Last Updated: [SEPT 14TH 2026]

Iron & Axis (“Iron & Axis,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information you provide to us. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit our website, communicate with us, submit a consultation request, or otherwise interact with Iron & Axis online.

By using this website, you acknowledge that you have read and understand this Privacy Policy.

Important: This website Privacy Policy does not replace Iron & Axis’s Notice of Privacy Practices that applies to protected health information under HIPAA, if Iron & Axis is a HIPAA-covered entity. That notice explains how protected health information may be used and disclosed and describes applicable patient privacy rights.

1. INFORMATION WE COLLECT

Depending on how you interact with Iron & Axis, we may collect information such as:

Information You Provide

When you submit a consultation request, contact us, or otherwise communicate with us, we may collect:

• First and last name
• Email address
• Phone number
• Date of birth
• City and state or other location information
• Services you are interested in
• Preferred method of contact
• Preferred consultation date and time
• Information you voluntarily provide about your health goals or reasons for contacting us

Please do not submit highly sensitive medical information through a general website contact form unless specifically requested through a secure system.

Information Collected Automatically

When you visit our website, certain information may be collected automatically, including:

• IP address
• Browser type
• Device type
• Operating system
• Pages visited
• Date and time of visits
• Referring website or webpage
• General website usage information

This information may be collected through cookies, analytics tools, pixels, and similar technologies.

2. HOW WE USE YOUR INFORMATION

We may use information we collect to:

• Respond to your questions and requests
• Contact you regarding a consultation
• Schedule and manage appointments
• Provide requested services
• Communicate with you about our services
• Understand how visitors use our website
• Improve our website, services, and user experience
• Maintain website security and prevent fraud or misuse
• Comply with applicable legal and regulatory requirements
• Carry out other purposes described to you when information is collected

If information constitutes protected health information under HIPAA, its use and disclosure will be governed by applicable HIPAA requirements and our Notice of Privacy Practices. HIPAA requires covered entities to describe permitted uses and disclosures and patients' applicable privacy rights.

3. HEALTH INFORMATION

Iron & Axis may provide health-related services. Information relating to your health may be subject to additional federal and state privacy protections.

Please do not use a general website contact form to send medical records, detailed medical histories, laboratory results, medication information, or other sensitive health information unless the form or communication method is specifically designated for that purpose.

When applicable, protected health information will be handled in accordance with HIPAA and other applicable laws.

Our HIPAA Notice of Privacy Practices, where applicable, provides additional information about how protected health information may be used and disclosed and your rights regarding that information.

4. COOKIES AND TRACKING TECHNOLOGIES

Our website may use cookies and similar technologies to help the website function properly, understand website traffic, remember preferences, and improve your experience.

Third-party services, such as website analytics, advertising, scheduling, or embedded content providers, may also use cookies or similar technologies.

You may be able to control or disable certain cookies through your browser settings. Disabling cookies may affect certain website functionality.

5. HOW WE SHARE INFORMATION

We may share information with service providers and other third parties when reasonably necessary to operate our website and business, provide requested services, communicate with you, process appointments, maintain technology, or perform other legitimate business functions.

Examples may include:

• Website hosting providers
• Email and communication providers
• Scheduling and appointment platforms
• Technology and software providers
• Analytics providers
• Professional advisors
• Payment or billing providers, where applicable

We may also disclose information when required or permitted by law, including when necessary to comply with legal obligations, respond to lawful requests, protect our rights, protect the safety of individuals, investigate fraud or abuse, or protect the security of our systems.

We do not sell your personal information for money.

6. PROTECTED HEALTH INFORMATION

If Iron & Axis is subject to HIPAA, protected health information will only be used or disclosed as permitted or required by applicable law and as described in our Notice of Privacy Practices.

HIPAA provides individuals with specific rights concerning protected health information, including rights to access certain health records, request corrections, request confidential communications, and file privacy complaints.

7. DATA SECURITY

We take reasonable administrative, technical, and organizational measures designed to protect personal information from unauthorized access, use, disclosure, alteration, or destruction. However, no website, electronic transmission, or storage system can be guaranteed to be completely secure. If we experience a security incident involving personal information, we will respond in accordance with applicable federal and New York law.

8. DATA RETENTION

We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, provide services, maintain appropriate business and health records, resolve disputes, comply with legal obligations, and enforce our agreements.

Health information may be subject to separate legal and regulatory retention requirements.

9. YOUR PRIVACY RIGHTS

Depending on applicable law and the nature of the information involved, you may have certain rights regarding your personal information.

These may include the right to:

• Request access to certain personal information
• Request correction of inaccurate information
• Request deletion of certain information
• Request information about how your information is used or disclosed
• Opt out of certain marketing communications
• Exercise applicable rights relating to cookies or similar technologies
• File a privacy complaint

Certain information may be exempt from deletion, access, or other requests where retention or use is required or permitted by law.

If your information is protected health information under HIPAA, additional rights may apply.

10. CHILDREN'S PRIVACY

Our website is not directed toward children under 13, and we do not knowingly collect personal information from children under 13 through the website.

If you believe a child has provided personal information to us through the website, please contact us so we can take appropriate steps.

11. THIRD-PARTY WEBSITES

Our website may contain links to websites, platforms, or services operated by third parties.

Iron & Axis is not responsible for the privacy practices, content, security, or policies of third-party websites. We encourage you to review the privacy policies of any third-party website before providing personal information.

12. EMAIL COMMUNICATIONS

If you provide your email address, we may use it to respond to your inquiry, provide information related to your requested services, communicate regarding appointments, or send other communications you have requested.

If you receive marketing communications from us, you may unsubscribe using the instructions included in the communication.

Unsubscribing from marketing communications does not prevent us from sending service-related or transactional communications that are necessary to provide requested services.

13. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, services, technology, or legal requirements.

When we make changes, we will update the Last Updated date at the top of this Privacy Policy. We encourage you to periodically review this page for the latest information.

14. CONTACT US

If you have questions about this Privacy Policy or our privacy practices, please contact us.

For questions regarding protected health information or HIPAA privacy rights, please contact: