Orders.Clinic Policies

Privacy Policy

Effective date: July 1, 2026

This Privacy Policy explains how Clinic Protocols LLC, doing business as Orders.Clinic, collects, uses, maintains, discloses, and protects information when you access or use our websites, account portals, practitioner-verification tools, ordering functionality, communications, and related services.

1. Scope of this Privacy Policy

This Privacy Policy applies to information collected through Orders.Clinic websites, portals, applications, registration forms, practitioner-verification processes, ordering tools, customer-support systems, electronic communications, and other services that link to or reference this Privacy Policy.

In this Privacy Policy, “Orders.Clinic,” “Clinic Protocols,” “we,” “us,” and “our” refer to Clinic Protocols LLC and, where applicable, its affiliates, personnel, contractors, and service providers acting on its behalf.

“Platform” refers collectively to the Orders.Clinic website, account systems, practitioner and practice portals, ordering functionality, communication tools, integrations, and related services.

This Privacy Policy does not necessarily govern information collected directly by independent healthcare practitioners, medical practices, pharmacies, laboratories, manufacturers, suppliers, fulfillment providers, or other third parties.

Those organizations may maintain separate privacy policies, notices of privacy practices, consents, authorizations, and legal obligations.

2. Healthcare information and HIPAA

Orders.Clinic is a technology, administrative, account-management, communication, and ordering platform that may support healthcare practitioners, medical practices, patients, pharmacies, laboratories, manufacturers, suppliers, and other authorized participants.

The privacy treatment of information may depend on the identity of the organization collecting or receiving it, the purpose for which it is processed, and the legal role of each participant.

In some circumstances, Clinic Protocols LLC may act as a business associate of a healthcare provider or other covered entity under the Health Insurance Portability and Accountability Act and related regulations.

When Clinic Protocols LLC processes protected health information as a business associate, our processing is governed by applicable law and the relevant business associate agreement with the covered entity.

A healthcare provider or medical practice remains responsible for its own Notice of Privacy Practices and for responding to patient requests involving protected health information, except where responsibility has been assigned or delegated under an applicable agreement.

This general Privacy Policy is not intended to replace a Notice of Privacy Practices issued by a healthcare provider, health plan, pharmacy, or other covered entity.

Where a separate Notice of Privacy Practices, patient consent, HIPAA authorization, business associate agreement, or other healthcare-specific document applies, that document may contain additional or different terms governing protected health information.

3. Information we collect

We may collect information directly from you, from an authorized practitioner or practice, automatically through your use of the Platform, and from service providers or other lawful sources.

The categories of information we may collect include the following.

Contact and identity information

  • First and last name.
  • Email address.
  • Phone and fax numbers.
  • Billing, mailing, business, clinic, and delivery addresses.
  • Date of birth, age, or age-verification information where required.
  • Account identifiers and other information used to verify identity.

Practitioner and professional information

  • Professional title and specialty.
  • National Provider Identifier.
  • Professional license, registration, certification, and credential information.
  • Practice or clinic name, address, contact details, and affiliation.
  • Professional standing, disciplinary, or verification information obtained from lawful sources.
  • Information demonstrating authority to purchase, order, recommend, prescribe, dispense, administer, or otherwise interact with products or services.

Account and authentication information

  • Username and encrypted password.
  • Account role, status, permissions, and affiliations.
  • Login history and authentication records.
  • Multifactor-authentication information.
  • Security questions, recovery information, and access tokens.

Transaction and ordering information

  • Products and services viewed, requested, recommended, ordered, or purchased.
  • Order history, quantities, dates, status, and fulfillment information.
  • Billing and shipping information.
  • Payment status, transaction identifiers, refunds, disputes, and chargeback information.
  • Subscription, recurring-order, or reorder preferences where applicable.
  • Applicable practitioner, practice, supplier, pharmacy, laboratory, manufacturer, or fulfillment relationships.

Payment information

Payments may be processed by third-party payment processors. Those providers may collect payment-card numbers, bank-account details, billing addresses, authentication data, and other information required to process a transaction.

Orders.Clinic may receive limited payment-related information, such as payment status, payment-method type, expiration information, transaction identifiers, billing details, and fraud-screening results.

We generally do not store complete payment-card numbers on our own systems when payments are processed by an independent payment provider.

