Who we are.
Thryvera is operated by M&S Drugs Inc., a New York–licensed pharmacy. Clinical services are provided through MD Integrations by NY-licensed clinicians. Pharmacy and support operations are handled by M&S Drugs Inc. personnel and approved service providers. Prescription-strength skincare treatments are available to adults in New York State, with delivery currently available in Manhattan. We handle protected health information (PHI) in accordance with HIPAA and applicable federal and state privacy laws.
Information we collect.
Account & Identity Information
- •Name, email address, phone number, date of birth, and delivery address
- •Identity documents and biometric data processed by our secure identity verification partner
Medical Intake & Treatment Information
- •Responses to medical intake forms
- •Photos you upload for clinical review
- •Communications with providers
- •Prescriptions, treatment notes, and follow-up instructions
Payment Information
- •Tokenized payment details processed securely by our third-party payment processor
- •We do not store full credit card numbers
Device & Technical Information
- •IP address, device type, browser information, and limited usage data used for security, fraud prevention, and service functionality
How we use your information.
- •Determine eligibility for telepharmacy treatment
- •Provide clinical care and prepare prescriptions
- •Coordinate delivery and customer support
- •Process payments and manage billing
- •Maintain platform security and prevent fraud
- •Comply with legal and regulatory obligations
Legal basis for use.
For all U.S. residents, we process PHI under HIPAA for treatment, payment, and healthcare operations. Other personal information is used based on your consent and our legitimate interest in operating a secure telepharmacy service.
Data retention.
Medical and pharmacy records are retained in accordance with federal and New York State recordkeeping requirements. Payment and identity verification records are retained as required by financial, security, and audit standards.
Security.
We use industry-standard administrative, technical, and physical safeguards to protect your information, including HTTPS/SSL/TLS encryption for information transmitted through the production website, access controls, and continuous monitoring for unauthorized activity.
Your rights.
- •Request access to your medical record
- •Request corrections to inaccurate information
- •Request account closure (subject to required record retention)
- •Manage marketing communication preferences
Children.
Thryvera serves adults 18 and older. We do not knowingly collect information from minors.
Updates.
We may update this policy from time to time. The "Last revised" date will reflect any changes, and significant updates will be communicated via email or our secure portal.
Contact us.
For questions about this Privacy Policy or your information, contact:
30-12 36th Ave
Long Island City, NY 11106
(718) 392-8049
support@thryvera.com