Privacy Policy

PLEASE READ THIS PRIVACY POLICY CAREFULLY BEFORE USING OUR SERVICES OR WEBSITE.

Important note: our Notice of Privacy Practices is a separate document governing how protected health information ("PHI") about you may be used and disclosed in connection with healthcare services, in accordance with the Health Insurance Portability and Accountability Act ("HIPAA").

1. Introduction

This Privacy Policy describes how GEVITIX LAB collects and uses Personal Information about you through our website and platform (the "Platform"), and through email, text and other electronic communications between you and us. The terms "we," "us," "our" and "GEVITIX LAB" refer to [CONFIRM legal entity name, entity type and registered address per MSA].

This Policy covers the types of information we and our affiliates — including certain affiliated professional entities — may collect from you or that you may provide when using the Platform, and our practices for collecting, using, maintaining, protecting and disclosing it. It is incorporated into our Terms & Conditions; capitalized terms not defined here have the meanings given there. By using the Platform you agree to this Policy; if any term is unacceptable to you, do not use the Platform or provide Personal Information. We may update this Policy from time to time, and continued use after changes are posted constitutes acceptance — please check back periodically.

This Policy does not apply to information collected by third parties, including through applications or content (including advertising) that may link to or be accessible from the Platform.

2. Information We Collect and How We Collect It

Information about you and your care. We collect: identifying details (name, mailing address, email, phone, account and billing information, gender, occupation, eligibility information, and anything else defined as personally identifiable under applicable law — "Personal Information"); health-related information such as clinical history and condition, and information exchanged in emails, texts, chats or calls with us; information about your internet connection, devices and usage; information about your product interests, location or demographics; and any other information we specifically request.

We collect this information directly from you; automatically as you navigate the Platform (usage details, IP address, cookies, web beacons and similar technologies); and from third parties we work with to provide you services, such as physicians, medical professionals and pharmacies.

Information you give us includes information collected when you browse (even without an account), register, communicate with us or receive healthcare services; payment information (transmitted over an encrypted connection to a third-party processor — we do not collect or store your full card details); records of your correspondence; information you provide for posting, such as testimonials (if you provide one, your first name will appear with it — do not post anything you would not want others to see); and your search queries.

Automatic collection. Like most websites, we use automatic tracking technologies to collect details of your visits (traffic, location, logs, language, access times, referring URLs) and about your device and connection (IP address, operating system, browser). This data may be statistical or Personal Information, and may be associated with other information about you. It helps us estimate usage, store preferences, speed up searches and recognize you on return.

Cookies. The Platform uses cookies — small text files stored by your browser — to improve functionality, remember preferences and understand how visitors use the site. You may set your browser to refuse cookies before using the Platform, though parts of the Platform may then not function, and we disclaim any liability arising from your resulting partial access. Our sites are designed to respond to Global Privacy Control (GPC) signals.

Third-party tools. We use third-party payment processors [CONFIRM: e.g. Stripe — https://stripe.com/privacy] whose session cookies help detect and prevent fraud, and other tools that report errors and performance so we can improve the Platform. We may also use pixel tags, web beacons or clear GIFs to understand traffic patterns in aggregate.

Information from other sources. We may receive information about you from other websites we operate, subcontractors, analytics providers, advertising networks, search providers, and third parties involved in providing your care, and may combine it with information you give us for the purposes described below.

3. How We Use Your Information

We may use information collected about you, including Personal Information, to: complete registrations, transactions and payment processing, including eligibility determinations; support treatment, payment and healthcare operations; communicate with you about healthcare services, products and information you request (by phone, voicemail, email, SMS or in-Platform notifications); administer your account, payments and orders; operate, support and improve the Platform and our products and services; respond to your inquiries; create de-identified, aggregate information; measure the effectiveness of communications and deliver relevant communications, surveys and newsletters; better understand our audience; verify identity and prevent fraud and unauthorized activity; design and develop new features and services; notify you of changes; enforce this Policy and other agreed terms; act with your consent where required; and comply with applicable laws and regulations.

