Privacy Policy

1. Who We Are

Grace Longevity is a health technology platform based in Louisiana that connects patients with independent, licensed physicians and licensed compounding pharmacies. We are not a licensed medical provider, and we do not practice medicine. All clinical services are rendered by independent physicians who operate under their own medical licenses.

Our website is located at gracelongevity.com. You may contact us at support@gracelongevity.com.

2. Information We Collect

We collect information in the following ways:

Information you provide directly:

• Identity information: full name, date of birth, gender, address, phone number, email address
• Health information: medical history, current medications, BMI, weight, height, health conditions, and other information submitted through our patient intake form
• Payment information: billing address and payment card details (processed by our third-party payment processor — we do not store full card numbers)
• Communications: messages you send to our support team via email or our contact form

Information collected automatically:

• Usage data: pages visited, time spent on pages, links clicked, referring URLs
• Device data: IP address, browser type, operating system, device identifiers
• Cookies and similar technologies: session cookies, analytics cookies (see Section 6)

3. How We Use Your Information

We use the information we collect to:

• Facilitate your connection with independent physicians for assessment and prescription services
• Coordinate prescription fulfillment with licensed compounding pharmacies
• Process payments and send order confirmations
• Communicate with you about your assessment status, orders, and support inquiries
• Send administrative emails (e.g., confirmation, shipping notifications)
• Improve and optimize our website and services
• Comply with applicable laws and regulations, including HIPAA
• Prevent fraud and protect the security of our platform

We do not use your information to send unsolicited marketing communications without your consent. We do not sell your personal information to third parties.

4. HIPAA & Protected Health Information

The health information you submit through our patient intake form is Protected Health Information (PHI) as defined by the Health Insurance Portability and Accountability Act (HIPAA). As a health technology platform that facilitates the delivery of healthcare services, we are committed to handling your PHI in accordance with HIPAA requirements.

Your PHI is:

• Transmitted using 256-bit TLS encryption
• Accessible only to the independent physician(s) assigned to review your case and to our platform administrators on a need-to-know basis
• Not sold, rented, or shared with marketers or advertisers
• Retained only as long as necessary for treatment coordination and compliance with applicable law

By submitting the intake form, you consent to the collection and use of your PHI for the purpose of physician evaluation, prescription services, and treatment coordination. You also authorize Grace Longevity to share your PHI with the independent physicians and pharmacies in our network solely for the purpose of providing you services.

If you have questions about your PHI or wish to request access, amendment, or deletion of your health records, contact us at support@gracelongevity.com.

5. Information Sharing

We share your information only in the following circumstances:

• Independent physicians: Your health intake information is shared with the independent, licensed physician assigned to review your case.
• Compounding pharmacies: If you are approved, your prescription and shipping information are shared with our partner licensed compounding pharmacy to fulfill your order.
• Payment processors: Payment information is shared with our third-party payment processor (e.g., Stripe) solely to process transactions. We do not store full payment card numbers.
• Service providers: We may share information with vendors who help us operate our platform (e.g., email delivery, hosting, analytics), subject to confidentiality agreements.
• Legal compliance: We may disclose information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect our legal rights or the safety of any person.
• Business transfers: If Grace Longevity is acquired or merges with another entity, your information may be transferred as part of that transaction. We will notify you before your information is subject to a materially different privacy policy.

We do not sell, rent, or trade your personal or health information to any third party for marketing purposes.

6. Cookies & Tracking Technologies

We use cookies and similar technologies to operate and improve our website. These include:

• Essential cookies: Required for the website to function (e.g., session management, form state). Cannot be disabled.
• Analytics cookies: Help us understand how visitors use the site (e.g., Google Analytics). These collect anonymized usage data.
• Marketing cookies: If you arrive via an ad (e.g., Meta or Google), a pixel may be placed to measure ad performance. This data is aggregated and does not include your health information.

You can control cookies through your browser settings. Disabling cookies may affect some website functionality. We do not respond to "Do Not Track" signals at this time.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. We retain your health information in accordance with HIPAA requirements and applicable state law (typically a minimum of 6 years from the date of creation or the date it was last in effect). Payment records are retained as required by financial regulations.

You may request deletion of your personal information at any time by contacting us. Requests to delete health records are subject to applicable legal and regulatory requirements, which may require us to retain certain records.

8. Your Rights

Depending on your state of residence, you may have certain rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to legal retention requirements.
• Portability: Request a machine-readable copy of your personal data.
• Opt-out of marketing: Opt out of any marketing communications at any time by clicking "unsubscribe" in any email or contacting us directly.
• HIPAA rights: As a patient whose PHI we handle, you have the right to access, amend, and request an accounting of disclosures of your PHI.

To exercise any of these rights, contact us at support@gracelongevity.com. We will respond within 30 days.

9. Security

We implement industry-standard technical and organizational security measures to protect your information, including:

• 256-bit TLS encryption for all data in transit
• Encryption of stored health data
• Access controls limiting who can view your information
• Regular security reviews of our platform and vendors

No method of electronic transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security. In the event of a data breach affecting your information, we will notify you as required by applicable law.

10. Children's Privacy

Our services are intended for adults aged 18 and older. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that we have collected information from a minor, we will delete it promptly. If you believe we have collected information from a minor, please contact us at support@gracelongevity.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you by email. Your continued use of our services after any changes constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:

• Email: support@gracelongevity.com
• Mailing address: Grace Longevity, LLC — Louisiana, United States

We will respond to all privacy-related inquiries within 30 days.