If you submit the eligibility form, we collect your name, phone number, email address and the answers you gave. We use that information, and we allow contact centres working on our behalf to use it, to call, text and email you about weight loss programmes. We pass it to a licensed telehealth provider only if you choose to proceed. You can stop all of it at any time. Everything below explains it properly.
On this page
1. Who we are
Fatless Living operates fatlessliving.com. In this policy, "we", "us" and "our" mean Fatless Living. "You" means anyone who visits the site or submits a form on it.
We are a marketing and technology platform. We are not a healthcare provider, a medical practice, a pharmacy, a laboratory or a health insurer. We do not diagnose, treat, prescribe, compound or dispense anything. What we do is help people find out whether a GLP-1 weight loss programme might be available to them, and connect those who are interested with licensed clinicians who make that decision independently.
This policy applies to fatlessliving.com and to every form we operate on it. It does not apply to any other website, including sites you reach through a link from ours. Once you begin a medical intake with a licensed clinician, that clinician's own privacy notice governs the information you give them.
2. What we collect
Information you give us
- Contact details. Your full name, mobile telephone number and email address.
- Eligibility answers. Your height, your weight, the body mass index calculated from those two figures, your state of residence, how much weight you want to lose, whether you have indicated a weight-related health condition, and which medication you expressed an interest in.
- Consent record. The exact wording of the consent disclosure that was displayed on your screen, whether you ticked the box, and the date and time you did so.
Information we collect automatically
- Your IP address and the approximate location derived from it, your browser, operating system and device type.
- Which pages you viewed, how long you stayed, how far you scrolled and which buttons you clicked.
- The web address that referred you, and any advertising identifiers attached to the link you arrived on, including Google Click Identifier (GCLID), wbraid, gbraid and UTM parameters.
Information from other sources
We may receive information about you from advertising platforms that report on campaign performance, and from consent certification providers who confirm the details of a form submission.
We do not buy consumer lists, and we do not enrich your record with data purchased from data brokers.
3. Health-related information and HIPAA
HIPAA protects information held by covered entities — clinicians, hospitals, pharmacies, health plans — and by the vendors who handle it on their behalf. We are none of those things, so the information you give us on this site is not protected health information under HIPAA. HIPAA protection begins when you enter a relationship with a licensed clinician or pharmacy through the programme, and it covers what you tell them, not what you told us here. We say this plainly because a lot of weight loss websites imply otherwise.
Some of what you tell us — your weight, your body mass index and any health condition you select — is consumer health data under state laws including the Washington My Health My Data Act, the Nevada consumer health data law and the Connecticut Data Privacy Act. If you live in one of those states, we collect, use, share and sell that data only with your consent, which you give by ticking the consent box and submitting the form. You can withdraw that consent at any time using any of the methods in section 7, and we will stop.
We treat this information as sensitive regardless of where you live. We do not use it to build advertising profiles, we do not disclose it to advertising platforms, and we do not retain it any longer than section 10 describes.
4. How we use it
- To work out whether you may be eligible for a programme, and to tell you the result.
- To contact you, and to allow contact centres acting on our behalf to contact you, by telephone, text message and email about weight loss programmes and directly related offers.
- To pass your enquiry to a licensed telehealth provider or pharmacy if you decide to proceed.
- To measure and improve our advertising, including reporting that a conversion occurred back to Google Ads and Meta. We report the event and an identifier; we do not report your health answers.
- To detect fraud, prevent abuse of the form, and keep the records that demonstrate the consent you gave.
- To comply with the law and to respond to lawful requests from authorities.
We do not use your information to make decisions about you that produce legal or similarly significant effects without human involvement.
5. Who we share it with
| Recipient | What they receive | Why |
|---|---|---|
| Contact centres acting on our behalf | Name, phone, email, eligibility answers, consent record | To call, text and email you about the programme. They identify themselves as calling for Fatless Living and act under contract for us. |
| Licensed telehealth providers and pharmacies | The information needed to begin a medical intake | Only if you choose to proceed past the enquiry stage |
| Service providers — hosting, email and SMS delivery, customer relationship management, analytics | Only what each needs to perform its function | To operate the website and communicate with you |
| Consent certification providers (Jornaya, a Verisk company; TrustedForm) | A record of your session and the consent you gave | To document that consent was obtained properly |
| Advertising platforms | Conversion events and advertising identifiers. Not your health answers. | To measure and optimise advertising |
| Legal and corporate recipients | As required in the circumstances | Legal obligations, safety, or a merger, acquisition or sale of the business |
That is the complete list. We do not share your information with anyone outside these categories without telling you first and, where the law requires it, obtaining your consent.
6. Sale and sharing for advertising
Some state privacy laws define "sale" and "sharing" broadly enough that ordinary marketing arrangements fall inside them. Under those definitions:
- Our use of advertising cookies and pixels is sharing for cross-context behavioural advertising.
- Depending on how our commercial arrangements are structured, our transfer of your enquiry to contact centres and programme operators may constitute a sale of personal information.
We disclose this rather than argue about it, and we give you the opt-out either way. See Do Not Sell or Share My Personal Information. We do not sell or share the personal information of anyone we know to be under 16 years of age.
7. Your choices and opt-outs
- Stop text messages. Reply STOP to any message you receive. Reply HELP for help.
- Stop telephone calls. Tell any caller to add you to the internal do-not-call list. They are required to honour that immediately and permanently. If calls continue, email us with the date and the caller's name and we will deal with it.
- Stop emails. Use the unsubscribe link at the foot of any email we send.
- Withdraw consent entirely. Email privacy@fatlessliving.com with the subject line "Withdraw consent" and the telephone number you submitted, or call [TOLL-FREE NUMBER]. Withdrawal takes effect going forward and does not undo contact that has already happened.
- Delete your information. See section 8.
- Global Privacy Control. We honour the GPC browser signal as a valid opt-out of sale and sharing for the browser that sends it. You do not need to do anything else.
You do not need an account to exercise any of these, and we will not charge you, degrade your experience or treat you differently for doing so.
8. State privacy rights
Depending on where you live, you may have the right to know what personal information we hold about you, to obtain a copy of it in a portable format, to correct it, to have it deleted, to opt out of its sale, its sharing and its use for targeted advertising, to limit the use of sensitive information, and not to be discriminated against for exercising any of those rights.
These rights exist under the California Consumer Privacy Act as amended by the California Privacy Rights Act, and under comparable laws in Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Rhode Island, Kentucky and Indiana. Washington, Nevada and Connecticut give you additional rights over consumer health data specifically.
To exercise any of them, email privacy@fatlessliving.com or call [TOLL-FREE NUMBER]. We will ask you to confirm your identity before we act, so that we do not hand your information to someone else. We respond within the period your state's law requires, which is 45 days in most states and can be extended once where the law permits.
An authorised agent may make a request for you if you give them written permission and we can verify it.
If we decline your request, we will tell you why, and you may appeal by replying to our response with the word "Appeal" in the subject line. We will respond to an appeal within 45 days. If we deny the appeal, you may complain to your state Attorney General.
9. Cookies and consent certification
We use cookies and similar technologies to make the site work, to understand how it is used, and to advertise. Strictly necessary cookies cannot be switched off. Analytics and advertising technologies can be refused through your browser settings, through the Global Privacy Control signal, or through the opt-out in section 7.
We also run Jornaya LeadiD, a product of Verisk Marketing Solutions, and may run TrustedForm. These record your interaction with our form, including the exact consent wording displayed on your screen and the moment you ticked the box, and issue a unique token that is stored alongside your enquiry.
If it is ever disputed whether you agreed to be contacted, that token can be audited by companies that received your enquiry. An audit can include a visual reconstruction of what appeared on your screen during your session. The record is retained for up to seven years. This protects you as much as it protects us: it means nobody can claim you consented when you did not.
10. Retention and security
We keep enquiry records for five years, which is the period we need in order to demonstrate consent and to defend against claims under the Telephone Consumer Protection Act. Consent certification tokens are retained for up to seven years by the certification provider. Website analytics data is retained for fourteen months. If you ask us to delete your information, we delete it except where we are required to keep a minimal record to honour your opt-out or to comply with a legal obligation, and we tell you which applies.
We protect your information with encryption in transit, access controls limited to staff who need it, and contractual security obligations on our vendors. No method of transmission over the internet or of electronic storage is completely secure, and we cannot guarantee absolute security.
11. Children
This site is intended for adults aged 18 and over. We do not knowingly collect personal information from anyone under 18, and the programmes described here are not available to minors. If you believe a person under 18 has given us information, email privacy@fatlessliving.com and we will delete it promptly.
12. Changes and contact
We may update this policy. When we do, we change the date at the top of the page. If a change materially affects how we handle information we already hold about you, we will notify you before it takes effect, by email where we have your address.
Fatless Living
[POSTAL ADDRESS]
Email: privacy@fatlessliving.com
Telephone: [TOLL-FREE NUMBER]