Privacy Policy

This policy explains how Vitality Testosterone Replacement Therapy, which operates Vitality Testosterone Replacement Therapy ("Vitality", "we", "us"), handles personal information collected through this website, the booking and assessment site at start.vitalitytestosteronereplacementtherapy.com, phone calls, text messages and email.

Medical care is provided by independently licensed providers of our affiliated medical practices (the "affiliated medical practices"). The section on health information explains how health information connected to your care is handled. If you live in Washington, Nevada or Connecticut, or want detail on consumer health data in any state, read our separate Consumer Health Data Privacy Policy.

We collect the information you give us, information created when you use our services, and limited technical information from your device. We do not buy personal information from data brokers.

Information you provide. Your name, phone number, email address, state of residence, date of birth or age range, and the answers you give in the assessment or at booking. If you become a patient, the affiliated medical practices also collect your medical history, symptoms, lab results, medications, payment details and communications with your care team.

Information created when you use our services. Appointment records, lab orders, order and payment records, receipts, and records of calls, texts and emails with your coordinator. Calls may be recorded for quality and training, and you are told at the start of a recorded call.

Technical information. The main website and the assessment pages have no analytics, advertising or session-recording tags. Our servers keep standard logs (such as IP address, browser type and the page requested) for security and to keep the site running. The office finder uses the ZIP code you type, or your location only if you tap "Use my location", to show nearby offices; that location is used in your browser and is not stored by us.

We use personal information to provide the services you ask for, to run and protect the website, and to meet legal duties.

• To answer your questions, schedule labs and visits, and connect you with a licensed provider.
• To process payments, send receipts and keep billing records.
• To send appointment reminders and order updates by text or email, as described in our SMS Terms.
• To send marketing messages, only where you have agreed and with an easy way to stop.
• To keep the website secure, prevent fraud and fix problems.
• To comply with law, respond to lawful requests and enforce our Terms of Use.

Health information you give in the assessment, at booking or during care is used to arrange and provide your care, and is kept on systems built for health data. It never goes to advertising platforms.

When you send a request through our online assessment, your answers are encrypted and stored by our hosting provider for up to 90 days so your care team can review them. A notice with your name, mobile number, email, state, ZIP code, the service you asked about, your preferred office or video visit, and whether a provider should review your request first is emailed to our care team. Your detailed answers are not included in that email. The assessment pages carry no advertising or analytics tags.

Where the affiliated medical practices are covered by the Health Insurance Portability and Accountability Act (HIPAA), health information they create or receive while treating you is protected health information. Their Notice of Privacy Practices describes how they use and disclose it, and it controls over this policy for that information. Consumer health data that is not protected health information is covered by this policy and by our Consumer Health Data Privacy Policy.

The website has no advertising pixels, no session recording and no third-party chat tools. Advertising cookies are off by default.

What runs on the main website. Only what the site needs to work: it remembers the state you choose in your own browser so the right options show. There are no advertising cookies, no analytics and no call tracking. Office pages show each office's own phone number.

Advertising. We do not send conversion signals, identifiers, page addresses or any other information about you to advertising platforms. If that ever changes, we will update this policy first, and no signal would contain health information.

We do not use remarketing lists, customer list uploads or lookalike audiences based on health information. You can review these settings at any time on Your Privacy Choices.

We disclose personal information only to people and companies that help us provide the services, to the affiliated medical practices, and where law requires it. Each recipient may use it only for the purpose we give it.

• Affiliated medical practices and their licensed providers, to evaluate and treat you.
• Service providers that host the website and booking pages, store records, process payments, send texts and emails, and support customer service. They work under contracts that limit their use of the information.
• Labs and pharmacies. A lab receives the order for your panel. If a provider prescribes a medication, a licensed pharmacy receives the prescription and your shipping details.
• Legal and safety reasons, such as a court order, a lawful request by a public authority, or to protect someone's safety.
• Business transfers, if the business or its assets are sold or merged, subject to this policy.
• With your direction or consent, for example when you ask us to send records to another clinician.

We do not sell personal information, and we do not sell consumer health data.

We do not send health information to advertising or social media platforms, and there are no advertising pixels on any page of the site. We also do not use geofencing around health care facilities to send ads or messages.

We keep personal information only as long as needed for the purpose it was collected for, or longer where law requires. Medical records are kept by the affiliated medical practices for the period that state medical records law requires.

Online assessment requests are kept for up to 90 days unless you become a patient. Your consent records for calls and texts are kept for 5 years. An email address left on a waiting list for a state without an office is kept for up to 12 months. Server logs are kept for a short period for security.

We use administrative, technical and physical safeguards suited to health data, such as encryption in transit, access controls and vendor agreements. No system is perfectly secure, so please tell us right away if you think your information has been misused.

If a breach of your information occurs, we notify you and the authorities as the law requires.

Depending on where you live, you can ask to know, access, correct or delete your personal information, and opt out of certain uses. We do not treat you differently for using these rights.

• Ask what personal information we hold about you and request a copy (access and portability).
• Ask us to correct information that is wrong.
• Ask us to delete personal information, subject to legal duties such as medical record retention.
• Opt out of the sale or sharing of personal information and of targeted advertising, and limit the use of sensitive personal information. We honor Global Privacy Control automatically.
• Stop marketing: reply STOP to texts, use the unsubscribe link in emails, or tell your coordinator.

We verify requests before acting on them. An authorized agent can submit a request for you with your signed permission.

Some states give extra rights. This section adds to the rest of this policy.

California. Under the California Consumer Privacy Act, health information is sensitive personal information. We use it only to provide the services you ask for and for the other purposes the law allows. In the past 12 months we have not sold personal information. The categories we collect are identifiers, contact details, characteristics such as age, health information, commercial information (orders and payments), internet activity on our site, and audio recordings of calls. Their sources, purposes and recipients are described in the sections on what we collect, how we use it and when we disclose it. California's Confidentiality of Medical Information Act also protects medical information held by the affiliated medical practices.

Washington, Nevada and Connecticut. Consumer health data laws in these states require consent before we collect or share consumer health data, and give you rights to access, delete and withdraw consent. See the Consumer Health Data Privacy Policy.

Other states. Residents of states with comprehensive privacy laws (for example Colorado, Connecticut, Maryland, Oregon, Texas and Virginia) have the rights listed under your rights and choices. We ask for opt-in consent before processing sensitive data where those laws require it.

Our services are for adults 18 and older. We do not knowingly collect personal information from anyone under 18, and the assessment stops if a visitor says they are under 18.

If you believe a minor has given us information, contact us and we will delete it.

When we change this policy, we post the new version here with a new effective date. If a change is material, we tell you before it takes effect, by email or a notice on the site.

We do not use personal information in a materially different way than described when it was collected without asking for your consent.

Related policies: Consumer Health Data Privacy Policy · Your Privacy Choices · Terms of Use · SMS Terms · Telehealth Consent · Who provides care