Privacy & Compliance
Privacy Policy
Last revised: November 20, 2025
Who We Are
Thryvera is a teledermatology service operated by M&S Drugs Inc., a New York-licensed pharmacy. Our team includes licensed clinicians and support staff who provide prescription-strength skincare treatments to adults located in New York State. We handle protected health information (PHI) in accordance with HIPAA and applicable federal and state privacy laws.
Information We Collect
Account & Identity Information
- Name, email address, phone number, date of birth, and shipping address
- Identity documents and biometric data processed by our secure identity verification partner
Medical Intake & Treatment Information
- Responses to medical intake forms
- Photos you upload for clinical review
- Communications with providers
- Prescriptions, treatment notes, and follow-up instructions
Payment Information
- Tokenized payment details processed securely by our third-party payment processor
- We do not store full credit card numbers
Device & Technical Information
- IP address, device type, browser information, and limited usage data used for security, fraud prevention, and service functionality
How We Use Your Information
- Determine eligibility for teledermatology treatment
- Provide clinical care and prepare prescriptions
- Coordinate shipping and customer support
- Process payments and manage billing
- Maintain platform security and prevent fraud
- Comply with legal and regulatory obligations
Legal Basis for Use (U.S. Patients)
For all U.S. residents, we process PHI under HIPAA for treatment, payment, and healthcare operations. Other personal information is used based on your consent and our legitimate interest in operating a secure telehealth service.
Sharing & Disclosure
- Clinicians & Pharmacy Operations: licensed providers and pharmacy personnel who prepare and dispense your treatment.
- Service Providers: identity verification, payment processing, hosting, email delivery, and telemedicine technology partners who support our operations under appropriate privacy and security agreements.
- Regulatory or Legal Requirements: when required to comply with applicable laws, public health reporting, or valid legal processes.
Cookies & Tracking
We use essential cookies to authenticate users and protect account security. Optional analytics cookies may be used to improve our platform. You can disable non-essential cookies through your browser settings.
Data Retention
Medical and pharmacy records are retained in accordance with federal and New York State recordkeeping requirements. Payment and identity verification records are retained as required by financial, security, and audit standards.
Security
We use industry-standard administrative, technical, and physical safeguards to protect your information, including encryption, access controls, and continuous monitoring for unauthorized activity.
Your Rights
- Request access to your medical record
- Request corrections to inaccurate information
- Request account closure (subject to required record retention)
- Manage marketing communication preferences
Children
Thryvera serves adults 18 and older. We do not knowingly collect information from minors.
Updates
We may update this policy from time to time. The “Last Updated” date will reflect any changes, and significant updates will be communicated via email or our secure portal.
Contact Us
For questions about this Privacy Policy or your information, email support@thryvera.com or mail:
Thryvera / M&S Drugs Inc.30-12 36th Ave
Long Island City, NY 11106