Privacy Policy
Effective Date: August 23, 2026
Last Updated: August 24, 2026
Longevita Medical Institute, LLC ("Longevita Medical Institute," "Longevita MI," "Longevita Insights," "Longevita," "we," "our," or "us") respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect Personal Information through our public website, communications, subscriptions, product transactions, and related digital services.
1. Scope of This Policy
This Policy applies when you visit our public website; request information, an appointment, or a consultation; create or use an account; purchase or subscribe to a product or service; communicate with us by email, telephone, text message, chat, or another channel; connect a device, application, or data source; or use a nonclinical digital service that identifies this Policy as governing that service.
Longevita Medical Institute, LLC owns and operates the services offered under the Longevita name, including the sale and administration of Longevita Insights subscriptions. Longevita Insights is a Longevita-branded service delivered through one or more contracted third-party technology platforms. Those providers may process Personal Information on our behalf and may also provide service-specific privacy notices or terms that apply to their platform functions.
"Personal Information" means information that identifies, relates to, describes, or reasonably can be linked with an individual or household. It includes sensitive information such as health, wellness, financial, genetic, biometric, and precise-location information when applicable. We may provide supplemental privacy notices, consent forms, authorizations, or program terms for particular services. Those documents supplement this Policy and control for the service or data described in them if they state that they do so.
This Policy does not apply to employment or workforce records, or to a third-party website, application, device, or service that provides its own privacy notice and acts independently of Longevita.
2. Relationship to HIPAA and Medical Records
Some information that Longevita creates or receives while providing health care may be protected health information ("PHI") under the Health Insurance Portability and Accountability Act of 1996 ("HIPAA") and may also be protected by Florida medical-record confidentiality law. Longevita's separate HIPAA Notice of Privacy Practices explains how PHI may be used and disclosed and describes patients' HIPAA rights. If this Policy conflicts with the Notice of Privacy Practices with respect to PHI, the Notice of Privacy Practices and applicable law control.
Health or wellness information is not automatically PHI merely because it concerns health. Information collected before a patient relationship is established, through a direct-to-consumer wellness service, or from a personal device or application may be governed by this Policy and other consumer-protection or health-data laws rather than HIPAA. We apply the protections described in this Policy to that information and use additional protections when law or contract requires them.
Clinical patients. When Longevita Insights, the electronic health record, or another digital tool is used as part of an established patient relationship, information created or received for treatment, payment, or health-care operations may be PHI. Patients receive Longevita's Notice of Privacy Practices and applicable consents through the clinical onboarding process. Contracted technology providers may host or process PHI as business associates, but their involvement does not replace Longevita's responsibilities under HIPAA or Florida law.
Personal-use Longevita Insights subscriptions. Purchasing or using Longevita Insights solely for self-directed personal use does not, by itself, establish a clinician-patient relationship with Longevita. Longevita may administer the account and may have technical or account-level access, but its clinicians and staff do not undertake clinical review, safety monitoring, diagnosis, treatment, or response to alerts for a personal-use subscriber. Do not rely on the service for emergency response or medical decision-making. A separate personal-use acknowledgment or service terms may provide additional details.
Established patients using Longevita Insights. If Longevita Insights is incorporated into a patient's documented care plan, authorized clinicians or staff may review information for the purposes and at the intervals described in that plan. Unless a separate written remote-monitoring agreement expressly states otherwise, the service is not continuously monitored and does not provide guaranteed real-time review or response.
Do not submit urgent, emergency, or highly sensitive medical information through a general website form, ordinary email, public chat, or text message. Use the secure patient portal or another channel specifically designated by Longevita as secure. For a medical emergency, call 911 or go to the nearest emergency department.
3. Personal Information We Collect
The Personal Information we collect depends on how you interact with us and which services you use. It may include:
Identifiers and contact information. Name, postal address, email address, telephone number, date of birth, account identifiers, and similar contact or identity information.
Appointment and service information. Appointment or consultation requests, registration information, service selections, referral information, scheduling history, eligibility or intake information, and information needed to provide or coordinate a requested service.
Account, subscription, and transaction information. User name, account settings, subscription status, order history, billing and shipping information, transaction records, discounts, refunds, and customer-service records. Payment-card information may be collected and processed by our payment service providers; the transaction information we receive depends on the provider and payment method.
Health and wellness information. Information you choose to provide or connect, such as health goals, symptoms, medical history, medications, supplements, allergies, laboratory or diagnostic reports, wearable-device data, sleep, activity, exercise, nutrition, body-composition data, journal entries, assessments, and related measurements or derived metrics.
Communications and consent records. Messages, emails, call or chat content, form submissions, customer-service communications, communication preferences, marketing choices, and records of consent, authorization, opt-in, opt-out, and revocation requests.
Device, network, and website-use information. Internet Protocol address, browser type, device type and identifiers, operating system, language, approximate location derived from an IP address, referring website, pages viewed, links selected, date and time of activity, and information collected through cookies, pixels, logs, and similar technologies.
Connected-service and integration information. Information received from a wearable, health application, electronic health record, patient portal, laboratory, pharmacy, payment processor, shipping provider, or other service that you authorize or that is used to provide a requested service.
Sensitive information. Genetic or DNA information, biometric identifiers, government identification numbers, precise geolocation, or other sensitive information only when relevant to a service, permitted by law, and accompanied by any separate notice or consent that is required.
Derived information. Scores, trends, classifications, summaries, recommendations, or other information generated from the data described above. Derived information remains Personal Information when it can reasonably be linked to you.
3.1 Sources of Personal Information
We collect Personal Information directly from you; automatically from your browser or device; from a parent, legal guardian, personal representative, caregiver, or other person you authorize; from a connected device, application, or service you direct us to use; and from service providers or health-care participants involved in providing a requested service, such as laboratories, pharmacies, payment processors, shipping providers, scheduling systems, patient portals, and technology vendors.
4. How We Use Personal Information
We may use Personal Information to:
Provide and administer services. Respond to inquiries; evaluate service requests; schedule and manage appointments; create and maintain accounts; deliver subscriptions, products, reports, dashboards, and other requested services; process transactions; arrange shipping; and provide customer support.
Support health care and care coordination. Support treatment, payment, health-care operations, clinical administration, medication or laboratory workflows, referrals, and communications with providers, laboratories, pharmacies, and other participants as permitted by HIPAA, Florida law, and the Notice of Privacy Practices.
Communicate with you. Send appointment confirmations and reminders, registration instructions, account and billing notices, order and subscription updates, service messages, safety notices, responses to requests, and marketing communications when permitted and consented to as required.
Operate and improve our services. Maintain functionality; troubleshoot; conduct quality assurance; measure performance; understand service usage; develop or improve features, workflows, and content; and conduct analytics using information that is appropriately limited, aggregated, or de-identified.
Personalize and integrate services. Connect authorized data sources, display trends or summaries, create derived metrics, and tailor dashboards, education, or service recommendations to your selections and information.
Protect people and systems. Authenticate users; maintain security; prevent fraud, abuse, or unauthorized access; investigate incidents; enforce agreements; and protect the rights, safety, and property of Longevita, our users, patients, workforce, and others.
Comply with law and professional obligations. Maintain required records; respond to lawful process; fulfill reporting, audit, licensing, quality, and regulatory obligations; and establish, exercise, or defend legal claims.
Create de-identified or aggregated information. Create information that is not reasonably linkable to an individual and use it for analytics, quality improvement, operations, research, statistics, and service development, subject to the safeguards described below.
5. How We Disclose Personal Information
We disclose Personal Information only as reasonably necessary for the purposes described in this Policy, as directed by you, as permitted by our Notice of Privacy Practices for PHI, or as otherwise permitted or required by law. Categories of recipients may include:
Service providers and business associates. Vendors that host or support our website, electronic health record, patient portal, telemedicine, scheduling, communications, text messaging, email, analytics, payment, shipping, cybersecurity, data storage, integration, customer-service, or professional-support functions. We require contractual restrictions and, when a vendor handles PHI as a business associate, an appropriate business associate agreement.
Health-care and service participants. Clinicians, laboratories, pharmacies, imaging providers, referral partners, care coordinators, and other persons or entities involved in providing a requested service, as permitted by law or authorized by you.
Connected services selected by you. A device, application, portal, or other integration that you choose to connect or direct us to use. Once information is transmitted to an independent third party at your direction, that party's privacy notice may govern its subsequent handling.
Payment, transaction, and fulfillment providers. Payment processors, financial institutions, fraud-prevention services, shipping carriers, and fulfillment providers necessary to complete a purchase, subscription, refund, or delivery.
Professional advisers and insurers. Attorneys, accountants, auditors, consultants, insurers, and other advisers subject to confidentiality obligations.
Government, legal, and safety recipients. Courts, regulators, licensing authorities, law enforcement, public-health authorities, or other recipients when disclosure is required or permitted by law, lawful process, professional obligations, or a need to protect rights, safety, or property.
Business transaction recipients. A prospective or actual purchaser, investor, lender, successor, or other participant in a merger, financing, reorganization, sale, or transfer of assets, subject to appropriate confidentiality and legal restrictions.
Recipients of de-identified or aggregated information. We may disclose information that has been de-identified or aggregated so that it is not reasonably linkable to an individual, subject to applicable law and our commitment not to re-identify it except to test privacy or security controls or as otherwise permitted by law.
5.1 No Sale of PHI or Health Data for Third-Party Advertising
We do not sell PHI. We do not disclose PHI for marketing when HIPAA requires an authorization unless a valid authorization has been obtained. We do not sell Personal Information for monetary consideration, and we do not disclose medical, wellness, appointment, portal, genetic, or text-message opt-in information to third parties for their own targeted advertising or marketing.
5.2 Text-Messaging Data
Mobile telephone numbers, text-message originator opt-in data, and consent records are not sold, rented, or disclosed to third parties or affiliates for their own marketing or promotional purposes. We may disclose those data to our text-messaging platform, telecommunications carriers, and other service providers solely as necessary to transmit messages, administer the messaging program, maintain consent and opt-out records, prevent abuse, and comply with law.
6. Cookies, Analytics, and Online Tracking
Our public website may use cookies and similar technologies for essential functions, security, preference management, performance measurement, and analytics. These technologies may collect the device and website-use information described above. Where required, we provide a cookie or preference tool that allows you to make choices about nonessential technologies. You may also use browser controls, although disabling some technologies may impair website functions. We honor legally required browser-based opt-out signals when they apply to our processing.
We configure our website so that third-party advertising pixels and session-replay technologies are not used on authenticated patient pages, the patient portal, or forms specifically designed to collect health information unless the use is permitted by applicable law and the vendor is subject to all required contractual protections. Acceptance of a cookie banner or general privacy notice is not a HIPAA authorization for disclosure of PHI.
We do not use Personal Information collected through clinical services or secure patient workflows for cross-context behavioral advertising. If our tracking practices materially change, we will update this Policy and provide any notice or choice required by law before the new practice begins.
7. Artificial Intelligence and Automated Tools
We may use software-enabled or artificial-intelligence-assisted tools to help transcribe, extract, classify, summarize, organize, analyze, or draft information; support customer service and administrative workflows; identify trends; or generate reports and suggested content. These tools support our personnel and do not replace professional clinical judgment. We do not make decisions that produce legal or similarly significant effects concerning an individual based solely on automated processing.
When an artificial-intelligence or technology vendor processes PHI on our behalf, we require an appropriate business associate agreement when required by HIPAA and restrict processing to permitted purposes. We do not intentionally submit PHI or identifiable health or wellness information to publicly available AI tools, and we do not permit such information to be used to train or improve a vendor's public or general-purpose model. Before enabling an AI-assisted function, we require review of the applicable contract, business associate agreement, subprocessors, retention, model-training terms, access controls, data location, auditability, and human-review requirements. Personnel review is applied according to the purpose and risk of the output.
8. Communications
8.1 Email and Other Electronic Communications
We may send administrative, transactional, clinical, account, subscription, order, or safety communications that are necessary to provide a requested service or manage our relationship with you. You may opt out of promotional email by using the unsubscribe method in the message. An opt-out from promotional messages does not prevent us from sending nonpromotional communications that are necessary for an account, transaction, subscription, appointment, patient relationship, security, or legal obligation.
