Website Privacy Policy

This Website Privacy Policy applies to Peptide12 LLC ("Peptide12," "we," "our," or "us") and information collected when you visit peptide12.com and its public-facing pages, use services that link to this policy, or communicate with us by email, text, or other electronic means in connection with those services (collectively, the "Website").

This policy does not replace the privacy policies of third-party websites or services that you choose to use, including the patient portal. It also does not govern the independent privacy practices of licensed medical practices, clinicians, pharmacies, or laboratories.

Peptide12 provides non-clinical membership, care-navigation, and support services. Clinical care is provided by OpenLoop Healthcare Partners, PC and its affiliated professional entities (collectively, the "Medical Groups") through independently licensed clinicians. The Medical Groups maintain the medical record and are responsible for the HIPAA Notice of Privacy Practices that applies to their patients.

Information collected when you complete a medical intake, communicate with a clinician, receive a diagnosis or prescription, obtain lab services, or otherwise seek or receive treatment may be protected health information ("PHI") under the Health Insurance Portability and Accountability Act of 1996 ("HIPAA"). Please review the OpenLoop Notice of Privacy Practices for how the Medical Groups use and disclose PHI and how you may exercise your HIPAA rights.

When Peptide12 receives or processes PHI on behalf of a Medical Group to provide authorized administrative, membership, technology, payment, fulfillment-coordination, or patient-support services, Peptide12 does so as permitted by HIPAA and the applicable business associate agreement. We do not sell PHI or use PHI for advertising.

Depending on how you interact with us, we may collect:

• Contact information, such as your name, email address, telephone number, mailing address, and communication preferences.
• Account and service information, such as account identifiers, enrollment or waitlist information, selected services, subscription status, and support requests.
• Transaction information, such as purchases, billing status, and fulfillment details. Payment card information may be collected directly by our payment processors; Peptide12 does not store full payment card numbers on the Website.
• Communications, including records and copies of correspondence when you contact us or respond to a survey or promotion.
• Device and usage information, such as IP address, browser and device type, operating system, referring URLs, pages viewed, links clicked, approximate location derived from IP address, and the dates and times of visits.
• Information from partners, including the Medical Groups, pharmacies, laboratories, payment processors, analytics providers, and other service providers, as permitted by law and needed to provide or support services you request.

Please do not submit medical details through a general Website contact or waitlist form. Use the patient portal or the communication method provided by your care team for health information.

We collect information:

• Directly from you when you provide it to us.
• Automatically when you use the Website through cookies, web beacons, pixels, log files, and similar technologies.
• From service providers and business partners involved in operating the Website or providing services you request.

We use cookies and similar technologies to operate and secure the Website, remember preferences, understand traffic and usage patterns, measure performance, and improve our services. For example, the Website may use Google Analytics or similar analytics services, which may collect device and usage information according to their own privacy policies.

You can configure your browser to refuse or delete cookies or to alert you when cookies are sent. Some Website features may not function properly if cookies are disabled. Third parties may provide their own mechanisms for limiting analytics or advertising technologies.

We may use information to:

• Present, operate, secure, maintain, and improve the Website.
• Provide information, membership services, support, and other services you request.
• Facilitate enrollment, scheduling, payment, care coordination, prescription fulfillment, and communications with the Medical Groups, clinicians, pharmacies, laboratories, and service providers.
• Administer accounts and subscriptions, including billing, renewal, cancellation, and service notices.
• Respond to questions, complaints, privacy requests, and technical problems.
• Analyze Website use, evaluate performance, personalize the user experience, and develop or improve services.
• Send administrative messages and, where permitted, information about Peptide12 services that may interest you.
• Detect, investigate, and prevent fraud, security incidents, misuse, or other illegal activity.
• Comply with law, enforce agreements, establish or defend legal claims, and protect the rights, safety, and property of Peptide12, patients, users, and others.
• Carry out another purpose disclosed when information is collected or with your consent.

