Last updated: September 4, 2026
Decades by Longevity Health ("Decades," "we," "us," or "our") is committed to protecting the privacy and security of your personal and health information. This Privacy Policy describes how we collect, use, disclose, and safeguard information when you visit our website, complete our intake forms, or receive telehealth services through our platform.
Medical services offered through Decades are provided by the appropriate Longevity Health affiliated medical practice authorized to provide care in the patient's state.
The legal entity responsible for your care may vary depending on your location and the licensed healthcare professional assigned to your care.
Privacy protections described in this Privacy Policy apply regardless of which affiliated medical practice provides your care.
We may collect the following categories of information:
We use the information we collect to:
Health information you provide to our affiliated medical practice may constitute Protected Health Information ("PHI") under the Health Insurance Portability and Accountability Act of 1996 ("HIPAA") and its implementing regulations.
PHI is safeguarded using administrative, technical, and physical security measures designed to protect the confidentiality, integrity, and availability of your information. PHI is disclosed only as permitted or required by law, or with your written authorization.
We work with trusted third-party service providers that help us deliver our services. These may include, but are not limited to:
These providers may process information on our behalf and are expected to maintain appropriate privacy and security protections, including Business Associate Agreements where required by HIPAA.
Our website uses cookies and similar technologies to improve website functionality, understand how visitors interact with our website, and enhance the user experience.
We use analytics and performance monitoring tools, including Microsoft Clarity, to collect information about how visitors use our website. Microsoft Clarity helps us analyze user interactions through behavioral metrics, heatmaps, and session recordings so we can identify usability issues, improve site performance, and optimize the user experience.
These tools may collect information such as pages visited, clicks, scrolling behavior, device and browser information, IP address, and referring URLs through cookies and similar technologies.
For more information about how Microsoft collects and processes data, please visit the Microsoft Privacy Statement.
You can manage or disable cookies through your browser settings; however, doing so may affect certain website functionality.
We implement reasonable administrative, technical, and physical safeguards designed to protect personal information and health information from unauthorized access, use, disclosure, alteration, or destruction. No method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.
Medical records are retained in accordance with a written retention policy that meets the most stringent requirement across the jurisdictions we serve.
Records are retained for a minimum of seven (7) years from the date of the last patient encounter for adult patients, and longer for minor patients as required by applicable state law.
Records are stored in Healthie, a HIPAA-compliant, US-hosted environment with encryption, access controls, and audit logging.
When a patient is no longer actively served, their record is not deleted. It is retained for the full retention period under the same administrative, technical, and physical safeguards applied to active patients, and the patient retains the right to access and obtain copies of their record throughout that period.
Protected Health Information (PHI) of inactive or former patients is not repurposed. It is excluded from marketing, re-engagement, and AI/LLM processing workflows and remains subject to the same privacy and security protections as active patient records.
Upon expiration of the applicable retention period, records are securely and permanently destroyed in a manner that renders PHI unreadable and unreconstructable, consistent with HIPAA disposal requirements (45 CFR 164.310(d)).
Subject to applicable law, you may:
To exercise these rights, please contact us using the information below. We may need to verify your identity before fulfilling your request.
Questions or concerns regarding our privacy practices should be directed to:
Decades by Longevity Health
28 Geary Street, Suite 650 #1481
San Francisco, CA 94108