Ordinary email and text messaging may not be encrypted end to end. Do not use those channels for urgent or highly sensitive medical information. You may ask us about available alternative communication methods.
8.2 Text Messages
When you provide a mobile telephone number and give the separate consent required for a text-message program, Longevita may send messages relating to inquiries, appointment scheduling and reminders, registration, account or subscription updates, billing, orders, care coordination, customer service, and, only when separately consented to as required, marketing or promotional content.
Message frequency varies. Message and data rates may apply. Reply STOP to opt out of the applicable text-message program or HELP for assistance. We will honor revocation and opt-out requests as required by law and maintain records of consent and opt-out activity. Consent to receive marketing text messages is not a condition of purchasing products or receiving medical or other services. Opting out of text messages does not automatically opt you out of email, telephone, or other channels; those preferences must be managed separately.
8.3 Calls, Chats, and Recordings
We do not intentionally record or transcribe a telephone call, video session, chat, or other communication unless we first provide notice and obtain the prior affirmative consent of all parties when required by law. When recording or transcription is offered to a client or patient, we may obtain written consent during onboarding and will also provide notice at or immediately before the particular recorded or transcribed interaction. A general onboarding consent does not eliminate any requirement for event-specific notice or consent. We do not use hidden recording or session-replay technology on authenticated patient pages or forms intended to collect health information unless all applicable notice, consent, HIPAA, and contractual requirements have been satisfied.
9. Data Retention, De-Identification, and Disposal
We retain Personal Information for as long as reasonably necessary to provide services, maintain clinical and business records, comply with legal and professional requirements, complete transactions, resolve disputes, enforce agreements, protect security, and support the other purposes described in this Policy. Retention periods vary based on the type and sensitivity of the information, the service involved, the duration of our relationship, contractual requirements, applicable limitation periods, and legal record-retention duties. Medical records are retained in accordance with the Notice of Privacy Practices and applicable law.
When information is no longer required, we take reasonable steps to delete, destroy, anonymize, or de-identify it, subject to legal holds, archival and backup cycles, fraud prevention, security requirements, and other lawful exceptions. For PHI described as de-identified, we use a method permitted by HIPAA. We do not attempt to re-identify de-identified information except to test privacy or security controls or as otherwise permitted by law.
For a personal-use Longevita Insights subscription, cancellation ends future access to the subscription and we will process or facilitate an account-deletion request in accordance with applicable service terms. Deletion is subject to legal or contractual retention duties, security and fraud-prevention needs, disputes, archival and backup cycles, and technical feasibility. Clinical records created or received in an established patient relationship are retained as required by law and are not deleted merely because a digital subscription ends.
We may create and separately store aggregated cohort statistics or de-identified information derived from Longevita Insights. When the source information is PHI, we use a method permitted by HIPAA before treating the resulting information as de-identified. The resulting dataset is maintained without direct identifiers and with no reasonable basis to believe it can be used to identify an individual. We apply reasonable security controls and prohibit re-identification except for authorized privacy or security testing or as otherwise permitted by law. Validly de-identified or aggregated information may be retained after an account is closed.
10. Data Security and Incident Response
We use reasonable administrative, technical, and physical safeguards designed to protect Personal Information. Safeguards may include access controls, authentication, workforce training, vendor oversight, secure configuration, encryption where appropriate, logging, backup, and incident-response procedures. No method of transmission, storage, or security is completely reliable, and we cannot guarantee absolute security.
If we determine that a privacy or security incident requires notice, we will notify affected individuals, regulators, and other parties in the manner and within the time required by applicable law. Please notify us promptly if you believe an account, communication, device connection, or Personal Information associated with Longevita has been compromised.
11. Your Rights and Choices
Depending on the type of information, the service, and where you live, you may have the right to request access to, correction of, deletion of, or a copy of certain Personal Information; to withdraw consent when processing is based on consent; to opt out of certain marketing or targeted advertising; to limit certain uses of sensitive information; or to appeal a denial of a request. These rights are subject to identity verification and legal exceptions, including obligations to retain medical, transaction, security, and legal records.
