Consumer Health Data Privacy Policy
Effective October 30, 2026
This Consumer Health Data Privacy Policy explains how DSO Fine Shrimp LLC (“Likeness,” “we,” “us”) collects, uses and shares consumer health data through likenessrx.com (the “Site”), and how you can exercise your rights over it. It is our consumer health data privacy policy under Washington’s My Health My Data Act (RCW 19.373) and Nevada’s consumer health data law (NRS 603A.400 to 603A.550). Likeness is a brand of DSO Fine Shrimp LLC, which also operates CoreAge Rx; the two brands use the same systems. Our Privacy Policy at likenessrx.com/privacy covers personal information more generally.
“Consumer health data” means personal information that is linked or reasonably linkable to you and that identifies your past, present or future physical or mental health status. On this Site that includes the treatments you look at, order or are prescribed, your answers to the medical intake, and the fact that you are seeking care from us. Medical records kept by the licensed providers who treat you are also protected by federal law (HIPAA), as described in our HIPAA Notice of Privacy Practices at likenessrx.com/hipaa.
Consumer Health Data We Collect, and Why
Treatments and orders
What it includes: The treatments you view, add to your cart and order, such as a prescription skin cream (for example tretinoin or hydroquinone) or compounded semaglutide or tirzepatide; your plan, add-ons and auto-refill choice; and the status of your order and payment.
Why we collect it and how we use it: To take, bill, fill and ship your order, to renew it if you choose auto-refill, and to answer your questions about it.
Medical intake
What it includes: Your answers to the medical intake for the treatment you chose, which asks about your health, and the photos you upload when asked, such as a photo of yourself and of your ID.
Why we collect it and how we use it: So a licensed provider can evaluate you, decide whether a treatment is right for you, and prescribe it. The intake form is run by WhiteLabel MD, our medical platform.
Contact and shipping details
What it includes: Your name, email address, phone number, shipping address, state and ZIP code, which are linked to your order and your intake.
Why we collect it and how we use it: To create your order and intake, ship your treatment, and contact you about your care and your order by email, phone and text message.
Your activity on the Site
What it includes: The pages you visit, which show the treatments you are interested in; the link or advertisement that brought you here; a random identifier for your browser (the coreage_bid cookie); your IP address; and your browser and device.
Why we collect it and how we use it: To run the Site and keep your checkout together, to prevent fraud, to learn which links and advertisements bring us orders, and, only if you allow advertising cookies, to measure our advertising with Meta (see below).
Consent records
What it includes: Whether you agreed to receive text messages, when you agreed to our terms and from which IP address and browser, and your cookie choices.
Why we collect it and how we use it: To keep a record of what you agreed to and to honor your choices.
The BMI calculator on our weight-loss page works only in your browser. We do not receive the height and weight you enter there.
Where We Get It
- From you, when you fill in our forms, complete the medical intake, place an order or contact us.
- From your browser and device, automatically, through cookies and similar technologies, as you use the Site.
- From the link that brought you to the Site, which can carry the name of an advertising campaign and an advertising platform’s click identifier.
- From WhiteLabel MD, our medical platform, which gives us the order number for your order.
- From Stripe, our payment processor, which tells us whether your payment went through.
- From our customer record and verification services: whether you are already a customer, and whether your email address and phone number can receive messages.
Consumer Health Data We Share, and With Whom
We share consumer health data with these categories of third parties. Likeness and CoreAge Rx are brands of the same company, so information moving between them stays with us.
Our affiliate Natural Smart Health LLC DBA SuperHealthy Rx is under common ownership with us and shares our systems: our database, our payment account and our internal tools.
Our medical platform, the providers who treat you and the pharmacy
Who: WhiteLabel MD; the independent medical groups M & D Integrations Inc d/b/a MD Integrations, MDI Medical Group P.C., and MD Integrations & Wellness Provider Group P.A.; and licensed pharmacies such as Manifest Pharmacy, or a local pharmacy you choose.
What they receive: Your name, email address, phone number, shipping address, state and ZIP code; the treatment and plan you ordered and your order number; your medical intake answers and photos.
Why: To evaluate you, prescribe, fill and ship your treatment, and support your care.
Payment processors
Who: Stripe, and the payment method you choose through it, such as Klarna, Amazon Pay or Link.
What they receive: Your name, email address, phone number and shipping address; the products you are buying and the amount; your IP address and browser.
Why: To take your payment, run auto-refills you choose, and prevent fraud.
Customer record, messaging and verification services
Who: GoHighLevel (LeadConnector), our customer record system, reached through WhiteLabel MD’s workflow service; Miss Blue, which sends our text messages; and NeverBounce and a phone-number check, which tell us whether we can reach you.
What they receive: If you start checkout but don’t finish paying, GoHighLevel receives your name, email address, phone number, whether your number can receive texts, and the treatment you were ordering; Miss Blue, only if you agreed at checkout to receive texts, receives your name, phone number and the details of your cart, and the texts we exchange; and NeverBounce and the phone check receive only your email address or phone number. Whenever you pay for an order, Miss Blue receives your phone number, so that any reminder texts stop.
Why: To help you finish your order, and to stop reminders once you have paid.
Service providers that run our systems
Who: Vercel (website hosting), Supabase (our database) and Slack (our team’s order alerts).
What they receive: Hosting and the database hold everything this policy describes. Our order alerts in Slack can include your name, email address, phone number, shipping address, the treatment you ordered or left in your cart, and the link to your intake.
Why: To run the Site and keep our records, and so our team can follow up on orders that need attention.
Advertising partner, only if you allow advertising cookies
Who: Meta (Facebook and Instagram).
What they receive: The pages you visit on the Site and what you do there: the treatments you view and add to your cart, starting checkout, and your purchase with its product codes (which name the treatment) and amount; Meta’s cookies, your IP address and your browser. When you buy, our server may also send Meta that purchase with the same details. We never send Meta your name, email address, phone number or address, and the Meta Pixel never runs on the medical intake or your online visit.
Why: To measure our advertising and show our ads to people likely to be interested in them.
Companies whose content our pages load
Who: LegitScript (our certification seal) and Google Fonts (inside the payment form).
What they receive: Your IP address and the address of the page you are on, as with any content a browser loads.
Why: To show our LegitScript certification and display the payment form.
Authorities, and a buyer of our business
Who: Courts, regulators and others when the law requires it, and a company that buys or merges with ours.
What they receive: What the legal request or the transaction requires.
Why: To comply with the law, protect rights and safety, or complete a merger or sale of our business, as our Privacy Policy describes.
Our Own Measurement
Outside Washington and Nevada, before you make any cookie choice, we keep two identifiers for our own use: a random identifier for your browser (the coreage_bid cookie, set when you add a treatment to your cart or start checkout, and kept for one year) and a session identifier, and we attach both to your order. In Washington and Nevada, or if we can’t tell where you are, we keep the session identifier but set coreage_bid only if you allow our own measurement (see “Washington and Nevada” below). As you move between our pages, the campaign and ad-click details of the link you arrived on travel in the page address; we do not store them with your order. We use these identifiers only to learn which links and advertisements bring us orders. We do not sell them, and we do not send them to advertising platforms. If you allow advertising cookies, an advertising tag can see the address of the page you are on, which may include the campaign details that were in the link.
Tracking Across Other Websites
If you allow advertising cookies, Meta can collect information about your activity on the Site over time and combine it with your activity on other websites and apps. Stripe, our payment processor, uses its own cookies to recognize devices across the websites that use it, to prevent fraud. The Site uses no analytics cookies.
How We Ask for Your Consent
The Meta Pixel, the only optional tool on the Site, does not load until you allow advertising cookies on our cookie banner (in Washington and Nevada, sharing with Meta; see “Washington and Nevada” below), and our server sends Meta nothing about you unless you have. You can change or withdraw that choice at any time under “Your Privacy Choices”, in the footer of every page except checkout and the online visit, and we treat a Global Privacy Control signal from your browser as an opt-out of advertising cookies. Outside Washington and Nevada, the cookie banner does not control our own measurement (above). It never controls the services that run the Site and handle your order and messages: the medical platform, providers and pharmacy, our payment processors, our customer record and messaging services, and the service providers that run our systems. Reply STOP to any of our text messages to stop them.
Washington and Nevada
If we locate you in Washington or Nevada, or can’t tell where you are, our cookie banner asks for your consent to two things separately, and both stay off until you choose:
- Our own measurement: the coreage_bid cookie, which we attach to your order to learn which links and advertisements bring us orders (see “Our Own Measurement” above).
