Privacy Policy

Who We Are

Youth Lab 360 provides wellness-related information, consultation coordination, telehealth access, and other services described on our website.

Scope of This Privacy Policy

This Privacy Policy applies to personal information collected through our website, online forms, consultation requests, appointment scheduling tools, email, telephone, text messages, and other services that display or link to this policy.

This policy does not apply to independently operated websites, applications, laboratories, pharmacies, payment processors, healthcare providers, or other third parties that maintain their own privacy policies.

When protected health information is governed by the Health Insurance Portability and Accountability Act, commonly known as HIPAA, or another applicable health privacy law, a separate Notice of Privacy Practices or patient privacy notice may also apply.

Personal Information We Collect

The information we collect depends on how you interact with Youth Lab 360. It may include the following categories.

Contact and identification information

• Name
• Email address
• Telephone number
• Mailing or billing address
• Date of birth, when required
• Account or appointment identifiers

Consultation and wellness information

• Wellness goals and areas of interest
• Information submitted through intake forms
• Appointment and consultation details
• Symptoms, medical history, medications, allergies, or other health-related information you choose to provide
• Messages, questions, documents, photographs, or files submitted to us

Transaction information

• Services or programs requested or purchased
• Payment status and transaction identifiers
• Billing and refund records

Complete payment-card information may be collected and processed directly by our payment processors rather than stored by Youth Lab 360.

Internet and device information

• Internet Protocol address
• Browser and device type
• Operating system
• Pages viewed and links selected
• Referring website
• Approximate location derived from an IP address
• Date, time, and duration of website activity
• Cookie, pixel, and similar technology identifiers

Communication information

• Email and text-message correspondence
• Telephone call details and voicemails
• Customer-service and support requests
• Communication preferences and consent records

How We Collect Information

We may collect personal information:

• Directly from you when you submit a form, contact us, request an appointment, create an account, make a payment, or communicate with us.
• Automatically through cookies, pixels, server logs, analytics tools, and similar technologies.
• From healthcare professionals, service providers, laboratories, pharmacies, scheduling platforms, payment processors, or other parties involved in providing a service you request.
• From advertising, referral, social-media, or marketing partners, where permitted by law.
• From publicly available sources or information you choose to make public.

How We Use Personal Information

We may use personal information for the following purposes:

• Responding to questions and consultation requests.
• Scheduling, confirming, rescheduling, and managing appointments.
• Coordinating services requested by you.
• Verifying identity, location, and service eligibility.
• Communicating with you about forms, appointments, services, payments, and account activity.
• Processing authorized payments and maintaining transaction records.
• Personalizing website content and improving user experience.
• Measuring website performance and understanding how visitors use our website.
• Maintaining the security, availability, and integrity of our website and systems.
• Preventing fraud, misuse, unauthorized access, and unlawful activity.
• Complying with legal, regulatory, professional, and contractual requirements.
• Establishing, exercising, or defending legal rights.
• Sending marketing communications when legally permitted and when any required consent has been obtained.

Health and Wellness Information

Some forms and communications may allow you to provide health, medical, wellness, medication, symptom, laboratory, or treatment-related information.

Please submit sensitive information only through a method we have approved for that purpose. Ordinary email and standard text messaging may not provide the same security protections as a designated patient portal or secure intake platform.

Information submitted through a general website contact form is not necessarily protected health information under HIPAA. Whether HIPAA applies depends on who receives the information, the capacity in which it is received, and how it relates to covered healthcare services.

Cookies and Similar Technologies

We and our service providers may use cookies, pixels, tags, local storage, software development kits, and similar technologies to operate and improve our website.

These technologies may be used for:

• Essential website functionality and security.
• Remembering preferences and form selections.
• Measuring traffic, performance, and engagement.
• Understanding which pages, advertisements, or referral sources lead visitors to our website.
• Supporting advertising or marketing activities where permitted.

You may be able to manage cookies through a cookie preference tool on our website or through your browser settings. Disabling certain cookies may affect website functionality.

How We Disclose Personal Information

We may disclose personal information to the following categories of recipients when reasonably necessary.

Service providers

Website hosts, scheduling platforms, customer relationship management systems, communication providers, analytics providers, payment processors, security providers, cloud storage providers, and professional advisers.

Healthcare and wellness partners

Healthcare professionals, laboratories, pharmacies, fulfillment providers, and other parties involved in evaluating or providing a service you request, subject to applicable consent and privacy requirements.

