1. Agreement to these Terms

These Terms of Use (the “Terms”) are a single, binding contract between you and BeyondMold (“BeyondMold,” “we,” “us,” or “our”) governing your BeyondMold membership and your access to and use of our websites, applications, and services (together, the “Services”). They apply to every member from the moment you join, whether or not you ever book a consultation, and they include the membership, billing, telehealth, and liability terms below.

By checking the box indicating that you agree to these Terms and to our Privacy Policy, and by creating an account, subscribing to the Services, or booking an appointment, you acknowledge that you have read, understood, and agree to everything below. The box is not pre-checked; checking it is a voluntary, affirmative act. A record of your consent (including the date, time, and version of these Terms) is retained. If you do not agree, do not check the box and do not use the Services.

2. Who may use the Services

You must be located in the United States and legally able to enter into this agreement. You are responsible for the accuracy of the information you provide and for all activity under your account.

Age requirements. Patients must be at least 10 years old to receive appointments and treatment from our clinic. Patients under 18 years of age must be seen by Dr. Heyman; our other providers see patients 18 and older. A parent or legal guardian must set up the account for, consent to, and supervise the care of any patient under 18. The messaging feature is available only to account holders who are 18 years of age or older (see Section 3).

3. Membership and messaging

The BeyondMold membership costs $99 per billing period. Your membership gives you unlimited messaging through the platform and the ability to book one-on-one consultations with a provider. Consultations are an optional feature and are paid for separately, as described in Section 5.

Unlimited messaging. For as long as your $99/month subscription remains active, you have unlimited messaging for your own care — there is no cap on the number of messages you may send, subject to reasonable and fair use. Being an active subscriber to the recurring $99/month membership is what unlocks unlimited messaging; if your subscription ends, messaging access ends at the close of your paid period. You understand that:

• Messaging is not a real-time or emergency service. Messages are reviewed and answered during normal business hours, and response times may vary. For anything urgent or life-threatening, follow Section 8.
• Whether and how a provider responds is a matter of professional judgment. Some questions cannot be safely handled by message and may require you to book a consultation or seek in-person care.
• Messaging is available only to account holders who are 18 years of age or older. Care for a patient under 18 is handled through their appointments with Dr. Heyman rather than by message.
• Messaging is for your own care as the account holder. You may not share your account or use messaging on behalf of another person.
• Fair use means messaging is for genuine, good-faith questions about your care. It may not be used to send automated, bulk, repetitive, harassing, or abusive messages, or to obtain services that appropriately require a paid consultation.

We may limit, suspend, or end messaging access if it is used in a way that is abusive, unsafe, or inconsistent with fair use, consistent with Sections 17 and 24.

4. Billing and payment

Recurring membership fee. Your membership is a recurring subscription of $99 per month. Your billing cycle begins on the day you sign up and renews automatically each month on that same cycle unless cancelled. By enrolling, you authorize BeyondMold to charge your payment method $99 each month until you cancel.

Cancel anytime. You may cancel your monthly membership at any time using the cancellation option in your account billing settings. Cancellation prevents future billing but does not entitle you to a refund for any current or previous billing period; your messaging access remains active until the end of the current paid period.

How your payment information is stored. Your card is stored securely by our third-party payment processor, Stripe. BeyondMold does not see, receive, or store your full card number or card details at any time; all card storage and payment processing is handled by Stripe under its own security standards and terms.

Failed or declined payments. If a payment cannot be processed on your renewal date, you will lose access to the full membership. Your dashboard changes to a limited view that prompts you to update your payment method and pay to restore access, messaging may be suspended, and scheduled appointments may be cancelled until payment is received. We may retry payment or request an alternative method. Full access resumes once a successful payment is processed.

No refunds. All payments made to BeyondMold are final and non-refundable — including monthly membership fees, appointment fees, missed-appointment and late-cancellation fees, partially used subscription periods, and early cancellation of a subscription. No refunds, credits, or prorated reimbursements will be issued except where required by applicable law.

