PepLab
About The System How It Works Research Apply →
Home About The System The Program Research Apply for the Program
Legal

Notice of Privacy Practices

This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.

Effective Date: April 1, 2026

HIPAA Required Notice: The Health Insurance Portability and Accountability Act (HIPAA) requires us to maintain the privacy of your Protected Health Information (PHI) and to provide you with this Notice. We are required to follow the terms of this Notice currently in effect.

Our Legal Duty

We are required by law to maintain the privacy of your Protected Health Information (PHI). PHI is information about you that may identify you and relates to your past, present, or future physical or mental health condition, the provision of healthcare services, or payment for healthcare services. We are required to provide you with this Notice of our legal duties and privacy practices with respect to your PHI. We are also obligated to notify you following a breach of unsecured PHI.

How We May Use and Disclose Your PHI

Treatment

We may use and disclose your PHI to provide, coordinate, or manage your healthcare and related services. This includes sharing your information with the licensed physicians in our network who are treating you, and with other providers involved in your care.

Payment

We may use and disclose your PHI to obtain payment for the services provided to you, including billing, claims processing, and related activities.

Healthcare Operations

We may use and disclose your PHI for healthcare operations purposes, including quality assessment, training, compliance, and other operational activities necessary to run our platform.

Coordination with Pharmacy

We may disclose your PHI to licensed compounding pharmacies for the purpose of fulfilling prescriptions ordered by your treating physician.

Uses and Disclosures Requiring Your Authorization

Other uses and disclosures of your PHI not described in this Notice will be made only with your written authorization, which you may revoke at any time in writing.

We require your specific written authorization for:

  • Most uses and disclosures of psychotherapy notes
  • Uses and disclosures of PHI for marketing purposes
  • Disclosures that constitute a sale of PHI

Special Categories of Highly Confidential Information

Federal and state law requires special privacy protections for certain highly confidential information, including PHI that relates to:

  • Mental health and developmental disability services
  • Alcohol and drug abuse prevention, treatment, and referral
  • HIV/AIDS testing, diagnosis, or treatment
  • Sexually transmitted diseases
  • Genetic testing information
  • Reproductive health information

We will not disclose this Highly Confidential Information without your written authorization, except as required by law.

Uses and Disclosures Without Authorization

We may use or disclose your PHI without your authorization in the following circumstances:

  • As required by law: Disclosures required by federal, state, or local law
  • Public health activities: To public health authorities for disease reporting, injury, or disability
  • Abuse or neglect reporting: To government authorities authorized to receive such reports
  • Health oversight: To government agencies overseeing the healthcare system
  • Judicial and administrative proceedings: In response to valid legal orders
  • Law enforcement: To law enforcement officials as required or permitted by law
  • Serious threats to health or safety: To prevent or lessen a serious and imminent threat to a person or the public
  • Workers’ compensation: As authorized by and to the extent necessary to comply with workers’ compensation laws

Your Rights Regarding Your PHI

You have the following rights with respect to your PHI:

  • Right to access: You have the right to inspect and request a copy of PHI we maintain about you
  • Right to amend: If you believe PHI we maintain is inaccurate or incomplete, you may request an amendment
  • Right to an accounting of disclosures: You may request a list of certain disclosures we have made of your PHI
  • Right to restrict: You may request restrictions on how we use or disclose your PHI, though we are not always required to agree
  • Right to confidential communications: You may request that we communicate with you about your PHI in a certain way or at a certain location
  • Right to a copy of this Notice: You may request a paper copy of this Notice at any time
  • Right to be notified of a breach: You have the right to be notified following a breach of your unsecured PHI

To exercise any of these rights, contact us at .

How We Protect Your PHI

We maintain appropriate administrative, physical, and technical safeguards to protect the privacy and security of your PHI. We use encryption for data in transit and at rest, implement access controls limiting who may view your PHI, and conduct regular security assessments. We will notify you in the event of a breach of your unsecured PHI as required by HIPAA and applicable state law.

We Will Not Use Your PHI for Marketing

We will not use or disclose your PHI for marketing purposes without your written authorization. We will not sell your PHI.

Changes to This Notice

We reserve the right to change this Notice. We will post any revised Notice on our website. The effective date of any revision will appear on the Notice. The revised Notice will apply to PHI we maintain at the time of the revision, even if the PHI was created or received before the change.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with us at or with the U.S. Department of Health and Human Services Office for Civil Rights:

  • Online: hhs.gov/ocr/privacy/hipaa/complaints
  • Phone: 1-800-368-1019
  • TDD: 1-800-537-7697

We will not retaliate against you for filing a complaint.

Contact

For questions about this Notice or to exercise your rights:

PepLab
About The System How It Works Research Apply Privacy Privacy Practices Terms Refund Policy Medical Consent Compounding Disclosure California Residents
PepLab is a physician-guided executive health platform and technology coordination service. Medical consultations, prescriptions, and clinical services are provided by licensed independent physicians. PepLab does not provide medical advice, diagnosis, or treatment. Compounded medications are not FDA-approved. Clinical tools are deployed within physician-supervised integrated protocols. Individual outcomes vary. © 2026 PepLab · peplab.health · All rights reserved.