Privacy Policy

We collect information in the following ways:

We use the information we collect for the following purposes:

• Service Delivery: To process enrollments, fulfill program commitments, schedule discovery calls, and provide customer support.
• Communications: To send you program updates, invoices, onboarding materials, and operational notices related to your engagement with Clinic X.
• Marketing: To send promotional communications about our programs, case studies, and industry content — only where you have consented or where we have a legitimate interest in doing so. You may opt out at any time.
• Analytics & Improvement: To understand how visitors use our website, identify areas for improvement, and optimize our content and user experience.
• Advertising: To run targeted advertising campaigns on platforms such as Meta (Facebook/Instagram) and Google, including retargeting visitors who have previously engaged with our website.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes, and to enforce our terms of service and other agreements.
• Fraud Prevention: To detect, investigate, and prevent fraudulent transactions and other illegal activities.

Our website uses cookies and similar tracking technologies to enhance your browsing experience and collect usage data. Cookies are small data files stored on your device. We use the following categories of cookies:

You may control or disable cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our website. For more information about managing cookies, visit allaboutcookies.org.

We do not sell your personal information to third parties. We may share your information in the following limited circumstances:

• Service Providers: We engage trusted third-party vendors to assist with payment processing, email delivery, CRM management, scheduling, analytics, and advertising. These providers are contractually obligated to use your information only as directed by us and in accordance with this policy.
• Business Partners: With your consent, we may share information with pharmacy networks, physician networks, or compliance partners as part of delivering our telehealth infrastructure services.
• Legal Requirements: We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email or prominent notice on our website before your information becomes subject to a different privacy policy.
• Aggregated Data: We may share aggregated, de-identified data that cannot reasonably be used to identify you with third parties for research, marketing, or analytical purposes.

Our website uses the Meta Pixel (formerly Facebook Pixel) and Google Ads conversion tracking. These tools allow us to measure the effectiveness of our advertising, build custom audiences, and retarget visitors who have interacted with our website. Information collected through these tools is subject to Meta's and Google's respective privacy policies.

If you do not wish to be tracked for advertising purposes, you may opt out through the following:

• Meta Ad Preferences
• Google Ads Settings
• Network Advertising Initiative Opt-Out

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

• Client and program records are retained for a minimum of seven (7) years to comply with tax and business record-keeping requirements.
• Marketing and analytics data is retained for up to twenty-four (24) months.
• Communications and support records are retained for up to three (3) years.

When your information is no longer needed, we will securely delete or anonymize it.

We implement industry-standard technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encrypted data transmission (SSL/TLS), access controls, secure hosting infrastructure, and regular security reviews.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security. In the event of a data breach that affects your rights and freedoms, we will notify you and the appropriate authorities as required by applicable law.

Depending on your location, you may have the following rights with respect to your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct inaccurate or incomplete information.
• Deletion: Request that we delete your personal information, subject to certain legal exceptions.
• Portability: Request that we provide your information in a structured, machine-readable format.
• Objection: Object to the processing of your information for direct marketing purposes.
• Opt-Out of Marketing: Unsubscribe from marketing emails at any time by clicking the "unsubscribe" link in any email or by contacting us directly.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within thirty (30) days.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete your personal information, and the right to opt out of the sale of your personal information. As stated above, we do not sell personal information. To exercise your California privacy rights, contact us at [email protected].

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, please contact us immediately and we will take steps to delete such information.

Our website may contain links to third-party websites, including scheduling tools, payment processors, and partner organizations. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party sites you visit, as we have no control over their content or privacy practices.

Clinic X is a business consulting and infrastructure company. We do not provide medical advice, diagnosis, or treatment, and we are not a covered entity under the Health Insurance Portability and Accountability Act (HIPAA). If you are a healthcare provider using our services to build a telehealth practice, you are responsible for ensuring your own HIPAA compliance with respect to your patients' protected health information (PHI). Any PHI shared with us in the course of our consulting relationship will be handled in accordance with a separate Business Associate Agreement (BAA) where applicable.

We reserve the right to update this Privacy Policy at any time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email or through a prominent notice on our website. Your continued use of our Services after any changes constitutes your acceptance of the updated policy. We encourage you to review this page periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: