Health Panel

Legal

Privacy Policy

Last updated October 6, 2026

Effective date: October 6, 2026   Previous version: October 2, 2026

Who we are

Health Panel Inc., a New York corporation incorporated on September 4, 2026 ("Health Panel," "we," "us," or "our") operates healthpanel.org (the "Site") and the ordering process connected to it. Health Panel is a marketing and ordering platform. We are not a laboratory, a clinic, or a medical provider. Lab order authorization, blood draws, and laboratory analysis are performed by independent, licensed third parties in our partner network (referred to below as our "testing partner"). We receive your results from that network and make them available to you; we do not interpret them.

This policy explains what information we collect when you visit the Site or place an order, how we use and share it, and the choices available to you.

Information we collect

Information you provide directly:

  • Contact information: name, email address, phone number, mailing and billing address
  • Order information: date of birth, which panels you order, promo code used, subscription selections
  • Payment information: processed directly by our payment processor (Stripe). We do not store your full card number on our own systems.
  • Communications: anything you send us directly, such as support requests

Information collected automatically:

  • Counts of how the Site is used: which pages are viewed, in what order, and how long and how far down people read. Our own software records these on healthpanel.org into our own database, as described in "What we record about visits and ad links" below. We do not use Google Analytics or any advertising tracker. The one exception is the marketing pages of healthpanel.org, where we use a third-party analytics provider to record how visitors use those pages, meaning how they scroll, click and move their pointer, so that we can improve them. The pages you view can reveal your interests, including an interest in a particular panel. Typed text is masked, and this is not used on accounts.healthpanel.org, at checkout, or on pages that show an order; see "Third-party code" below, which lists what the provider receives and which pages are left out. We do not sell this data or share it with advertisers. Our website host (Lovable) may keep its own basic visitor statistics for the sites it hosts; we do not control that and we do not add anything to it
  • Sign-in counts: when you sign in on accounts.healthpanel.org, our server records that a sign-in happened, by day and by method (password or Google), along with a scrambled code derived from your account that lets us count how many different accounts signed in, as described in the cookies section below
  • Marketing attribution: which promo code, link, or ad brought you to the Site, as described below

Your lab results:

  • We receive your lab results from our testing partner's network, store them in encrypted form, and display them to you when you sign in to your account. We show what the laboratory reported, including its own reference ranges and flags. We do not interpret, score, or grade them.
  • The email telling you that results are ready contains no values and does not name the panel. Email is not a secured channel, so the notice is deliberately uninformative and asks you to sign in.

What this section used to say, and which version applies to your order

Until September 3, 2026, this policy said we did not hold your results at all. Those words are kept here rather than deleted, because they are what earlier customers were told. The previous version read:

"We do not host, store, or display your lab results. Results are reviewed by our testing partner's affiliated physicians and made available to you through our testing partner's own portal. We only send you a notification that results are ready, with a link to that portal."

If you placed an order before September 3, 2026, that is the promise you relied on and it still governs your order. Before we store or display results for any such order we will ask you to accept this updated policy. If you decline, we will not store or display your results here and we will tell you how to obtain them another way.

HIPAA: the two instruments are not the same instrument

Receiving, storing and displaying your results is something Health Panel does on behalf of, and under written agreement with, our testing partner. The HIPAA authorization you agree to at checkout is separate: it covers what is needed to process your lab order. We do not ask you to authorize marketing at checkout.

What we record about visits and ad links

When you visit healthpanel.org, our own software records a small, fixed set of facts and writes them to our own database. It sends them to no one else (apart from the recording described under Third-party code). We call these visit records.

  • A random number made up for that one browser tab. It is erased from your browser when you close the tab, and we use it only to count how many pages a visit looked at.
  • The kind of page you viewed (for example a panel page, never the address you typed) and, on a panel page, the name of the panel.
  • How you arrived, in broad groups only: a paid ad, a creator or partner link, a social post, an email, a search or another website, or directly. If you arrived from one of our ads, the name we gave that ad, such as a03_price_card. We do not record the address of the page you came from.
  • Whether you appear to be on a phone, a tablet or a computer (judged from your screen width), whether you are inside the built-in browser of the Instagram, Facebook or another app, and whether this browser has visited us before.
  • How long you stayed on a page and how far down you read, in broad ranges.
  • The time, to the hour only.

A few actions are counted only as daily totals, with no visit number at all: the welcome offer opening or being closed, an email sign-up (the count, never the address), which category or panel someone picked, which panel the quiz recommended (never the answers), and clicks on the button that takes you to checkout.

What these records do not contain. No name, email address, phone number, or other detail that says who you are. We do not store your IP address, your browser's identifying text, the address of the page you came from, or the address of the page you are on, including anything after a question mark. We do not join a visit record to a sign-up, an order, or an account. Because the records are so limited, at our current size a combination such as an ad name and an hour could in principle narrow a visit down to a handful of people, which is one reason we delete the detailed records after 30 days.

