third-party cookies will prevent most advertising tracking. See our Cookie Policy for instructions.
• Global Privacy Control (GPC): We respect GPC signals sent by your browser or browser extension as an opt-out of sale/sharing of personal information where legally required. Learn more at GlobalPrivacyControl.org.
• Third-Party Advertising Opt-Outs: Opt out of targeted advertising directly through advertising networks such as Facebook, or through industry tools like the Digital Advertising Alliance (DAA) and Network Advertising Initiative (NAI).

Future "Do Not Sell or Share" Opt-Out

If and when UroSure meets state privacy law thresholds (such as processing personal information of 100,000 or more residents of a state per year, or meeting revenue thresholds), we will:

• Add a prominent "Do Not Sell or Share My Personal Information" or "Your Privacy Choices" link on our website
• Provide an easy-to-use opt-out mechanism that does not require account creation
• Honor opt-out requests within the timeframes required by law
• Respect Global Privacy Control (GPC) signals as a universal opt-out

California-Specific Information

California Shine the Light Law: California Civil Code Section 1798.83 permits California residents to request information about our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please contact us at support@urosure.com with "California Shine the Light Request" in the subject line.

Do Not Track (DNT) Signals: Some web browsers transmit "Do Not Track" (DNT) signals. There is no industry standard for how to respond to DNT signals, and we currently do not respond to browser DNT signals. However, we do respect Global Privacy Control (GPC) signals where legally required.

Tracking Technologies and Cookies

We use cookies, pixels, and similar tracking technologies to operate our website, improve your browsing experience, analyze site traffic, and support our marketing efforts. Some of these technologies load automatically when you visit our site.

Types of Technologies We Use

• Essential Cookies: Necessary for website functionality, shopping cart, and checkout. These cannot be disabled.
• Analytics Cookies: Help us understand visitor behavior and measure traffic patterns.
• Advertising/Marketing Pixels: Used to measure ad performance, optimize campaigns, and enable targeted advertising across platforms.

Third-Party Tracking Technologies

We use third-party services that may collect information about your browsing activity on our site and across other websites over time. These technologies may load automatically when you visit our site. Current third-party services include:

• Google Analytics (GA4): Tracks website traffic, measures user engagement, and helps us understand visitor demographics and behavior. Google Analytics loads automatically when you visit our site.
• Meta/Facebook Pixel: Tracks conversions, optimizes ads, and builds audiences for targeted advertising on Facebook and Instagram. This pixel loads automatically when you visit our site.

These third parties may use cookies, pixels, and other tracking technologies to collect information about you, including your IP address, device identifiers, browser type, browsing behavior, pages viewed, and inferred interests. They may combine this information with data they collect from other websites and services.

Your Choices and Controls

You can control cookies and tracking technologies through several mechanisms:

• Browser Settings: Most browsers allow you to block or delete cookies, including third-party advertising cookies. See our Cookie Policy for browser-specific instructions.
• Google Analytics Opt-Out: You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.
• Global Privacy Control (GPC): We respect GPC signals sent by your browser as an opt-out of sale/sharing of personal information where legally required.
• Third-Party Opt-Outs: You can opt out of targeted advertising through Facebook Ad Preferences, the Digital Advertising Alliance (DAA), or the Network Advertising Initiative (NAI).
• Mobile Settings: iOS and Android devices offer settings to limit ad tracking (see our Cookie Policy for details).

For more detailed information about the cookies we use and how to manage your preferences, see our Cookie Policy.

Advertising and Analytics Partners

We work with third-party advertising and analytics partners to help us understand how our website is used and to deliver relevant advertisements to potential customers. These partners may collect information about your activity on our site through cookies and similar technologies that load automatically when you visit.

Information Collected by Advertising Partners

When you visit our website, the following categories of information may be automatically collected by our advertising partners through tracking pixels:

• Identifiers: IP address, cookie IDs, device identifiers, mobile advertising IDs
• Internet or Network Activity: Pages viewed, links clicked, referral source, browsing patterns, time on site
• Geolocation Data: Approximate location based on IP address (city/state level only)
• Device Information: Browser type, operating system, screen resolution, device type (mobile/desktop/tablet)
• Inferences: Interests, preferences, and characteristics inferred from your browsing behavior

We do not share with advertising partners:

• Your name, email address, phone number, or physical address (except as necessary to process orders through shipping/payment providers)
• Product usage information, test results, or health information (we do not collect this data)
• Information about known minors under 16 years of age

"Sale" or "Share" Under State Privacy Laws

Important: Under certain US state privacy laws (such as California's Consumer Privacy Act/CPRA, Colorado Privacy Act, Connecticut Data Privacy Act, and similar laws), the use of advertising pixels and cross-site tracking for targeted advertising may be considered a "sale" or "share" of personal information, even though we do not receive direct monetary payment from these third parties.

In common, everyday usage, we do not "sell" your personal information in the traditional sense—we do not provide your contact details, order information, or customer lists to data brokers or marketing list companies. However, advertising pixels that automatically collect browsing activity and share it with advertising platforms may meet the technical legal definition of "sale" or "share" under state privacy laws.

When Opt-Out Will Be Required: If and when UroSure meets the applicability thresholds under state privacy laws (such as processing personal information of 100,000 or more state residents per year, or meeting annual revenue thresholds of $25 million or more), we will provide a prominent "Do Not Sell or Share My Personal Information" or "Your Privacy Choices" opt-out mechanism as required by law. Until that time, you can control these technologies through your browser settings, Global Privacy Control (GPC), and third-party opt-out tools described in our Cookie Policy.

Children's Privacy

UroSure is intended for use by adults 18 years and older. We do not knowingly collect information from children under 18.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at: