PLEASE READ THIS PRIVACY POLICY CAREFULLY BEFORE USING OUR SERVICES OR WEBSITE.
What this Privacy Policy covers, and what CareValidate covers
Pacific Shores Research Group, LLC operates this website and the intake form at start.raeliva.com. CareValidate Incorporated is our partner and the medical and billing system of record: its platform holds your clinical record, and its clinicians and pharmacy network deliver your care. Which company holds which piece of your information matters, so here it is plainly.
What we transmit but do not keep. When you complete the intake questionnaire, your answers pass through our systems on their way to CareValidate. We do not retain your clinical answers. Once submitted, that record is held by CareValidate and its affiliated medical practice under their own privacy practices, which are not part of this Privacy Policy.
What we never receive at all. Your payment card details. When you enter a card, it goes directly from your browser to CareValidate’s payment processor. We do not operate a payment processor, we never see your card number, and we do not charge your payment method.
What we do keep. Alongside the marketing information described below, we hold a limited record for each patient, which we receive from CareValidate so that we can send you service and (where you have agreed to them) marketing communications:
- your name, email address, and phone number
- your city, state, and postal code — not your street address
- whether treatment was approved, and your visit type
- your order and payment counts, and the date of your first and most recent payment
We do not receive or store your prescription, your dose, your medical history, your questionnaire answers, your date of birth, your street address, or your payment card details.
I. Introduction
This Privacy Policy (“Privacy Policy”) describes how Pacific Shores Research Group, LLC collects and uses personal information about you through your use of our website (Raeliva), as well as through email, text, and other electronic communications between you and our team.
The terms “Pacific Shores Research Group,” “we,” “us,” and “our” refer to Pacific Shores Research Group, LLC, the owner and operator of Raeliva.
This Privacy Policy also describes our practices for collecting, using, maintaining, protecting, and disclosing that information. Use of the Platform is governed by this Privacy Policy and our Terms of Service. This Privacy Policy is incorporated into our Terms of Service. All capitalized terms used in this Privacy Policy, but not defined herein, have the meanings assigned to them in the Terms of Service. By accessing or using the Platform, you acknowledge that you have read, understood and agreed to be legally bound by and comply with this Privacy Policy and our Terms of Service. If any term in this Privacy Policy is unacceptable to you, please do not use the Platform or provide any Personal Information. This Privacy Policy may change from time to time and your use of the Platform after we make changes is deemed to be acceptance of those changes, so please check this Privacy Policy periodically for updates.
This Privacy Policy does not apply to information collected by any third-party, including through any application or content (including advertising) that may link to, be embedded on, or otherwise accessible from or on the Platform. Also, you may be subject to different privacy policies or terms of service for other websites or applications.
Pacific Shores Research Group is committed to protecting your privacy. We provide this Privacy Policy to explain the type of information we collect and to inform you of the specific practices and guidelines that protect the security and confidentiality of personal information.
II. Information We Collect About You and How It’s Collected
Information We Collect.
We collect several types of information from and about visitors and patients, including:
-
Information by which you may be personally identified, such as name, email address, telephone number, mailing address, and any other information collected on the Platform that is defined as personally identifiable information under applicable law (“Personal Information”).
-
Anything you choose to tell us in a contact form, email, SMS, or chat message — which may include statements about your health goals, your weight, medications you take, or your interest in a particular treatment category.
-
Information about your progress through our intake form: which treatment category you started, when you started it, whether you completed it, and — if screening determined that treatment was not appropriate for you — that fact alone, so that we stop marketing you a treatment you cannot receive. We do not record the reason. Your clinical answers, and the reason behind any screening decision, are transmitted to CareValidate and are not retained by us.
-
Inferences about your interests, including health-related interests, drawn from the pages you view on our site.
-
Information about your Internet connection, the equipment you use to access our Platform, and usage details.
-
Information about you, such as whether you are a current user, your product interests, location or demographics, or information related to your inquiry or request.
We collect this information:
-
Directly from you when you provide it to us.
-
Automatically as you navigate through the Platform (e.g., usage details, IP address, and information collected through cookies, web beacons, and other tracking technologies).
-
From advertising and analytics partners who tell us how you arrived at our site.
-
From CareValidate, which sends us the limited patient record described at the top of this policy — contact details, city and state, approval status and visit type, and order and payment counts — so that we can send you service and marketing communications.
We do not collect or store your clinical record, your identity documents, your date of birth, your street address, or your payment card details. See How This Site Works for the full division of responsibility between us and CareValidate.
The email platform we use.
