Last updated: September 5, 2026
Heal From Within Longevity (“Heal From Within,” “HFW,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal and health information you share with us. This Privacy Policy explains what information we collect through our website at hfwlongevity.com (the “Site”) and through our related services, how we use and share it, and the choices and rights you have.
By using the Site, booking a consultation, subscribing to our communications, purchasing testing or membership, or otherwise providing us information, you agree to the practices described in this Policy. If you do not agree, please do not use the Site or submit information to us.
Heal From Within is a clinician-led functional medicine and longevity practice offering advanced diagnostic testing, telehealth consultations, membership programs, and clinically supervised therapies. We are based in Hillsdale, New Jersey, and serve patients across the United States.
This Policy covers information collected through the Site and our general business and marketing activities. Where information you provide constitutes Protected Health Information (“PHI”) under the Health Insurance Portability and Accountability Act (“HIPAA”), our handling of that information is governed by HIPAA and applicable state law, together with any separate privacy notice we provide to you as part of your care.
We take the confidentiality of your health information seriously. Once you become a patient, information created or received in connection with your care — including your health history, symptoms, lab and diagnostic results, treatment plans, prescriptions, and clinical communications — is treated as Protected Health Information and is safeguarded in accordance with HIPAA and applicable state law.
Information you submit through public areas of the Site (for example, a general inquiry, a consultation-request form, or a newsletter sign-up) before establishing a treatment relationship may not be PHI, but we still handle it with care and in accordance with this Policy. Please do not send detailed medical information, symptoms, or test results through unsecured website forms, email, or social media. Sensitive clinical information should be shared through the secure channels we provide, such as your patient portal or a scheduled telehealth visit.
Information you provide to us directly. This includes information you give us when you:
Health and diagnostic information. As part of care, we and our laboratory partners collect health-related information such as your medical and family history, medications, symptoms, biological samples (for example, at-home blood-spot, finger-stick, or stool collection kits), and the resulting test data and biomarkers.
Payment information. Payments for testing, membership, programs, and therapies are processed by third-party payment processors and, where applicable, HSA/FSA administrators. We receive confirmation and limited transaction details, but full card numbers are handled by our processors and are not stored by us.
Information collected automatically. When you visit the Site, we and our service providers may automatically collect technical information such as your IP address, device and browser type, operating system, pages viewed, referring URLs, and interactions with the Site, using cookies and similar technologies (see Section 6).
Information from third parties. We may receive information about you from our scheduling platform, laboratory partners, pharmacies, payment processors, and, where you engage with us there, from social media platforms.
We use the information we collect to:
We do not sell your personal information, and we do not share your health information for third-party marketing purposes. We share information only as described below:
Where vendors handle PHI on our behalf, we do so in accordance with HIPAA, including through business associate agreements that require them to protect your information.
The Site uses cookies and similar technologies to operate the Site, remember your preferences, understand how the Site is used, and support our marketing. Some cookies are necessary for the Site to function; others help us analyze traffic and improve performance. You can control cookies through your browser settings, though disabling certain cookies may affect how the Site works. Where required by law, we obtain consent before using non-essential cookies.
The Site relies on and links to third-party services, including our scheduling provider (Calendly), embedded maps, and our social media pages (Facebook, Instagram, and LinkedIn). When you interact with these services, your information is also subject to those companies’ own privacy policies. We are not responsible for the privacy practices of third parties, and we encourage you to review their policies before providing information.
If you sign up for our guide, newsletter, or other updates, we may send you educational and promotional emails. You can unsubscribe at any time using the link in any marketing email or by contacting us. If you provide a phone number and consent to text messages, you may opt out by following the instructions in the message. Opting out of marketing does not stop transactional or care-related messages, such as appointment reminders, billing notices, or test-status updates, which are necessary to provide our services.
We retain your information for as long as needed to provide our services, maintain your records, and fulfill the purposes described in this Policy, including to comply with our legal, regulatory, tax, accounting, and professional recordkeeping obligations. Medical and treatment records are retained for the periods required by applicable law. When information is no longer required, we take reasonable steps to delete or de-identify it.
We maintain reasonable administrative, technical, and physical safeguards designed to protect your information, and we use HIPAA-compliant systems for the handling of protected health information and care coordination. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account and portal credentials confidential.
Depending on where you live and the nature of the information, you may have the right to:
To exercise any of these rights, contact us using the details in Section 15. Rights relating to your medical records and PHI are handled in accordance with HIPAA and applicable law. We will verify your identity before responding and will not discriminate against you for exercising your rights.
Residents of certain states may have additional rights under applicable state privacy and consumer-health-data laws.
California residents. Under the California Consumer Privacy Act, as amended, you may have the right to know the categories and specific pieces of personal information we collect, the right to request deletion or correction, and the right to opt out of the “sale” or “sharing” of personal information. We do not sell or share your personal information as those terms are defined under California law. Medical information governed by HIPAA and California’s Confidentiality of Medical Information Act is exempt from certain provisions of the CCPA and is handled under those laws.
Consumer health data. For residents of states with consumer-health-data laws (such as Washington, Nevada, and Connecticut), we collect and use consumer health data only to provide and support the services you request, to communicate with you, and as otherwise described in this Policy or with your consent. We do not sell consumer health data.
To make a request, contact us using the information in Section 15. You may designate an authorized agent to act on your behalf, subject to verification.
Our Site and services are intended for adults aged 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, please contact us and we will take appropriate steps to delete it.
Our services are delivered primarily through telehealth to patients across the United States, and the specific services available to you may depend on your state, clinician licensure, laboratory rules, and pharmacy requirements. The Site does not provide emergency medical services. If you are experiencing a medical emergency, call 911 or go to the nearest emergency room.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we do, we will revise the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Site after changes take effect constitutes acceptance of the updated Policy.
If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us:
Heal From Within Longevity
401 Hillsdale Ave, Hillsdale, NJ 07642
Phone: (551) 404-8820
Email: info@hfwlongevity.com