Health and healthcare-related information

Depending on the features used and the relationships among platform participants, information processed through Orders.Clinic may include:

  • Health history and reported medical conditions.
  • Symptoms, treatment goals, allergies, sensitivities, and contraindications.
  • Current and prior medications, supplements, products, therapies, or protocols.
  • Laboratory-test information and results.
  • Practitioner recommendations, orders, notes, instructions, or treatment-related information.
  • Information concerning pregnancy, nursing, age, weight, health status, or other factors relevant to an authorized transaction.
  • Patient-practitioner relationships and practice affiliations.
  • Information required to assess eligibility for a product, service, program, consultation, or clinical workflow.

Not every user or transaction involves health information. The categories collected depend on the services used and the information submitted by the user, practitioner, practice, or other authorized participant.

Communications and support information

  • Emails, messages, support requests, and correspondence.
  • Information submitted through contact forms or account portals.
  • Call records, voicemail messages, and call recordings when notice and consent requirements are satisfied.
  • Survey responses, feedback, reviews, and complaint information.
  • Consent records and communication preferences.

Device, usage, and technical information

  • Internet Protocol address.
  • Browser type, operating system, and device type.
  • Device identifiers and approximate location derived from an IP address.
  • Pages viewed, links selected, session duration, referring pages, and navigation paths.
  • Date, time, and frequency of Platform access.
  • Cookie identifiers, analytics identifiers, and similar technical data.
  • Error logs, performance data, security logs, and fraud-detection signals.

4. Sources of information

We may collect information from the following sources:

  • Directly from you when you create an account, submit an application, place an order, complete a form, contact support, or otherwise use the Platform.
  • From healthcare practitioners, medical practices, authorized practice personnel, or other individuals acting with appropriate authority.
  • From pharmacies, laboratories, manufacturers, suppliers, distributors, fulfillment providers, and carriers involved in an authorized transaction.
  • From professional credentialing sources, NPI databases, licensing authorities, governmental records, and other lawful verification sources.
  • From identity-verification, security, fraud-prevention, and payment-service providers.
  • Automatically through cookies, pixels, local storage, server logs, analytics technologies, and similar tools.
  • From integrations and third-party services that you or an authorized organization connect to Orders.Clinic.
  • From publicly available sources where permitted by law.

5. How we use information

We may use information for the following purposes:

  • Create, maintain, authenticate, administer, and secure user accounts.
  • Process practitioner, practice, patient, and other user registrations.
  • Verify identity, professional credentials, licenses, NPI information, practice affiliation, and account eligibility.
  • Provide account portals, ordering tools, communications, support, and other Platform functionality.
  • Facilitate authorized communications and transactions among practitioners, practices, patients, pharmacies, laboratories, suppliers, manufacturers, distributors, and fulfillment providers.
  • Process orders, payments, billing, shipping, delivery, cancellations, returns, replacements, and refunds.
  • Determine product or service availability and transaction eligibility.
  • Deliver transactional, administrative, security, support, account, and policy communications.
  • Provide marketing communications when permitted and consistent with your preferences.
  • Respond to questions, requests, complaints, disputes, and support inquiries.
  • Monitor Platform performance, diagnose technical issues, conduct testing, and improve functionality.
  • Analyze Platform use, engagement, user journeys, and service effectiveness.
  • Personalize user experiences, account content, and permitted communications.
  • Detect, investigate, prevent, and respond to fraud, misuse, unauthorized access, diversion, security incidents, and unlawful activity.
  • Enforce our agreements, policies, rights, and access restrictions.
  • Maintain business, financial, security, legal, compliance, credentialing, and audit records.
  • Comply with applicable laws, regulations, court orders, legal processes, contractual duties, and requests from authorized governmental authorities.
  • Protect patients, practitioners, practices, users, business partners, the public, and the integrity of Orders.Clinic.

7. How we disclose information

We may disclose information to the following categories of recipients when reasonably necessary and legally permitted.

Healthcare practitioners and practices

We may disclose information to the practitioner, practice, or authorized practice personnel associated with your account, request, order, consultation, recommendation, or transaction.

Pharmacies, laboratories, manufacturers, and suppliers

We may disclose information to pharmacies, laboratories, manufacturers, suppliers, distributors, and other product or service providers involved in reviewing, preparing, processing, dispensing, manufacturing, testing, or completing an authorized transaction.

