Effective August 17, 2026 · Version 2.0
Conduit provides physician-managed care online. Because we handle health information, this policy is written to be specific rather than generic: it tells you what we collect, why, who sees it, and what you can require us to do.
Health information you share with us is also covered by our Consumer Health Data Privacy Policy, which governs if the two ever conflict on that subject. How we use AI is described in How We Use AI.
1. Who we are
Conduit, 5606 SMU Blvd, Suite 600715, Dallas, TX 75206. You can reach us any time through our Contact page, or by secure message in the member portal if you have an account.
2. Information we collect
- Identifiers. Name, email address, postal address, phone number, and account credentials.
- Health information — treated as sensitive. Your eligibility and intake answers, medical history, medications, allergies, conditions, height and weight, the protocol a physician designs for you, dose adjustments, check-in responses, and messages with your care team.
- Commercial information. Orders, subscriptions, terms selected, and billing history. Card details are handled by our payment processor; we do not store full card numbers.
- Internet and device activity. Pages viewed, links clicked, browser and device type, and IP address.
- Location. Your state of residence, because a physician may treat you only where they are licensed. We do not collect precise geolocation.
- Inferences drawn from the above, such as eligibility for a protocol.
3. Where it comes from
Directly from you; automatically from your device when you use the site; from your treating physician and the dispensing pharmacy in the course of your care; and from our payment processor regarding transaction outcomes. We do not buy personal information from data brokers.
4. Why we use it
- To provide care: physician review, protocol design, dispensing, delivery, and monthly adjustment.
- To operate the service: accounts, billing and subscriptions, shipping, and support.
- To communicate with you about your care, orders, and account.
- To keep the service secure and prevent fraud.
- To improve the site and our written guidance.
- To meet legal, regulatory, licensing, tax, and pharmacy requirements.
5. Sensitive personal information
Health information is sensitive personal information under several state privacy laws. We use and disclose it only to provide the service you asked for and for the limited purposes those laws permit — providing care, dispensing and delivering your protocol, security, and legal compliance. We do not use it to infer characteristics about you, and we do not use it for advertising.
6. Who we share it with
- Your treating physician and care team, to provide care.
- The dispensing pharmacy, to fill and ship your prescription.
- Service providers under contract, limited to what they need: hosting and database infrastructure, transactional email, payment processing, and customer support tooling. They may not use your information for their own purposes.
- Professional advisors such as counsel and accountants, under confidentiality obligations.
- Authorities, when required by law or lawful process, or to protect someone's safety.
- A successor, if Conduit is involved in a merger, acquisition, or sale of assets. We will tell you before your information becomes subject to a different privacy policy.
7. We do not sell or share your personal information
We do not sell personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under California and other state privacy laws. We have not done so in the preceding twelve months. We do not sell or share the personal information of anyone under 16.
8. Cookies, analytics, and your tracking choices
We use cookies and similar technologies that are necessary to operate the site — keeping you signed in, holding your cart, and securing the service — and, where permitted, limited analytics to understand how the site is used. You can manage non-essential cookies through the privacy controls on the site and through your browser settings.
Global Privacy Control. If your browser sends a GPC or similar universal opt-out signal, we treat it as a request to opt out of sale and sharing for that browser.
Advertising technologies are not permitted to collect health information, and we do not place advertising trackers on our eligibility check, intake, or member portal.
9. Email and text messages
We send messages about your care, orders, and account — these are part of the service and are not marketing. If you opt in to marketing email or text messages, you can opt out at any time using the unsubscribe link, replying STOP to a text, or contacting us. Message and data rates may apply. Opting out of marketing does not stop messages about your care.
10. How long we keep it
We keep personal information for as long as your account is active and afterward as needed to meet legal, tax, and recordkeeping obligations, resolve disputes, and enforce our agreements. Medical and pharmacy records are retained for the periods required by the laws of the state where care was provided, which may be several years, and cannot be deleted before then even at your request.
11. Your privacy rights
Depending on where you live, you may have the right to:
- Know and access the personal information we hold about you, including categories, sources, purposes, and the categories of recipients.
- Delete personal information, subject to the record-retention limits above.
- Correct inaccurate personal information.
- Obtain a portable copy of information you provided to us.
- Opt out of sale, sharing for cross-context behavioral advertising, and profiling with legal effects. We do not engage in these, so there is nothing to opt out of — but the right stands.
- Limit the use of sensitive personal information to what is necessary to provide the service.
- Not be discriminated against for exercising any of these rights. We will not deny you care, charge you a different price, or give you a lesser service.
These rights are provided to residents of states with comprehensive privacy laws, including California, Colorado, Connecticut, Virginia, Texas, Oregon, Montana, and others as their laws take effect. Residents of Washington and Nevada have additional health-data rights described in our Consumer Health Data Privacy Policy.
12. How to exercise your rights
Send a request through our Contact page, or by secure message in the member portal. Tell us which right you are exercising. We will take reasonable steps to verify your identity before acting — for health information, verification is deliberately strict.
Authorized agents. You may use an authorized agent, who must provide written permission signed by you; we may still contact you to confirm.
Timing. We respond within 45 days. If we need more time we may extend once by a further 45 days and will tell you why.
Appeals. If we deny your request, we will explain why and how to appeal. To appeal, reply to our decision stating that you are appealing. If your appeal is denied you may contact your state attorney general.
13. Health-privacy laws
Some of the information involved in your care is held by your treating physician or the dispensing pharmacy as a medical record, and is governed by the health-privacy laws that apply to those providers and by the notices they give you. Where information is protected health information under those laws, those protections apply in addition to this policy.
14. Children
Conduit is for adults. We do not knowingly collect personal information from anyone under 18, and our service is not available to minors. If you believe a minor has provided us information, contact us and we will delete it.
15. Security
We use administrative, technical, and physical safeguards designed to protect your information, including encryption in transit and at rest, access limited to people who need it to provide your care or support you, and logging of access to records. No system is perfectly secure, and we cannot guarantee absolute security.
16. Where your information is handled
We operate in the United States, and your information is processed here. If you access Conduit from outside the United States, understand that your information will be handled in the United States under United States law.
17. Changes to this policy
If we make material changes we will post the updated policy here and update the effective date above. Where the law requires it, we will obtain your consent before applying material changes to information we already collected.
18. Contact
Conduit · 5606 SMU Blvd, Suite 600715, Dallas, TX 75206 · Contact us