Chargebacks. If you dispute or charge back a fee that was validly incurred under these Terms, that may be treated as a breach and may result in suspension or termination of your account, without limiting our other remedies.

Pricing changes. We may modify membership pricing and appointment fees. Any change to recurring membership pricing will be communicated in advance and will apply to future billing cycles.

Payment terms. All fees are charged in U.S. dollars. You are responsible for keeping a valid payment method on file. Fees and any applicable taxes are described at the point of sale. BeyondMold is generally a self-pay service (see Section 11).

5. Consultations

Booking a consultation is optional. If you choose to book one, the following terms apply.

Appointment fees. Consultations are billed separately from your monthly membership fee. Appointment fees vary depending on the provider selected, and the current fee is displayed at the time of booking.

When you are charged. You are not charged in full up front to book. Your appointment fee is charged to the payment method on file when your visit is marked as occurred (completed) by the provider. Appointment fees are non-refundable.

Cancelling or rescheduling. You may cancel a booked consultation yourself, at no charge, up to 24 hours before the scheduled start time using the cancellation option for that appointment. Cancellations made within 24 hours of the start time are treated as late cancellations.

Late-cancellation fee. If you cancel within 24 hours of your scheduled start time, a $50 late-cancellation fee is charged to your payment method on file.

No-show fee. If you do not attend a scheduled consultation and did not cancel in advance as described above, the appointment is treated as a no-show and a $50 no-show fee is charged to your payment method on file.

Overtime billing. If a consultation runs past its allotted time, the additional time is billed to the minute at the provider's per-minute rate — the visit fee divided by that visit's allotted length — and is added to the appointment fee charged when the visit is marked occurred.

6. What the Services are — and are not

BeyondMold offers a technology platform and, where applicable, connects you with licensed healthcare providers for consultations, coaching, testing, and related support relating to mold-related illness and recovery. The platform also provides health-related information, wellness resources, educational materials, and care coordination. Not every member will receive medical evaluation, diagnosis, treatment, or a provider-patient relationship; some parts of the Services are educational or administrative only. Medical services are provided only when you are evaluated and accepted by a licensed healthcare professional practicing through the platform.

• No guarantee of care. Joining, submitting information, messaging the platform, or scheduling an appointment does not guarantee that you will receive medical treatment, that a provider will accept your case, that a prescription will be issued, that laboratory testing will be ordered, that medical advice will be provided, or that a provider-patient relationship will be established.
• Provider discretion. Healthcare professionals may decline treatment if they determine that your condition is inappropriate for telemedicine, that additional evaluation is required, that an in-person examination is necessary, that prescribing would be medically inappropriate, or that applicable laws or professional standards prohibit treatment.
• Your relationship with providers. Clinical care is provided by independent licensed providers exercising their own professional judgment. Educational content and coaching are not a substitute for the advice of your own physician.

7. Telehealth consent

If you are evaluated by a licensed healthcare provider through this platform, you voluntarily consent to receive healthcare through telemedicine. By using any consultation, messaging, or video-visit feature, you consent to receiving care via telehealth and understand its benefits and limitations, including that a provider may determine that telehealth is not appropriate for your situation.

Telemedicine may include video consultations, telephone consultations, secure messaging, review of uploaded photographs or medical records, electronic prescribing when clinically appropriate, and remote follow-up care. Telemedicine has limitations, including the inability to perform a complete physical examination. Your provider may recommend that you seek in-person medical care or emergency treatment when clinically appropriate.

8. No emergency services

This platform is not intended for medical emergencies. If you are experiencing symptoms such as chest pain, severe shortness of breath, stroke symptoms, severe bleeding, loss of consciousness, suicidal thoughts, or any other life-threatening emergency, call 911 or your local emergency services, or go to the nearest emergency department immediately. Do not rely on this platform during a medical emergency.

9. No guarantee of results

Healthcare outcomes cannot be guaranteed. You understand and acknowledge that no diagnosis is guaranteed, no treatment is guaranteed to be successful, no medication is guaranteed to work, no symptom is guaranteed to improve, and no cure or specific medical outcome is promised or implied. Medical treatment involves uncertainty, and responses to treatment vary from person to person.

10. Prescribing and medications

Whether to prescribe any medication is solely within the professional judgment of a licensed provider, and no prescription is guaranteed. Prescribing is available through our licensed provider network, which is licensed to prescribe across the 50 U.S. states; the availability of care and prescribing depends on a provider being licensed where you are located. Certain medications, including controlled substances, may not be prescribed via telehealth and are subject to applicable federal and state law. The cost of any medication, and any pharmacy or dispensing fees, are separate from your membership and consultation fees and are your responsibility.

11. Laboratory testing

Where a provider orders laboratory or diagnostic testing, the cost of that testing is separate from your membership and consultation fees. Where testing is covered by your insurance, it may be billed to your insurance; otherwise, testing is self-pay and is your responsibility. Testing may involve at-home collection kits and shipping, and results are delivered to you through the platform. Abnormal or unexpected results may require in-person follow-up or additional evaluation.

12. Your responsibilities

You agree to provide truthful and accurate medical information; disclose your medications, allergies, and medical history; update your information when changes occur; follow the medical instructions provided by your healthcare professional; seek emergency care when advised; and contact your primary healthcare provider for ongoing care when appropriate. Failure to provide complete or accurate information may affect your care.

13. Your Data — Consent, License, and Ownership

Please read this section carefully. It is intentionally broad. By agreeing to these Terms you are granting the permissions described below. If you are not comfortable with these permissions, do not use the Services.

What this covers (“Your Content”)

“Your Content” means everything you submit to or generate through the Services, including: uploaded documents, images, lab and test results, and files; intake forms and questionnaires; messages and chat; audio and video from visits; symptom, treatment, and outcome information; and information about your use of and interactions with the Services.

How we use Your Content

We use Your Content for three purposes:

1. To provide and personalize your care — so our providers and tools can help you as effectively as possible, coordinate services, and support your treatment.
2. To operate and improve the Services — including quality assurance, safety, analytics, and developing, training, evaluating, and improving our treatment models, protocols, algorithms, and success rates.
3. To create De-Identified and Aggregated Data (defined below), which we may use for research, product development, and commercial purposes.

License you grant to us

Subject to applicable law and the Privacy Policy, you grant BeyondMold a worldwide, perpetual, irrevocable, royalty-free, fully paid-up, transferable, and sublicensable license to host, store, reproduce, analyze, process, create derivative works from, and otherwise use Your Content for the purposes above. This license survives termination of your account to the extent needed to operate the Services, meet legal obligations, and use data already created (including De-Identified and Aggregated Data).

De-Identified and Aggregated Data — our property

“De-Identified Data” means information that cannot reasonably be used to infer information about, or otherwise be linked to, an identified or identifiable natural person, or a device linked to such a person. BeyondMold de-identifies data to a standard that meets or exceeds each of the following: (a) the HIPAA de-identification standard (45 C.F.R. § 164.514(b)), applying Expert Determination where dates, geography, or other granularity are retained; and (b) the definition of de-identified data under applicable consumer-health-data laws, including the Washington My Health My Data Act, Nevada SB 370, and the Connecticut Data Privacy Act. Consistent with those laws, BeyondMold (i) takes reasonable measures to ensure the data cannot be associated with a consumer, (ii) publicly commits to maintain and use the data only in de-identified form and not to attempt to re-identify it, and (iii) contractually obligates any recipient of the data to the same commitments. “Aggregated Data” means data combined across many individuals so that it does not identify you.