Fulfillment providers and carriers

We may disclose names, contact details, delivery addresses, order details, handling instructions, and other necessary information to fulfillment providers, logistics companies, and carriers.

Payment and financial-service providers

We may disclose transaction, billing, identity, and fraud-prevention information to payment processors, financial institutions, card networks, and related service providers.

Technology and operational service providers

We may disclose information to providers that support hosting, cloud storage, cybersecurity, identity verification, email, messaging, customer support, analytics, account administration, document management, data processing, and other business operations.

Professional advisors

We may disclose information to attorneys, accountants, auditors, insurers, compliance professionals, consultants, and other professional advisors when reasonably necessary.

Legal and governmental disclosures

We may disclose information when we reasonably believe disclosure is required or permitted by law, regulation, subpoena, court order, warrant, governmental request, legal process, professional obligation, or reporting requirement.

Safety, security, and enforcement

We may disclose information when reasonably necessary to protect the health, safety, security, property, or legal rights of a patient, practitioner, user, business partner, Clinic Protocols LLC, or another person.

Corporate transactions

Information may be disclosed or transferred in connection with a proposed or completed merger, acquisition, financing, investment, restructuring, bankruptcy, sale of assets, transfer of business operations, or similar transaction.

With your direction or consent

We may disclose information to another person or organization when you direct us to do so or provide valid consent or authorization.

8. Consumer health data

Certain healthcare-related information may qualify as consumer health data under applicable state privacy laws when it is not otherwise regulated as protected health information under HIPAA.

Depending on the services used, consumer health data may include information that identifies or could reasonably be used to infer a person’s physical or mental health status.

Categories of consumer health data we may collect include:

  • Health conditions, symptoms, treatment goals, and medical history.
  • Medications, supplements, products, therapies, and treatment-related information.
  • Allergies, contraindications, sensitivities, and potential interactions.
  • Laboratory tests, measurements, and results.
  • Information concerning healthcare services, practitioners, or facilities sought or received.
  • Information concerning products viewed, requested, recommended, ordered, purchased, or used when that information reveals or permits an inference about health.
  • Information concerning reproductive or sexual health when voluntarily submitted or required for an authorized service.
  • Biometric, genetic, or precise-location information if collected in connection with a healthcare-related purpose.
  • Inferences drawn from other information concerning health status or healthcare needs.

We may collect consumer health data directly from you; from an authorized practitioner, practice, caregiver, representative, or other person; from healthcare-related service providers; from connected services; or from your use of the Platform.

We may use consumer health data to provide requested services, administer accounts, verify eligibility, facilitate authorized practitioner or practice workflows, process transactions, support orders, communicate with users, maintain security, prevent fraud, comply with law, and perform other purposes disclosed at the time of collection.

We may disclose consumer health data to healthcare practitioners, practices, pharmacies, laboratories, suppliers, manufacturers, fulfillment providers, technology providers, payment providers, professional advisors, governmental authorities, and other recipients identified in this Privacy Policy when necessary for an authorized purpose.

Where required by applicable law, we will obtain consent before collecting, using, or disclosing consumer health data for a new purpose or to a materially different category of recipient.

We do not permit employees, contractors, processors, or other authorized users to access consumer health data except as reasonably necessary for their role or another lawful purpose.

You may submit a request concerning consumer health data using the contact methods stated in the “Privacy requests” section below.

9. Sale, targeted advertising, and data sharing

Clinic Protocols LLC does not sell protected health information for monetary consideration.

We do not sell consumer health data except pursuant to an authorization or other process that satisfies applicable law.

We may disclose personal information to service providers and business partners for operational purposes described in this Privacy Policy. Such disclosures may not constitute a “sale” under many privacy laws.

Some privacy laws define “sale,” “sharing,” or “targeted advertising” broadly enough to include certain disclosures involving advertising cookies, analytics technologies, or similar tools, even when money is not exchanged.

If Orders.Clinic engages in activity treated as a sale, sharing, or targeted advertising under applicable law, eligible users may exercise an opt-out right through an available privacy-preference tool or by contacting us.

We do not knowingly sell or share personal information belonging to individuals under 18 years old for targeted advertising.

10. Cookies and similar technologies

Orders.Clinic and its service providers may use cookies, pixels, tags, local storage, software development kits, server logs, and similar technologies.

