Privacy Policy
How Peptide12 collects, uses, and protects your information — and where your health information is covered by HIPAA instead.
Last updated: August 17, 2026
Two different sets of rules apply
Information you give us falls into two categories, and they are governed differently. Knowing which is which is the most useful thing on this page.
Website information. Information collected when you browse peptide12.com — your IP address, device and browser details, pages viewed, and anything you type into a contact or waitlist form. This policy covers that information.
Protected health information (PHI). Information collected when you become a patient or seek treatment — your intake answers, medical history, medications, lab results, clinician notes, and prescriptions. That information is protected health information under HIPAA. It is held in the medical record maintained by our clinical partner, OpenLoop Healthcare Partners, PC, and is governed by the Notice of Privacy Practices rather than by this policy.
Read the Notice of Privacy Practices (HIPAA)This describes your rights over your health information, including how to access, amend, or request an accounting of disclosures of your medical record.
Information we collect
Through this website, we collect:
- Information you provide directly — name, email address, and anything you write in a contact or waitlist form.
- Automatically collected technical information — IP address, browser and device type, referring page, pages viewed, and time on page, gathered through cookies and similar technologies.
- Analytics information about how the site is used, so we can improve it.
Please do not include medical details in a website contact form. It is not a secure channel for health information. Use the patient portal or contact your care team instead.
How we use information
We use website information to:
- Respond to your questions and provide membership support.
- Operate, secure, maintain, and improve the website.
- Measure which content and pages are useful, in aggregate rather than to profile you individually.
- Meet legal, regulatory, and record-keeping obligations.
We do not sell your personal information, and we do not sell or share protected health information for advertising.
Cookies and analytics
We use cookies and similar technologies to keep the site working and to understand aggregate usage. You can block or delete cookies in your browser settings, though parts of the site may not work as intended. Most browsers also offer a "Do Not Track" setting; because there is still no common standard for how sites should respond to it, we treat analytics preferences through the controls described here.
When we share information
We share information only as needed to run the service:
- With our clinical partner and the licensed clinicians who review your case, so care can be delivered.
- With licensed pharmacies, so a prescription can be filled and shipped to you. Our pharmacy partners are listed in our Terms of Use.
- With service providers who host, secure, or support the website and act on our instructions.
- When required by law, subpoena, or regulator, or to protect the rights and safety of patients, staff, or the public.
- In connection with a merger, acquisition, or sale of assets, subject to the protections that applied when the information was collected.
How we protect information
We use administrative, technical, and physical safeguards appropriate to the information we hold, including encryption in transit and access limited to people who need it. Our clinical partner maintains HIPAA safeguards over the medical record, and Peptide12 operates under a Business Associate Addendum with respect to protected health information.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Your choices and rights
You can opt out of marketing email at any time using the unsubscribe link, ask us to correct or delete information you have given us through the website, and control cookies in your browser.
Rights over your medical record — access, amendment, restriction, an accounting of disclosures, and confidential communications — come from HIPAA and are described in the Notice of Privacy Practices. Depending on where you live, state law may give you additional rights over personal information; contact us and we will tell you how they apply.
Children
This website and our services are intended for adults. We do not knowingly collect personal information from anyone under 18. If you believe a minor has given us information, contact us and we will delete it.
Changes to this policy
We may update this policy as our services change. The "last updated" date above reflects the most recent change, and material changes will be reflected on this page.
Related policies
Contact
Questions about this policy or your information: support@care.peptide12.com.