Where this does not run. We do not run this counting on accounts.healthpanel.org, where you check out, sign in and see your results, on your order status page, or on the page you reach from the confirmation email we send when you sign up for the welcome offer.

The ad link you last came from, on orders and sign-ups. If you arrive through one of our paid ads, your browser keeps that ad's name and the date you clicked (see the list in the cookies section below). If you then place an order, we record on the order the ad's name and how long before you ordered you clicked it, in four ranges: the same day, 1 to 3 days, 4 to 7 days, or 8 to 30 days. We carry nothing older than 30 days. If you sign up for the welcome offer, we record the name of the ad link you arrived through on your sign-up and on the welcome code we create for you. These are a name and a range, not a date or an identifier. We keep them for six months and then remove them. We use them to see which ads lead to orders, so that we can decide which to keep.

Neither the visit records nor these ad names are sent to any advertising platform or to any partner.

How we use your information

We use the information above to:

  • Process and fulfill your order, including relaying your order (name, date of birth, address, and panel selected) to our testing partner so a physician can authorize it and the laboratory can process your test
  • Charge and manage payments, including subscription billing and renewal
  • Send transactional communications: your order confirmation, your lab requisition, and a notice when your results are ready that asks you to sign in
  • Attribute orders to promo codes and partners for commission tracking
  • Measure which of our ads and links lead to sign-ups and orders, using the visit records and ad names described above
  • Improve the Site and our marketing
  • Comply with legal obligations

We do not use your health-adjacent order information (which panel you ordered) for advertising, we do not send it to advertising platforms, and we do not sell it to third parties.

How we share your information

  • Our testing partner: so a physician in their network can authorize your lab order and the laboratory can process your panel. We do not schedule anything for you; you take the requisition we email you to a partner lab location, walking in or booking with that laboratory yourself. This is the core of how the service works and is not optional if you place an order.
  • Payment processor (Stripe): to process your payment. Stripe's own privacy policy governs how they handle your payment details.
  • Analytics provider: records how visitors use the marketing pages, as described under Third-party code.
  • Email service provider (Paubox): to deliver our order confirmations, the notice that your results are ready (which asks you to sign in and contains no values), our other messages about your order and account, and our marketing campaigns. Paubox has signed a business associate agreement with us.
  • Email service provider (Amazon Web Services, Simple Email Service): to deliver the one message that carries your lab requisition as a PDF attachment.
  • Email service provider for the welcome offer (Resend, or Paubox once we move it): the confirmation message sent when you enter your email address in the welcome-offer popup, and the message that then reveals your code, are sent through Resend or, once we move them, through Paubox. They contain your email address, a confirmation link and your personal welcome code, and no health information. Resend is not covered by a business associate agreement with us. The confirmation message includes a one-pixel image served from our own site, which records the first time it is opened against your sign-up.
  • Cloud infrastructure (Amazon Web Services): to host the signed-in part of this service, including checkout, your account, the one-time codes you use to confirm your email address or reset your password, and the encrypted store holding your results.
  • Service providers: vendors who help us operate the Site, covering website hosting (Lovable) and database (Supabase), payment processing, and email delivery. Each is bound by confidentiality obligations and processes your information only to provide their service to us.
  • Legal and safety: if required by law or subpoena, or to protect the rights, property, or safety of Health Panel, our customers, or others.
  • Business transfers: if Health Panel is involved in a merger, acquisition, or asset sale, customer information may be transferred as part of that transaction, subject to this policy's protections.

We do not sell your personal information to third parties for their own marketing purposes.

Advertising platforms. We do not share browsing or purchase information with advertising platforms. We run no Meta pixel or other advertising-platform code on the Site or on accounts.healthpanel.org, we do not upload customer or email lists to advertising platforms, and we do not send them records of purchases or sign-ups. From them we receive only aggregate figures about our own ads, such as what we spent and how many people clicked. What an advertising platform learns about you is what you do inside its own apps: when you tap one of our ads, it knows you tapped it. If you open our Site inside the Instagram or Facebook app, that app's built-in browser is software run by Meta, which we do not control and which may be able to observe what you view in it.

Health information

Order data reveals health-related activity, such as which panel you ordered, and your lab results are health information outright. We treat both as sensitive, hold results encrypted, and limit internal access to the people who need it to run the service.

Pages you view, such as a panel page, can reveal a health interest, and the recording described under Third-party code sees them. We do not link it to your name, your email address or your orders.

Health Panel operates as a business associate of our testing partner and a business associate agreement between us is in place.

Cookies and tracking technologies

On healthpanel.org we set one cookie of our own, described next, and we use your browser's local storage and session storage for the few small items listed below. On the marketing pages of healthpanel.org only, a third-party analytics provider also sets cookies on healthpanel.org, including its own, that identify your browser; it never does so on accounts.healthpanel.org. See "Third-party code" below. We do not use cookies or similar technologies for advertising. Apart from that recording on those pages, nothing in this section is sent to a third party.