We use a third-party customer-engagement platform (Customer.io) to send email and SMS. The information described above — your contact details, your intake progress, your approval status, and your order and payment counts — is stored in that platform on our behalf under contract, so that we can send you service messages such as refill and order updates, and marketing messages where you have agreed to receive them. Your clinical record is not sent to it.
Information You Give to Us.
The information we collect on or through our Platform may include:
-
Information that we collect when you browse our website. Even without creating an account, we still may collect from you some of the information described in this Section II.
-
Information that you provide on our Platform, such as when you subscribe to our email list, submit a contact form, or otherwise communicate with us through the Platform.
-
Information needed to respond to your inquiries and customer-service requests, and any feedback you give us about our Platform. We do not collect billing or payment card information on our marketing pages — if you enter payment details anywhere on this domain, you are in the CareValidate flow, and CareValidate and its payment processors handle that information under their own privacy practices.
-
Records and copies of your correspondence (including email addresses) if you contact us, such as when you report an issue with our Platform or other services.
-
Information that you provide for display or posting on the Platform, including information provided in social media and/or testimonials. If you provide a testimonial, your first name will be posted along with the testimonial. Please remember that testimonials are located in the public areas of our Platform. Do not provide information for display or posting on the Platform that you would not want others to save or share.
-
Your search queries on the Platform.
As with many other websites and applications, as you navigate through and interact with our Platform, we may use automatic data tracking technologies to collect certain information about your equipment, browsing actions, and patterns, including:
-
Details of your visits to our Platform, including traffic data, location data, logs, language, date and time of access, frequency, and other communication data and the resources that you access and use on the Platform.
-
Information about your computer and Internet connection, including your IP address, operating system, host domain, and browser type.
-
Details of referring websites (URL). We also may use these technologies to collect information about your online activities over time and across third-party websites or other online services (behavioral tracking).
The information we collect automatically includes statistical data and may also include Personal Information. We may also maintain it or associate it with Personal Information you provide to us or that we collect in other ways or receive from third parties. It helps us to improve our Platform and to deliver a better and more personalized service, including by enabling us to:
-
Estimate how individuals access and use our Platform.
-
Store information about your preferences.
-
Speed up your searches.
-
Recognize you when you return to our Platform.
The Platform may utilize “cookies” to improve the functionality of the Platform. Cookies are text files that are sent by servers to web browsers and stored on your computer. They tell us which parts of the Platform you’ve visited so we can alert you to software compatibility issues and save your preferences for future visits to the Platform. Some cookies and other technologies may serve to recall Personal Data previously provided by a user.
We use information collected from cookies and other technologies to improve your user experience and the overall quality of our services. We use cookies to help us identify and track visitors, their usage of the Platform, and their access preferences. We may use your Personal Data to see which web pages you visit at our websites, which website you visited before coming to our website, and where you go after you leave our website. We can then develop statistics that help us understand how our visitors use our websites and how to improve them. Visitors who do not wish to have cookies placed on their computers should set their browsers to refuse cookies before using the Platform; provided, however, that Raeliva disclaims, and you hereby waive, any claim or liability that may arise due to your partial or incomplete access to the content of any of the Platform as a result thereof. <!— GPC — IMPLEMENTED 2026-08-11. The sentence below is now backed by code, in two places:
- src/components/global/ConsentBootstrap.astro reads `navigator.globalPrivacyControl`
before any other script runs.
- src/pages/api/consent.ts enforces the `Sec-GPC` request header server-side, so a
hand-crafted or replayed request cannot record a sharing consent for a browser that
sends the signal.
A GPC signal forces the marketing category and the MHMD share grant to denied regardless of any stored consent. Verified end to end 2026-08-11.
STILL GATED ON PRODUCTION CONFIG: the consent banner itself does not load until COOKIEBOT_CBID is set in Vercel. GPC enforcement above runs regardless, and no tag is configured yet, so the sentence is true today — but re-run the checklist in docs/consent-implementation.md when the CBID lands.
The Section V “do not track” line was reconciled at the same time — it now states plainly that DNT is a different, deprecated signal and that GPC is the one we honour, so the two statements no longer read as a contradiction. —>
Visitors also can utilize the Global Privacy Control (“GPC”) add-on or browser preference, which signals that you do not want personal information collected by websites you visit. Our Sites are designed to respond to GPC signals.
You can also manage your cookie and tracking choices at any time through Your Privacy Choices, and our Cookie Policy lists every cookie we set and what each one does.
