Privacy & security.

1. Who we are

Optional Aging LLC runs this website and offers health education and programs. Root Causes Medical Consultants PLC provides medical care through eligible programs.

If accepted for medical care through AgeScore360™, the 90-Day Healthspan Accelerator, or Healthspan Ascend, you become a Root Causes patient. Eligibility depends on your location and clinical review.

Healthspan Radar is educational. Buying Radar alone does not create a patient relationship. Health information shared for an educational service can still be sensitive.

The two companies have different roles. Hosting both notices on this page does not make them one legal entity.

2. What we collect

The information we collect depends on the service you use. It can include:

• Your name, email address, phone number, and location.
• Purchases, payment status, appointments, and enrollment details.
• Health history, symptoms, goals, assessment answers, and lab results.
• Files you submit, messages you send, and reports prepared for you.
• Device details, IP address, pages visited, referral source, and site activity.

We receive information from you, from your use of our services, and from providers or records you authorize us to use. Payment providers handle payment details. What we receive depends on the payment method and provider.

3. How we use information

We use information to answer questions, process purchases, manage enrollment, arrange visits, and deliver your service. It also helps us maintain records, protect our systems, and improve our services.

Health information helps us prepare assessments and reports. Root Causes uses patient information for medical care and related work described in its notice below.

We use business Google Workspace and Google Cloud tools, including AI-assisted tools, to help organize information and prepare summaries or report drafts. AI tools support this work. Medical decisions remain with your clinician.

We may send educational or marketing messages. You can unsubscribe from marketing emails. Needed service messages, such as receipts or appointment notices, may still be sent.

4. Patient portal, uploads & group calls

Medical messages and records: Root Causes uses Practice Better for its patient portal, medical records, and patient messaging.

Files and reports: Our designated upload service uses Google Cloud and Google Workspace to receive, route, and store files. Information may be held in these systems as well as Practice Better. Uploading a file does not itself analyze that file.

Group calls: Our policy is not to record patient group calls. Any general written recap will leave out identifying details. We ask members not to record calls or share others’ information. We cannot guarantee what other attendees will do.

5. Who receives information

Staff access is limited by role and work needs. Providers help us with hosting, payments, scheduling, messaging, file processing, and other service tasks.

Advertising and analytics vendors also receive the browsing information described below. Their uses can differ from those of vendors that only process information on our behalf. We do not describe these advertising disclosures as anonymous.

Relevant information passes between Optional Aging and Root Causes to support enrollment, assessment, and care. The purpose, permissions, and agreements for that handling must fit the service and applicable law.

We may disclose information when required or permitted by law, to protect rights and safety, or in a business transfer subject to applicable privacy protections. Other uses may require your permission.

6. Cookies, analytics & advertising

Our public website uses cookies and similar tools for site features, usage analysis, and advertising. These tools can receive device details, browser identifiers, page addresses, and information about your activity.

Analytics and heatmaps: Microsoft Clarity helps us understand clicks, scrolling, and how people use our pages. It can also create session recordings. Clarity masks input fields and selected content. Masking does not make all browsing data anonymous.

Advertising: Google Ads and a separate Meta Pixel and Conversions API integration help measure campaigns and support tailored advertising. Meta events can be sent through your browser and through HighLevel's servers. Sharing browsing data for advertising may count as a sale, sharing, or targeted advertising under some privacy laws.

Your website settings: Google Ads and Clarity may run when you visit designated public marketing pages. Select Privacy choices / Opt out in the footer, or use this link. You can turn these two tools off or save separate choices. The panel opens only when you select it.

Meta is separate: The footer switches do not disable HighLevel's Meta Pixel or Conversions API integration. We have not connected that integration to these switches. Contact [email protected] with requests about that data sharing.

The footer control honors a Global Privacy Control signal by turning off Google Ads and Clarity. This does not establish that the separate Meta integration honors that signal. We restrict the Google Ads and Clarity tools managed here to selected marketing pages, excluding health questionnaires, medical uploads, and personal results.

Your choice applies to this browser. We store preferences in browser storage, with a cookie or session-storage fallback when needed. Clearing that storage or using another browser can reset your choice. If preferences cannot be saved, we show a notice.

Opting out limits future collection by these tools. It does not erase information already sent. Contact us to ask about access or deletion. Other legal limits may apply.

Site services such as forms, payments, LeadConnector chat, and TrustedSite may use separate cookies or connections. This control does not disable those services. Avoid sharing health details in public chat or general contact forms.

You can also use browser settings to limit cookies. Those settings do not control every type of data sharing. See the Microsoft, Google, and Meta privacy notices for their practices.

7. Security & retention

We use access limits and other safeguards to help protect information. Practice Better describes encryption while data is sent and stored. Google provides security controls for the services we use. Account setup, permissions, and staff practices also matter.

No online service can promise complete security.

How long we keep information depends on its purpose and the rules that apply. Medical records, source files, final reports, billing records, and temporary working copies can have different retention periods.

Ending a program does not automatically delete your records. Some information must be kept for medical, legal, billing, or other required purposes. We remove information that is no longer needed under the applicable retention schedule.

8. Your information & your choices

Depending on the law that applies, you may ask to access, correct, or delete information. You may also have rights to obtain a copy, withdraw consent, or limit certain uses or sharing. We may need to verify your identity. Some requests have legal limits or exceptions.

If you disagree with a response, contact us to request a review. Where an appeal right applies, we will explain the process. We will not penalize you for exercising a privacy right.

Unsubscribing from marketing does not delete records. The patient notice below explains medical-record rights.

9. Age, location & policy changes

Our programs are intended for adults 18 and older. If you believe a child submitted information, contact us so we can review it and take appropriate action.

Medical care is available only in eligible locations. Educational access does not establish eligibility for medical care. Providers may process information outside your state or country.

We will show an effective date on this page and give notice of changes as required by law. Posting an update does not replace consent when consent is required.

Your rights

See or get a copy of your record

You can ask for an electronic or paper copy of your medical record and other health information we hold. We usually provide it within 30 days. If a permitted extension is needed, we will explain why and when to expect it. A reasonable, cost-based fee may apply, subject to the law.

Ask for a correction

You can ask us to correct information you believe is wrong or incomplete. We may deny a request. If we do, we will explain why in writing, generally within 60 days, and explain your options.

Ask for private contact

You can ask us to contact you in a specific way or at a different address. We will agree to reasonable requests.

Ask us to limit use or sharing

You can ask us to limit information used or shared for treatment, payment, or practice operations. We do not have to agree to every request. Agreed limits may have exceptions for emergency care.

If you pay in full out of pocket, you can ask us to limit sharing with your health insurer. This applies to information about that service used for payment or practice operations. We will agree unless the law requires sharing.

Ask for a list of disclosures

You can ask for a list of certain disclosures made during the six years before your request. It will show who received information and why. It generally excludes treatment, payment, operations, disclosures you authorized, and certain other disclosures. One list in a 12-month period is free. A reasonable, cost-based fee may apply to additional requests.

Get this notice or choose a representative

You can ask for a paper copy of this notice at any time. A person legally authorized to act for you may exercise your rights. We will verify their authority before acting.

Your choices

You can tell us whether to share relevant information with family, friends, or others involved in your care or payment. You can also express a choice about disaster-relief disclosures.

If you cannot express a preference, we may share information when permitted and in your best interests. We may also share information to lessen a serious and imminent threat, as permitted by law.

Uses of protected health information for marketing, sale of that information, and most uses of psychotherapy notes require written authorization. Other uses not described in this notice also require authorization unless permitted by law.

You may revoke an authorization in writing. This does not undo actions already taken in reliance on it.

If we contact you for fundraising, you can ask us to stop. If a fundraising use involves protected substance-use-disorder records, we will give advance notice and a choice about receiving those messages as required.

How we use and share medical information

Treatment

We may use information to evaluate your health and provide care. We may share it with other professionals treating you. For example, we may send relevant information to a lab, pharmacy, or another treating clinician.

Payment

We may use or share information to bill and collect payment for services. This can include payment providers or a health plan when applicable. It does not mean every service is covered by insurance.

Practice operations

We may use information to run the practice, review quality, coordinate services, and contact you. Vendors may support these tasks under the agreements and safeguards required by law.

Other uses allowed or required by law

These disclosures must meet the legal conditions that apply. They may include:

• Public-health reporting, product recalls, and reports of medication reactions.
• Reports of suspected abuse, neglect, or domestic violence, and efforts to prevent a serious threat.
• Health research when the required authorization or another lawful basis is in place.
• Health oversight, legally required reporting, and compliance reviews.
• Organ or tissue donation and work with coroners, medical examiners, or funeral directors.
• Workers’ compensation, certain law-enforcement requests, and authorized government functions.
• Court orders, legal proceedings, or subpoenas when the required legal conditions are met.

A request from a third party does not by itself give us permission to release your records.

Records with extra protections

Some records have stronger protections under federal or state law. We follow those limits when they apply, including additional consent rules for certain mental-health, HIV-related, genetic, or substance-use information.

Some substance-use-disorder patient records are protected by 42 CFR Part 2. We will not use or share those records in proceedings against you without the required legal basis. That requires your written consent, or both a court order and subpoena that meet the applicable requirements. This protection covers civil, criminal, administrative, and legislative proceedings.

Our responsibilities

We are required by law to protect the privacy and security of your protected health information. We must follow the duties and practices in this notice and provide you with a copy.

We will notify you as required if a breach compromises your protected health information. We will not use or share information beyond this notice without your written authorization, except where the law permits or requires it.

Root Causes uses Practice Better for patient messaging and records. The clinic may use other approved support systems, including the file and report systems described above. Those systems do not replace your medical privacy rights.

Questions or complaints

You can raise a concern with our privacy contact below. You can also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights. We will not retaliate against you for filing a complaint.

File a privacy complaint with HHS ↗

HHS complaint contact: 1-877-696-6775, or 200 Independence Avenue, S.W., Washington, D.C. 20201.

Changes to this notice

We may change this notice as permitted by law. Changes may apply to information we already hold. The current notice will be available on this page and on request, including as a paper copy.

Effective date: October 16, 2026