Privacy Policy

1. Introduction

Diab Longevity ("Company," "we," "our," or "us") operates a private longevity and regenerative medicine platform based in Miami-Dade County, Florida. This Privacy Policy describes how we collect, use, disclose, safeguard, and protect information collected through:

• Our website
• Our mobile or web-based applications
• Member portals
• Electronic communications
• In-person clinical interactions
• Third-party integrated platforms

This Privacy Policy is intended to comply with:

• The Health Insurance Portability and Accountability Act of 1996 (HIPAA)
• The HIPAA Privacy Rule and Security Rule
• The HITECH Act
• Florida Information Protection Act (FIPA), Fla. Stat. § 501.171
• Applicable federal and Florida data protection and consumer protection laws

If you are a Member receiving clinical services, certain information may also be governed by our separate HIPAA Notice of Privacy Practices ("NPP"), which controls in the event of any conflict.

2. Definitions

Protected Health Information ("PHI") has the meaning defined under HIPAA and includes individually identifiable health information created or received by a covered entity.

Personal Information means any information that identifies or can reasonably be linked to an identifiable individual.

3. Information We Collect

We may collect:

A. Identifiers

Name, address, email address, phone number, date of birth, government ID, emergency contact.

B. Health Information

Medical history, lab results, diagnostic imaging, genomic testing results, peptide protocols, hormone therapy data, epigenetic data, biometric metrics, and other clinical records.

C. Financial Information

Payment information, billing records, membership subscription data. Payment card data is processed by third-party payment processors and is not stored on our servers.

D. Device and Usage Information

IP address, device type, browser type, usage logs, app interaction data.

E. Third-Party Diagnostic Data

Results from MRI facilities, genomic labs, AI diagnostic platforms, peptide pharmacies, and other external providers.

4. How We Use Information

We use collected information to:

• Provide medical services
• Conduct diagnostic reviews
• Deliver membership services
• Operate and improve our platform
• Comply with legal obligations
• Process payments
• Coordinate care with external providers
• Maintain regulatory compliance

We do not sell PHI.

5. HIPAA Compliance

To the extent Diab Longevity qualifies as a Covered Entity under HIPAA:

• We maintain administrative, technical, and physical safeguards
• We limit PHI access to authorized personnel
• We enter into Business Associate Agreements (BAAs) where required
• We comply with HIPAA breach notification requirements

Members have rights under HIPAA including:

• Right to access records
• Right to request amendment
• Right to request restrictions
• Right to receive accounting of disclosures
• Right to file a complaint

Requests may be submitted in writing to our Privacy Officer at:
Diab Longevity
550 Biltmore Way, Suite 1201
Coral Gables, FL 33134

(954) 947-1788

6. Third-Party Service Providers

We utilize third-party vendors, including but not limited to:

• Diagnostic laboratories
• Imaging facilities
• AI analytic platforms
• App hosting providers
• Cloud storage services
• Payment processors
• Telehealth platforms

These providers may process personal information or PHI pursuant to contractual agreements.

We are not responsible for independent privacy practices of third parties outside of contractual healthcare relationships.

7. Data Security

We implement:

• Encryption in transit (TLS/SSL)
• Access controls
• Multi-factor authentication (where applicable)
• Role-based access
• Data minimization practices

No system can guarantee absolute security.

8. Data Retention

We retain medical records in accordance with Florida medical record retention laws and federal requirements. Non-medical data is retained only as long as reasonably necessary.

9. Cookies and Tracking

Our website may use cookies and analytics tools. Users may adjust browser settings to limit cookies, though certain functionality may be impaired.

10. Children

Our services are not directed to individuals under 18 unless expressly enrolled through a legal guardian.

11. International Users

Services are intended for U.S. residents. International users access the platform at their own risk.

12. Changes

We may update this Privacy Policy periodically. Continued use constitutes acceptance.

13. Contact