De-Identified and Aggregated Data is not protected health information, personal information, or consumer health data, and is not subject to the consent requirements governing that data. As between you and BeyondMold, BeyondMold exclusively owns all De-Identified Data, Aggregated Data, and all insights, models, and other works derived from them, and may use, reproduce, license, sell, disclose, and otherwise commercialize them for any lawful purpose, without restriction and without further notice or compensation to you. We will not attempt to re-identify De-Identified Data except as permitted by law.

Ownership and your rights

You retain ownership of and the rights the law gives you in your own underlying health records, including your HIPAA rights (such as the right to access your records). Nothing in these Terms waives rights that cannot be waived by law. BeyondMold owns the Services and all software, content, models, and materials we provide, and owns all De-Identified Data, Aggregated Data, and derivatives as described above.

Authorization for secondary uses

To the extent any use in purposes (2)–(3) above is not otherwise permitted for treatment, payment, or health-care operations, you authorize BeyondMold to use and disclose your information (including protected health information) for research, product and model development, quality improvement, and creating De-Identified and Aggregated Data.

• This authorization is voluntary; however, you must agree to these Terms to use the Services.
• You may revoke this authorization at any time by contacting us; revocation is prospective only and does not apply to uses already made, to data already de-identified or aggregated, or where we are permitted or required to continue.
• Information used or disclosed under this authorization may, once de-identified, no longer be protected by HIPAA.

Business transfers

Your information and our data assets (including De-Identified and Aggregated Data) are business assets. In connection with any merger, acquisition, financing, reorganization, sale of assets, or similar transaction, or in the diligence for one, your information and our data assets may be reviewed by and transferred to the counterparty or successor, who may continue to use them subject to these Terms, the Privacy Policy, and applicable law. By agreeing, you consent to such transfer.

14. Privacy and HIPAA

Our collection and use of information is also described in our Privacy Policy. Where we act as a HIPAA covered entity or business associate, your protected health information (“PHI”) is handled in accordance with HIPAA, applicable state privacy laws, and the Privacy Policy. We maintain reasonable administrative, physical, and technical safeguards designed to protect your information. No electronic transmission or storage system can be guaranteed to be completely secure; by using this platform, you acknowledge and accept the inherent risks associated with electronic communication.

15. Recording of visits

Video and telephone consultations may be recorded for treatment, documentation, quality, and the other purposes described in Section 13. By using the consultation features, you consent to such recording. Recordings and their contents are Your Content and PHI where applicable, and are handled in accordance with these Terms and the Privacy Policy.

16. Electronic communications

You consent to receive electronic disclosures, appointment notifications, secure messages, billing communications, electronic consent forms, and medical documents where permitted by law. We communicate with you by email and within the platform; we do not send marketing or appointment messages by SMS/text. Where you agree electronically or by checking a consent box, your electronic acceptance has the same legal effect as a handwritten signature to the extent permitted by applicable law.

17. Acceptable use

You agree not to misuse the Services, upload unlawful content or content you don’t have the right to share, upload another person’s information without authorization, attempt to breach security, or use the Services to harm others.

18. Third-party services

The Services rely on third parties (for example, payment processors such as Stripe, laboratories, pharmacies, and scheduling and video vendors). Your use of those features may be subject to their terms.

19. Technology risks

Telemedicine depends on technology that may occasionally fail. Potential risks include interrupted communications, poor audio or video quality, internet outages, software malfunctions, cybersecurity incidents, and delays in communication. We make reasonable efforts to maintain reliable service but cannot guarantee uninterrupted availability.

20. Disclaimers

EXCEPT AS EXPRESSLY STATED, THE SERVICES ARE PROVIDED “AS IS” AND “AS AVAILABLE,” WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. We do not warrant that the Services will be uninterrupted, error-free, or that any particular health outcome will be achieved.

21. Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, BEYONDMOLD AND ITS AFFILIATES, EMPLOYEES, CONTRACTORS, TECHNOLOGY VENDORS, AND HEALTHCARE PROVIDERS WILL NOT BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR FOR LOST PROFITS OR DATA, INCLUDING DAMAGES ARISING FROM interruption of service, technology failures, inaccurate or incomplete information provided by you, delays in diagnosis or treatment caused by circumstances beyond reasonable control, your failure to follow medical instructions, your misuse of the platform, or reliance upon educational materials that are not individualized medical advice. Some limitations may not apply where prohibited by law. Nothing in these Terms limits liability where prohibited by law or limits the professional responsibilities of licensed healthcare providers.

22. Release of claims

To the fullest extent permitted by law, you release and hold harmless the platform and its non-provider personnel from claims arising out of your voluntary use of the platform, except where such claims result from gross negligence, willful misconduct, or other liability that cannot legally be waived. Nothing in these Terms waives your legal rights relating to professional medical negligence where applicable law prohibits such waiver.

23. Indemnification

You agree to indemnify and hold harmless BeyondMold from claims arising from false information you submit, unauthorized use of another person’s identity, violation of these Terms, misuse of the platform, or unlawful conduct related to your use of the Services, to the extent permitted by law.

24. Termination

You may stop using the Services and cancel your membership at any time. BeyondMold reserves the right to suspend or terminate services at its discretion for non-payment, misuse of the Services, violation of our policies, or other reasonable business purposes, as permitted by law. Sections that by their nature should survive — including Your Data (Section 13), Disclaimers, Limitation of Liability, Release of Claims, and Indemnification — survive termination.

25. Governing law

These Terms are governed by the laws of the State of Ohio, without regard to conflict-of-law rules, except where applicable federal or state healthcare laws require otherwise.

26. Dispute resolution; binding arbitration; class-action waiver

Please read this section carefully. It affects how disputes between you and BeyondMold are resolved: it requires most disputes to be resolved by binding individual arbitration and waives your right to a jury trial and to participate in a class action. It does not apply to the professional medical negligence rights preserved in Section 22.

Informal resolution first. Before starting an arbitration, you agree to first try to resolve the dispute informally by sending written notice describing the dispute and your requested relief to us through the contact methods in Section 29. You and BeyondMold will attempt in good faith to resolve the dispute for 30 days after that notice. If it is not resolved, either party may begin arbitration.

Agreement to arbitrate. Except for the excluded claims below, you and BeyondMold agree that any dispute, claim, or controversy arising out of or relating to these Terms or the Services will be resolved by final and binding arbitration administered by the American Arbitration Association (“AAA”) under its Consumer Arbitration Rules, rather than in court. The arbitration will be conducted in the State of Ohio or, at your election, in your county of residence, or by telephone or video where the rules allow. Judgment on the arbitrator’s award may be entered in any court with jurisdiction. This agreement to arbitrate is governed by the Federal Arbitration Act.

Class-action waiver. All claims must be brought only in your or our individual capacity, and not as a plaintiff or class member in any purported class, collective, consolidated, or representative proceeding. The arbitrator may not consolidate more than one person’s claims and may not preside over any form of representative or class proceeding. If this class-action waiver is found unenforceable as to a particular claim or request for relief, then that claim or request (and only that one) will be severed and decided in court, and the remaining claims will proceed in arbitration.

Excluded claims. This section does not require arbitration of: (a) claims that qualify to be brought in small-claims court; (b) claims to enforce or protect intellectual-property rights; and (c) any claim that applicable law does not permit to be arbitrated, including the professional medical negligence rights preserved in Section 22.

Your right to opt out. You may opt out of this Section 26 within 30 days of first agreeing to these Terms by sending written notice, through the contact methods in Section 29, stating that you opt out of arbitration and including your name and the email on your account. If you opt out, Section 25 (Governing law) still applies and disputes will be resolved in the state or federal courts located in Ohio. Opting out has no other effect on your use of the Services.

Nothing in this section limits liability where prohibited by law or waives rights that cannot be waived by law.

