Privacy Policy | CellThrive

CellThrive is operated by Framework Wellness LLC ("CellThrive," "we," "us," or "our"). We are a health-optimization company that provides diagnostic laboratory testing, genetic analysis, personalized wellness protocols, and coaching, delivered under the oversight of a licensed physician. We take the privacy and security of your information seriously, especially your health information. This Privacy Policy explains what we collect, how we use and share it, the choices you have, and how we protect it.

By using our website, creating an account, completing an assessment, purchasing services, or otherwise interacting with CellThrive, you agree to this Privacy Policy.

1. Scope

This Policy applies to information we collect through cellthrive.health, our member portal, our assessments and forms, our communications with you, and related services (the "Services"). It does not apply to third parties we do not control, such as laboratories and other service providers, each of whom maintains its own privacy practices.

2. Information We Collect

Information you provide

Account & contact information — name, email, phone, mailing address, and login credentials.
Health assessment responses — symptoms, goals, health history, supplements, and allergies you submit.
Laboratory results — blood and other diagnostic test results ordered through licensed laboratories.
Genetic information — data derived from a DNA sample or raw genetic file you provide or authorize us to process.
Wearable and device data — if you connect a device (e.g., an Oura Ring), the metrics you authorize us to receive.
Payment information — processed by our third-party payment processors; we do not store full card numbers.
Communications — messages, emails, texts, and call information exchanged with our team.

Information collected automatically

Usage and technical data — device type, browser, IP address, pages viewed, and interactions, collected through cookies and similar technologies.

3. Consumer Health Data & Your Consent

Some information we collect — including your assessment responses, lab results, genetic data, and device metrics — is "consumer health data" under applicable state laws (such as the Washington My Health My Data Act and comparable laws in Nevada, Connecticut, and other states).

We collect consumer health data only with your consent and only to provide the Services you request.
We share it only as described in Section 5, and where a state law requires separate consent to share, we will obtain that consent from you.
You may withdraw consent or request deletion of your consumer health data at any time (see Section 10). Withdrawing consent may limit or end our ability to provide the Services.
We do not sell your consumer health data, and we do not use it to target advertising to you.

4. How We Use Your Information

To provide the Services — order and interpret lab and genetic testing, build personalized protocols, and coordinate your care.
To communicate with you about results, appointments, protocols, and your account.
To process payments and manage your membership.
To operate, secure, maintain, and improve our Services.
To comply with legal obligations and enforce our terms.

5. How We Share Your Information

We share your information only as necessary to deliver the Services and as described below. We do not sell your personal information or your health information.

Your care team — the CellThrive coaches and team members assigned to you.
Laboratories — licensed labs that perform your testing.
Service providers — vendors who process data on our behalf (hosting, database, communications, document generation) under contracts requiring them to protect your information and use it only for services provided to us.
Legal & safety — when required by law, to respond to legal process, or to protect rights, safety, and property.
Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.
With your consent — for any other purpose you authorize.

6. Genetic Information

We collect and use it only with your explicit consent, to generate your reports and protocols.
We do not share genetic data with insurers, employers, or data brokers, and we do not sell it.
You may request deletion of your genetic data and biological samples at any time, subject to legal retention obligations.

7. Cookies, Analytics & Advertising

We use cookies and similar technologies to operate the site, understand usage, and measure marketing, including analytics and advertising tools provided by third parties. We do not include your health information in advertising or analytics identifiers. You can control cookies through your browser, and where required we will present cookie choices. To opt out of certain interest-based advertising, you can use industry tools such as the Digital Advertising Alliance opt-out.

8. Data Security

We maintain administrative, technical, and physical safeguards designed to protect your information, including encryption of data in transit and at rest, access controls that limit access to authorized personnel, and monitoring and logging of access to health information. No method of transmission or storage is completely secure, but we work to protect your information and review our safeguards over time.

9. Data Retention & Deletion

We retain your information for as long as your account is active and as needed to provide the Services, and thereafter as required to meet legal, recordkeeping, tax, and regulatory obligations. When information is no longer needed, we delete or de-identify it. You may request deletion as described below; we will honor such requests except where we are required or permitted by law to retain certain records.

10. Your Privacy Rights

Depending on where you live, you may have the right to access the information we hold about you, correct inaccurate information, delete your information, receive a portable copy, withdraw consent to the collection or sharing of your consumer health data, and opt out of the "sale" or "sharing" of personal information (note: we do not sell your information). These rights include those under the California Consumer Privacy Act (as amended), the Washington My Health My Data Act, and similar state laws. To exercise any right, contact us at support@cellthrive.health. We will verify your identity and respond within the timeframe required by law (generally 30–45 days). You will not be discriminated against for exercising your rights.

11. Health Information & HIPAA

CellThrive is a wellness and health-optimization company, not an insurer or a medical practice that bills insurance. We apply HIPAA-aligned safeguards to the health-related information you share with us and comply with applicable privacy laws.

12. Breach Notification

If we become aware of a breach of security affecting your personal or health information, we will notify you and any applicable authorities as required by law, without unreasonable delay.

13. Children's Privacy

Our Services are intended for adults 18 and older. We do not knowingly collect information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.

14. Third-Party Links

Our site may link to third-party websites and services we do not control. This Policy does not apply to them; please review their privacy practices.

15. Changes to This Policy

We may update this Policy from time to time. When we do, we will revise the "Last updated" date and, for material changes, provide additional notice. Your continued use of the Services after an update constitutes acceptance of the revised Policy.

16. Contact Us

For any privacy question or request, or to reach our privacy contact: Framework Wellness LLC (CellThrive), 5830 34th Street North, Birmingham, AL 35207. Phone: (205) 791-7424. Email: support@cellthrive.health.