Privacy Policy

1. Information We Collect

In order to provide our bio-individual optimization protocols, we collect information across three primary tiers:

• Contact and Identity Data. Your full name, email address, phone number, and social media handles submitted through intake sheets and application forms.
• Biomarker and Performance Telemetry. The documents and files you provide, including blood chemistry results, biomarker panels, endocrine and thyroid values, gut health reports, health history questionnaires, training logs, nutrition logs, and wearable device data.
• Transactional and Enrollment Data. Records of memberships, consultation bookings, program enrollments, and payment history.

2. How We Use Your Data

We use your information to:

• Map your data into an actionable story and build your protocols
• Calibrate and adapt your nutritional, training, and performance protocols
• Maintain contact, run audits, and provide direct feedback during your program
• Verify qualifications for partnerships, enrollments, and consultations
• Process payments and manage booking schedules
• Operate, analyze, and improve our website, products, and services
• Send you information about our products, services, offers, events, and content, including by email and messaging, where permitted
• Produce aggregated and anonymized insights, case examples, and educational and promotional material, in a form that does not identify you unless you have given us permission
• Meet our legal, tax, and accounting obligations

You may opt out of promotional messages at any time using the unsubscribe link or by replying to any message. Opting out of promotional messages does not stop messages necessary to deliver a service you have purchased.

3. Data Sharing

Your telemetry is highly personal. We do not sell your personal information for money, and we do not rent, trade, or disclose it to data brokers.

Your health information is never shared for marketing. Your biomarker panels, blood chemistry results, endocrine values, health history, questionnaires, training and nutrition logs, wearable data, protocols, and program metrics are never disclosed to any advertising platform, advertising network, or data broker, under any circumstances and for any purpose. This applies without exception and does not change.

Access to your records is restricted to Nathan Carvalho and authorized OptiLab staff working directly with your data.

Service providers. We use a small number of providers to operate the business, covering payments, scheduling, communications, hosting, analytics, and our membership platforms. They process only the data needed to perform that function, act on our instructions, and are not permitted to use your information for their own purposes.

Marketing our own business. We may share limited contact identifiers, meaning your email address or phone number and typically in encrypted or hashed form, with advertising and marketing platforms so that we can reach you with our own offers, measure how our advertising performs, and reach other people with similar interests. We do this to market our own business. We are not paid for it, we do not permit those platforms to use your information for their own purposes, and, as stated above, no health information is ever included.

You may opt out of this at any time by contacting us or by using the opt-out controls offered by the relevant platform. Depending on where you live, this activity may be classified as "sharing" for cross-context behavioral advertising, and you have the right to direct us to stop.

Other disclosures. We may disclose information where we are legally required to do so, and in connection with a sale, merger, or transfer of our business, in which case your information would remain subject to this policy.

4. Data Security and Storage

We protect your records using encryption in transit and at rest, access controls limiting who can view them, and restricted administrative access to our systems. Your documents, files, and questionnaires are held in secured databases.

For your own protection, we recommend that you share sensitive information only through the secure intake forms and platforms we provide, and that you avoid sending it through email, social media messages, or other unsecured channels.

5. Retaining Your Records

We retain client profiles, telemetry, and correspondence for seven years after the client relationship ends, and then we delete them. Holding the record for that period is what makes long term pattern recognition possible, it lets us answer questions about protocols run years earlier, and it meets our tax, accounting, and legal obligations.

One exception. Where a record is needed to establish, exercise, or defend a legal claim, we keep it for as long as that purpose requires and no longer. This is the only reason we hold a record past seven years.

Asking us to delete your records. Anyone may ask us to delete their records, whether or not the law where you live gives you that right. Write to supportdesk@theoptilab.com from the email address you used with us, or tell us in that message which address to look for. We honor every deletion request except where the exception above applies, and where it does apply we tell you what we are keeping and why.

You may also request access to your records, a copy of your data, or correction of anything inaccurate, at the same address and at any time.

We will respond to any request within the maximum period permitted by applicable law, and we may extend that period where the law allows it for complex requests.

6. Cookies and Tracking

Our website uses cookies and similar technologies, including pixels, tags, and local storage, to make the site work, understand how it is used, and measure the performance of our marketing.

Strictly necessary. Required for the site to function, including security, load balancing, and remembering your choices. These cannot be switched off.

Analytics. Help us understand which pages are visited, how people arrive, and where they leave, so we can improve the site. This information is aggregated.

Advertising and measurement. We work with advertising platforms, including social media platforms, which set cookies and pixels to measure the performance of our advertising and to show you our content on other services. These technologies may record that you visited our site, which pages you viewed, and whether you completed an inquiry or purchase.

These advertising technologies operate on our public website only. They are not used inside your client portal, your intake forms, or anywhere your telemetry is submitted or stored, and no biomarker or health information is ever passed to an advertising platform.

You can control cookies through your browser settings, and you can limit advertising personalization through the settings offered by the relevant platform. Blocking strictly necessary cookies may stop parts of the site from working.

7. International Users

The Optimization Lab operates from the United States. Where you access our services from outside the United States, you do so on your own initiative and are responsible for compliance with the laws applicable in your location. Nothing in this policy is intended to subject us to the jurisdiction, regulatory regime, or licensing requirements of any territory in which we do not maintain an establishment.

Nature of the information. Certain of the information you submit may be classified under the laws of your territory as a special category of personal data. Where that classification applies, we collect, process, and retain that information solely on the basis of your explicit, informed, and freely given consent, which you provide at the point of submission and which is a condition of receiving the services. You acknowledge that you provide such information voluntarily and at your own election, that no such information is requested or required by us other than for the purposes described in this policy, and that we do not solicit it from any person who has not affirmatively elected to engage our services.

Withdrawal of consent. You may withdraw your consent at any time by written notice. Withdrawal takes effect prospectively only, does not affect the lawfulness of any processing carried out before withdrawal, and terminates our ability to provide the services, as the services cannot be delivered without the information on which they are based. Withdrawal does not entitle you to any refund and does not oblige us to erase information we are permitted or required to retain under Section 5 or under applicable law.

Basis of processing. We process your information as necessary for the performance of our agreement with you, on the basis of your explicit consent where the information is of a special category, on the basis of our legitimate interests in operating, securing, analyzing, and marketing our business where those interests are not overridden by your rights, and as necessary for compliance with our legal obligations and for the establishment, exercise, or defense of legal claims.

Your rights. Subject to and to the extent required by the law applicable to you, you may request access, rectification, portability, restriction, or erasure of your information, object to processing carried out on the basis of legitimate interests, and lodge a complaint with your supervisory authority. Rights described in this section apply only where and to the extent that the law of your territory confers them, and are subject in every case to the retention provisions of Section 5.

Transfers. Your information is stored and processed in the United States and may be accessed by our service providers in other territories. Where information is transferred out of the United Kingdom or the European Economic Area, we rely on the transfer mechanisms permitted under applicable law and require our service providers to apply protections of an equivalent standard. By submitting information to us, you acknowledge and consent to that transfer.

Minors. Our services are directed to adults. Where a client under 18 participates, a parent or legal guardian provides all consents required under this policy on their behalf.

8. Policy Modifications

We reserve the right to modify this Privacy Policy at any time to reflect updates in our systems or clinical guidelines. Changes will be posted to this page with an updated timestamp.