Website Privacy Policy

1. Scope

This Website Privacy Policy applies to information collected through this website, its online storefront, and website-related communications. It does not replace the practice’s Notice of Privacy Practices, which describes how protected health information may be used and disclosed in connection with healthcare.

2. Information we may collect

Depending on how you use the website, we may collect:

• Contact information: name, email address, telephone number, mailing address, and communication preferences.
• Appointment and inquiry information: requested service, preferred appointment details, and information you voluntarily submit.
• Transaction information: selected membership, payment status, billing contact details, receipt information, refunds, cancellations, and transaction identifiers.
• Technical information: IP address, browser and device type, operating system, referring page, pages viewed, approximate location, and cookie or similar identifiers.
• Communications: messages, requests, feedback, and records of our responses.
• Health-related information: information submitted through an approved clinical intake, appointment, or patient communication workflow.

Please do not submit card numbers, government identifiers, detailed medical histories, or other sensitive information through ordinary email or general website fields unless the field is specifically intended and approved for that purpose.

3. How we may use information

• Respond to inquiries and appointment requests.
• Provide, administer, and support ELITEST™ memberships.
• Process payments, receipts, refunds, renewals, and cancellations.
• Communicate service, billing, policy, safety, and account information.
• Operate, secure, troubleshoot, and improve the website.
• Detect misuse, fraud, security incidents, and prohibited activity.
• Comply with legal, regulatory, professional, and recordkeeping obligations.
• Use or disclose health information for treatment, payment, and healthcare operations as described in the Notice of Privacy Practices.

4. How information may be disclosed

We may disclose information only as reasonably necessary to operate the website and practice, including to:

• Service providers supporting hosting, security, forms, communications, analytics, scheduling, payment processing, fulfillment, and customer support.
• Licensed healthcare professionals, pharmacies, laboratories, and other parties involved in care, where permitted.
• Government authorities, regulators, courts, or other parties when required or permitted by law.
• Professional advisers such as legal, accounting, insurance, and compliance professionals.
• A successor organization in connection with a merger, acquisition, financing, or transfer of assets, subject to applicable privacy obligations.

We do not authorize service providers to use information for purposes unrelated to the services they provide to us. Any vendor receiving protected health information must be evaluated for the contractual and security safeguards required by applicable law.

5. Payments and recurring memberships

Payments may be processed by a third-party payment processor. The payment processor may collect payment-card and billing information under its own terms and privacy policy. The website should not store complete payment-card numbers. Membership transaction records may be retained to administer recurring billing, issue receipts, document consent, manage cancellations, and meet legal or accounting obligations.

6. Health and medical information

Information collected in connection with healthcare may be protected by federal or state health-privacy laws. The practice’s handling of protected health information is described in the Notice of Privacy Practices.

Purchasing or requesting an ELITEST™ membership does not itself establish eligibility for treatment or guarantee a prescription. Medical information must be reviewed through the practice’s approved clinical process.

7. Cookies, analytics, and embedded services

The website may use cookies, pixels, local storage, analytics services, embedded maps, videos, fonts, and similar technologies. These tools may receive device, browser, usage, and interaction information. Cookie and analytics tools are not permitted to receive information entered into medical, appointment, patient-portal, or authenticated pages unless the practice has determined that the disclosure is legally permitted and appropriate contractual and security safeguards are in place.

Your browser may allow you to block or delete cookies. Some website functions may not work as intended when cookies are disabled. For more information, see the Cookie & Tracking Policy.

8. Email, telephone, and text communications

We may use contact information to respond to requests and send transactional or service-related messages. Marketing email or text consent should be collected separately where required and should not be bundled with acceptance of medical treatment or subscription terms. Ordinary email and text messaging may not be secure; avoid including sensitive health or payment information.

9. Retention and security

We retain information for the period reasonably necessary for the purposes described in this policy, including clinical, billing, consent-verification, legal, accounting, fraud-prevention, and dispute-resolution obligations. We use administrative, technical, and physical safeguards designed to protect information. No internet transmission or storage method can be guaranteed to be completely secure.

10. Your privacy choices

Depending on applicable law and the type of information involved, you may be able to request access, correction, deletion, restriction, or information about disclosures. Certain information may be retained when required for medical, legal, billing, security, or recordkeeping purposes.

California residents may have additional rights under applicable California privacy laws. The availability of a particular right depends on the law, the type of data, and whether the law applies to the practice. Requests may be submitted using the contact information below. We may take reasonable steps to verify your identity before responding.

11. Children

The ELITEST™ storefront is intended for adults. The website is not directed to children under 13, and we do not knowingly use the storefront to collect personal information from children under 13.

12. Third-party websites

The website may link to services operated by third parties. Their privacy and security practices are governed by their own policies. Review those policies before providing information.

13. Changes to this policy

We may revise this policy when our services, vendors, practices, or legal obligations change. The updated policy will be posted with a revised effective date. Material changes will be communicated when required.