How we handle your information.

EFFECTIVE SEPTEMBER 24, 2026LAST UPDATED SEPTEMBER 24, 2026VITORA HEALTH — BLOOMINGTON, MN

• 01 — Information we collect
• 02 — How we use it
• 03 — How we share it
• 04 — Text messaging (SMS)
• 05 — Cookies and tracking
• 06 — Health information
• 07 — Your choices and rights
• 08 — Data security
• 09 — Children's privacy
• 10 — Changes to this policy
• 11 — Contact us

Vitora Health ("Vitora," "we," "us," or "our") operates vitora.life and provides longevity, metabolic, and performance health services from our practice in Bloomington, Minnesota. This Privacy Policy explains what personal information we collect through our website and services, how we use it, and who we share it with.

By using our website or submitting a form on it, you agree to the practices described in this policy.

01Information we collect

We collect the information you give us directly. We do not buy personal information about you from data brokers, and we do not build profiles about you from third-party advertising networks.

Information you submit through our forms

Our website has three forms — a contact form, a health intake questionnaire, and a founding-member enrollment form. Depending on which you complete, we may collect:

Information collected automatically

Our website is hosted by Netlify, which keeps standard server logs — including your IP address, browser type, the pages you requested, and the time of the request — for security, abuse prevention, and reliability. We do not use these logs to identify you personally.

Information from calls and messages

Our telephone and text messaging run on RingCentral. When you call or text us, we receive your phone number and the content of the message, and we keep a record of the conversation as part of your service history.

02How we use your information

We use personal information to:

• Respond to your enquiry and schedule, confirm, or reschedule appointments and consultations.
• Review your intake answers clinically and determine whether our programs are appropriate for you.
• Deliver the services, memberships, and programs you request.
• Send you service and account messages, including appointment reminders and follow-ups.
• Send you information about our programs and offers, where you have agreed to receive it.
• Maintain our records, operate and secure our website, and meet our legal, regulatory, and professional obligations.

We do not use your information for automated decision-making that produces legal or similarly significant effects about you.

03How we share your information

We share personal information only in the following circumstances:

• Our clinical and administrative team. Staff and licensed providers involved in your care review your intake and service information.
• Service providers who work on our behalf. We use vendors to run the practice — including Netlify for website hosting and delivery of form submissions, and RingCentral for telephone and text messaging. They may process your information only to provide their service to us, under contract, and may not use it for their own purposes.
• Pharmacies, laboratories, and clinical partners. Where a service you have requested requires it, and with your authorisation.
• Legal and safety. Where we are required to by law, subpoena, or regulator, or where disclosure is necessary to protect the rights, property, or safety of you, our staff, or the public.
• Business transfers. If the practice is merged, acquired, or reorganised, personal information may transfer as part of that transaction; it would remain subject to this policy.

We do not sell your personal information, and we do not share it with third parties for their own advertising or marketing.

04Text messaging (SMS)

If you give us your mobile number and opt in, we may send you text messages about your enquiry, your appointments, and your care. Opting in to text messages is never a condition of receiving any service from us.

05Cookies and tracking

This website does not use advertising cookies, analytics cookies, tracking pixels, or third-party advertising networks. We do not track you across other websites, and we do not respond to "Do Not Track" signals because we do not perform the tracking those signals are designed to stop.

Your browser may store small amounts of data locally so that the site works correctly. Our hosting provider's standard server logs are described in section 01.

06Health information

Some of what you send us — your medical history, conditions, medications, and measurements — is sensitive health information, and we treat it that way. Access is limited to the staff and providers who need it to review your intake and deliver your care.

Information you submit through this website before you become a patient is not, on its own, protected health information under HIPAA. Once you become a patient of the practice, information created or received in the course of your care is handled in accordance with applicable state and federal health privacy law, including HIPAA where it applies, and under our Notice of Privacy Practices, which we provide to patients.

07Your choices and rights

• Text messages. Reply STOP to any message to stop them. See our SMS Terms.
• Email. Use the unsubscribe link in any marketing email, or contact us. We will still send you messages necessary for your care and appointments.
• Phone. Tell us during any call, or contact us, and we will record the preference.
• Access, correction, and deletion. You may ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it. We will respond as required by applicable law. Some information must be retained to meet medical record-keeping, billing, and legal obligations, and we will tell you if that applies.

To make any of these requests, email us at michael@vitora.life or use the details in section 11. We will not discriminate against you for exercising these rights.

08Data security

Our website is served over encrypted connections (HTTPS), and form submissions are transmitted encrypted. We limit access to personal information to the people who need it, and we require our service providers to maintain appropriate safeguards. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please do not send sensitive health details by unsecured email or text.

09Children's privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal information from children under 18. If you believe a child has given us personal information, contact us and we will delete it.

10Changes to this policy

We may update this policy as our services or the law change. The effective date at the top of this page shows when it was last revised. If we make a material change to how we handle your information, we will take reasonable steps to notify you.

11Contact us

If you have questions about this policy, or want to exercise any of the choices described above, contact us:

See also our Terms of Service and SMS Terms of Service.