27. General terms

Assignment. We may assign or transfer these Terms and our rights and obligations, in whole or in part, including in connection with a business transfer. You may not assign these Terms without our prior written consent.

Entire agreement; order of precedence. These Terms, together with the Privacy Policy, are the entire agreement between you and BeyondMold regarding the Services and supersede prior agreements on the same subject. In the event of a conflict, these Terms control, except that the Privacy Policy governs the matters it specifically addresses regarding the collection, use, and disclosure of your information.

No waiver. Our failure to enforce any provision is not a waiver of our right to do so later.

Force majeure. We are not liable for any delay or failure to perform caused by events beyond our reasonable control, including natural disasters, outages, labor disputes, or acts of government.

Severability. If any provision of these Terms is determined to be invalid or unenforceable, the remaining provisions remain in full force and effect.

Notices. We may provide notices to you electronically — by email, within the platform, or by posting on the Services. You may send notices to BeyondMold through the contact methods in Section 29.

28. Changes to these Terms

We may update these Terms. Material changes will be communicated as required by law, and we will update the effective date and version. Continued use after changes take effect means you accept the updated Terms.

29. Contact

Questions about these Terms, your membership, or billing? Please contact us.

Effective September 3, 2026 · Version 2026-09-03

This Privacy Policy explains how BeyondMold (“BeyondMold,” “we,” “us,” or “our”) collects, uses, shares, and protects information when you use our websites, applications, and services (the “Services”). It works together with our Terms of Use. If a term is defined in the Terms of Use, it has the same meaning here.

1. Who this covers

This policy applies to visitors, account holders, and patients in the United States. Some of the information we handle is “protected health information” (“PHI”) governed by the Health Insurance Portability and Accountability Act (“HIPAA”) and similar state laws; where HIPAA applies, it and applicable state law control how we use and disclose your PHI.

2. Information we collect

• Information you provide: account and contact details; intake forms and questionnaires; health, symptom, exposure, treatment, and outcome information; documents, images, and lab/test results you upload; messages and chat; and audio/video from visits.
• Information collected automatically: device, browser, and usage data, and cookies or similar technologies used to operate, secure, and analyze the Services.
• Information from third parties: laboratories and testing partners, healthcare providers, referral sources, and our payment processor (which handles your card details; we do not store full card numbers).

3. How we use information

Consistent with the Terms of Use, we use your information to:

1. Provide and personalize your care — deliver, coordinate, and support treatment and the Services.
2. Operate and improve the Services — quality, safety, support, analytics, and developing, training, evaluating, and improving our treatment models, protocols, algorithms, and success rates.
3. Create De-Identified and Aggregated Data (Section 6) for research, product development, and commercial purposes.
4. Communicate with you — service messages, and marketing you can opt out of.
5. Comply with law and protect safety — meet legal obligations and protect our users, the public, and our rights.

4. Your health information and HIPAA

Where we act as a HIPAA covered entity or business associate, we use and disclose your PHI for treatment, payment, and health-care operations, and otherwise as permitted or required by HIPAA and applicable law. For uses beyond those — including research, product and model development, and creating De-Identified and Aggregated Data — you provide a written authorization in Section 6.6 of the Terms of Use. You may revoke that authorization prospectively as described there.

5. How we share information

• Providers and care team — with the licensed providers and staff involved in your care.
• Service providers / business associates — vendors that host, process, or support the Services (e.g., cloud hosting, communications, scheduling, labs, payments), under contracts (including business-associate agreements where required) that limit their use of the information.
• De-Identified and Aggregated Data — which we own and may use, license, sell, disclose, or otherwise commercialize, because it is not PHI and does not identify you (Section 6).
• Business transfers — in connection with, or diligence for, a merger, acquisition, financing, reorganization, or sale of assets, your information and our data assets may be reviewed by and transferred to the counterparty or successor, who will be bound by commitments at least as protective as this policy or by law.
• Legal and safety — to comply with law, respond to lawful requests, and protect rights and safety.
• With your direction or authorization — as you request or authorize.

