Privacy Policy | VAULT Men's Health

1. Overview

VAULT Men's Health ("VAULT," "we," "us"), operated by Read Ranch LLC, is committed to protecting your privacy and handling your Protected Health Information (PHI) in compliance with the Health Insurance Portability and Accountability Act (HIPAA) and applicable state laws.

2. Information We Collect

Personal Information: Name, email, phone number, date of birth, address, payment information.

Health Information (PHI): Medical history, current medications, allergies, health conditions, treatment records, prescription information, lab results, physician notes.

Usage Data: IP address, browser type, pages visited, session duration (collected automatically).

3. How We Use Your Information

To provide telehealth consultations and peptide therapy services
To process prescriptions through licensed pharmacies
To manage your subscription and billing
To communicate about your treatment and orders
To comply with legal and regulatory requirements
To improve our services (using de-identified data only)

4. HIPAA Compliance

We implement administrative, technical, and physical safeguards to protect your PHI, including:

End-to-end encryption for data in transit and at rest
Role-based access controls limiting PHI access to authorized personnel
Regular security audits and vulnerability assessments
Business Associate Agreements (BAAs) with all third-party service providers handling PHI
Employee training on HIPAA requirements

5. Information Sharing

We do not sell your personal information. We may share your information with:

Healthcare Providers: Licensed physicians who provide consultations
Pharmacies: Licensed compounding pharmacies that fulfill prescriptions
Payment Processors: Stripe for secure payment processing
Technology Providers: Supabase (database), Vercel (hosting) — under BAAs
Legal Requirements: When required by law, court order, or government regulation

6. Your Rights Under HIPAA

You have the right to:

Access your PHI and request copies of your medical records
Request corrections to your PHI
Request restrictions on certain uses of your PHI
Request confidential communications
Receive an accounting of disclosures of your PHI
File a complaint if you believe your privacy rights have been violated

7. Data Retention

We retain your health information for a minimum of 7 years after your last interaction with our services, as required by healthcare regulations. You may request deletion of your account, but certain records must be retained per legal requirements.

8. Data Security

We use industry-standard security measures including:

256-bit AES encryption for data at rest
TLS 1.3 encryption for data in transit
Multi-factor authentication for administrative access
Regular penetration testing
SOC 2 Type II compliant infrastructure (Supabase, Vercel)

9. Cookies and Tracking

We use essential cookies for authentication and session management. We do not use third-party advertising trackers on protected health pages. Analytics on public pages use privacy-respecting tools.

10. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect information from minors.

11. California Privacy Rights (CCPA)

California residents have additional rights under the CCPA, including the right to know what personal information we collect, the right to delete personal information, and the right to opt-out of the sale of personal information (we do not sell personal information).

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or through the platform.

13. Contact Us

For privacy inquiries, HIPAA requests, or complaints:

VAULT Men's Health / Read Ranch LLC
Email: support@vaultmenshealth.com
HIPAA Privacy Officer: privacy@vaultmenshealth.com