Privacy Policy

This store belongs to Robert Lufkin MD. It is the seller of record for what it sells. The shop, cart, checkout, accounts, check-ins, secure messages and chat assistant are run on its behalf by Platform Health, which holds what they collect. Platform Health is the merchant of record: it processes your payment through Stripe. Platform Health is not a medical provider.

A telehealth program is different. When you choose to start an online visit, you leave this store for the online visit of an independent medical group. The online visit, the health questionnaire, your patient record, the prescription and its checkout all happen there, and are collected by that provider’s service. Its own privacy policy, not this page, governs the health information you give it. The link that takes you there tells it which store sent you.

• Your cart. Cookies in your browser and a copy of the cart on our side hold the products and quantities you add. If you are signed in, your name and email are kept with the cart, and we may email you a reminder about a cart you left.
• Checkout. Your name, email, shipping address and what you ordered. You pay on a page run by Stripe, and your card details go to Stripe, never to us.
• An account, if you make one. Your name, email and a password, which we store only as a one-way hash, along with your order history, the addresses you save and your subscriptions. Cards you save are stored by Stripe, not by us. You can shop without an account.
• A check-in, if you answer one. Some product pages offer an optional check-in about your goals and routine, which can include health details you choose to give. The answers are shared with Robert Lufkin MD, whose staff can see them. A check-in is not a medical assessment, and it is not the online visit for a prescription product.
• Topics you ask to hear about, if you sign up. On the topics page you give your name and email, the topics you pick, and, only if you choose to, your sex and age range. They are used to email you from Robert Lufkin MD about those topics and for nothing else: never shared with advertisers or sent to an AI service. Every email has a link to stop them.
• The chat assistant, if you use it. What you type is sent to an AI service to write the reply. If you ask for a person, what you wrote is kept so someone can answer.
• Ask the evidence, if you use it. Your question is sent to Longevity University, our service provider for evidence search, to be answered from published studies. It goes with no name, email, IP address or cookie. Longevity University keeps the questions it is asked, with nothing that names you; we keep only a count of the topics people ask about, never the question.
• Technical context. Your IP address and browser, as every website receives them.

• To run your account, take and deliver your orders, and answer you.
• To keep records the law requires — orders, taxes, and proof of the terms and consents you agreed to.
• To send you marketing by email or text only if you opted in, each separately; you can stop at any time.
• To keep the site secure and working, and to prevent fraud.
• To share health information with your clinic, the independent medical group and the pharmacy only to deliver a program you asked for, and only with your consent.

Essential cookies keep your cart, keep you signed in and remember your cookie choice. On your first visit the cookie notice offers Accept all, Reject non-essential, or Manage preferences (analytics and advertising separately). No analytics or advertising tag loads until you choose, and we never place one on a page where you enter health information — programs, visits, check-ins, checkout, your account or messages — whatever you choose.

We honor the Global Privacy Control signal: a browser that sends it is treated as having rejected analytics and advertising, and we record that. Browsers’ “Do Not Track” setting has no agreed meaning, so we rely on Global Privacy Control and your cookie choice instead. You can change your choice at any time from Your Privacy Choices.

With Robert Lufkin MD, with the supplier that ships your order, with Stripe, and with shipping carriers, as needed to fulfil what you ordered; with the independent medical group and pharmacy only when you start a program and consent to it; and with service providers who host, email and support the site under contracts that limit their use of it. A question you ask in Ask the evidence goes to Longevity University to be answered, as described above. We do not sell personal information, and we do not share it for cross-context behavioral advertising from pages where you enter health information.

We email you about an order you place. After a first order you may also get a short series of follow-up emails about your order and your account. If you make an account you choose whether to get marketing email; it is off unless you turn it on. If you sign up on the topics page, you get email about the topics you picked until you unsubscribe.

Order and payment records are kept for 7 years; records of your consents and acceptances (with the date, IP address and the version of the words you agreed to) for the life of your account plus 6 years, or 5 years after you withdraw a marketing consent; cookie choices for 2 years. The full schedule is in the Notice at Collection. Everything else is kept until you ask us to delete it or delete your account.

Depending on where you live (including California, Washington, Nevada, Connecticut and other states), you can ask to know and get a copy of what we hold about you, to correct it, to delete it, to opt out of any sale or sharing, and to withdraw consent to the collection or sharing of your health data. Submit a request on our privacy request form or write to privacy@joinplatformhealth.com. We confirm receipt, verify that the request is yours, and answer within 45 days. An authorized agent may ask for you with your signed permission. We will not treat you differently for using these rights. If you have an account you can also delete it from your account page.

Records that the law requires us to keep — such as order records and proof of consents — are kept for their retention period even after a deletion request, and used for nothing else.

The site is for adults. You must be 18 or older to create an account, and we do not knowingly collect information from children under 13.

We publish a new version with its date above when this policy changes, and tell account holders about material changes before they take effect.

Longevity Health Labs, LLC d/b/a Platform Health · privacy@joinplatformhealth.com. See also the Terms of Use.