Privacy Policy

Diagnostic Orders Direct, a division of Glow Oversight PC ("Diagnostic Orders Direct," "DOD," "we," "us," "our") provides this Privacy Policy to explain how information is collected, used, and disclosed through this website and our service. This website is available internationally for informational purposes, but our clinical service is available only to eligible patients physically located in supported U.S. jurisdictions at the time of the medical encounter.

We do not sell your personal information or consumer health data. We do not use health information for advertising, and we do not permit third-party advertising systems to receive your health information.

1. Categories of Information We Collect

A. Ordinary website information

• IP address and browser/device information (type, operating system, screen characteristics)
• Approximate location derived from IP address, where applicable
• Referring page and general site interactions (pages viewed, buttons clicked)
• Cookie and similar-technology identifiers
• Analytics events, such as page views and clicks, that do not include medical content
• Advertising-related information (e.g., cookie identifiers), only as permitted by your cookie choices

B. Contact information

• Name, email address, and telephone number
• Messages submitted through our general contact form or sent to us by email, mail, or fax

C. Healthcare and medical information

• Symptoms and medical history you provide during the clinical intake and provider-review process
• The diagnostic test or imaging study you are requesting (for example, an MRI of the lumbar spine)
• Documents you upload as part of the clinical workflow
• Communications with our clinical team related to your medical review
• Provider, clinical, and medical-order information generated in the course of the service

We collect healthcare information only through the secure clinical workflow (our scheduling and intake platform, IntakeQ) — not through this public website — and only from patients who choose to use the clinical service. Our general contact form is not a medical channel, and we ask that you not include medical details in it.

D. Transactional information

• Payment-related information processed by our third-party payment processor (we do not store full payment-card numbers)
• Appointment and consultation records connected to your use of the service

2. How We Collect Information

• Directly from you, when you submit forms, request a provider review, or contact us
• Automatically, when you browse the website (cookies and similar technologies — see our Cookie & Tracking Technologies Policy)
• From our service providers, who process information on our behalf (for example, our scheduling/intake platform, hosting, and email providers)

3. How We Use Information

• To operate, maintain, and secure the website
• To provide the virtual provider review, including reviewing your request, issuing an order when medically appropriate, and communicating with you about the review
• To respond to your questions and requests, including privacy requests
• To understand how the website is used and to improve our educational content, subject to your cookie choices
• To display advertising on public educational content, only with your consent, using contextual (non-personalized) placement
• To comply with legal, regulatory, and licensing obligations

4. How Information Is Disclosed

Medical information is handled in accordance with applicable privacy requirements and is disclosed only as permitted or required for healthcare operations, service delivery, legal obligations, and other purposes described in this policy. We do not represent that your information is "never shared" — like any online service, we use service providers, and disclosure occurs in the following circumstances:

• Service providers/processors: vendors that host the website, operate our clinical scheduling and intake platform (IntakeQ), process payments, send email, provide security services, and similar functions, under agreements restricting their use of your information
• Clinical operations: licensed providers and clinical staff involved in your medical review, and the facility that receives an order issued to you, when you direct it
• Legal requirements: disclosures required by law, regulation, court order, or as necessary to protect rights, safety, or security
• Business transitions: in connection with a merger, acquisition, or asset sale, with notice where appropriate

Advertising segregation: advertising and analytics technologies operate only on public, non-clinical pages, are prohibited on clinical, intake, booking, and patient-specific pages, and never receive symptoms, medical history, requested procedures tied to an identifiable person, or other health information. See sections 8 and 9 below.

5. Sale and Targeted Advertising

We do not sell personal information or consumer health data, as "sale" is commonly understood. Some U.S. privacy statutes define "sale" or "sharing" broadly enough to include certain transfers to advertising networks. Because we use Google AdSense on public educational content (subject to your consent), we treat the cookie-based disclosures that advertising technology can involve conservatively:

• Advertising scripts load only after you consent, and only on public educational pages
• Advertising on this site is contextual, not personalized based on your health interests or medical browsing
• We do not build remarketing lists, health-condition audiences, or cross-site profiles from your visits, and we do not permit advertising personalization based on medical pages
• You may opt out at any time via Your Privacy Choices or your browser's cookie controls, and we honor the Global Privacy Control signal

6. Health Information Specifically

Health information you submit through the clinical workflow is used to provide the provider review you requested and for related healthcare operations. It is not used for marketing or advertising. It is not combined with website advertising data. Our clinical intake is conducted through IntakeQ, a third-party platform that maintains its own privacy and security practices for the clinical data it processes on our behalf.

This Privacy Policy governs this website and business generally. Health information handled in the course of the clinical service may be subject to additional privacy obligations. See our Consumer Health Data Privacy Policy for the dedicated treatment of consumer health data.

7. Data Retention

• Clinical/medical records: retained according to applicable healthcare record-retention requirements and our clinical practice policies — not by arbitrary website cleanup settings
• Analytics events (first-party): aggregated daily and raw events deleted after approximately 90 days
• Cookie identifiers: per the durations listed in the Cookie Policy, and removable at any time
• Contact messages: retained as long as needed to respond and for reasonable recordkeeping
• Consent records: retained to demonstrate valid consent, stored on your own device
• Privacy requests: retained as required to document our response and any appeal

8. Security

We use HTTPS across the site, restrict administrative access, store secrets and keys outside client-side code, minimize logging of personal information, and never log symptoms, diagnoses, or medical free-text into ordinary website or analytics logs. No method of transmission or storage is perfectly secure; we cannot guarantee absolute security, and we do not claim that it is.

9. Advertising and Analytics Architecture

• Analytics and advertising scripts do not load at all until you consent through our cookie banner
• They never load on clinical, intake, booking, patient-specific, or authenticated pages
• Health data is never sent to advertising or analytics networks
• Advertising, where shown, is limited to public educational content using contextual (non-personalized) placement

10. Your Privacy Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or obtain a portable copy of your personal information; to opt out of sale/sharing or targeted advertising; to limit the use of sensitive personal information; and to withdraw consent. These rights vary by state. See U.S. State Privacy Rights and Your Privacy Choices to submit a request. We do not discriminate against users who exercise privacy rights.

11. Children's Privacy

This website is not directed to children, and we do not knowingly collect personal information from children through the website. The clinical service is intended for adults; any treatment of minors would occur only under the clinical practice's actual eligibility policies, including applicable parental or guardian involvement. If you believe a child has provided us personal information, contact us and we will delete it.

12. International Visitors and Transfers

This website is hosted in the United States. If you access it from outside the U.S., information you provide is transferred to and processed in the U.S., which may not provide the same protections as your jurisdiction. The clinical service itself is available only to patients physically located in supported U.S. jurisdictions at the time of the encounter. See our UK Privacy Notice for UK-specific information.

13. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or the law. The "Last updated" date above shows the current version; material changes will be reflected on this page.

14. Contact

Privacy questions or requests: Customerservice@diagnosticordersdirect.com · (702) 588-3455 · 6550 S Pecos Rd STE B#110, Las Vegas, NV 89120, United States.