What we do not do: we do not sell your PHI, and we do not use or disclose your identifiable health information for third-party advertising or targeted-advertising purposes.

6. De-Identified and Aggregated Data

We create De-Identified Data (de-identified to the HIPAA standard, 45 C.F.R. § 164.514) and Aggregated Data (combined across many people so it does not identify you). This data is not PHI. As between you and BeyondMold, BeyondMold exclusively owns all De-Identified and Aggregated Data and the insights, models, and works derived from it, and may use, license, sell, disclose, transfer, and otherwise commercialize it for any lawful purpose, without restriction and without further notice or compensation to you. We do not attempt to re-identify De-Identified Data except as permitted by law.

7. Cookies and analytics

We use cookies and similar technologies to run the Services, remember preferences, secure accounts, and understand usage. We limit analytics on health-related pages and do not share identifiable health information with third-party advertising networks. You can control cookies through your browser settings; some features may not work without them.

8. Data retention

We keep information for as long as needed to provide the Services, maintain records required of a healthcare provider, comply with legal obligations, resolve disputes, and enforce our agreements. De-Identified and Aggregated Data may be retained and used indefinitely because it does not identify you.

9. Security

We maintain an information security program with administrative, technical, and physical safeguards appropriate to the sensitivity of the information — including encryption in transit and at rest, access controls and multi-factor authentication for staff, least-privilege and role-based access, audit logging of access to health information, workforce training, and an incident-response process. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Breach notification. If a breach affecting your protected health information or personal information occurs, we will notify you — and, where applicable, regulators — without unreasonable delay and within the timeframes required by HIPAA and other applicable law.

10. Your choices and rights

• Access and amend — you may request access to or amendment of your records, including your HIPAA rights to your medical records.
• Accounting of disclosures — you may request an accounting of certain disclosures of your PHI, as provided by HIPAA.
• Revoke authorization — you may revoke the Section 6.6 authorization prospectively; it does not affect uses already made or data already de-identified or aggregated.
• Marketing — you can opt out of marketing messages.
• Delete your account — you may ask us to close your account; we may retain information where required by law or for the purposes described above.
• State privacy rights — residents of some states may have additional rights (for example, to know, access, correct, or delete personal information). Note that PHI and certain health records are exempt from some state privacy laws and are governed by HIPAA. Contact us to exercise any available rights.
• Complaints — you may file a privacy complaint with our Privacy Officer (Section 14) or with the U.S. Department of Health and Human Services. We will not retaliate against you for filing a complaint.

11. Children

The Services are intended for adults 18 and older and are not directed to children. We do not knowingly collect information from anyone under 18.

12. Third-party links and services

The Services may link to or rely on third parties whose privacy practices are their own. This policy does not cover those third parties.

13. Changes to this policy

We may update this policy. Material changes will be communicated as required by law, and we will update the effective date and version. Your continued use after changes take effect means you accept the updated policy.

14. Contact us

Questions or privacy requests? Please contact us, or reach our Privacy Officer, Collin Osborne, at cosborne@beyondmold.com.

Effective July 28, 2026 · Version 2026-07-28

Shipping

Products ordered through BeyondMold are fulfilled and shipped by our vendors. Delivery timelines and any shipping charges vary by product and by the vendor that fulfills your order.

Returns

All sales of consumable products are final. Consumable products — including supplements, medications, and any other ingestible or single-use item — cannot be returned, exchanged, or refunded once an order has been placed.

Only non-consumable products (such as equipment, devices, and other durable goods) may be eligible for return. Returns of these items are governed by the individual policy of the vendor that fulfills the product. BeyondMold works with many vendors, and their return terms vary — a return may be subject to a restocking fee, may be offered only as a partial credit, or may not be accepted at all.

To request a return on an eligible non-consumable product, please contact us and we will direct you to the applicable vendor's return process.

These shipping and returns policies are subject to change at any time without notice.