Privacy Policy

BJE Equity LLC, doing business as Rila (“Rila,” “we,” “us,” or “our”) operates a telehealth platform that connects patients with independent, licensed healthcare providers. This Privacy Policy explains how we collect, use, share, and protect information when you visit our website, create an account, or use our services. By using Rila, you agree to the practices described here.

Information we collect

Information you provide to us:

Account and contact information — name, email address, phone number, mailing and shipping address, date of birth, and login credentials.

Health information — the medical history, symptoms, conditions, medications, and other health details you share in your intake questionnaire and during consultations, along with treatment and prescription information.

Payment information — billing details processed by our third-party payment processor (we do not store full card numbers).

Communications — messages you send to us or your care team.

Information we collect automatically:

Usage and device data — IP address, device and browser type, pages viewed, and interactions with our site, collected through cookies, pixels, and similar technologies, including analytics and advertising technologies.

How we use your information

We use your information to provide and coordinate telehealth consultations, prescriptions, and fulfillment; create and manage your account; process payments and subscriptions; communicate with you about appointments, refills, support, and service updates; personalize and improve our services, including using aggregated or de-identified data; deliver and measure marketing and advertising; protect against fraud and secure our services; and comply with legal obligations.

Cookies and tracking technologies

We and our third-party partners use cookies, web beacons, pixels, and similar technologies for three purposes: essential functions that make the site work; analytics to understand how our site is used and improve it; and advertising, including retargeting and measuring the performance of our marketing across platforms. You can control cookies through your browser settings and, where available, through opt-out tools and the Global Privacy Control (GPC) signal.

How we share your information

We share information as follows:

With your care team — the licensed providers and pharmacies who evaluate you and dispense your treatment.

With service providers — vendors who support our operations, such as hosting, payment processing, analytics, and communications, under contracts that limit their use of your information.

With advertising partners — certain online identifiers and usage data may be shared with advertising and analytics partners to deliver and measure targeted advertising. Depending on your state, this may be considered “sharing” or a “sale” of personal information (see “Your privacy rights and choices”).

For legal and safety reasons — when required by law, to respond to legal process, or to protect the rights, safety, and property of you, us, or others.

In business transfers — in connection with a merger, acquisition, or sale of assets.

We do not sell your health information.

Health information and HIPAA

The licensed Providers and Partner Pharmacies who treat you are generally "covered entities" under the Health Insurance Portability and Accountability Act (HIPAA) and are responsible for your Protected Health Information (PHI) in accordance with HIPAA and their own Notices of Privacy Practices. Where Rila creates, receives, maintains, or transmits PHI on behalf of a covered entity, we do so as a "business associate" under HIPAA, governed by business associate agreements that require us to safeguard that information and use it only as permitted. Some information you provide directly to our website or company — such as information submitted before you begin care, or account and marketing information not created in connection with treatment — may not be PHI subject to HIPAA, but it is still protected under this Privacy Policy.

How we handle health information.

We limit access to PHI to personnel and service providers who need it to support your care, operate the Services, or meet legal obligations, and we require business associates who handle PHI on our behalf to sign agreements committing them to HIPAA-consistent safeguards. We use administrative, technical, and physical safeguards — including access controls, encryption in transit and at rest where applicable, and audit logging — designed to protect PHI from unauthorized use or disclosure. We do not sell PHI, and we do not use or disclose PHI for marketing purposes without your authorization, except as HIPAA otherwise permits.

Breach notification.

If we discover a breach of unsecured PHI, we will notify affected individuals without unreasonable delay and in no case later than 60 days after discovery, as required by the HIPAA Breach Notification Rule. Notice will describe what happened, the types of information involved, steps you should take to protect yourself, and what we are doing to investigate, mitigate, and prevent recurrence. Where required, we will also notify the U.S. Department of Health and Human Services and, for larger breaches, the media, and we will coordinate with the applicable covered entity where the breach involves PHI we hold as a business associate.

Your rights regarding health information.

To the extent HIPAA applies to your information, you generally have the right to: request access to and a copy of your PHI; request corrections or amendments to your PHI; request an accounting of certain disclosures we or your Provider have made; request restrictions on certain uses or disclosures; request confidential communications by an alternative means or at an alternative location; and file a complaint if you believe your privacy rights have been violated. You can exercise these rights, or direct questions about your Provider's specific privacy practices, by contacting your Provider directly or by contacting us at team@joinrila.com. You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights at www.hhs.gov/ocr/privacy/hipaa/complaints. We will not retaliate against you for filing a complaint.

SMS and text messaging

With your consent, we may send you text messages related to your care, such as appointment reminders, prescription and refill updates, and customer support. Message and data rates may apply, and message frequency varies. You can opt out at any time by replying STOP, or reply HELP for help. We do not share your mobile information with third parties or affiliates for their marketing purposes.

Data security

We use reasonable administrative, technical, and physical safeguards designed to protect your information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Data retention

We retain your information for as long as necessary to provide our services, comply with our legal obligations, resolve disputes, and enforce our agreements. We may retain de-identified or aggregated information, which cannot reasonably be used to identify you, for longer periods.

Your privacy rights and choices

Depending on where you live, you may have rights to access the personal information we hold about you; correct inaccurate information; request deletion; obtain a portable copy; and opt out of marketing and of the “sale” or “sharing” of personal information for targeted advertising.

California residents (CCPA/CPRA): You have the right to know, delete, and correct your personal information; to opt out of the sale or sharing of personal information; to limit the use of sensitive personal information; and not to be discriminated against for exercising these rights.

Other U.S. state residents (for example, Virginia, Colorado, Connecticut, Utah, and others): you may have similar rights, including the right to appeal a decision on your request.

To exercise any of these rights, contact us at team@joinrila.com. We will verify your request and respond as required by law. You may use an authorized agent where permitted.

Children’s privacy

Rila is intended for adults 18 and older. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, please contact us and we will delete it.

International users

We operate in and process information in the United States. If you access our services from outside the United States, you consent to the transfer and processing of your information in the United States.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with a revised effective date, and your continued use of the services after changes take effect constitutes acceptance of the updated policy.

Contact us

BJE Equity LLC, doing business as Rila
362 South 960 West, American Fork, UT 84003
team@joinrila.com