CLR SYNC POLICY CENTER

Plain language.
Real boundaries.

How CLR SYNC handles information, account access, purchases, health data, educational content, refunds, and accessibility. Additional consent or clinic terms may apply to a specific service.

Effective August 8, 2026Versioned policy centerLast reviewed August 8, 2026

VERSION 1.0 / Privacy Officer

Privacy Policy

Explains what CLR SYNC collects, how information is used, when it may be shared, and the choices available to each user.

Information we collect

CLR SYNC may receive account and contact details, service selections, intake responses, laboratory orders and results, original reports, medical context supplied by a user or authorized clinic, consent records, messages, payment status, support history, device information, and security logs. We collect only what is reasonably needed for the requested service, security, support, and legal obligations.

How information is used

Information may be used to operate requested testing, coordinate authorized collection and review, generate reports, maintain longitudinal records, support the client, improve reliability, prevent misuse, and satisfy legal or contractual duties. CLR SYNC does not use identifiable health information for unrelated advertising.

When information is shared

Information may be shared with a clinic selected by the client, an ordering clinician, laboratory, collection partner, technology provider, payment provider, or other contracted service provider only when needed for the configured workflow. We may also disclose information when required by law, to protect rights and safety, or with the individual’s direction or authorization.

Retention and security

Records are retained for the period reasonably required by the service, applicable law, clinical responsibilities, accounting rules, contracts, disputes, and security needs. CLR SYNC uses access controls, encryption, audit history, environment separation, and vendor review appropriate to the information and workflow. No electronic system can promise absolute security.

Your choices and requests

Depending on the relationship and applicable law, a person may request access, correction, export, restriction, revocation of a permission, or deletion of eligible information. Requests require identity verification and may be routed to the clinic or other organization responsible for the designated record. Revocation does not reverse processing already lawfully completed.

Minors and household profiles

A parent, guardian, clinic, or other legally authorized representative must control a minor profile. Each household member receives a separate record and permission scope. CLR SYNC does not knowingly invite a child to create an independent account outside an approved family or clinical workflow.

VERSION 1.0 / Privacy Officer

HIPAA and Health Information Notice

Clarifies when HIPAA may apply, how clinic directed health information is handled, and which organization manages individual privacy rights.

When HIPAA applies

HIPAA applies to covered health plans, health care clearinghouses, certain health care providers, and business associates performing covered functions for them. CLR SYNC may act as a technology service provider or business associate for a clinic under a written agreement. Not every direct consumer service, wellness record, or user directed data transfer is governed by HIPAA.

Clinic directed records

When CLR SYNC handles protected health information for a covered clinic, use and disclosure are limited by the applicable business associate agreement, the clinic’s instructions, and law. The clinic remains responsible for its Notice of Privacy Practices, treatment records, and responses to patient rights unless an agreement assigns a specific operational task to CLR SYNC.

Direct consumer information

Health information outside a HIPAA covered relationship may still be protected by this Privacy Policy, contract, consumer health privacy laws, data breach laws, and other applicable requirements. CLR SYNC applies the same core principles of limited access, documented purpose, security controls, and accountable sharing even when HIPAA is not the governing law.

Authorizations and permissions

A public notice does not replace an authorization when an authorization is required. Patient directed sharing is scoped to the selected recipient and purpose, recorded, and revocable for future activity. A clinic relationship does not grant access to another clinic’s records or to unrelated household profiles.

Rights and complaints

Requests involving a clinic designated record may need to be completed by that clinic. CLR SYNC will route verified requests to the responsible organization and will support obligations assigned through an applicable agreement. Privacy concerns can be submitted through the secure Client Portal without affecting access to requested services.

VERSION 1.0 / General Counsel

Terms and Conditions

Sets the rules for website, account, consumer, clinic, demonstration, and platform use while preserving the boundary between software and medical care.

Agreement and eligibility

By using the website or an account, the user agrees to these terms and any service specific consent presented before purchase or participation. The user must be legally able to agree, provide accurate information, and use the service only in a location where the selected workflow is available. A guardian or authorized representative must control an eligible minor profile.

Platform role

CLR SYNC organizes testing workflows, records, reports, permissions, and educational context. CLR SYNC does not provide a diagnosis, prescription, dosing instruction, emergency service, or guarantee that a product, supplement, medication, or protocol is safe or effective for a person. Clinical services, when offered, are delivered by separately identified licensed professionals.

