Provider-directedShipped to your door
Privacy & Security

Your information is treated like it's our own.

What you share here is personal. Here is exactly how we protect it, who can see it, and how to get it removed.

The short version

Rehab® Health Lab is an educational and coordination platform. When you fill out a quiz, a calculator, or a contact form, that information goes to a small internal team and, where relevant, to the licensed providers and pharmacy partners coordinating your care. It is encrypted in transit, access-controlled, and never sold.

Safeguards in place today

How we protect what you submit

Encrypted end to end in transit

Every page and every form on this site is served over HTTPS/TLS with HSTS enforced, so what you type is encrypted between your device and our systems. Stored records sit in an encrypted-at-rest managed database.

Least-privilege access

Records are protected by row-level database policies. Only authenticated Rehab® Health Lab team members with an explicit admin role can view submissions. Every administrative surface requires a login and is never reachable by URL alone.

No personal data in logs or URLs

Email addresses and phone numbers are redacted in our system logs (for example j***@domain.com). Your personal report links use unguessable random tokens and are served with no-store and no-index headers, so they are never cached by browsers or indexed by search engines.

Minimum necessary collection

We ask only for what a coach or licensed provider actually needs to route you correctly: name, contact details, and the wellness intake answers you choose to give. We do not ask for a Social Security number, insurance ID, or payment card data on this site.

Layered anti-spam and anti-abuse

Public forms are screened server-side with hidden bot traps, submission-timing analysis, cross-site replay blocking, throwaway-email detection, and content heuristics that catch link stuffing and scripted spam, so bad actors cannot flood our team or your inbox.

Hardened browser protections

Responses carry strict security headers (HSTS, no-sniff, frame protection, restrictive referrer and permissions policies), which block clickjacking, content-type attacks, and silent leakage of your data to third-party sites.

Retention and deletion

We keep intake records only as long as we need them to support you and to meet our recordkeeping obligations. You can ask us to delete your information at any time and we will confirm once it is done.

One-click opt-out

Every email includes a working unsubscribe link. Unsubscribed addresses go on a permanent suppression list that blocks future sends automatically.

HIPAA

Where HIPAA fits, stated plainly

HIPAA governs how covered entities (licensed providers, pharmacies, and health plans) and their business associates handle protected health information. The clinical care coordinated through Rehab® Health Lab is delivered by licensed providers and pharmacies who are HIPAA covered entities and who maintain their own HIPAA obligations and notices of privacy practices.

This website is an educational and intake front door. We do not claim a certification. Instead we hold the information you give us to HIPAA-aligned safeguards: encryption in transit and at rest, role-based access with unique logins, minimum-necessary collection, redacted logging, retention limits, and prompt deletion on request.

If you would like a copy of the privacy practices for the provider or pharmacy handling your care, ask us and we will connect you directly.

Commitments

What will never happen here

  • We never sell your information. Ever. To anyone.
  • We never share your intake answers with advertisers or data brokers.
  • We never post about you, or identify you publicly, without written permission.
  • We never ask for payment details, insurance numbers, or a Social Security number through this website.
  • We never send prescription decisions by email. Clinical decisions happen with a licensed provider.
Your control

Access, correction, and deletion

Email support@intensitybrands.com or text 715.303.1301 from the address or number you used, and tell us what you want: a copy of what we hold, a correction, marketing opt-out, or full deletion. We act on deletion requests promptly and confirm in writing.

You can also manage cookie and tracking choices any time on our Privacy Preferences page.

Report a security concern

Found a vulnerability or something that looks wrong? Email support@intensitybrands.com with the details. We read every report, respond to legitimate disclosures, and will never pursue action against good-faith researchers.

This page is maintained by Rehab® Health Lab, part of Intensity Brands, to answer common privacy and security questions. It describes our current practices and is not a certification, audit result, or legal advice. Nothing on this site is medical advice.