We may disclose information:

• To the Medical Groups and independently licensed clinicians to evaluate eligibility and provide clinical services you request.
• To independently licensed pharmacies and laboratories involved in prescription fulfillment, delivery, testing, or related support.
• To contractors and service providers that support hosting, analytics, communications, payment processing, security, customer support, and other business operations, subject to appropriate contractual restrictions.
• To a buyer, successor, or other party in connection with a proposed or completed merger, financing, reorganization, sale of assets, bankruptcy, or similar transaction, subject to applicable law.
• To comply with a court order, subpoena, law, regulatory request, or legal process; enforce our rights; prevent fraud; or protect the rights, property, health, or safety of Peptide12, our users, or others.
• For another purpose disclosed to you or with your consent.

We may disclose information that has been aggregated or de-identified so that it cannot reasonably identify you, subject to applicable law.

You may unsubscribe from promotional email by using the unsubscribe link in the message or contacting us. Even if you opt out of promotional messages, we may still send non-promotional communications about your account, transactions, care coordination, or our ongoing business relationship.

If you consent to receive text messages, message frequency may vary and message and data rates may apply. You may reply STOP to end promotional texts and HELP for assistance. Consent to promotional text messages is not a condition of purchase. We do not sell or disclose mobile telephone numbers or text-message opt-in data to third parties for their own marketing. We may disclose that information to messaging providers and telecommunications carriers as needed to deliver the messages you request.

Depending on where you live and subject to applicable exceptions, you may have the right to request that we:

• Confirm whether we process your personal information.
• Provide access to or a copy of certain personal information.
• Correct inaccurate personal information.
• Delete certain personal information.
• Provide certain information in a portable format.
• Limit or opt out of certain uses of sensitive information, targeted advertising, a sale or sharing of personal information, or profiling that produces legal or similarly significant effects.
• Review an appeal of a decision concerning your privacy request.

Peptide12 does not sell personal information for money. Some privacy laws define "sale," "sharing," and targeted advertising more broadly. Where those laws apply, we will honor the rights they provide.

To submit a Website privacy request, email support@care.peptide12.com. We may take reasonable steps to verify your identity and authority before fulfilling a request. You may also use an authorized agent where permitted by law. We will not discriminate against you for exercising an applicable privacy right.

Requests concerning your medical record or other PHI must be made as described in the OpenLoop Notice of Privacy Practices. HIPAA rights may include access, amendment, confidential communications, restrictions, and an accounting of certain disclosures.

We retain personal information for as long as reasonably necessary to provide services, manage our relationship with you, meet legal and regulatory obligations, resolve disputes, enforce agreements, and protect against fraud or security incidents. Retention periods vary based on the nature of the information and why it was collected. Medical-record retention is handled by the applicable Medical Group in accordance with law and its policies.

We use administrative, technical, and physical safeguards designed to protect personal information from accidental loss and unauthorized access, use, alteration, or disclosure. When Peptide12 handles PHI as a business associate, HIPAA safeguards and the applicable business associate agreement also apply.

No security measure or transmission over the internet is completely secure. You are responsible for keeping account credentials confidential and should notify support promptly if you suspect unauthorized account activity.

The Website and services are intended for adults age 18 and older. We do not knowingly collect personal information through the Website from children under 13. If you believe a child has provided personal information to us, please contact us so we can review and address it.

The Website may link to websites, portals, applications, or services operated by third parties. Their privacy practices are governed by their own policies, and we encourage you to review them. A link does not make Peptide12 responsible for a third party's privacy or security practices.

Peptide12 and its service providers process information in the United States. If you access the Website from another country, your information may be transferred to and processed in the United States, where privacy laws may differ from those in your jurisdiction.

We may update this policy from time to time. We will post the revised policy on this page and update the "last updated" date. When required by law, we will provide additional notice of material changes.

• OpenLoop Notice of Privacy Practices (HIPAA)
• Patient portal Privacy Policy
• Telehealth Informed Consent
• Peptide12 Terms of Use

To ask a question, submit a Website privacy request, or make a complaint about this policy, contact Peptide12 at support@care.peptide12.com. OpenLoop processes patient-support communications sent to this address on Peptide12's behalf and routes privacy or clinical-record requests to the appropriate party.

For questions or complaints involving PHI, medical records, or HIPAA rights, follow the contact instructions in the OpenLoop Notice of Privacy Practices.