Privacy Policy

Effective Date: July 7, 2026

This Privacy Policy describes how Omnyx Management LLC and the affiliated physician-owned professional practices that provide all medical services, Omnyx Medical PC (Arizona) and Matthew Stapleton, M.D., Professional Corporation (California) (collectively, "we," "us," "the Practice"), collect, use, and share information when you visit our website, complete our quiz, use our patient portal, or otherwise interact with us. This Privacy Policy is separate from the HIPAA Notice of Privacy Practices, which governs the use of your protected health information. Where both apply, the HIPAA Notice of Privacy Practices controls.

1. Information We Collect

1.1 Information You Provide

1. Quiz Responses: Answers to our health assessment quiz, including demographic and health-goal information you submit before establishing a clinical relationship
2. Contact Information: Name, email, phone number, mailing address
3. Account Information: Login credentials for the patient portal
4. Payment Information: Processed by our payment processors (one processor for membership checkout and a separate processor for medication purchases); we do not store full credit card numbers
5. Clinical Information: Intake responses, medical history, prescription preferences (covered by the HIPAA Notice of Privacy Practices once a clinical relationship is established)
6. Communications: Messages you send us via email, portal, SMS, or phone

1.2 Information Collected Automatically

1. Device and Browser Data: IP address, browser type, operating system, device identifiers
2. Usage Data: Pages visited, time on site, click patterns, referral source
3. Cookies and Similar Technologies: First-party and third-party cookies for analytics, advertising attribution, and session management. See Cookie Policy in Section 7.

1.3 Information from Third Parties

We may receive limited information from advertising platforms (e.g., Google, Meta), referral sources, or partners. This information is used to attribute marketing performance and improve our services.

2. How We Use Information

We use the information we collect to:

1. Provide and improve our services, including delivering the quiz results, sending nurture sequences, and facilitating the clinical engagement;
2. Communicate with you about your account, our services, promotions, and educational content (you may opt out of marketing communications at any time);
3. Process payments and prevent fraud;
4. Measure marketing performance and optimize our website and funnels;
5. Comply with legal obligations.

3. How We Share Information

We share information only as described below:

3.1 Service Providers and Business Associates

We share information with vendors who help us operate our business, including: hosting providers, analytics providers, our CRM and communications platform, payment processors, marketing partners, and our EHR and clinical system of record (which provides native clinical documentation and telehealth video). No vendor receives access to protected health information until it has signed a Business Associate Agreement, per HIPAA.

3.2 Compliance and Safety

We may share information to comply with legal obligations (including subpoenas, court orders, and lawful government requests) and to protect the rights, property, or safety of the Practice, our patients, or others.

3.3 Business Transactions

If we are involved in a merger, acquisition, or sale of substantially all assets, your information may be transferred. We will notify you (where required) and ensure the successor entity is bound by privacy commitments equivalent to those in this Policy.

3.4 With Your Consent

We share information for any other purpose with your consent.

3.5 No Sale of Personal Information

We do not sell your personal information to third parties.

4. Marketing Communications and SMS

4.1 Email and SMS Marketing. By providing your email or mobile number and consenting (via checkbox at signup), you authorize us to send marketing emails and SMS messages about our services, educational content, and promotions.

4.2 Opt-Out. You may opt out of marketing emails by clicking the unsubscribe link at the bottom of any marketing email, or opt out of marketing SMS by replying STOP to any marketing SMS. Reply HELP for help.

4.3 SMS Consent and Phone Numbers Are Not Shared. Your mobile information, SMS opt-in consent, and phone number are never shared with or sold to any third party for their marketing or promotional purposes. We share them only with the messaging provider that delivers the texts to you on our behalf, and solely for the purpose of sending the messages you have requested. Transactional and marketing SMS consent are collected separately, and neither is required to use the site.

4.4 Clinical Communications Separate. Clinical communications (such as appointment reminders and refill notifications) operate under HIPAA's healthcare provider exception and are separate from marketing communications. Opting out of marketing does not opt you out of clinical communications.

5. Your Privacy Rights

5.1 General Rights

You may request to access, correct, delete, or port your personal information by contacting us at privacy@omnyxlife.com. We will respond within thirty (30) days.

5.2 California Residents (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, including the right to: know what personal information we collect; request deletion; correct inaccurate information; opt out of sale or sharing of personal information (we do not sell or share personal information for cross-context behavioral advertising in the CCPA sense); limit use of sensitive personal information; and not be retaliated against for exercising these rights.

5.3 Other States

Residents of states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, Utah, Texas, and others) have similar rights. Submit requests to privacy@omnyxlife.com.

5.4 Verification

We may require verification of your identity before responding to a privacy rights request.

6. Data Security

We implement administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit and at rest for protected health information, access controls, audit logging, and incident response procedures. No system is completely secure; we cannot guarantee absolute security.

7. Cookies and Tracking Technologies

We use cookies and similar technologies for: essential site functionality (session management); analytics (understanding how users interact with our site); marketing attribution (measuring ad performance); and personalization. You can control cookies through your browser settings; disabling cookies may impair site functionality.

8. Children's Privacy

Our services are not directed to children under 18. We do not knowingly collect personal information from children. If we learn we have collected information from a child, we will delete it.

9. International Users

Our services are provided to residents of the United States only, in states where our providers are licensed. If you access our services from outside the United States, you do so at your own risk and consent to having your information processed in the United States.

10. Changes to This Policy

We may update this Policy from time to time. We will post the revised Policy on our website with a new Effective Date. Material changes will be communicated by email or in-app notice.

11. Contact

Privacy Officer: privacy@omnyxlife.com
Omnyx Medical PC
Omnyx Management LLC, 4539 N 22nd St, Ste N, Phoenix, AZ 85016