Privacy Policy
This Privacy Policy explains how Asclepius HC, doing business as Asclepius Healing Center and Altoona Peptides ("we," "us," "our"), collects, uses, shares, and protects information when you visit https://www.altoonapeptides.com, purchase from our store, or use our services. It also explains the choices you have about your information.
Contents
- Scope, and how health information is handled
- Information we collect
- How we use information
- How we share information
- What we do not do
- Cookies and tracking
- Email and text messages
- How long we keep information
- How we protect information
- Your rights and choices
- State privacy rights
- Children's privacy
- Third-party sites
- Changes to this policy
- Contact us
1. Scope, and how health information is handled
This policy covers information we collect through our website and store.
Health information is handled differently. The licensed providers who evaluate you and the licensed pharmacies that dispense medication are independent HIPAA-covered entities. The protected health information you share during a telehealth consultation — your medical history, intake responses, diagnoses, and prescriptions — is held by those providers and pharmacies under HIPAA and under their own Notices of Privacy Practices, not under this policy. You will receive or be directed to those notices during the intake process.
We receive only limited information about your consultation, generally whether an order was approved or declined and what needs to be fulfilled or refunded. Where we do handle protected health information on a provider's behalf, we do so under a business associate agreement and apply HIPAA's requirements to that information.
Our telehealth intake and consultation flow is operated by Qualiphy. Information you enter into that flow is governed by Qualiphy's privacy practices and by the practices of the providers using it.
2. Information we collect
Information you give us
- Identity and contact information: first and last name, email address, phone number, and shipping and billing addresses.
- Information required for prescription fulfillment: date of birth and sex assigned at birth. We collect these at checkout because prescribing providers and dispensing pharmacies require them to verify identity and to prepare a prescription lawfully.
- Account information: username and password, and your saved addresses and order history.
- Order information: the products you purchase, order notes you choose to add, and coupon codes you apply.
- Correspondence: messages you send us by email, contact form, or phone.
Information collected automatically
- Device and usage data: IP address, browser type and version, operating system, referring page, pages viewed, links clicked, and timestamps.
- Cookies and similar technologies: described in Section 6.
Payment information
Payment card details are collected and processed directly by Stripe. We do not receive or store full card numbers. We may receive a confirmation of payment, the last four digits of the card, and the card brand.
Information from other sources
We may receive fulfillment status from pharmacies, delivery status from shipping carriers, approval or decline status from the telehealth platform, and fraud-screening signals from our payment processor.
3. How we use information
We use the information described above to:
- Process and fulfill your orders, including routing your consultation and coordinating fulfillment with the pharmacy;
- Verify eligibility, including age and state of residence;
- Communicate with you about your account, orders, consultations, shipments, and refunds;
- Provide customer support and respond to your questions;
- Process payments, issue refunds, and prevent fraud and abuse;
- Operate, maintain, secure, and improve the website and store;
- Understand aggregate usage patterns so we can improve the experience;
- Send marketing communications where you have consented, and manage your preferences; and
- Comply with legal obligations and enforce our Terms and Conditions.
Our legal bases, where applicable, are performance of a contract with you, our legitimate interests in operating and securing our business, your consent, and compliance with legal obligations.
4. How we share information
We share information in the following circumstances, and not otherwise:
- With licensed providers and pharmacies — to enable your consultation and to fulfill an approved prescription.
- With the telehealth platform (Qualiphy) — to operate the intake and consultation flow.
- With service providers — payment processing, website hosting, email delivery, analytics, customer support tooling, and shipping. These vendors may use your information only to perform services for us.
- With shipping carriers — the name and address needed to deliver your order.
- For legal reasons — when we believe disclosure is required by law, subpoena, or other legal process, or is necessary to protect the rights, property, or safety of any person.
- In a business transaction — if we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this policy.
- With your direction or consent — where you ask us to share information with someone.
5. What we do not do
- We do not sell your personal information.
- We do not sell or share health information for advertising or marketing purposes.
- We do not use protected health information to target advertising to you.
- We do not disclose your medical information to employers, insurers, or third parties for their own purposes.