Third-Party Tools
We do not currently use analytics or advertising tools on this website. We do not set statistics or marketing cookies, and we do not send information about your visit to advertising platforms. Our Cookie Policy states the current position and will list each tool before any of them goes live.
We do use a third-party email delivery platform to send the marketing emails and launch announcements you ask us for, which receives the email address you give us. If we later add analytics or advertising tools, they will load only after you consent to them, and you can manage those categories at any time through Your Privacy Choices.
Pacific Shores Research Group does not operate a payment processor and does not charge your payment method. Payment for consultations, prescriptions, and medication is handled inside the CareValidate flow by CareValidate and its own payment processors, under their privacy practices rather than this Privacy Policy.
We use other third-party tools that allow us to track the performance of our Site. These tools provide us with information about errors, website performance, and other technical details we may use to improve our Site and/or our Service.
We may also collect data by using “pixel tags,” “web beacons,” “clear GIFs” or similar means (collectively, “pixel tags”) that allow us to know when you visit our Platform. Through pixel tags, we collect non-Personal Information or aggregate information that can be used to enhance your online experience and understand traffic patterns.
Information We Receive From Other Sources.
This is information we receive about you if you use any of the other websites we operate or other services we provide. We sometimes work with third parties and they sometimes provide information about you. We obtain information from such third parties with whom we work to operate and measure our marketing pages — for example, subcontractors, analytics providers, advertising networks, and search information providers.
We do not receive your clinical records. The substance of what passes between you, your clinician, and the pharmacy filling your prescription — your medical history, your prescription, your dose, and your consultation itself — stays within the CareValidate platform and is not sent back to us. What CareValidate does send us is the limited record described at the top of this policy: your contact details, your city and state, whether treatment was approved, your visit type, and your order and payment counts.
We may combine information we receive from other sources with information you give to us and information we collect about you. Depending on the types of information received, we will use the information received from other sources or the combined information for the purposes described in Section III below.
III. How We Use Your Information
We may use information collected about you, including Personal Information, in the following ways:
-
To complete any registration or other action you request online, such as subscribing to our email list or submitting a contact form.
-
To communicate with you about the information, products, and services you request from us (which may include telephone, voicemail, email, SMS/text messages, or notifications within the Platform).
-
To send you reminders or follow-up communications if you begin, but do not complete, an intake, assessment, or order, in order to help you finish the process you initiated. These are operational communications related to a transaction you started. You may opt out of these reminders at any time by using the unsubscribe link in any such email.
-
To operate the Platform and perform any services associated with the Platform, including providing you with technical support and to improve the Platform and our products and services.
-
To provide you with information that you have requested or to respond to your inquiries.
-
To create de-identified information that cannot be used to personally identify you, such as aggregate statistics relating to the use of our service.
-
To measure or understand the effectiveness of communications (including advertising) that we send to you and others, and to deliver relevant communications to you and to provide you with communications from Raeliva, surveys, newsletters, and other information.
-
To better understand our audience.
-
To enhance the safety and security or performance of our products and services. This includes verifying your identity, preventing or detecting fraud or other unauthorized or illegal activities.
-
To design, develop, and communicate with you about our features, products, and services, or, subject to any consents or authorizations that are required by applicable law, those of our subsidiaries, affiliates, and parent companies and any of their related businesses and those of our third-party partners.
-
To notify you about changes to our services or the Platform.
-
To enforce this Privacy Policy and any other terms that you have agreed to, including to protect the rights, property, or safety of us or any other person, or the copyright-protected content of the Platform.
-
For any purpose where you have given your consent (where legally required).
-
To comply with applicable federal, state, and other laws and regulations.
IV. Disclosure of Your Information
We may disclose Personal Information that we collect or you provide as described in this Privacy Policy as follows:
-
To anyone authorized under this Privacy Policy or pursuant to any other consent or authorization that you may provide.
-
To service providers that assist us in the maintenance, improvement, and optimization of our Platform, such as service providers that help us run and maintain the technology and security infrastructure that support our Platform or that provide services such as email delivery, auditing, and similar services.
-
To CareValidate Incorporated and its affiliated medical practice, when you choose to begin a consultation and the information you gave us is carried into the intake flow. From that point, CareValidate is the party responsible for it under its own privacy practices.
-
To Raeliva’s employees, and to other third parties who provide services to Raeliva.
-
To fulfill the purpose for which you provide it. For example, if you sign up for certain services, we may share your information in order to provide those services.
-
To any third-parties we believe necessary or appropriate to comply with applicable laws.
-
To entities that assist us with marketing and advertising.
