Privacy Policy and HIPAA Notice of Privacy Practices
Effective Date: 1 January 2026
This is the Privacy Policy for T2YourHealth LLC, t2yourhealth.com, metabolismspectrum.com and its divisions ("T2YourHealth", "websites", "we," "our," "us"). MetabolismSpectrum.com is the Digital Health Services division of T2YourHealth. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our websites and subscribe to receive updates from us.
1. Information We Collect
Personal Information: When you sign up for an account on metabolismspectrum.com or t2yourhealth.com, we collect the following personal information:
-
Name
-
Email address
-
Telephone number
-
Mailing address: City, State, Zip or Postal Code, Country
This information is collected only when you voluntarily provide it to us through our enrollment form.
Protected Health Information (PHI): In some instances, when warranted, we may collect PHI as a HIPAA covered entity.
Usage Data: We may also collect non-personal information about how our websites are accessed and used. This may include your IP address, browser type, operating system, and browsing activity. This data helps us understand how visitors interact with our sites and improve the user experience.
2. How We Use Your Information
We use the personal information you provide to:
Send Updates and News: We will use your email address to send you updates about the launch or updates of our websites, new products, services, and other relevant information.
Improve Our Services: Usage data may be used to analyze trends, administer the site, and gather broad demographic information to improve our offerings.
Communicate with Health Partners, and Business Associates: When warranted, your PHI may be used as outlined in Section 4 below.
3. Sharing Your Information
No Commercial Sale or Marketing Use
We do not sell, rent, license, or trade your personal or health-related information to third parties for:
-
Advertising
-
Marketing
-
Data brokerage
-
Commercial profiling
-
Third-party promotions
Your information is never shared for commercial gain unrelated to your care, requested services, or our legal obligations.
However, we may share your information with trusted third parties who assist us in operating our websites, conducting our business, or servicing you, provided those parties agree to keep this information confidential. We comply with U.S. federal HIPAA regulations.
We may also disclose your information:
-
To comply with legal obligations
-
To protect and defend our rights or property
-
To prevent or investigate possible wrongdoing in connection with our services
-
To protect the personal safety of users of our site or the public
4. HIPAA Notice of Privacy Practices
This Notice describes how medical, non-medical, and personal information about you may be used and disclosed, and how you can get access to this information. Please review it carefully.
Who we are
T2YourHealth LLC (“we/us/our”), t2yourhealth.com, is a health and medical technology company that includes three divisions: 1) CLIA-certified Clinical Reference Laboratory, 2) Metabolism Research Laboratory, and 3) Digital Health Services, marketed as MetabolismSpectrum.com. This notice applies to T2YourHealth LLC as well as our employees, contractors, and business associates such as phlebotomists, laboratory technicians, medical scientists, and clinical pathologists who help us operate. “Protected Health Information” (PHI) means information that identifies you and relates to your health, health care, or payment for services.
Our responsibilities
We are required by law to:
-
maintain the privacy and security of your PHI;
-
provide you with this Notice of our legal duties and privacy practices;
-
follow the terms of the Notice currently in effect; and
-
notify you without unreasonable delay if a breach occurs that may have compromised the privacy or security of your unsecured PHI.
We will not use or share your information other than as described here unless you give us written authorization.
How we may use and share your information without your written authorization
We typically use or share your PHI in the following ways:
Treatment. To coordinate, manage, or provide your care (e.g., ordering or interpreting labs; communicating with your providers).
Payment. To bill and obtain payment for services (e.g., submitting claims, verifying coverage).
Health Care Operations. For running our organization (e.g., quality assessment, training, auditing, customer service, compliance, security monitoring).
Business Associates. We may share PHI with vendors who perform services for us under written agreements that protect your information.
We may also use or disclose your PHI as permitted or required by law for:
-
Public health & safety (disease reporting, product recalls, reporting adverse events, preventing or reducing a serious threat to anyone’s health or safety);
-
Health oversight activities (audits, inspections, investigations, or licensing), including inspections or audits by regulatory agencies such as the Centers for Medicare & Medicaid Services (CMS), CLIA/COLA, or state health departments;
-
Law enforcement, judicial and administrative proceedings (in response to a court order, subpoena, or similar lawful process);
-
Specialized government functions (national security, protective services, as authorized);
-
Coroners, medical examiners, funeral directors, organ/tissue donation;
-
Workers’ compensation and similar programs;
-
Research when approved by an Institutional Review Board/Privacy Board or when using a limited or de-identified data set with safeguards, in compliance with HIPAA and CLIA regulations;
-
As otherwise required by law.
