Privacy Policy

603 Health Care Network LLC ("603 Health," "SimpleLabs," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you access our websites or use our services.

This policy applies to all SimpleLabs products, websites, and services offered by 603 Health Care Network LLC and is intended for users located in the United States. We do not offer services outside the U.S.

1. Information We Collect

1.1 Personal Information

When you use SimpleLabs, purchase an access package, or complete an intake form, we may collect:

• Contact Information: Name, email address, mailing address, phone number
• Demographic Information: Date of birth, sex/gender (optional)
• Payment Information: Processed securely by Stripe (we do not store credit card numbers)
• Order Information: Selected lab panels, purchase history, order timestamps, and fulfillment status

1.2 Health & Wellness-Related Information

Some information you provide or receive through our services may be considered health-related, including:

• Lab panel selections
• Questionnaire responses
• Clinical authorization details
• Physician-authorized lab requisitions
• Lab results returned by Quest Diagnostics or other laboratory partners

Important: 603 Health is not a healthcare provider, medical group, or HIPAA-covered entity. We provide access, coordination, and wellness support services. Clinical review and laboratory testing are performed by independent partners subject to their own privacy and HIPAA policies.

1.3 Automatically Collected Information

We may automatically collect:

• Usage Data: Pages visited, navigation patterns, time on site
• Device Information: IP address, device type, browser type
• Cookies & Tracking: Essential cookies for functionality and optional analytics cookies for service improvement

2. How We Use Your Information

We use collected information to:

2.1 Provide and Improve Services

• Process orders and payments
• Facilitate physician authorization of lab requisitions
• Coordinate laboratory testing
• Deliver digital results

2.2 Communication

• Send requisitions, confirmations, results, and account-related messages
• Provide educational resources to help you understand your lab results
• Send optional wellness updates or promotions (you may opt out)

2.3 Compliance & Security

• Comply with legal, regulatory, or contractual requirements
• Detect, prevent, and address fraud or security incidents

2.4 Service Enhancement

• Analyze anonymized or aggregated data to improve user experience
• Develop new features, tools, or offerings

3. Information Sharing & Disclosure

We share information only when necessary to deliver services.

3.1 Clinical Authorization Partner

We partner with Fullscript / Rupa Health, our clinical authorization partner, who coordinates physician review and authorization of lab requisitions as required. They may receive certain information needed to complete clinical review.

Note: Because Fullscript and Rupa Health now operate as a unified platform, you may see either name on requisitions or communications.

3.2 Laboratory Partners

To process and return lab results, we share certain required information with:

• Quest Diagnostics (primary laboratory partner)
• Other independent laboratories as applicable

These laboratories are HIPAA-covered entities and manage your information under their own privacy policies.

3.3 Payment Processor

We use Stripe for secure payment processing. Stripe receives payment information directly; 603 Health does not store credit card numbers.

3.4 Technology & Service Providers

We may share limited information with:

• Email delivery services
• Cloud hosting providers
• Customer support tools
• Analytics providers

These vendors access information only as necessary to perform their contracted services.

3.5 Legal Requirements

We may disclose information to:

• Comply with legal obligations or valid legal processes
• Protect our rights, safety, or property
• Prevent fraud, misuse, or security threats

3.6 Business Transfers

If 603 Health is involved in a merger, acquisition, or asset transfer, personal information may be transferred along with the business. We will notify you if policies materially change.

3.7 What We Never Do

• ❌ We never sell personal information
• ❌ We never rent or share health information with advertisers
• ❌ We never use lab results for purposes other than fulfilling your service

4. Data Security

We implement reasonable and industry-standard safeguards, including:

• TLS/HTTPS encryption
• Encrypted storage
• Limited access controls
• Routine security audits

While we take strong precautions, no system is completely secure. We cannot guarantee absolute protection.

5. Data Retention

We retain information only as long as reasonably necessary for:

• Order fulfillment
• Record-keeping and legal compliance
• Security and fraud prevention
• Customer account management

Examples:

• Order & transaction data: Up to 7 years
• Requisition-related documentation: As required by applicable regulations
• Marketing preferences: Until you opt out
• Account data: Until you request deletion

You may request deletion at any time unless retention is required by law.

6. Your Privacy Rights

U.S. residents may have the right to:

• Access their personal information
• Correct inaccurate or outdated data
• Request deletion of certain information
• Request data portability
• Opt out of marketing communications
• Limit or object to certain processing activities (where applicable)

To submit a privacy request, email: privacy@603health.com

We respond within 30 days.

7. State-Specific Notices (U.S. Only)

7.1 California Residents (CCPA/CPRA)

California residents may request:

• Categories of information collected
• Sources of data
• Purposes of collection
• Third parties to whom information is disclosed
• Access, correction, or deletion
• Non-discrimination for exercising privacy rights

We do not sell personal information as defined under CCPA/CPRA.

7.2 Virginia, Colorado, Connecticut, Utah

Residents of these states may have similar rights, including:

• Access
• Correction
• Deletion
• Opt out of certain types of data processing
• Data portability

SimpleLabs currently does not process data for targeted advertising.

8. Children's Privacy

SimpleLabs is intended for adults 18 years and older. We do not knowingly collect data from minors. If you believe a minor has provided personal information, contact us immediately.

9. Cookies & Tracking Technologies

9.1 Types of Cookies

• Essential Cookies: Security, authentication, and core functionality
• Analytics Cookies: Optional; used to improve performance
• Preference Cookies: Save user settings

9.2 Cookie Management

You may disable cookies in your browser. Some features may not function properly if cookies are disabled.

10. Third-Party Links

We may provide links to external sites (e.g., Fullscript / Rupa Health, Quest Diagnostics, Stripe). We are not responsible for their privacy practices. Please review their privacy policies before submitting information.

11. Policy Updates

We may update this Privacy Policy periodically. Material changes will be communicated by:

• Updating the "Last Updated" date
• Email notice for significant changes
• Posting a notice on our website

Continued use of SimpleLabs after changes indicates acceptance of the updated policy.

12. Contact Us

For questions or privacy requests:

13. HIPAA Notice & Important Disclosures

• 603 Health is not a HIPAA-covered entity or healthcare provider.
• We provide access, coordination, and wellness support services only.
• Fullscript / Rupa Health and Quest Diagnostics are independent HIPAA-covered entities.
• Clinical review and laboratory testing are performed by independent licensed professionals.
• We treat your data with care but are not subject to HIPAA for all interactions.

← Back to Home