-
For any other purpose disclosed by us when you provide the information or with your consent.
-
If we are under a duty to disclose or share your Personal Information in order to comply with applicable law.
-
If we are under a duty to disclose or share your Personal Information to comply with any legal obligation, or in order to enforce or apply our Terms of Service and other agreements; or to protect the rights, property, or safety of Raeliva, our customers, or others. This may include exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.
-
With respect to de-identified information, for any purpose without restriction.
-
In the event of a sale, merger, consolidation, change in control, transfer of substantial assets, reorganization, or liquidation, we may transfer, sell, or assign to third-parties information concerning your relationship with us, including, without limitation, Personal Information that you provide and other information concerning your relationship with us.
-
For any purpose related to our use of information as set forth in Section III: HOW WE USE YOUR INFORMATION.
V. Options About How We Use And Disclose Your Information
We strive to provide you with options regarding the Personal Information you provide to us. We have created mechanisms to provide you with control over your information:
-
Tracking Technologies and Advertising. You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. If you disable or refuse cookies, please note that some parts of our Platform may then be inaccessible or may not function properly. You can also change your choices directly on this website using the “Manage Cookies” link in our footer, and review what each cookie does in our Cookie Policy.
-
Global Privacy Control. We honor the Global Privacy Control (“GPC”) signal. If your browser or a browser extension sends a GPC signal, we treat it as a request to opt out of the sale or sharing of your personal information, for that browser and device, and we do not require you to tell us separately.
-
Do Not Track. “Do Not Track” is an older, separate browser signal that was never finalized as a standard and that most browsers no longer send. We do not respond to “do not track” headers. GPC, described above, is the opt-out signal we honor.
VI. Data Security
We have implemented measures designed to reasonably secure your Personal Information from accidental loss and from unauthorized access, use, alteration, and disclosure.
Where we have given you (or where you have chosen) a password which enables you to access certain parts of our Platform, you are responsible for keeping this password confidential. We ask you not to share a password with anyone. The information you share in public areas may be viewed by any user of the Platform.
Unfortunately, the transmission of information via the Internet is not completely secure. Although we will do our best to protect your Personal Information, we cannot guarantee the security of your data transmitted to our Platform; any transmission is at your own risk.
VII. Third-Party Platforms
Our Platform may contain links or references to other websites outside of our control. Please be aware that this Privacy Policy does not apply to third-party websites. Raeliva encourages you to read the privacy statements and terms of service of linked or referenced websites you enter. These third-party websites may send their own cookies and other tracking devices to you, log your IP address, and otherwise collect data or solicit Personal Information.
Raeliva DOES NOT CONTROL AND IS NOT RESPONSIBLE FOR WHAT THIRD PARTIES DO IN CONNECTION WITH THEIR WEBSITES, OR HOW THEY HANDLE YOUR PERSONAL INFORMATION. PLEASE EXERCISE CAUTION AND CONSULT THE PRIVACY POLICIES POSTED ON EACH THIRD-PARTY WEBSITE FOR FURTHER INFORMATION.
VIII. No Services To Persons Under The Age of 18
Raeliva does not knowingly provide services to minors under 18.
IX. California Resident Privacy Rights
If you are a resident of California, the California Consumer Privacy Act (“CCPA”) provides you with additional rights regarding your Personal Information. This section describes the Personal Information we collect about you, how we use and disclose it, and how you can exercise your privacy rights under the CCPA.
Your privacy rights under the CCPA do not apply to all information that we might collect, use, or disclose. For example, the CCPA does not apply to PHI governed by HIPAA, “medical information” governed by the California Confidentiality of Medical Information Act (“CMIA”), or other patient information we maintain in the same manner as PHI or “medical information.” The CCPA also excludes other categories of information. When we collect, use, or disclose information not covered by the CCPA, we do so as described in this Privacy Policy (excluding this Section IX). If you would like to learn more about how we collect, process, or disclose your information that is not covered by the CCPA, or to exercise the rights that may be available to you under HIPAA and other laws, please review this Privacy Policy (excluding this Section IX).
For your Personal Information covered by the CCPA, your rights are described below.