Uses and disclosures that require your written authorization
Certain uses and disclosures will be made only with your written authorization, including most marketing communications not otherwise permitted by law, sale of PHI, and other uses/disclosures not described in this Notice. You may revoke your authorization at any time in writing, except to the extent we have already acted in reliance on it.
Your rights
-
Get an electronic or paper copy of your record. You can ask to see or get a copy of your PHI, including your laboratory test results, as permitted by law. You will have direct access to lab results by logging on to our secure patient portal. In some cases, results may be provided directly to you by our testing partners or through your ordering provider, depending on applicable state and federal regulations. We will provide a copy or summary, usually within 30 days of your request, and may charge a reasonable, cost‑based fee as allowed by law.
-
Ask us to correct your record. You can ask us to correct PHI that you think is incorrect or incomplete. We may say “no,” but we’ll tell you why in writing within 60 days.
-
Request confidential communications. You can ask us to contact you in a specific way (for example, home or office phone) or to send mail to a different address. We will say “yes” to all reasonable requests.
-
Ask us to limit what we use or share. You can ask us not to use or share certain PHI for treatment, payment, or operations. We are not required to agree, and we may say “no” if it would affect your care. If you pay out‑of‑pocket in full for a service, you can ask us not to share information about that service with your health plan, and we will say “yes” unless the law requires us to share.
-
Get a list (accounting) of disclosures. You can ask for a list of times we shared your PHI for six years prior to your request, who we shared it with, and why, excluding certain routine disclosures (e.g., for treatment, payment, operations).
-
Get a copy of this Notice. You can ask for a paper or electronic copy of this Notice at any time.
-
Choose someone to act for you. If you have given someone medical power of attorney or if someone is your legal guardian, that person can exercise your rights and make choices about your PHI.
-
File a complaint without retaliation. You can complain if you feel we have violated your rights (see Contact & Complaints below). We will not retaliate against you for filing a complaint.
Your choices
For certain PHI, you can tell us your choices about what we share. In these cases, you have both the right and choice to tell us to:
-
share information with your family, close friends, or others involved in your care;
-
share information in a disaster relief situation;
-
contact you for appointment reminders, specimen collection instructions, laboratory test preparation, results delivery, or to describe or recommend treatment alternatives and health‑related services that may be of interest.
If you are unable to tell us your preference (for example, if you are unconscious), we may go ahead and share your information if we believe it is in your best interest. We may also share when needed to lessen a serious and imminent threat to health or safety.
Contact & Complaints
Privacy Officer (T2YourHealth): Julie A. Cistola
Phone/Email: email: julie.cistola@t2yourhealth.com; phone: 915-209-1575
Address: 5130 Gateway Blvd E, Suite 321, El Paso, TX 79905-1608
If you believe your privacy rights have been violated, you may file a complaint with us using the contact information above. You may also file a complaint with the U.S. Department of Health & Human Services, Office for Civil Rights (OCR). In addition, laboratory quality concerns may be reported to the Centers for Medicare & Medicaid Services (CMS), which oversees CLIA certification. You will not be penalized or retaliated against for filing a complaint.
Changes to this Notice
We may change the terms of this Notice and the changes will apply to all PHI we have about you. The new Notice will be available upon request, in our office, and on our websites (if applicable) with the effective date at the top.
5. Data Security
We implement a variety of security measures to maintain the safety of your personal information. However, no method of transmission over the Internet, or method of electronic storage, is 100% secure, and we cannot guarantee absolute security.
6. Your Rights
You have the right to:
-
Access: Request a copy of the personal data we hold about you.
-
Rectification: Request corrections to any inaccurate or incomplete personal data.
-
Unsubscribe: Opt-out of receiving future email communications by following the unsubscribe instructions provided in each email or contacting us directly.
7. Retention of Data
We will retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, or as required by law.
8. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. Any changes will be posted on this page, and the effective date will be updated. We encourage you to review this policy periodically to stay informed about how we are protecting your information.
9. Contact Us
If you have any questions about this Privacy Policy, please contact us at:
-
Mailing Address: 5130 Gateway Blvd E, El Paso, TX 79905
T2YourHealth LLC | All Rights Reserved




