Privacy Policy

Total Virility ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, platform, and related services (collectively, the "Service").

Total Virility is not a medical provider, healthcare facility, physician practice, or clinical laboratory. We are a technology platform that facilitates the ordering of laboratory tests from independent, CLIA-certified laboratories. We do not provide medical advice, medical diagnosis, or medical treatment of any kind. Any health-related data displayed on our platform is provided solely for your personal informational use and should not be used as a substitute for professional medical judgment.

We collect the following categories of information:

Personal Information

• Full name, email address, phone number, and date of birth
• Mailing address (for lab order fulfillment and requisition forms)
• Gender and demographic information relevant to laboratory reference ranges
• Account credentials (passwords are hashed and never stored in plain text)

Health-Related Information

• Laboratory test orders and panel selections
• Lab results and biomarker values as reported by the performing laboratory
• PDF lab reports generated by the performing laboratory

Important: All health-related information displayed on our platform originates from independent CLIA-certified laboratories. We do not generate, interpret, analyze, or validate these results in any clinical capacity. Any reference ranges, flags, or educational content shown alongside your results are for general informational purposes only and do not constitute a medical opinion, diagnosis, or recommendation. You should always consult a qualified healthcare professional to interpret your lab results.

Payment Information

• Payment details are processed securely by Stripe, our third-party payment processor
• We do not store your full credit card number, CVV, or bank account details on our servers
• We retain transaction records (amount, date, order ID) for accounting and refund purposes

Usage and Technical Information

• Browser type, operating system, and device information
• IP address and approximate geographic location
• Pages visited, features used, and interaction patterns
• Referral source and marketing attribution data (UTM parameters)

We use your information for the following purposes:

• Process and fulfill laboratory test orders through our partner laboratories
• Display your lab results through our secure platform
• Create and maintain your user account
• Communicate with you about your orders, account, and service updates
• Process payments and issue refunds
• Improve our platform, features, and user experience
• Detect and prevent fraud, abuse, and unauthorized access
• Comply with applicable legal and regulatory requirements
• Send promotional communications (only with your consent; you may opt out at any time)

We do not use your health-related information for advertising, marketing profiling, or sale to third parties. We do not use your data to make medical determinations, provide clinical recommendations, or render any form of healthcare service.

We share your information only as necessary to provide the Service:

• Laboratory Partners: We share your personal and demographic information with CLIA-certified laboratories solely to process your lab orders and deliver results. Laboratories are independent entities with their own privacy practices and are solely responsible for sample collection, testing, and result accuracy.
• Payment Processors: Stripe processes your payment information in accordance with PCI-DSS standards.
• Infrastructure Providers: We use third-party services for hosting, email delivery, and error monitoring. These providers process data on our behalf under contractual obligations.
• Legal Requirements: We may disclose information when required by law, subpoena, or court order, or when necessary to protect the rights, safety, or property of Total Virility, our users, or the public.

We do not sell, rent, or trade your personal or health-related information to third parties for their marketing or commercial purposes.

We implement industry-standard security measures to protect your data, including:

• 256-bit TLS/SSL encryption for all data in transit
• AES-256 encryption for sensitive data at rest
• Secure authentication with multi-factor options (email, phone, OAuth)
• Row-level security policies ensuring users can only access their own data
• Role-based access controls for internal systems
• Regular security assessments and dependency monitoring

While we take extensive measures to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security, and you use the Service at your own risk.

We retain your personal information for as long as your account is active or as needed to provide our services. Specifically:

• Account data: Retained until you request account deletion.
• Lab results and health data: Retained for a minimum of 7 years in accordance with healthcare record retention requirements, even if you delete your account.
• Payment records: Retained for 7 years for tax and accounting compliance.
• Usage logs: Retained for up to 12 months, then aggregated or deleted.

You may request deletion of your account and associated data at any time by contacting us. Deletion is subject to legal retention obligations described above.

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Request deletion of your personal information (subject to retention obligations)
• Object to or restrict certain processing activities
• Receive a copy of your data in a portable, machine-readable format
• Withdraw consent for optional processing (e.g., marketing communications)

California Residents: Under the California Consumer Privacy Act (CCPA), you have additional rights including the right to know what personal information we collect, the right to delete it, and the right to opt out of the sale of personal information. We do not sell personal information.

To exercise any of these rights, contact us at privacy@totalvirility.com. We will respond within 30 days.

We use the following types of cookies and similar technologies:

• Essential cookies: Required for authentication, session management, and security. These cannot be disabled.
• Analytics cookies: Help us understand how users interact with our platform. You may opt out of these.
• Marketing cookies: Used only with your consent to measure the effectiveness of advertising campaigns.

You can control cookie preferences through your browser settings. Disabling essential cookies may prevent you from using certain features of the Service.

Our Service may contain links to third-party websites or services, including laboratory portals and payment processors. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors. If we learn that we have inadvertently collected information from a child under 18, we will delete it promptly. If you believe a minor has provided us with personal information, please contact us at privacy@totalvirility.com.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes via email or through a prominent notice on our platform at least 30 days before the changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: privacy@totalvirility.com
• Website: totalvirility.com