Privacy Policy

Scope of this policy

This policy covers information handled by Longevix MSO, LLC through this website and our administrative services.

Information created in the course of your medical care — your intake answers, laboratory results, prescriptions and clinician notes — is protected health information held by the affiliated professional entity that provides your care. Its handling is described in the Notice of Privacy Practices, which governs where the two documents differ.

What we collect

Information you give us: name, email address, mobile number, shipping address, date of birth, and payment details (held as a token by our processor, not by us).

Information from your use of the site: pages viewed, approximate location derived from IP address, device and browser type, and the source that referred you.

We do not buy personal information from data brokers.

Why we use it

To provide the service you asked for, to arrange laboratory work and fulfilment with licensed partners, to take payment, to send service messages about your account and shipments, to meet legal and record-keeping obligations, and to secure the site against abuse.

With your consent, to send marketing about our services. You can withdraw that consent at any time without affecting your care.

Who we share it with

Service providers who act on our instructions and are bound to protect it: our clinical platform partner, laboratories, licensed pharmacies, payment processors, and communications providers.

Regulators, courts or law enforcement where we are legally required to disclose.

A successor entity in the event of a merger, acquisition or sale of assets — in which case this policy continues to apply until you are notified otherwise.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

Advertising and analytics

We do not place third-party advertising trackers on pages from which a health condition could be inferred. Where we measure marketing performance we do so with aggregate, first-party measurement.

Regulators have brought enforcement actions against health companies whose trackers transmitted condition-specific browsing to advertising platforms. We avoid that by not doing it.

How long we keep it

Account and transaction records are kept while your account is active and afterwards for as long as needed to meet tax, accounting and legal obligations.

Medical records are retained by the professional entity for the period required by the law of the state in which care was provided, which is usually longer than you might expect and is not something either of us can shorten.

Security

Data is encrypted in transit and at rest. Access is limited to people who need it for their role. We keep audit logs of access to sensitive records. No system is perfectly secure, and we will notify you and the relevant authorities if a breach affecting your information occurs, as required by law.

Your rights

You may request a copy of the personal information we hold about you, ask us to correct it, ask us to delete it, or object to a particular use. Email hello@longevix.io and we will respond within the time the applicable law allows.

Some information cannot be deleted on request — medical records subject to state retention requirements, and records we must keep for tax or legal reasons. Where that applies we will tell you which category applies and why.

Residents of certain states have additional rights. See the state-specific notices below.

Children

The service is for adults aged 18 and over. We do not knowingly collect information from children. If you believe a child has provided information, contact us and we will delete it.

Changes and contact

We will post any change here with a new version date and keep superseded versions at dated URLs. Questions: hello@longevix.io.