6. Cookies and tracking
We use cookies and similar technologies for the following purposes:
- Strictly necessary — keeping you logged in, remembering your cart, and securing checkout. These cannot be disabled without breaking the site.
- Preferences — remembering your settings and choices.
- Analytics — understanding how visitors use the site so we can improve it. We use [ANALYTICS PROVIDER, e.g. Google Analytics — remove this line if not used].
- Marketing — [DESCRIBE ANY ADVERTISING PIXELS, e.g. Meta Pixel, Google Ads — remove this line if none are used].
Most browsers let you refuse or delete cookies through their settings. Blocking strictly necessary cookies will prevent parts of the store from working. Some browsers offer a Global Privacy Control signal, and we honor it where required by law.
Note: if any advertising or analytics pixel fires on pages where a visitor's health interest could be inferred — a product page for a specific medication, for example — treat that carefully. Confirm with counsel before enabling marketing pixels on product, cart, checkout, or account pages.
7. Email and text messages
Transactional messages about your account, order, consultation, and shipment are part of the service and are not marketing. You cannot opt out of them while you have an active order or account.
Marketing messages are sent only with your consent. You can withdraw consent at any time using the unsubscribe link in any marketing email, by replying STOP to a text message, or by contacting us. Message and data rates may apply. We do not share your phone number with third parties for their own marketing.
8. How long we keep information
We keep information for as long as needed to provide the Services and for legitimate business and legal purposes:
- Account information — for as long as your account is active, plus 2 years;
- Order and transaction records — for at least 7 years, to meet tax and accounting requirements;
- Website analytics — typically 26 months in aggregated or de-identified form;
- Marketing preferences — until you withdraw consent, plus a suppression record so we can honor your opt-out.
Medical records held by providers and pharmacies are retained under their own legal obligations, which are typically longer and which we do not control.
9. How we protect information
We use administrative, technical, and physical safeguards designed to protect personal information, including TLS encryption in transit, access controls limiting who can view customer data, and vetting of the vendors we use.
No method of transmission or storage is completely secure. We cannot guarantee absolute security, and you share information with us at your own risk. If we become aware of a breach affecting your information, we will notify you as required by applicable law.
10. Your rights and choices
Depending on where you live, you may have the right to:
- Know what personal information we hold about you and how we use it;
- Access a copy of that information;
- Correct information that is inaccurate;
- Delete information, subject to exceptions for records we must keep;
- Opt out of the sale or sharing of personal information — note that we do not sell or share personal information;
- Withdraw consent to marketing communications; and
- Not be discriminated against for exercising these rights.
To make a request, email support@asclepiushc.com or write to us at the address in Section 15. We will verify your identity before responding, and will respond within the timeframe required by applicable law. You may use an authorized agent where the law permits.
Requests concerning medical records held by a provider or pharmacy should be directed to that provider or pharmacy, since those records are under their control.
11. State privacy rights
Residents of states with comprehensive privacy laws — including California, Colorado, Connecticut, Virginia, and others — have the rights described in Section 10. California residents may also request disclosure of the categories of personal information collected, the sources, the business purposes, and the categories of third parties with whom it was shared in the preceding twelve months; that information is described throughout this policy.
We do not knowingly process sensitive personal information beyond what is necessary to provide the Services you request. Date of birth and sex assigned at birth are collected solely to enable lawful prescribing and dispensing.
If you believe we have not resolved your request satisfactorily, you may have a right to appeal or to contact your state attorney general.
12. Children's privacy
The Services are intended for adults 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with information, contact us at support@asclepiushc.com and we will delete it.
13. Third-party sites
Our site may link to third-party websites, including The Gorilla House Gym and our partner platforms. We are not responsible for the privacy practices of those sites. Review their policies before providing information.
14. Changes to this policy
We may update this policy from time to time. When we do, we will revise the "Last updated" date above. For material changes, we will provide additional notice through the Services or by email. Continued use of the Services after an update constitutes acceptance of the revised policy.
15. Contact us
Questions, requests, or complaints about privacy:
Asclepius HC
Attn: Privacy
3200 Fairway Dr Suite 3,
Altoona, PA 16602
Email: support@asclepiushc.com
Phone: 814-414-7210