- Sharing with our advertising partner, Meta: the Meta Pixel, and the purchase our server may send Meta (see “Advertising partner” above). We never send Meta your name, email address, phone number or address.
You can choose Allow both, Decline both, or tick one and choose Save my choices. Until you choose, and if you decline, we keep only what we need to serve you: your session, the treatment and plan in your cart, your checkout and order, and the technical details of each page view (your browser and approximate location). If you said OK on our standard cookie banner, for example in another state, that doesn’t count in Washington or Nevada, and we ask you again. You can withdraw or change your consent at any time under “Your Privacy Choices”.
Until you choose, and if you decline our own measurement, we may still keep de-identified, aggregate campaign totals (weekly counts of visits, checkout page visits, sign-ups and orders, and order revenue, per advertising campaign, for Washington and Nevada combined, including visitors whose location we can’t determine) that contain nothing identifying you, your device or any single order; we keep and use these totals only in de-identified form, we will not attempt to re-identify them, and we do not share them.
We tell where you are from your IP address, which can be wrong, for example when you use a VPN. Wherever we place you, you can decline sharing with Meta under “Your Privacy Choices”. You may also withdraw consent or ask us to delete your consumer health data at any time; see “Your Rights” below.
How We Process It
We collect consumer health data through the pages and forms described above, store it in our database, use it for the purposes in this policy, and send it to the recipients listed above. It travels between your browser, our servers and those recipients over encrypted (HTTPS) connections.
Your Rights
Washington and Nevada consumers have the right to:
- Confirm whether we collect, share or sell consumer health data about you, and get a copy of it.
- Get a list of all third parties and affiliates with which we have shared or sold your consumer health data, with an email address or other online way to contact each of them.
- Withdraw your consent to our collection and sharing of your consumer health data, and ask us to stop collecting, sharing or selling it.
- Have your consumer health data deleted. We delete it from our records, including archived and backup systems, and tell the processors and third parties we shared it with to delete it too. Deleting it from backups can take longer, as those laws allow: up to six months for a Washington request and up to two years for a Nevada request.
- Review the consumer health data we hold about you and ask us to correct it.
If you withdraw consent or ask us to stop sharing, we cannot keep providing a treatment that depends on that sharing: a provider cannot evaluate you without your intake, and a pharmacy cannot fill a prescription without your details.
How to Make a Request
Email support@likenessrx.com with “Consumer health data request” in the subject line, or write to us at the address below, and tell us which right you want to use. To protect your information we confirm that a request comes from you: send it from the email address you used with us, or include the name, email address and phone number on your order. If we cannot confirm it, we may ask for more information. You do not need an account.
We respond within 45 days of receiving your request. If we need more time, we may extend that once by another 45 days, and we will tell you why within the first 45 days. For a Nevada consumer, we delete consumer health data within 30 days of confirming the request. Responses are free of charge for at least two requests a year.
Appeals
If we decline to act on your request, you can appeal by replying to our decision or by emailing support@likenessrx.com with “Consumer health data appeal” in the subject line. Within 45 days of receiving your appeal, we will tell you in writing what we did or decided not to do, and why. If we deny your appeal, you can contact your state’s Attorney General:
- Washington: the Office of the Attorney General, at https://www.atg.wa.gov/file-complaint or 1-800-551-4636 (206-464-6684 from outside Washington).
- Nevada: the Office of the Attorney General, at https://ag.nv.gov/Complaints/CSU_Complaints___FAQ/ or its Bureau of Consumer Protection at 702-486-3132.
No Discrimination
We will not discriminate against you for using these rights. We will not deny you service, charge you a different price or give you a different level of service because you made a request, apart from the limits on treatment described under “Your Rights.”
Changes to This Policy
When we change this policy, we post the new version on this page and update the effective date at the top. We will not collect, use or share consumer health data in a new category, for a new purpose or with a new kind of recipient without first telling you and getting your consent.
Contact Us
Email support@likenessrx.com or call +1 307-405-1638, Monday to Friday, 9 AM to 6 PM Eastern. You may also write to us at:
Attn: Privacy Team/Regulatory Compliance
DSO Fine Shrimp LLC
1309 Coffeen Avenue, Suite 1200, Sheridan, WY 82801, United States