1. Scope
This policy applies to discretionaryhealth.com, our comparison tools, provider profiles, contribution forms, private reports and advisory inquiry forms. It does not govern the independent websites, clinics, laboratories, pharmacies or other third parties we link to.
2. Information we collect
Depending on how you use the site, we may collect:
- Contact and inquiry information, such as your name, email, telephone number, organization, role and the details you include in an advisory or data-access request.
- Provider contribution information, including your relationship to a practice, the facts you offer to verify, supporting notes and subsequent correspondence.
- Pricing contributions, such as quoted or paid prices, dates, sellers, laboratories, pharmacies, service details, fees, terms, purchasing context and optional supporting documents.
- Accountless access information, including verification-token and session-token hashes used to provide private reports without a password.
- Technical and security information, such as request timestamps, limited request fingerprints, browser or device information made available by our hosting provider, and records used to prevent abuse.
- Public-source information, including facts published by providers, professional boards, regulators and other public or licensed sources.
Do not submit medical records, patient names, birth dates, addresses, prescription numbers, payment-card information or other patient-identifying information. Uploaded evidence should be redacted before submission.
3. How we use information
We use information to operate and secure the site; verify email addresses; generate private comparisons; respond to inquiries; review, validate and correct provider or pricing records; create de-identified or aggregated benchmarks; document provenance; prevent duplicate or abusive submissions; comply with law; and improve our methods and products.
Provider contributions do not purchase placement, rankings, badges or favorable treatment. Our use of contributions is also governed by the Contribution Consent.
4. When we share information
We may share information with service providers that support hosting, database and file storage, security and transactional email; with professional advisers under appropriate duties; when required to comply with law or protect rights and safety; or as part of a financing, acquisition, reorganization or sale of the business.
We do not sell personal information. We do not publicly display raw contribution documents or contributor contact details. Reviewed pricing or provider facts may be used in de-identified, aggregated or source-labeled outputs as described at collection and in the Contribution Consent.
5. Health information and HIPAA
Discretionary Health is an information and advisory service, not a health care provider, health plan or medical-record service. We generally are not acting as a HIPAA covered entity or business associate when you use this site. Information you choose to submit may therefore not be protected by HIPAA. Please do not submit protected health information or materials identifying a patient.
6. Cookies and accountless sessions
We currently use essential, secure cookies to maintain private peptide-submission status and verified lab-report sessions. These cookies are not advertising cookies. Peptide submission-status access generally lasts up to 30 days in the same browser. Peptide comparisons are emailed after source review and approval. Lab verification links expire after 30 minutes and verified report sessions generally last up to 30 days. Clearing cookies may remove report access.
7. Retention and security
We retain information for as long as reasonably necessary to provide the service, maintain benchmark and provenance integrity, resolve disputes, prevent abuse and meet legal obligations. Retention periods vary by record type. We use administrative and technical safeguards designed to protect information, but no transmission or storage system can be guaranteed completely secure.
8. Your choices and rights
You may ask to access, correct or delete personal information, or withdraw a contribution where reasonably possible. A withdrawal will not require us to reconstruct previously published aggregate statistics or remove facts independently verified from another source. Applicable state law may provide additional rights and appeal procedures.
Send privacy requests to hello@discretionaryhealth.com. We may need to verify your identity and authority before acting.
9. Children and changes
The site is intended for adults and is not directed to children under 18. We may update this policy as the service changes. A revised policy will show a new effective date, and material changes may be communicated through the site or email where appropriate.