I. Personal Information Disclosures
In the last twelve (12) months, we have collected the following categories of Personal Information about you:
-
Identifiers (e.g., name, mailing address, email address, and telephone number, as well as unique identifiers such as your IP address, cookies or similar data)
-
Characteristics of protected classifications under California or Federal law (e.g., your gender or age)
-
Internet or Other Electronic Network Activity Information (e.g., browsing history, activity, and service pages visited to help you get started, and information regarding your interactions with our Platform)
-
Geolocation Data
-
Professional or employment-related information (e.g., your occupation)
-
Audio, electronic or similar information when you contact our customer care center by phone
-
Inferences drawn from the information identified above
We collect this Personal Information directly from you when you provide it to us; automatically as you navigate through the Platform; or from third-party sources to help us determine whether a Raeliva product or service is right for you and to send promotional emails and/or text messages to customers and prospective customers. For more information about the sources from which we collect your Personal Information, please see Section II above.
We collect and use your Personal Information for our own operational purposes to provide services to you; audit interactions on the Platform; secure our Platform and detect, protect, and investigate against security incidents; or improve our Platform (e.g., identify bugs, repair errors, and ensure that services function as intended). For more information about the purposes for which we use your Personal Information, please see Section III above.
II. Categories of Personal Information
Categories of Third-Parties
-
Identifiers (e.g., such as your email address, IP address, account login information, cookies or similar data)
-
Service providers who provide professional or technical support functions; professional service organizations; analytics providers for our Platform.
-
Internet or other similar network activity (e.g., browsing history, activity, and service pages visited to help you get started, search history, and information regarding your interactions with our Platform)
-
Geolocation data
III. California Resident Privacy Rights
If you are a California resident, you have the following rights:
-
Right to Know: You have the right to know about the Personal Information we collect, use, and disclose about you in the twelve (12) months preceding your request. Upon verifying your identity, we will provide you with the specific pieces of Personal Information we have collected about you. We also will disclose the categories of Personal Information we have collected about you and purposes for doing so; the categories of sources of that data; the categories of third parties with whom we shared it for a business purpose and our purposes for doing so; and the categories of third parties to whom we sold Personal Information and our purposes for doing so.
-
Right to Deletion: You have the right to request that we delete the Personal Information we collect about you. We will honor your request unless an exception applies, such as when the information is necessary to complete the transaction or contract for which it was collected.
-
Right to Opt-out of the Sale: You have the right to request that we do not sell your Personal Information to third parties. While we do not “sell” your data in the traditional sense, the CCPA defines this term broadly to include our use of certain third-party advertising and marketing services as described above.
-
Right to Non-Discrimination: We do not discriminate against you for exercising any of your privacy rights under CCPA or applicable law, including discrimination in the form of: denying you goods or services; charging you different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties; providing you a different level of quality of goods or services; or suggesting that you will receive a different price or rate for goods or services or a different level of quality of goods or services.
IV. How to Exercise Your Privacy Rights
For “Right to Know” and “Right to Deletion” requests, visit and complete a request by writing to the Compliance Officer by writing to support@raeliva.com. We must verify your identity or authority to make the request and confirm the Personal Information relates to you, or others. To do so, we collect your name, e-mail address, phone number to verify your identity. We also may contact you by e-mail or by telephone to verify your identity and ask you additional questions so that we can match your identity with the data we have about you. In some instances, we may ask you to declare under penalty of perjury that you are the consumer whose Personal Information is the subject of the request.
You also may designate an authorized agent to make a request for you. To use authorized agent, you or your authorized agent must:
-
Submit proof that the authorized agent is registered with the California Secretary of State and that you have authorized them to act on your behalf,
-
Submit evidence that you have provided the authorized agent with power of attorney pursuant to the California Probate Code, or
-
Provide the authorized agent written and signed permission to act on your behalf, verify your identity with us, and directly confirm with us that you have provided the authorized agent permission to submit the request.
We may deny a request from an authorized agent who does not submit sufficient proof to act on your behalf.
For “Right to Opt-out of the Sale” requests, please note that we collect cookies on our website and each requires a separate opt-out from you. You may request to opt-out of these cookies on this website by visiting Your Privacy Choices, which is also linked from the footer of every page on this website.
X. Revisions to Our Privacy Policy
We reserve the right to change this Privacy Policy at any time. It is our policy to post any changes we make to our Privacy Policy on this page. The date this Privacy Policy was last modified is identified at the top of the page. You are responsible for ensuring we have an up-to-date, active, and deliverable email address for you, and for periodically monitoring and reviewing any updates to this Privacy Policy. Your continued use of our Platform after such amendments will be deemed your acknowledgment of these changes to this Privacy Policy.
XI. Contact Information
If you have any questions or comments about this Privacy Policy and our privacy practices, please message us through the Platform or contact us at:
Pacific Shores Research Group, LLC 4993 Niagara Ave, Suite 206 San Diego, CA 92107 support@raeliva.com