Privacy Policy
Last updated September 2026. This is IAM’s current operating policy.
What this policy covers
This policy describes how IAM collects, uses, and shares information when you visit our site, create an account, or receive care. IAM means IAM Health, which operates the websites and patient platform and provides medical services. Health information is treated as sensitive. We do not sell your personal health information.
Information we collect
Account details such as name, email, phone, date of birth, and shipping address. Health information you submit for care (history, symptoms, goals, lab results, and photos if requested). Payment details are handled by our payment processor; we do not store full card numbers. Technical data such as device, browser, and approximate location from your IP address. Cookies needed to keep you signed in and to understand how the site is used.
How we use it
To create and maintain your account, complete provider review, order labs, fulfill prescriptions through licensed US pharmacies, ship medication, bill you, provide support, meet legal and professional obligations, and improve the service. We do not use your health information to sell ads.
Who we share it with
Licensed providers on your care team. Licensed US pharmacies that dispense your medication. Clinical laboratories when labs are ordered. Payment processors. Vendors who host our systems, send messages, or provide support, under contracts that limit how they may use your information. We share information when required by law, to protect safety, or with your direction.
HIPAA
Your health information is protected health information under HIPAA. It is used and disclosed for treatment, payment, and health care operations, and otherwise only with your authorization or as the law allows. Vendors that handle it for us do so under business associate agreements. A copy of our Notice of Privacy Practices is available through the contact form or, for current patients, through secure portal messages.
Retention and security
We keep clinical records for as long as required by medical-record and pharmacy rules, and account data for as long as your account is active plus a period needed for billing, disputes, and legal holds. We use administrative, technical, and physical safeguards appropriate to health information. No method of transmission is perfectly secure.
Your choices
You may access or update account details, ask for a copy of records we hold, or request deletion where the law allows (clinical records may need to be retained). You can control non-essential cookies in your browser. Marketing emails include an unsubscribe link. Some requests may be limited when we must keep information for care, payment, or law.
State privacy rights
Depending on where you live, you may have additional rights to know, correct, delete, or opt out of certain sharing of personal information. IAM does not sell personal information as that term is commonly defined in US state privacy laws. To exercise a right, use the contact form or, if you are a current patient, send a secure portal message.
Children
IAM services are for adults 18 and older. We do not knowingly collect information from children.
Changes and contact
We may update this policy. The date below is the last revision. For privacy questions, use the contact form or, if you are a current patient, send a secure message through the portal.