Legal and regulatory recipients

Government agencies, regulators, law enforcement, courts, attorneys, insurers, auditors, or other recipients when disclosure is required or permitted by law.

Business transactions

Potential or actual buyers, investors, lenders, advisers, or successors in connection with a merger, financing, acquisition, reorganization, sale of assets, or similar business transaction.

With your direction or consent

We may disclose information to another person or organization when you direct us to do so or provide valid consent.

Sale and Sharing of Personal Information

Youth Lab 360 does not sell personal information for monetary consideration.

Certain advertising or analytics activities may be considered “sharing” personal information for cross-context behavioral advertising under California law, even when no money is exchanged.

Where legally required, we will provide a method to opt out of the sale or sharing of personal information and will process recognized browser-based opt-out preference signals, such as Global Privacy Control.

We do not knowingly sell or share the personal information of consumers under 16 years of age.

Email, Telephone, and Text Communications

We may use the contact information you provide to respond to inquiries and send communications related to consultations, appointments, forms, services, payments, or account activity.

Where required, promotional emails or text messages will be sent only after the appropriate consent has been obtained.

You may unsubscribe from marketing emails by using the unsubscribe link in the message. You may opt out of promotional text messages by replying with the applicable opt-out keyword, such as STOP.

Opting out of marketing communications does not prevent us from sending nonpromotional communications related to an appointment, transaction, requested service, safety issue, or legal obligation.

Data Retention

We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, provide requested services, maintain business and transaction records, resolve disputes, enforce agreements, and comply with legal, regulatory, tax, accounting, insurance, and professional obligations.

Retention periods may vary depending on the type of information, the context in which it was collected, and whether a longer period is required or permitted by law.

When information is no longer reasonably required, we may delete it, de-identify it, or retain it in a restricted form when immediate deletion is not technically practicable.

Data Security

We use administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, and disclosure.

These safeguards may include access controls, secure service providers, encryption where appropriate, authentication measures, system monitoring, employee or contractor confidentiality requirements, and data minimization practices.

No website, transmission method, storage system, or security measure can be guaranteed to be completely secure. You should use caution when transmitting sensitive information online and protect any account credentials provided to you.

California Privacy Rights

To the extent the California Consumer Privacy Act, including amendments made by the California Privacy Rights Act, applies to Youth Lab 360 and your personal information, California residents may have the following rights.

• The right to know the categories and specific pieces of personal information collected about you.
• The right to know the categories of sources, business purposes, and third parties involved in collecting, using, selling, or sharing personal information.
• The right to request access to personal information.
• The right to request deletion of personal information, subject to legal exceptions.
• The right to request correction of inaccurate personal information.
• The right to opt out of the sale or sharing of personal information where applicable.
• The right to limit certain uses and disclosures of sensitive personal information where applicable.
• The right not to receive discriminatory treatment for exercising an applicable privacy right.

Submitting a request

You may submit a privacy request by contacting us:

We may need to verify your identity before completing a request. Verification may require matching information supplied with the request to information maintained in our records.

You may use an authorized agent to submit a request where permitted by law. We may request proof of the agent’s authority and may separately verify your identity.

Certain information may be exempt from a privacy request, including information governed by other privacy laws or information we must retain to satisfy legal obligations.

Global Privacy Control and Do Not Track

Where required by applicable law, we will treat a valid Global Privacy Control signal as a request to opt out of the sale or sharing of personal information for the browser or device sending the signal.

Because there is not a universally accepted standard for ordinary “Do Not Track” browser signals, our website may not respond to those signals unless required by applicable law.

Children’s Privacy

Our website and services are not directed to children under 13 years of age. We do not knowingly collect personal information directly from children under 13 through the general website.

If you believe a child has submitted personal information to us without appropriate authorization, please contact us so that we can review the situation and take appropriate action.

Third-Party Websites and Services

Our website may link to or integrate with third-party scheduling tools, forms, payment processors, social-media platforms, laboratories, pharmacies, healthcare professionals, maps, videos, or other services.

We do not control the privacy, security, availability, or content of independently operated third-party services. You should review the privacy policy of each third party before providing personal information.

Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to our services, technologies, vendors, data practices, or legal requirements.

When we update this policy, we will post the revised version on this page and change the effective date at the top. Material changes may also be communicated through another appropriate method when required.

We encourage you to review this Privacy Policy periodically.