01Scope and identity
HaadMD is the service name used for website and administrative services provided by Haad MD Inc and for care delivered by the clinical practice identified in your enrollment agreement. This policy explains information handling for haadmd.com, its application and enrollment processes, the patient portal, and related programs. The Clinical Practice's separate Notice of Privacy Practices explains the handling of protected medical information. Applicable medical privacy laws and that Notice govern where they provide additional protections. This policy is a notice, not permission for every possible use of your information.
02Information collected
- Contact and account information, including your name, contact details, account identifiers, identity and eligibility information, communication preferences, and enrollment history.
- Clinical information you or your authorized providers supply, including health history, symptoms, allergies, medications, laboratory reports and results, collection dates, demographic information, reproductive status, and hormone treatment information relevant to care.
- Program information, including goals, food preferences and restrictions, exercise preferences, available equipment, relevant physical limitations, meal and workout selections, completion logs, and weekly feedback. Photographs are collected only if you submit them or a separately explained service calls for them.
- Information created during care, including clinical notes, messages, personalized plans, HaadMD Longevity Scores, trend graphs, Health Blueprints, and clinician comments. Authorized recordings or transcripts may be collected as explained before recording begins.
- Transaction information, including purchases, payment status and billing records, and payment information you provide to complete an authorized transaction. Information handled by a payment service depends on the payment method used. Billing information associated with care may itself be protected medical information.
- Technical information, such as IP address, browser and device details, authentication and security events, and interactions with our services. Section 6 explains our approach to cookies and tracking choices.
03Sources and uses
Information comes from you, authorized representatives, treating clinicians, laboratories, service providers, and your interactions with our services. We use it to evaluate requests, establish and administer accounts, deliver purchased programs, coordinate care and testing, prepare and update plans, track participation and trends, communicate with you, process payments, maintain records, protect systems, resolve problems, and meet legal obligations. We use information for optional marketing only as permitted by law and your choices. We do not treat an application as authorization for unrelated uses of health information.
04Recipients and service providers
Information may be shared with treating clinicians and laboratories for appropriate clinical purposes, with recipients you authorize, and with providers supporting functions such as hosting, communications, billing, record management, laboratory data processing and clinical documentation. These providers may handle information needed for their authorized services, including protected information where appropriate. We require business associate agreements or other contractual safeguards when required by law. Independent treating clinicians and laboratories may have their own privacy notices. Disclosures required or permitted by law remain subject to applicable medical privacy restrictions.
05Limits on advertising and independent use
We do not sell or rent personal or health information. We do not share personal information for cross context behavioral advertising or disclose patient information to advertising platforms for audience matching or retargeting. We do not permit vendors to use identifiable patient information to train general purpose models for their independent benefit. These limits do not prevent processing needed to provide an authorized service. We do not claim ownership of your personal information or obtain a general license to publish or monetize your health records by providing this policy.
06Cookies and tracking choices
Essential cookies or similar technologies may support login, security, saved settings and requested functions. You can use your browser controls to delete, block or limit cookies. Disabling essential cookies can affect portal functions.
If we offer optional analytics or other optional tracking, we explain the applicable purposes, recipients and choices before activation and follow applicable consent and opt out requirements. We do not activate optional technologies that require consent without obtaining that consent. Optional technologies remain subject to the advertising and independent use restrictions in Section 5.
The protections in this policy apply whether or not your browser sends a legacy Do Not Track signal. Global Privacy Control is a different mechanism. Where applicable law requires recognition of Global Privacy Control or another recognized opt out preference signal, we honor it. You may also email support@haadmd.com to ask about cookies or exercise applicable privacy choices.
07Automated assistance and clinical review
Approved software may extract laboratory data, calculate scores, organize trends, and assist with transcription or drafting. Automated output can contain errors. A treating clinician reviews and approves the Health Blueprint before patient release. Patient specific care remains subject to clinical judgment; a calculated score is not an independent diagnosis. When recording or transcription requires your permission, we explain the proposed use and obtain that permission separately. This policy does not authorize recording or unrestricted automated clinical decisions.
08Communications and your choices
Use the designated patient portal for clinical information. General website forms, ordinary email and text messages may not provide the same privacy protections. You may request reasonable confidential communication arrangements. You may unsubscribe from optional marketing without giving up care. Essential service, billing and legally required communications may continue. Any optional text marketing consent is collected separately. Avoid including medical details in public comments or social media messages.
09Safeguards and retention
We use administrative, technical and physical safeguards appropriate to the information and applicable law. No electronic system can guarantee complete security. We respond to incidents and provide notices when required. Account closure or program cancellation does not automatically delete medical records, signed agreements or other records subject to retention duties. Retention depends on the information, the purpose of collection, applicable medical and business requirements, and lawful dispute or preservation needs. Information is not kept indefinitely merely because it was collected.
10Access and other rights
Email our Privacy Officer at support@haadmd.com to request access, correction, deletion where applicable, or information about your privacy choices. Describe your request and how we can contact you. We verify requests reasonably and explain applicable exceptions. Please do not include laboratory reports or other detailed medical information in an ordinary email when making a privacy request; we can arrange an appropriate way to receive information needed to process it.
Medical record requests follow the Notice of Privacy Practices and applicable law; deletion rights do not override clinical retention duties. Where consumer privacy laws apply, you may also have rights concerning sale or sharing, sensitive information, authorized agents, appeals, and freedom from discrimination for exercising rights. You may submit an applicable appeal or authorized agent request through the same email address. We respond within applicable legal time limits and provide additional notices or request methods when required.
11Children and external services
Our enrollment and programs are intended for adults aged 18 or older. Contact us if you believe a child supplied information improperly. Independent websites and services have their own notices. Their independence does not remove our responsibility for information we disclose to them.
12Changes and contact
We post updates with a last updated date and provide additional notice or obtain consent when required. Continued use does not replace a legally required authorization. For questions, requests or complaints about privacy, contact the Privacy Officer at support@haadmd.com.