Privacy Policy

This Privacy Policy applies to information collected through the NXT Labs website, checkout flow, and patient portal (collectively, the "Services"). It does not apply to the practices of independent laboratories, collection partners, or Telehealth Providers acting under their own privacy notices, except as described below.

Your protected health information shared between Junction and NXT Medical is governed separately by our HIPAA Authorization, which you are asked to review and accept during checkout.

Identity and contact information: name, email address, phone number, date of birth, gender, and shipping or billing address provided during checkout or account creation.

Order and intake information: the panel selected, trainer or referral code used, and any health-related intake responses you provide to complete your order or a telehealth consultation.

Payment information: payments are processed by Stripe, Inc. NXT Labs does not collect or store your full card number; we retain only limited transaction metadata (such as order amount and status) needed to fulfill and reconcile your order.

Account information: login credentials and activity associated with your patient portal account.

Communications: messages you send to our support team, and records of transactional emails sent to you (such as order confirmations and result notifications).

To process and fulfill orders, including coordinating specimen collection and lab processing with our third-party laboratory and collection partners.

To create and maintain your patient portal account and deliver your results.

To send transactional communications, such as order confirmations, collection instructions, and result-ready notifications.

To attribute orders to trainers or referral partners for commission purposes when a referral code or link is used.

To detect and prevent fraud, abuse, and unauthorized access, and to enforce our Terms of Service.

To comply with legal, regulatory, and recordkeeping obligations applicable to lab testing services.

Laboratory and collection partners: information needed to collect your specimen and process your order is shared with the independent laboratories and collection sites that fulfill it.

Telehealth Providers: where a panel includes a telehealth consultation, your relevant intake and order information is shared with Junction and its affiliated Openloop Healthcare Partners, Reliant.MD Medical Associates, and MECNB Physician Services entities, as described in the Telehealth Consent section of our Terms of Service.

NXT Medical: protected health information is disclosed from Junction to NXT Medical for care coordination, as described in and governed by our HIPAA Authorization.

Payment processor: payment details are shared with Stripe, Inc. to process your transaction.

Trainers and referral partners: a trainer or partner whose code or link you used to order will be notified that a qualifying order occurred so commissions can be paid, but will not receive your health information.

Service providers: vendors who support our email delivery, hosting, and customer support functions, acting on our behalf and under confidentiality obligations.

Legal and safety: when required to comply with law, respond to legal process, or protect the rights, property, or safety of NXT Labs, our users, or others.

We do not sell your personal information.

We retain order, account, and intake information for as long as needed to fulfill your order, support your patient portal access, and meet recordkeeping obligations applicable to lab testing and healthcare-adjacent services.

Information disclosed pursuant to your HIPAA Authorization is retained and may be re-disclosed as described in that Authorization until you revoke it in writing or it otherwise expires as specified there.

You may update certain account information directly in your patient portal, or by contacting support.

You may revoke your HIPAA Authorization at any time by following the revocation process described in that Authorization. Revocation does not affect disclosures already made.

You may request deletion of your account information, subject to our legal and recordkeeping obligations, by contacting support at the email below.

Our website uses cookies and similar technologies to operate the site, remember preferences, and understand aggregate usage through analytics tools. You can control cookies through your browser settings, though disabling them may affect site functionality.

We use commercially reasonable administrative, technical, and physical safeguards designed to protect your information, including encrypting payment processing through Stripe and restricting access to health-related intake data to personnel and partners who need it to fulfill your order.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security of your information.

The Services are not directed to individuals under 18. We do not knowingly collect personal information from minors except where a parent, legal guardian, or authorized representative submits information on a minor's behalf as permitted under our Terms of Service.

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated effective date at the top of this page. Continued use of the Services after changes take effect constitutes acceptance of the revised policy.

Questions about this Privacy Policy, or requests regarding your information, can be directed to info@nxtlabs.us.