Referral attribution. If you arrive through a partner or influencer link, we store a cookie named hp_ref on healthpanel.org and its subdomains for up to 30 days. It holds one thing: the promo code from the link you followed. It does not contain your name, your email address, an account identifier, a visitor identifier, or anything else that identifies you, and two people who follow the same link have identical copies of it. We use it to apply the right discount at checkout and to credit the partner who referred you. If you follow a second partner link, the newer code replaces the older one. You can delete it in your browser settings at any time, and you can remove the code at checkout. Doing either does not affect your ability to order.

What your browser keeps on healthpanel.org. Local storage stays until you clear your browser data. Session storage is erased when you close the tab.

  • hp_paid_touch (local storage): set only if you arrive through one of our paid ads. It holds the ad's name and the calendar date you clicked, nothing else. We ignore it once it is 30 days old.
  • hp_visited (local storage): the single character 1, with no expiry. It tells us this browser has visited before, so that we can count new and returning visits. It does not identify you.
  • hp_welcome_offer (local storage): whether you closed or claimed the welcome-offer window, so that it does not keep reappearing.
  • hp_selected_panel (local storage): the name of a panel you picked, kept on your device.
  • hp_funnel_session (session storage): the current visit record, meaning the random number, the ad name if any, how you arrived, whether this browser is new or returning, and how many pages you have viewed.
  • hp_paid_arrival (session storage): a marker that this visit began with a paid ad, so that the welcome offer can appear sooner.

These items are not sent to us automatically with every page request, as a cookie is. Our software sends the visit records described above in separate requests that carry no cookies.

On accounts.healthpanel.org we run no counting or analytics software in your browser. When you sign in, our server records that a sign-in happened, by day and by method (password or Google), along with a scrambled code derived from your account that lets us count how many different accounts signed in. The code is not your email address, your name or your account number. We keep the codes for about 40 days and the daily and weekly totals for up to 13 months, and we do not use them to look at what you view or buy.

That site keeps a few items in your browser's session storage, which is erased when you close the tab: your sign-in session, a short-lived draft of the panel and promo code you were choosing (kept up to 30 minutes), and, if you arrived through one of our ad links, the ad's name and click date (hp_attribution) until your order is accepted, so that we can record them on the order as described above. It also reads the hp_ref cookie described above to apply a partner's code.

Third-party code. There is no Meta (Facebook or Instagram) pixel and no other advertising-platform code on healthpanel.org or accounts.healthpanel.org. We do not use Google Analytics or any other third-party analytics or advertising tracker on either, with one exception. On the marketing pages of healthpanel.org, including our panel pages, we use a third-party analytics provider to record how visitors use those pages, so that we can improve them. The provider receives how the pages are used (scrolls, clicks and pointer movement), the content and structure of each page including link targets, a browser identifier, your IP address, device and browser details, your approximate location, and the page that referred you. What you look at on the panel pages can reveal your interests, including health topics you are curious about. Typed text is masked. The provider also sets cookies on healthpanel.org, including its own, that identify your browser on those pages. It is not used on accounts.healthpanel.org, at checkout, on sign-in, or on any page that shows an order or a result. It is also not used when you confirm an address to receive a welcome code, when you follow a referral link (a healthpanel.org/r/ address), or on these legal pages. A browser that sends Global Privacy Control or Do Not Track is not recorded, and you can avoid being recorded by turning on either setting in your browser or by using a content blocker.

Data retention

We retain your information for as long as needed to provide the service, comply with legal and tax obligations, resolve disputes, and enforce our agreements.

Visit records and ad names. We delete the detailed per-page visit records after 30 days. Before that, we roll them up into daily totals that contain no visit number and no per-person detail, and we keep those totals for up to 13 months. We remove the ad names recorded on orders, sign-ups and welcome codes six months after they are recorded.

Recordings. The analytics provider described under Third-party code keeps recordings for the period set in our account with it. We do not hold them ourselves.

Sign-in records. The scrambled codes that let us count how many different accounts signed in on accounts.healthpanel.org are kept for about 40 days and then deleted. We keep the daily and weekly totals, which contain no codes and no per-person detail, for up to 13 months.

Your rights and choices

Depending on your state of residence, you may have rights to access, correct, delete, or receive a copy of your personal information, and to opt out of certain uses. To exercise these rights, contact us at order@healthpanel.org. We will verify your identity before fulfilling a request.

Children's privacy

The Site is not directed to individuals under 18, and we do not knowingly collect personal information from children.

Security

We use reasonable administrative, technical, and physical safeguards designed to protect your information. No method of transmission or storage is 100 percent secure, and we cannot guarantee absolute security.

Changes to this policy

We may update this policy from time to time. We will post the updated version with a new "Last updated" date and, for material changes, provide additional notice as appropriate.

Contact us

Questions about this policy or your information can be sent to order@healthpanel.org, or by phone on +1 516-614-5884.