These technologies may be used to:

  • Keep users signed in and maintain account sessions.
  • Remember selections and preferences.
  • Enable shopping-cart, checkout, and account functionality.
  • Protect accounts and detect suspicious activity.
  • Measure Platform traffic, performance, and engagement.
  • Diagnose errors and improve functionality.
  • Understand how users navigate the Platform.
  • Deliver or measure permitted marketing and advertising.

Some cookies are necessary for the Platform to function and cannot be disabled through our systems without affecting Platform operation.

You may be able to manage nonessential technologies through a cookie-preference tool, browser controls, device settings, or other methods made available to you.

Blocking cookies may prevent certain Platform features from functioning correctly.

11. Cross-site collection and browser signals

Third-party analytics, advertising, social-media, security, or embedded-content providers may collect information about online activity over time and across different websites, applications, or online services when their technologies are present on the Platform.

The availability and operation of browser-based privacy signals vary by browser, device, jurisdiction, and the technologies used on the Platform.

Where required by applicable law and supported by our systems, we will process recognized opt-out preference signals as a request to opt out of applicable sale, sharing, or targeted-advertising activity for the browser or device sending the signal.

12. Email, text messages, and telephone communications

We may use your contact information to send account, security, verification, transaction, support, fulfillment, policy, and other administrative communications.

These transactional or service-related communications may be necessary to operate your account or complete an authorized transaction.

Where permitted, we may also send marketing communications concerning Orders.Clinic products, services, programs, or participating partners.

You may unsubscribe from promotional email through the unsubscribe link included in the communication.

You may opt out of promotional text messages by replying STOP or by following the instructions provided in the message.

Opting out of promotional communications does not prevent us from sending necessary transactional, account, security, or legal notices.

Standard message, data, telephone, and carrier charges may apply.

13. Information security

We use administrative, technical, and physical safeguards designed to protect information against unauthorized access, acquisition, use, disclosure, alteration, destruction, or loss.

Safeguards may include access controls, authentication procedures, encryption where appropriate, logging, monitoring, vendor management, workforce training, security reviews, backups, and incident-response procedures.

No website, database, transmission method, storage system, or security measure can be guaranteed to be completely secure.

You are responsible for maintaining the confidentiality of your login credentials, using secure devices and networks, and notifying us promptly if you suspect unauthorized access to your account.

Do not send highly sensitive information through ordinary email or another unapproved communication method when a secure Platform function is available.

14. Information retention

We retain information for as long as reasonably necessary to provide the Platform, maintain accounts, fulfill transactions, support users, meet contractual obligations, maintain security, resolve disputes, enforce agreements, and comply with legal or regulatory requirements.

Retention periods may vary based on:

  • The type and sensitivity of the information.
  • The reason it was collected.
  • The status of an account or transaction.
  • Healthcare, professional, tax, accounting, fraud-prevention, and recordkeeping obligations.
  • Contractual obligations to practitioners, practices, suppliers, pharmacies, laboratories, and other partners.
  • Pending or reasonably anticipated disputes, investigations, audits, or legal proceedings.

When information is no longer reasonably required, we may delete, deidentify, aggregate, or securely dispose of it, subject to applicable requirements.

Information stored in backups may remain until the relevant backup is overwritten or securely retired.

15. Deidentified and aggregated information

We may create deidentified or aggregated information that does not reasonably identify a particular individual.

We may use deidentified or aggregated information for analytics, security, product development, service improvement, business planning, reporting, research, and other lawful purposes.

Where required by law, we will maintain deidentified information in deidentified form and will not attempt to reidentify it except as legally permitted to test or validate deidentification processes.

16. Privacy rights

Depending on your state of residence, the information involved, and applicable exemptions, you may have the right to:

  • Confirm whether we process your personal information.
  • Request access to personal information associated with you.
  • Request correction of inaccurate personal information.
  • Request deletion of certain personal information.
  • Request a portable copy of certain personal information.
  • Opt out of certain sales, sharing, targeted advertising, or profiling activities.
  • Withdraw consent where processing is based on consent.
  • Request a list of certain third parties to whom information has been disclosed where required by law.
  • Appeal the denial of a privacy request where applicable.
  • Exercise additional rights concerning consumer health data.

These rights are not absolute. A request may be denied or limited when an exception applies, when identity or authority cannot be verified, when information must be retained, or when fulfillment would conflict with applicable law or the rights of another person.

