Privacy Policy
This policy covers this website — thepeptidelounge.com — and the two forms on it. It is deliberately narrow, because the website is deliberately narrow: it collects enquiries, not medical records. If and when you become a member, your health information is governed by a separate Notice of Privacy Practices under federal health privacy law, and that document, not this one, is the one that matters for your care.
Who we are
The Peptide Lounge, LLC, a California limited liability company with its principal address at 3943 Irvine Blvd, Ste 241, Irvine, CA 92602 (“The Peptide Lounge”, “we”, “us”). We operate this website. We are not currently providing treatment or taking payment through it.
What we collect
Only what you type into one of two forms, plus anonymous usage counts.
The assessment (/assessment)
- Your goals. Which of our eight protocol categories interest you, which one matters most, and — for your top three — the specific outcome you want within it.
- Preferences. Where you are starting from, how soon you want to begin, whether you have had a blood panel in the last 90 days (yes or no only, never results), whether you would prefer telehealth or an in-person lounge, which lounge is nearest, and whether injections are acceptable.
- Profile. A programme track and an age range — a band such as 40–49, never a date of birth.
- Contact. Name, email, phone, and city and state.
The interest form (/welcome)
- Whether you are enquiring as a prospective patient, a clinician, or someone with a space to host.
- A small number of qualifying answers depending on which you are — for clinicians, the states you are licensed in; for space owners, your interest in hosting.
- Contact details, and for business enquiries a practice or business name, website and social handle.
Analytics
First-party only. We record page views and how far people get through a form, using a random identifier stored in your own browser. There are no advertising cookies, no third-party trackers, no advertising pixels, and no cross-site profiling. Analytics records expire automatically after 90 days.
What we deliberately do not collect here
This is a design decision in the forms themselves, not just a promise in a policy:
- No health information. The assessment asks what you want to improve, never what is wrong with you. It does not ask about conditions, medications, diagnoses, lab values, weight, BMI or height.
- No free-text box. Anywhere in the assessment. An open field is an invitation to type exactly what we must not collect, so there isn't one.
- No date of birth — an age band only.
- Nobody under 18. Selecting an age under 18 ends the assessment immediately: no contact form appears, nothing is submitted, and the answers already given are discarded from memory.
- No payment details. The website takes no payments.
How we use it
- To contact you about your enquiry, and to tell you what your next step would be.
- To send you occasional email about protocols and locations opening, until you tell us to stop. Every one of those has an unsubscribe link, and unsubscribing does not affect a reply to an enquiry you actually made.
- To decide which protocols and which locations to open first — in aggregate.
- To route your enquiry to a clinician licensed in your state, or to the right lounge.
- To create your member account if you asked us to when the patient portal opens.
- To operate and improve the website, and to keep it secure.
- To meet legal obligations.
We do not use your enquiry to make automated decisions about you, and we do not build advertising profiles from it.
Who we share it with
A short list, and no one on it is an advertiser.
- Corevia Health LLC. Corevia provides the clinical technology platform behind The Peptide Lounge and operates the infrastructure that receives and stores enquiries from this website. It handles that information on our behalf and under our instructions.
- Salesforce. Our customer relationship management system. Enquiries from this website are stored there so the right person can follow up and so we can keep track of that conversation, and it is also what we use to send you email — both a reply to your enquiry and, if you have not opted out, occasional updates about protocols and locations opening. Salesforce holds the information on our behalf and under our instructions, and is not permitted to use it for its own purposes.
- Amazon Web Services. Hosting and storage, in the United States.
- The clinicians and partner lounges we would connect you with, once you ask us to.
- Service providers who help us operate — for example email delivery — bound to use the information only for that purpose.
- Where the law requires it, or to protect someone's safety or our legal rights.
- In a merger or sale of the business, as part of the assets transferred.
We do not sell your information, and we do not share it for cross-context behavioural advertising.
How long we keep it
Enquiries are kept until you ask us to delete them, or until they are no longer useful to us — we do not currently apply an automatic expiry, and we would rather say so plainly than imply a schedule we do not operate. Analytics records expire after 90 days. Ask us to delete your enquiry and we will, using the contact below.
How we protect it
Submissions are encrypted in transit and at rest, held in the United States, and reachable only by the small number of people who need them. No system is perfect and we will not claim otherwise; if there is ever a breach affecting your information, we will notify you as the law requires.
Your choices
- Ask what we hold about you, and ask for a copy.
- Ask us to correct or delete it.
- Ask us to stop contacting you — every email we send will have an unsubscribe, and you can simply reply and say so.
- Turn off analytics by using your browser's Global Privacy Control or Do Not Track setting; we honour Global Privacy Control signals.
California residents have additional rights, set out in our California Privacy Notice.
Washington, Nevada and consumer health data
Washington's My Health My Data Act and Nevada's equivalent treat information that suggests something about a person's health as specially protected — which could include the categories you select in our assessment.
So we do not collect it from residents of those states. The assessment asks for your state before anything else. If you are in Washington or Nevada, it does not ask about your goals at all: you are offered a short waiting list that takes only an email address, and nothing health-related is requested or stored. We will not collect, share or sell consumer health data from residents of those states unless and until we implement the separate consent those laws require.
This is also a practical matter: our lounges are in California and telehealth depends on clinician licensure, so we are not yet able to offer care in those states.
Children
This service is for adults. We do not knowingly collect information from anyone under 18, and the assessment refuses to continue for anyone who tells us they are. If you believe a minor has given us information, contact us and we will delete it.
Changes
We will post any changes on this page and update the date above. If a change is significant, we will do more than quietly repost — we will say so.
The Peptide Lounge, LLC · 3943 Irvine Blvd, Ste 241, Irvine, CA 92602