Privacy Policy

Effective Date: 27 September 2025

Lifecycle Telehealth BV ("Lifecycle Telehealth," "we," "us," or "our") provides telehealth services globally, with a primary focus on the European Union and the United Kingdom. All prescriptions are issued in compliance with EU and UK regulations and dispensed via approved local pharmacies.

We recognize the importance of protecting your personal information and health data. This Privacy Policy explains how we collect, use, share, and safeguard your information when you use the Lifecycle Telehealth Platform and any website or service that links to or refers to this Privacy Policy (collectively, the "Services").

We are committed to compliance with:

GDPR (General Data Protection Regulation) – for users in the EU/EEA.
UK GDPR and Data Protection Act 2018 – for users in the United Kingdom.
HIPAA (Health Insurance Portability and Accountability Act) – for users receiving services through our U.S. partners and affiliates.
Applicable local laws and international data protection standards in jurisdictions where our Services are accessed.

Your personal health data is encrypted and safeguarded with industry-leading protocols. To the extent that there is any conflict between this Privacy Policy and the HIPAA Notice provided by our U.S. partner providers (e.g., Online Care Network II P.C.), the HIPAA Notice will govern with respect to U.S. Protected Health Information (PHI).

I. Information We Collect

We may collect the following types of information when you use the Services:

Information you provide directly:

Name, email address, phone number, and address.
Username and password.
Payment details (credit card number, expiry date, CVV).
For healthcare providers: job title, practice area, speciality, license status, gender, date of birth, languages spoken, educational background, address, photograph, tax/ID numbers, NPI, professional license, bank account information.
Personal health information (PHI).
Any other information you provide.

Information we collect automatically:

IP address, device identifiers, browser type, OS, ISP, referring/exit pages, date/time of visit, clickstream data, pages viewed, and server log data.
Cookies, pixel tags, local storage, and similar technologies.

Information from third parties:

Medical records, lab results, diagnostic reports, treatment history, family/medical history, and other healthcare provider notes relevant to your care.

II. Use of Information

Provide, improve, and personalize Services.
Verify identity and manage accounts.
Contact you regarding Services.
Fulfil requests for services, prescriptions, or information.
Send health, wellness, or product updates (with your consent).
Conduct research (subject to written authorization if required).
Prevent fraudulent or illegal activities.
Comply with legal obligations.

III. Sharing of Information

Healthcare providers and entities: doctors, pharmacies, labs, insurers, regulators, and relevant healthcare partners.
Service providers: payment processors, hosting services, analytics, marketing, and support vendors.
Research partners: for health-related research (with your authorization if required).
Corporate affiliates: under the same privacy obligations.
Business transfers: in the event of mergers, acquisitions, or reorganizations.
Legal purposes: to comply with law, court orders, government requests, or protect safety, rights, and security.

IV. International Data Transfers

Transfers to countries with European Commission or UK adequacy decisions.
Use of Standard Contractual Clauses (SCCs) for service providers outside approved jurisdictions.
Technical and organizational safeguards (encryption, access controls).

V. Data Retention

Account information: kept while your account is active, then securely deleted or anonymized within 12 months of closure.
Health records: retained in compliance with applicable medical regulations (typically 7–10 years, depending on jurisdiction).
Payment information: retained only as long as required for processing and legal/financial compliance.

VI. Security

We implement administrative, technical, and physical safeguards to protect your data from unauthorized access, disclosure, alteration, or destruction. While we strive to protect your data, no internet transmission or storage system can be guaranteed 100% secure.

VII. Your Rights

Depending on your location, you may have the following rights:

Access
Rectification
Erasure
Restriction
Data portability
Objection
Withdraw consent

To exercise these rights, contact us at lifecycle@consultant.com.

VIII. Cookies and Tracking Technologies

Enable essential site functions (login, checkout).
Improve user experience and personalize content.
Analyze usage patterns.
Support marketing and communications.

You can manage or disable cookies via your browser settings. Some site features may not function properly without cookies.

IX. California Residents (CCPA)

If you are a California resident, you may request:

Disclosure of personal information we collected and shared in the past 12 months.
Deletion of your personal information, subject to legal exceptions.

We do not sell personal information. Requests may be sent to lifecycle@consultant.com.

X. Children

We do not knowingly allow individuals under the age of 18 to create accounts or provide personal data. If we become aware that we have collected personal data from a child under 18 without parental consent, we will delete it promptly.

XI. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When updated, we will revise the "Effective Date" above and post the new version. Significant changes will be notified to users where required by law.

XII. Global Contact & Accessibility

If you have any questions about this Privacy Policy, our data practices, or accessibility, please contact us:

📧 Email: lifecycle@consultant.com

We are committed to digital accessibility and aim to meet WCAG 2.1 AA standards. If you encounter any barriers when using our Services, please contact us at the above email.

We aim to respond to inquiries within 5 business days.