Certain information processed on behalf of a healthcare provider or other organization may need to be requested directly from that organization.

17. Nevada privacy rights

Nevada residents may submit a verified request directing a qualifying website operator not to make a sale of covered information as defined by Nevada law.

Clinic Protocols LLC does not sell protected health information for monetary consideration.

You may nevertheless submit a Nevada opt-out request using the designated request address provided below.

Nevada residents may also request to review or request changes to certain covered information maintained by us, subject to verification, applicable exceptions, and the capabilities of our systems.

Requests may be submitted to:

privacy@orders.clinic
.

18. California privacy rights

California residents may have additional rights concerning personal information, subject to applicable thresholds, exemptions, and limitations.

These rights may include access, correction, deletion, portability, and the right to opt out of certain sales or sharing of personal information.

California residents may also have the right to limit certain uses or disclosures of sensitive personal information when the information is processed for purposes beyond those permitted without offering a limitation right.

We will not unlawfully discriminate against you for exercising an applicable privacy right.

An authorized agent may submit a request on your behalf where permitted. We may require proof of authorization and may independently verify your identity.

19. Privacy requests

You may submit a privacy request by contacting:

Email:

privacy@orders.clinic

Phone:

(702) 482-8555

Online:

Orders.Clinic Contact Support

Please describe the request and identify the state in which you reside.

We may request additional information to verify your identity, determine your authority, locate relevant records, protect account security, and prevent fraudulent requests.

Verification information will be used for the request-verification process and related legal or security purposes.

If you submit a request on behalf of another person, we may require written authorization, proof of legal authority, or direct verification with the individual.

We will respond within the period required by applicable law. Where permitted, we may extend the response period and will provide notice of the extension.

If we deny a request, we may provide an explanation and instructions for submitting an appeal when an appeal right applies.

20. Appealing a privacy decision

If applicable law provides a right to appeal and we deny your privacy request, you may submit an appeal by emailing:

privacy@orders.clinic
.

Use the subject line “Privacy Request Appeal” and include sufficient information for us to identify the original request.

We will review and respond to an eligible appeal in accordance with applicable law.

21. Reviewing and updating account information

You may be able to review or update certain account information through your Orders.Clinic account portal.

Some verified professional, transaction, healthcare, compliance, or historical information may not be directly editable.

To request a correction that cannot be made through your account, contact Orders.Clinic support.

Updating account information does not necessarily modify information maintained independently by a practitioner, medical practice, pharmacy, laboratory, supplier, payment processor, or other third party.

22. Children’s privacy

Orders.Clinic is not directed to children under 13 years old, and children under 13 may not independently create or use an account.

We do not knowingly collect personal information directly from a child under 13 through a general consumer account without appropriate parental authorization or another lawful basis.

Healthcare information concerning a minor may be submitted by a parent, legal guardian, healthcare practitioner, or other authorized person in connection with an authorized service.

The person submitting such information represents that they have the authority required to do so.

If you believe a child submitted personal information without appropriate authorization, contact us at

privacy@orders.clinic
.

24. United States operations

Orders.Clinic is operated from the United States and is primarily intended for authorized users and transactions within the United States.

If you access the Platform from another jurisdiction, information may be transferred to, processed in, and stored in the United States.

Data-protection laws in the United States may differ from those in your location.

You are responsible for determining whether access to or use of the Platform is permitted in your jurisdiction.

25. Changes to this Privacy Policy

We may update this Privacy Policy periodically to reflect changes to the Platform, our information practices, business operations, service providers, legal requirements, or applicable technologies.

We will post the updated Privacy Policy on this page and revise the effective date shown at the top.

When required, we may provide additional notice through the Platform, by email, through an account notification, or by another appropriate method.

Where applicable law requires consent for a material change involving consumer health data or another category of sensitive information, we will request that consent before applying the new practice to the affected information.

We encourage you to review this Privacy Policy periodically.

26. Contact information

Questions, concerns, complaints, and privacy requests may be submitted using the contact information below.

Clinic Protocols LLC
Doing business as Orders.Clinic
1810 E Sahara Ave
STE 75963
Las Vegas, NV 89104

Privacy email:

privacy@orders.clinic

Support email:

support@orders.clinic

Phone:

(702) 482-8555

Website:

orders.clinic

Online support:

Contact Orders.Clinic

Privacy Preference Center

Privacy Preferences