Scope of this policy
This policy explains how Oak RR LLC, trading as ZilkerHealth, handles information collected through this website and the ZilkerHealth platform.
Protected health information held by the licensed clinicians who treat you, and by the pharmacies that dispense to you, is governed by HIPAA and by their separate Notice of Privacy Practices. That notice is a distinct document from this policy and describes rights that this policy does not. LINK TO NOTICE OF PRIVACY PRACTICES
Where this policy and the Notice of Privacy Practices both apply, the notice governs protected health information.
Information we collect
Information you give us. Your name, date of birth, contact details, shipping address, account credentials, and the health information you provide in your intake assessment and in messages to your care team. This includes your medical history, medications, allergies, height and weight, and your treatment goals.
Payment information. Payment card details are collected and processed by our payment processor. We do not store full card numbers on our systems.
Information collected automatically. Device and browser type, IP address, pages viewed, referring page, and similar technical data, collected through cookies and comparable technologies.
Information from others. Information from the clinicians and pharmacies involved in your care, and from service providers who support identity verification, fraud prevention and delivery.
How we use information
To provide the service: creating and administering your account, routing your intake to a clinician, arranging dispensing and delivery, and supporting your care.
To process payments and administer subscriptions.
To communicate with you about your treatment, your orders and your account, and to provide customer support.
To operate, secure, troubleshoot and improve the platform.
To comply with legal obligations, including recordkeeping requirements that apply to healthcare and pharmacy operations.
For marketing, only where we have your consent or where the communication is permitted without it. You can opt out of marketing messages at any time without affecting your care.
Cookies and tracking technologies
We use cookies and similar technologies to keep you signed in, remember preferences, measure how the site is used, and support marketing.
Tracking on health-related websites carries particular risk, because the mere fact that someone visited a page about a specific treatment can itself reveal health information. CONFIRM WITH COUNSEL: which advertising and analytics tags run on which pages, whether any fire on authenticated or intake pages, and whether a Business Associate Agreement or equivalent is in place where one is needed. Regulators have brought enforcement actions over exactly this.
You can control cookies through your browser settings. Blocking some cookies will affect how the site works.
STATE WHETHER THE SITE HONORS GLOBAL PRIVACY CONTROL SIGNALS
Your choices
You can review and update much of your account information by signing in.
You can opt out of marketing email by using the unsubscribe link in any marketing message, or by contacting Hello@zilkerhealth.com. You will still receive messages about your treatment, orders and account.
You can request access to, correction of, or deletion of your information as described in the next section. Some information must be retained to meet medical and pharmacy recordkeeping obligations, and those requirements override a deletion request.
Your privacy rights by state
Texas. Under the Texas Data Privacy and Security Act, Texas residents may request access to, correction of, deletion of, and a portable copy of their personal data, and may opt out of targeted advertising, sale, and certain profiling. You may appeal a refused request.
California. California residents have rights under the CCPA as amended, including rights to know, delete, correct, and to opt out of sale or sharing, and the right not to be discriminated against for exercising them.
Washington and Nevada. Washington's My Health My Data Act and Nevada's equivalent give residents specific rights over consumer health data, including rights to access and delete it and to withdraw consent to its collection and sharing.
Other states. Residents of other states with comprehensive privacy laws have comparable rights. CONFIRM WITH COUNSEL WHICH STATE LAWS APPLY GIVEN WHERE THE SERVICE OPERATES
To exercise any of these rights, contact Hello@zilkerhealth.com. We will verify your identity before acting on a request, and we will respond within the period the applicable law requires. An authorized agent may submit a request on your behalf with proof of authorization.
Data retention
We keep information for as long as needed to provide the service and to meet legal, regulatory and recordkeeping obligations.
Medical records are retained for the period required by the law of the state where care was provided, which is commonly several years after the last encounter and longer for minors. CONFIRM RETENTION SCHEDULE WITH COUNSEL
When information is no longer needed, we delete it or de-identify it.
How we protect information
We use administrative, technical and physical safeguards intended to protect information against unauthorized access, loss and misuse. These include encryption in transit, access controls, and restricting staff access to what their role requires.
No system is completely secure, and we cannot guarantee absolute security. If a breach affects your information, we will notify you as required by law.
Children
The service is for adults aged 18 and over. We do not knowingly collect personal information from children. If you believe a child has provided us with information, contact Hello@zilkerhealth.com and we will delete it.
Third-party sites
This policy covers only our own platform. Sites and services we link to have their own privacy practices, and we are not responsible for them.
Changes to this policy
We may update this policy. If a change is material we will give notice through the platform or by email before it takes effect. The date at the top of this page shows when it was last revised.
Contact us
For privacy questions or to exercise a right, contact Hello@zilkerhealth.com or write to REGISTERED BUSINESS ADDRESS.
IF A DATA PROTECTION OFFICER OR PRIVACY OFFICER IS DESIGNATED, NAME THEM HERE