Privacy policy

Overview

This notice describes how Lifetime Vitality Clinic(“we,” “us,” or “the clinic”) handles information submitted through lvchealthcare.com. It applies to the public-facing website only. Information you share with our clinical staff during a visit is governed by our HIPAA Notice of Privacy Practices, which we provide separately.

The website is not a clinical channel

Our website forms are intended for scheduling and general inquiries, not for transmitting protected health information (PHI). Please do not include diagnoses, medications, lab results, symptoms, or other clinical details in any web form. For clinical communication, use the secure FollowMyHealth patient portal or call our office.

Information we collect

• Contact information you submit (name, email, phone, visit preference, insurance carrier name).
• Technical metadata generated by your browser (IP address, user agent, timestamp) used for security and rate limiting.
• Aggregated usage analytics, where enabled, to understand how the site is used.

How we use information

• Respond to your inquiry or scheduling request.
• Prevent abuse and protect our infrastructure (rate limiting, anti-spam).
• Improve the website’s content and accessibility.

Service providers

We use vetted third-party services to operate this site, including hosting, transactional email delivery (Resend), and rate-limiting infrastructure (Upstash). These providers process data on our behalf and are bound by their own privacy and security commitments.

How long we keep information

Inquiry information submitted through this website (name, email, phone, notes) is retained for up to 180 days in our transactional email system, after which it is deleted unless we have established a clinical relationship that requires longer retention under our HIPAA Notice of Privacy Practices. Technical metadata used for security and rate-limiting (IP address, timestamps) is retained for up to 30 days. Aggregated usage analytics are retained for up to 24 months. Clinical records are governed by Texas Medical Board rules and HIPAA, not this notice.

Cookies

We use only essential cookies needed to operate the site. We do not sell personal information and we do not share personal information with third parties for cross-context behavioral advertising.

Disclosures required by law

We may disclose information when required by law, including in response to a valid subpoena, court order, search warrant, or other lawful request from a government authority, or when we believe in good faith that disclosure is necessary to comply with legal obligations, prevent fraud, protect the safety of our patients, staff, or the public, or defend our legal rights. Where disclosure of clinical records is involved, we follow the additional protections required under HIPAA.

Your choices

You can ask us to delete or update inquiry information you submitted through the website by contacting the location you submitted your information to. Find that location’s phone, email, and message form on our contact page. Requests for clinical records (medical chart, billing, etc.) are handled through our HIPAA process.

Texas residents

Under the Texas Data Privacy and Security Act (TDPSA), Texas residents have the right to (1) confirm whether we process their personal data and access that data, (2) correct inaccuracies, (3) request deletion, (4) obtain a portable copy where applicable, and (5) opt out of targeted advertising, the sale of personal data, or profiling that produces legal or similarly significant effects. We do not sell personal data and we do not engage in targeted advertising or such profiling. To exercise these rights, contact the location you interact with using the contact page. We may need to verify your identity before fulfilling a request. If we deny a request, you may appeal by replying to our response; if the appeal is denied you may contact the Texas Attorney General.

California residents

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the CPRA, gives you rights to (1) know what personal information we collect and how it is used, (2) request deletion, (3) request correction, (4) opt out of the sale or sharing of personal information, and (5) limit the use of sensitive personal information. We do not sell or share personal information for cross-context behavioral advertising. To exercise these rights, contact us through the contact page. We will not discriminate against you for exercising any of these rights.

Children

Our website is intended for adults. We do not knowingly collect personal information from children under 13 through the website.

Changes

We may update this notice from time to time. We’ll update the “Last updated” date when we do.

Contact

Questions about this notice? Reach the location you visit by picking it on our contact page.