Privacy Policy

1. Scope

This Privacy Policy explains how North Lake Health collects, uses, shares, and protects information when you visit our website, apply for or manage a clinic account, or create a patient account to order products through a clinic that works with us.

2. Information we collect

Clinic and business information. Practice name, business contact details, professional credentials and license numbers, billing and shipping addresses, purchasing contacts, resale or tax-exemption certificates, and order history.

Patient account information. Name, email address, phone number, shipping and billing address, the clinic whose link you used to register, your order and subscription history, and any message you send us.

Payment information. Card payments are processed by Stripe. Stripe collects and stores your card details directly. North Lake Health receives only a secure token, the card brand, the last four digits, and the expiration date. We never receive or store full card numbers.

Technical information. IP address, browser and device type, pages viewed, and timestamps, collected automatically when you use the site so we can keep it secure and working.

Health information. We do not ask for and do not want medical records, diagnoses, or treatment details. Please do not send them to us. If you send health information anyway, we will treat it confidentially and delete it when it is no longer needed.

3. How we use information

• Reviewing and approving clinic account applications and verifying credentials
• Creating and securing accounts, and sending password and verification links
• Processing, fulfilling, shipping, invoicing, and supporting orders and subscriptions
• Calculating clinic earnings on patient orders placed through a clinic link
• Sending transactional messages such as order confirmations, shipping updates, and receipts
• Sending product and program updates where you have asked to receive them
• Preventing fraud, enforcing our terms, and meeting legal and tax obligations

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

4. What clinics can see about patients

If you registered as a patient through a clinic link, that clinic can see your name, contact details, and a summary of the orders you placed through their link, because the clinic earns a margin on those orders and supports you as a patient. Clinics cannot see your payment card details. Clinics cannot see patients registered under a different clinic.

5. How we share information

We share information only with service providers that help us operate, such as our payment processor, hosting and database provider, email delivery provider, and shipping carriers. These providers may use the information only to perform services for us. We may also disclose information when required by law, to respond to a lawful request, to protect our rights or the safety of others, or in connection with a merger, acquisition, or sale of assets, in which case we will notify affected account holders.

6. Cookies and similar technologies

We use cookies and local browser storage that are strictly necessary to run the site: keeping you signed in, remembering the items in your cart, and protecting against fraudulent requests. We do not use advertising cookies or third-party behavioral tracking. You can block or delete cookies in your browser settings, but sign-in and ordering will not work without the necessary ones.

7. Data retention

We keep account and order records for as long as your account is active and afterward for as long as needed to meet tax, accounting, warranty, and legal obligations, typically seven years for transaction records. Application materials for accounts we do not approve are deleted within twenty-four months. You can ask us to delete information we are not required to keep.

8. Security

Information is transmitted over encrypted connections and stored in access-controlled systems. Access to pricing, orders, patient records, and earnings is enforced on our servers by account-level permission rules, not only in the browser. No system can be guaranteed perfectly secure, so please use a strong, unique password and tell us right away about any suspected unauthorized access.

9. Your privacy rights

Depending on where you live, you may have the right to request access to the personal information we hold about you, to request correction of inaccurate information, to request deletion, to request a portable copy, and to not be discriminated against for exercising these rights. Residents of California, Colorado, Connecticut, Virginia, and other states with comprehensive privacy laws have these rights, including the right to appeal a decision we make about a request.

You can exercise many of these rights directly in your account settings. To make a formal request, email us using the address below. We will verify your identity through your account email and respond within forty-five days, and we will tell you if we need more time.

You can unsubscribe from marketing email at any time using the link in any such message. We will still send transactional messages about your orders and account.

10. Children

The Services are intended for adults. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

11. HIPAA

North Lake Health is not acting as a covered entity or a business associate under the Health Insurance Portability and Accountability Act with respect to this website, because the site is not designed to receive or process protected health information. Clinics remain responsible for their own HIPAA obligations and should not upload patient health records to this site.

12. Changes to this policy

We may update this policy. We will change the effective date above and, for material changes, notify account holders by email.

Questions about this policy

Contact North Lake Health at clinics@northlakehealth.com or by mail at 1400 North Lake Parkway, Suite 300, Minneapolis, MN 55401.