Privacy Policy

This Privacy Policy describes how Hillary Lin, MD ("we," "us," or "our") processes personal information through hillarylinmd.com, including medical inquiries, checkout, paid medical intake, scheduling, newsletters, coaching workflows, and related digital services.

Information We Collect

We may collect the following categories of personal information:

Identity and contact data: Name, email address, phone number, date of birth, mailing address, emergency contact, state where care will be received, pronouns, and sex assigned at birth.
Medical inquiry and paid intake data: Health history; medications and supplements; allergies; current and prior conditions or surgeries; current care team; family history; sleep, exercise, and nutrition information; goals and priorities; recent testing; preferred pharmacy; and records you later share securely with the practice.
Administrative enrollment-progress data: An opaque enrollment reference, contact email, state and program selection, eligibility outcome, selected offering, enrollment milestones, transactional email status, reminder status, and reminder-suppression choice. Clinical intake answers are not stored in this progress record.
Payment and subscription data: Selected offering, price and billing cadence, payment email, Checkout and subscription identifiers, payment status, renewal status, and billing-management activity. Our payment provider processes full payment card details; we do not store full card numbers on this website.
Legal acceptance records: The documents and versions accepted, acceptance status, and acceptance or submission time, including Terms, Privacy Policy, telemedicine consent, and intake accuracy and use authorization.
Newsletter subscription data: Email address and newsletter preferences when you subscribe to The Longevity Letter or The CareCore Stack.
Coaching intake and program data: Goals, habits, health history you choose to describe, check-in responses, uploaded lab results, records, biomarkers, wearable summaries, and other information you choose to share in a coaching context.
Generated coaching materials: Baseline reports, dashboards, weekly reports, check-in summaries, and clinician-question prompts generated from information you provide.
Usage data: Information about how you interact with our website, including pages viewed, time spent, and referral sources.
Device information: Browser type, operating system, IP address, and device identifiers.

How We Use Your Information

To send you newsletters and content you've subscribed to
To respond to inquiries and confirm state and offering eligibility
To process purchases, subscriptions, renewals, cancellations, and billing support
To collect paid medical intake, maintain practice records, schedule care, and provide requested medical services
To send transactional next-step messages and one delayed reminder for an unfinished enrollment stage, and to honor a request to stop delayed reminders
To run coaching programs you request, including intake, reports, dashboards, check-ins, educational content, and clinician-question prompts
To improve our website, content, coaching materials, and service quality
To analyze website usage and trends
To comply with legal obligations

How We Share Your Information

We do not sell your personal information. We use service providers for payment and subscription processing, cloud workspace and file storage, transactional email, scheduling, newsletter delivery, website hosting, and general website analytics. We provide each provider only the information reasonably needed for its role.

Paid medical intake answers are saved in restricted practice record storage. They are not put in Stripe metadata, ordinary notification email, or general website analytics. Enrollment recovery, reminder suppression, payment completion, and intake routes do not load general site analytics.

Enrollment recovery and reminder links use short-lived or purpose-limited tokens. Delayed enrollment reminders include a separate way to stop future delayed reminders. Stopping those reminders does not stop payment receipts, intake confirmation, or operational scheduling messages.

Cookies & Tracking Technologies

We use cookies and similar technologies on general website routes to understand traffic and improve the site. You can control cookies through your browser settings. Enrollment recovery, reminder suppression, payment completion, and intake routes are excluded from general site analytics.

Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal information we hold about you
Request correction or deletion of your data
Opt out of marketing communications at any time
Request a copy of your data in a portable format

Medical Practice Records and Coaching Data

This website Privacy Policy explains the website and service data practices described above. It is not the medical practice's Notice of Privacy Practices. Patients receive the Notice of Privacy Practices during patient onboarding. Medical practice records are handled under that notice and applicable law.

Coaching data is handled as part of the coaching program workflow and is governed by this Privacy Policy and the Health Coaching Agreement. Coaching data is not treated as a medical practice record unless it is separately provided or incorporated for patient care.

Uploaded labs, records, and biomarkers in a coaching program are stored as source data you provide. We may use them to support education, metrics literacy, program reports, and prompts you can bring to your own clinician. We do not use coaching data to diagnose, treat, prescribe, order labs, or medically interpret your health.

Data Retention

Medical records are retained as required by applicable law and practice requirements. Other personal information is retained only as reasonably necessary for the purposes described in this policy, including account support, accounting, disputes, and legal obligations. We may delete, de-identify, or aggregate other information when it is no longer reasonably needed.

Administrative enrollment-progress records are retained only as reasonably necessary for operational follow-up, reconciliation, support, accounting, disputes, and legal obligations. We may delete or de-identify abandoned nontransactional inquiries after confirming that they are not associated with payment or clinical records.

Children

Paid care offerings and intake are for adults age 18 or older. Our Service is not directed to children, and we do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website with a revised effective date.

Contact Us

If you have questions about this Privacy Policy, please contact us.