HIPAA rights. For rights concerning PHI, including access, amendment, an accounting of certain disclosures, confidential communications, or restrictions, follow the process in Longevita's Notice of Privacy Practices.
Account and accuracy. You may update certain account or profile information through an available account interface or by contacting us.
Marketing communications. Use the unsubscribe link in promotional email or contact us. Reply STOP to the applicable text-message program.
Cookies and tracking. Use the website preference tool, browser controls, or a legally recognized browser-based opt-out signal when applicable.
Connected devices and applications. Use the relevant account or integration controls to disconnect a service. Disconnecting generally stops future transfers but does not automatically delete information previously received and lawfully retained.
To submit a non-PHI privacy request, contact us using the information below and describe the request and the service involved. We may ask for information reasonably necessary to verify your identity and authority. An authorized agent may submit a request when permitted by law and when we can verify the authorization. We will not discriminate against you for exercising a privacy right where prohibited by law.
12. Children and Minors
Our public website, accounts, subscriptions, and general digital services are intended for adults age 18 or older and are not directed to minors. A person under 18 may not create an account, purchase a subscription, or directly submit Personal Information through a general website form or nonclinical digital service. We do not knowingly collect Personal Information from a minor through those general services. If we learn that such information was collected, we will deactivate the applicable account and take reasonable steps to delete the information, subject to applicable law and legitimate record-retention requirements.
This age restriction applies to general website and nonclinical digital services; it does not determine whether Longevita may provide health care to a minor. Health care for minors, communications with parents or legal guardians, and access to a minor's medical records are handled through designated clinical processes, secure systems, the Notice of Privacy Practices, and applicable law. A parent or legal guardian should not use a general website form to transmit a minor's sensitive medical information unless the form is specifically designated as secure.
13. Genetic and Biometric Information
When a service involves genetic testing, a DNA sample, DNA-analysis results, or a biometric identifier, we provide any notice and obtain or confirm the express or other consent required by applicable law for the relevant collection, analysis, receipt, use, retention, maintenance, disclosure, or destruction. When Longevita receives genetic-test results, we provide any notice required by Florida law and treat the results as confidential. We do not use or disclose genetic or biometric information for a materially different purpose without any additional consent required by law.
When Longevita orders testing through an independent laboratory, the laboratory's consent governs the laboratory's collection and analysis. Because that consent may not cover Longevita's later receipt, storage, use, or disclosure, we review the applicable consent and obtain a supplemental consent or authorization when required. Results received as part of an established patient relationship are maintained in the patient's medical record and handled under HIPAA, the Notice of Privacy Practices, Florida medical-record law, and applicable genetic-information restrictions. Genetic information uploaded through a personal-use service outside a patient relationship may be subject to a separate notice or consent.
14. Third-Party Websites, Services, and Integrations
Our website or services may link to, embed, or connect with third-party websites, devices, applications, laboratories, pharmacies, payment services, shipping providers, patient portals, or other services. A third party that acts independently of Longevita may collect and use information under its own privacy notice and terms. Review those documents before directing a transfer or using the third-party service. Longevita is responsible for its own selection and management of service providers to the extent required by law, but is not responsible for the independent privacy practices of a third party that you choose to use.
15. Geographic Scope
Longevita is based in Florida, and this website and the services described here are directed primarily to users in the United States. Personal Information may be processed and stored in the United States. If we offer a service to residents of another jurisdiction, additional notices or rights may apply.
16. Changes to This Policy
We may update this Policy to reflect changes in our services, technology, vendors, data practices, or legal obligations. We will post the revised Policy with an updated effective date. When required by law, we will provide additional notice or obtain consent before applying a material change to previously collected Personal Information.
17. Contact Us
Questions, complaints, or non-PHI privacy requests may be directed to the contact point below. Requests received through the general inbox are routed to the individual designated internally to handle privacy matters.
Privacy and Records Requests
Longevita Medical Institute, LLC
Email: info@LongevitaMI.com
Phone: 407-205-7877
Address: 1724 33rd St., Suite 200, Orlando, FL 32839
Requests concerning PHI or medical records should be made using the process in Longevita's Notice of Privacy Practices or through the secure patient portal.