4. Disclosure of Your Information

We may disclose Personal Information: for treatment, payment or healthcare operations; to anyone authorized by you; to service providers supporting our technology, security, email delivery, auditing and similar functions; to medical providers — physicians, healthcare organizations, pharmacies and laboratories — who provide services to you (when providers deliver services, they and their professional entities' personnel may see the information you provide); to our and our affiliated professional entities' employees and contractors; to our affiliates; to fulfill the purpose for which you provide it; to third-party payment processors over encrypted connections; to entities assisting with marketing and advertising; to comply with law, legal obligations or to enforce our Terms and protect the rights, property or safety of GEVITIX LAB, our customers or others (including fraud protection); with respect to de-identified information, for any purpose without restriction; and in connection with a sale, merger, change of control, transfer of assets, reorganization or liquidation.

5. Your Choices

Tracking technologies and advertising. You can set your browser to refuse some or all cookies or alert you when cookies are sent; parts of the Platform may then be inaccessible or not function properly. Do Not Track. We do not currently respond to "do not track" signals.

6. Data Security

We implement measures designed to reasonably secure your Personal Information from accidental loss and unauthorized access, use, alteration and disclosure. You are responsible for keeping your password confidential — do not share it. Information shared in public areas may be viewed by any user. Transmission of information over the internet is never completely secure; while we do our best to protect your Personal Information, we cannot guarantee its security in transit, and transmission is at your own risk. When you use the Platform there is a risk that PHI may be stored unencrypted on your mobile device; we apply technical safeguards against this but cannot guarantee them.

7. Third-Party Websites

The Platform may link to websites outside our control. This Policy does not apply to them; they may set their own cookies, log your IP address and collect data. GEVITIX LAB DOES NOT CONTROL AND IS NOT RESPONSIBLE FOR WHAT THIRD PARTIES DO ON THEIR WEBSITES OR HOW THEY HANDLE YOUR PERSONAL INFORMATION. PLEASE CONSULT THE PRIVACY POLICIES POSTED ON EACH THIRD-PARTY WEBSITE.

8. No Services to Minors

GEVITIX LAB does not knowingly provide services to anyone under 18 years of age. Certain treatment programs carry stricter age criteria (for example, sexual health programs require ages 21+).

9. California Resident Privacy Rights

If you are a California resident, the California Consumer Privacy Act ("CCPA") provides additional rights regarding your Personal Information. CCPA rights do not apply to all information we handle — for example, PHI governed by HIPAA, "medical information" governed by the California Confidentiality of Medical Information Act ("CMIA"), and other patient information maintained in the same manner are excluded, and are instead handled as described in this Policy and our Notice of Privacy Practices.

Categories collected in the last 12 months: identifiers (name, mailing address, email, phone, IP address, cookies); characteristics of protected classifications (gender, age); internet or other electronic network activity (browsing history, interactions with the Platform); geolocation data; professional or employment-related information; audio or electronic information when you contact support by phone; and inferences drawn from the above. We collect these directly from you, automatically as you navigate, and from third-party sources, and use them for our operational purposes — providing services, auditing, securing the Platform, detecting and investigating security incidents, and improving the Platform.

Your rights:

• Right to know — upon a verified request, we will disclose the Personal Information collected about you in the preceding 12 months, the categories and sources of that data, the business purposes, and the categories of third parties with whom it was shared or to whom it was sold.
• Right to deletion — you may request deletion of your Personal Information; we will honor the request unless an exception applies (e.g. information necessary to complete a transaction).
• Right to opt out of sale — while we do not "sell" data in the traditional sense, the CCPA defines sale broadly to include certain third-party advertising and marketing services; you may opt out of these cookies via your cookie settings.
• Right to non-discrimination — we will not deny you services, charge different prices, or provide a different level of quality because you exercised your privacy rights.

Exercising your rights. Submit "right to know" and "right to deletion" requests to fc@gevitixlab.com. We must verify your identity (name, email, phone) and may contact you with additional questions, or ask for a declaration under penalty of perjury. You may designate an authorized agent by submitting proof of registration with the California Secretary of State and your authorization, evidence of power of attorney under the California Probate Code, or written signed permission together with direct identity verification. We may deny requests from agents who do not submit sufficient proof.

10. Changes to This Policy

We may change this Privacy Policy at any time; changes are posted on this page with the "Last updated" date above. You are responsible for keeping a current, deliverable email address on file and for reviewing updates. Continued use of the Platform after amendments constitutes acknowledgment of the changes.

11. Contact

Questions or comments about this Privacy Policy and our practices: message us through the Platform or contact [CONFIRM legal entity name and registered address] · fc@gevitixlab.com.