CLR RX and independent pharmacies

CLR RX is a B2B ordering and routing interface for participating clinics. CLR RX does not prescribe and does not own or operate a pharmacy, dispense medication, ship products, or fulfill prescriptions. It may present configured independent third-party pharmacy options and transmit a prescription authorized by the clinic's licensed clinician. Each pharmacy independently controls acceptance, pricing, dispensing, shipping, fulfillment, and its own terms.

Accounts and acceptable use

Users must protect credentials, access only records they are authorized to use, and avoid unlawful, deceptive, abusive, malicious, or security threatening activity. Scraping, reverse engineering protected decision logic, impersonation, interference with service, unauthorized exports, and attempts to bypass access controls are prohibited.

Orders and third party services

Testing and clinical availability depend on location, laboratory rules, specimen requirements, clinician authorization, vendor capacity, and successful payment. Laboratories, clinics, payment providers, shipping carriers, and other third parties may apply separate terms. CLR SYNC is not responsible for a third party action outside the service obligations CLR SYNC controls.

Intellectual property

The CLR SYNC name, interface, reports, visual systems, Protocol Intelligence structure, configuration, software, content, and protected decision logic belong to CLR SYNC or its licensors. A user receives a limited right to use the service for the authorized purpose and may retain personal copies of records made available to that user.

Availability and changes

CLR SYNC may update features, policies, pricing, integrations, or availability to improve the service, comply with law, address safety, or respond to vendor changes. Material policy changes will receive an updated effective date. Continued use after notice of a material change constitutes acceptance where permitted by law.

VERSION 1.0 / Client Operations

Refund and Cancellation Policy

Explains when consumer services, laboratory work, subscriptions, and eligible historical merchandise purchases may be canceled, returned, credited, or considered final.

Before work begins

A service request may be canceled for a full refund before payment is captured or before CLR SYNC, a clinician, laboratory, collection partner, or other vendor begins paid work. If work has started, any refund is limited to the unearned portion remaining after nonrecoverable fees and completed services.

Laboratory and professional services

Laboratory orders, kits, collection appointments, specimen processing, clinician review, completed reports, and other personalized services may become nonrefundable once authorized, scheduled, shipped, collected, processed, reviewed, or delivered. A canceled or unusable specimen follows the responsible laboratory’s recollection and cancellation rules.

Memberships and subscriptions

A user may cancel future renewal through the account or support channel. Cancellation stops the next eligible renewal and does not automatically refund a period already started, completed reports, reserved services, or third party costs already incurred. Any trial or special offer follows the terms shown when selected.

Historical merchandise purchases

For merchandise purchased before the public storefront was retired, requests for an eligible return must be made within fourteen days of delivery. Products must be unopened, unused, and in original condition unless they arrived damaged, defective, or incorrect. Supplements, personalized goods, final sale items, gift cards, opened health products, and goods that cannot be safely resold may be excluded where law permits.

How to request a refund

Submit the order number, reason, and supporting photos when applicable through the secure Client Portal. Do not send merchandise until return authorization is issued. Approved refunds return to the original payment method when possible. Bank and card posting times are outside CLR SYNC control.

VERSION 1.0 / Clinical Governance

Medical and Educational Disclaimer

Defines what CLR SYNC reports, Protocol Intelligence, demonstrations, and educational content can and cannot do.

Not medical advice

Website content, software outputs, reports, green or red Protocol Intelligence results, product information, demonstrations, and communications are educational and organizational tools. They are not a diagnosis, prescription, treatment plan, dosing instruction, or substitute for an appropriately licensed professional who knows the person’s complete history.

Protocol Intelligence boundary

A green result means the available data did not trigger a configured red rule for that catalog item at that time. It does not prove safety, effectiveness, legality, product quality, or clinical appropriateness. A red result identifies a reason to pause and discuss the item. Both results can change when laboratory values, medications, conditions, symptoms, goals, pregnancy status, or evidence change.

Laboratory limitations

Laboratory results can vary with timing, fasting, medications, supplements, exercise, menstrual cycle, illness, specimen handling, analytical method, and biological variation. Results may be delayed, corrected, canceled, incomplete, or require recollection. Reference ranges are not a diagnosis and may differ by laboratory.

Products and third party claims

Retail products are not intended to diagnose, treat, cure, or prevent disease. Product descriptions do not create a guarantee of outcome. CLR SYNC does not sell or prescribe peptides through Protocol Intelligence and does not validate the identity, purity, legality, or suitability of a product obtained from another source.

Emergencies and urgent findings

CLR SYNC is not an emergency service and the portal is not monitored as an emergency channel. Call 911 or the appropriate local emergency service for an emergency. Urgent symptoms or critical results require prompt contact with an appropriate clinician or the responsible laboratory according to the instructions provided with the result.

VERSION 1.0 / Privacy Officer

Cookie Notice

Explains the small data files and similar technologies used to keep the website secure, preserve sessions, remember choices, and understand service performance.

Required technologies

CLR SYNC uses essential cookies or similar storage for secure sessions, authentication boundaries, request protection, language or interface choices, load balancing, and the operation of requested features. Disabling essential technologies may prevent account or portal functions from working.

Measurement and preferences

CLR SYNC may use limited measurement tools to understand page performance, navigation, failures, and product reliability. Optional analytics or preference technologies should be activated only under the published consent configuration and should not receive identifiable laboratory results or medical history for advertising.

Third party services

A payment provider, laboratory portal, video vendor, or other linked service may set its own cookies after a user chooses to interact with that service. Its notice governs those technologies. CLR SYNC reviews configured vendors but does not control a third party website outside the CLR SYNC environment.

Managing choices

Browser controls can block or remove many cookies. When a CLR SYNC preference control is available, it can be used to change optional choices without disabling the essential security and session technologies required for the selected service.

VERSION 1.0 / Product Operations

Accessibility Statement

Describes CLR SYNC’s commitment to usable digital experiences and the process for requesting an alternative format or assistance.

Our commitment

CLR SYNC aims to provide a website and client experience that people can perceive, understand, navigate, and use across common assistive technologies, screen sizes, keyboards, and touch devices. Accessibility is treated as an ongoing product requirement rather than a one time certification.

Supported experience

The product team tests semantic structure, labels, keyboard access, focus visibility, contrast, responsive layouts, zoom, status communication, and error recovery. Third party content or vendor interfaces may have separate accessibility characteristics that CLR SYNC does not fully control.

Requesting help

A person who encounters a barrier can submit the page, device, browser, assistive technology, and requested outcome through the Client Portal or CLR SYNC contact workflow. CLR SYNC will acknowledge the request, offer a reasonable alternative when available, and track remediation.

VERSION 1.0 / Partner Operations

Clinic Partner Data and Workflow Addendum

Defines clinic access, patient ownership boundaries, co branding, responsibilities, and permitted workflow use.

Responsibilities

The clinic controls its workforce access, identifies authorized providers, verifies patient relationships, and follows applicable ordering, result-review, privacy, and record-retention duties. CLR SYNC supplies configured software workflows, attribution records, and interface operations described in an executed agreement.

Patient permissions

Clinic access is limited to patients who granted access or whose care relationship permits access under an approved configuration. Patient records remain segmented by profile. A clinic may not use CLR SYNC access to obtain another clinic's records or bypass a revocation.

Compensation firewall

Commercial compensation must not determine test authorization, clinical judgment, critical-result disposition, report content, or the selection of treatment. Any percentage compensation, referral arrangement, or fee allocation requires healthcare counsel approval before activation.

QUESTIONS OR REQUESTS

Use the secure channel attached to your account.

Clients can submit privacy, correction, access, refund, and accessibility requests through the Client Portal. People without an account can use the CLR SYNC start request and identify the request type in their reply.

Open Client Portal Contact CLR SYNC

Plain language.Real boundaries.

Information we collect

How information is used

When information is shared

Retention and security

Your choices and requests

Minors and household profiles

When HIPAA applies

Clinic directed records

Direct consumer information

Authorizations and permissions

Rights and complaints

Agreement and eligibility

Platform role

CLR RX and independent pharmacies

Accounts and acceptable use

Orders and third party services

Intellectual property

Availability and changes

Before work begins

Laboratory and professional services

Memberships and subscriptions

Historical merchandise purchases

How to request a refund

Not medical advice

Protocol Intelligence boundary

Laboratory limitations

Products and third party claims

Emergencies and urgent findings

Required technologies

Measurement and preferences

Third party services

Managing choices

Our commitment

Supported experience

Requesting help

Authorization

Limits and risks

Abnormal and critical results

Responsibilities

Patient permissions

Compensation firewall

Use the secure channel attached to your account.

Plain language.
Real boundaries.