Privacy policy
Practice Solution Providers, LLC d/b/a DEXASCAN.COM
Effective date: October 14, 2026 · Last updated: October 14, 2026
1. Who We Are and What This Policy Covers
DEXASCAN.COM is owned and operated by Practice Solution Providers, LLC d/b/a DEXASCAN.COM, 141 Peyerk Ct., Unit D, Romeo, MI 48065 ("DEXASCAN," "we," "us"). This Privacy Policy explains how we collect, use, disclose and protect personal information when you use DEXASCAN.COM, the DEXASCAN.COM mobile app, our online store, our contests and promotions, and our emails and texts (together, the "Services").
We are not your health care provider. DEXASCAN.COM is a directory, booking and wellness platform. DEXA scans are performed by independent licensed facilities. When a facility treats you, its own HIPAA Notice of Privacy Practices governs your medical records. DEXASCAN is generally not a HIPAA covered entity or business associate, so the health information you give us directly is protected under this Policy, our Consumer Health Data Privacy Policy (Section 6), and applicable state and federal consumer privacy laws.
2. Information We Collect
| Category | Examples | Source |
|---|---|---|
| Identifiers and contact data | Name, email, phone, mailing address, account username, IP address | You; your device |
| Account and purchase data | Orders, products and scan packages purchased, billing and shipping address (card numbers are handled by our payment processor, not stored by us) | You; Shopify and payment processors |
| Consumer health data | Photos of DEXA scan reports you upload; body fat %, fat mass, lean mass, bone density, visceral fat; weight and body composition readings from the DEXA+ Body Fat Scale; goals and check-ins; contest results | You; your connected scale; scan facilities (only to verify contest results, with your consent) |
| Other sensitive data | Age or date of birth; sex (used for body composition reference ranges); precise location, if you allow it, to find nearby scan locations | You; your device |
| Device and usage data | Browser and device type, app version, pages viewed, links clicked (including clicks to a provider's booking page), referring site, cookie and advertising IDs | Automatically, through cookies, SDKs and pixels |
| Communications | Messages to support, survey responses, reviews, FAQ assistant and chat conversations | You |
| Contest and promotion data | Registration details, division, uploads, check-in history, eligibility and tax forms for winners | You |
| Partner and marketing data | Referral source, affiliate or partner codes, social media handle if you engage with us | Partners, affiliates, social platforms |
Scan report photos may contain more than we need. When you upload a scan report, please crop or cover information we do not need (such as insurance numbers or ordering-physician details). We use uploads only for the purposes in Section 3.
3. How We Use Information
We use personal information to:
- provide the Services: show nearby scan locations, process orders, deliver products, and run your app account;
- track your body composition progress and display your scan and scale results back to you;
- run contests and promotions, including verifying eligibility and results and awarding prizes;
- send service messages (order confirmations, app reminders, contest deadlines);
- send marketing, only as the law allows and with any required consent;
- improve, secure and debug the Services, and prevent fraud;
- comply with law, enforce our terms, and protect rights and safety.
Health data limits. We use consumer health data only to provide the features you request, with your consent. We do not sell consumer health data, use it for targeted advertising, or share it with advertisers or data brokers. We do not use it to make decisions that produce legal or similarly significant effects about you.
4. How We Disclose Information
| Recipient | What and why |
|---|---|
| Service providers (processors) | Hosting, e-commerce platform (Shopify), payment processing, app infrastructure, email/SMS delivery, customer support, analytics — bound by contracts limiting use to serving us |
| Scan facilities and listed providers | When you click a provider's booking link, you go to their site and their privacy policy applies. We share your information with a facility only at your direction or, for contest verification, with your consent |
| Contest judges and prize fulfillment | Contest results and eligibility data, for judging and awarding prizes; Red Light by DEXA+ (DEXA Plus LLC) for gift card and free-gift fulfillment |
| Advertising and social media partners | Limited device and usage data from non-health pages through cookies and pixels (see Section 5) — never consumer health data |
| Legal and safety | Where required by law, subpoena or court order, or to protect rights, safety and property |
| Business transfers | In a merger, acquisition, financing or sale of assets, subject to this Policy |
| With your consent | Anyone else you direct us to share with |
5. Cookies, Pixels and Tracking
We and our partners use cookies, pixels, SDKs and similar tools for site functions, analytics and advertising (for example, Shopify analytics and, where used, Google and Meta analytics and advertising tools). For the cookies Shopify uses to run our store, see https://www.shopify.com/legal/cookies.
- No advertising trackers on health features. We do not place advertising pixels or SDKs on app screens or web pages where you enter or view health data, scan uploads or scale results.
- Targeted advertising and "sharing." Using advertising cookies on our other pages may be a "sale" or "sharing" of personal information, or "targeted advertising," under some state laws. You can opt out anytime using the "Your Privacy Choices" link in our website footer or by emailing contact@dexascan.com.
- Global Privacy Control. We honor Global Privacy Control (GPC) and other recognized opt-out preference signals as a valid opt-out of sale, sharing and targeted advertising for that browser, and of any account linked to it. When we detect a signal, our site displays a confirmation that your opt-out request was honored.
- Cookie settings. You can manage non-essential cookies through our cookie banner or browser settings. Blocking some cookies may affect site features.
- Do Not Track. Apart from GPC, we do not respond to browser "Do Not Track" signals, since no common standard exists.
6. Consumer Health Data Privacy Policy
This section is our Consumer Health Data Privacy Policy under the Washington My Health My Data Act, Nevada SB 370, the Connecticut Data Privacy Act, and similar laws. It applies to consumer health data: personal information linked or reasonably linkable to you that identifies your past, present or future physical health status.
Health data we collect: body composition and DEXA scan results (body fat %, fat mass, lean mass, bone density, visceral fat), scan report photos, weight and scale readings, health and fitness goals, contest results, and information inferred from them (such as progress trends). Location data you allow is used only to show nearby providers, not to identify visits to health facilities for marketing.
Why we collect it: to display and track your results, power app features you turn on, run contests you enter, and provide customer support.
Sources: directly from you, from your connected DEXA+ Body Fat Scale, and, for contest verification only, from the scan facility that performed your scan.
Who we share it with: service providers that host and process it for us under contract; contest judges (for contests you enter); and anyone else only with your separate consent. We list our health data processors on request. Third parties do not collect consumer health data over time and across sites through our Services.
Consent. We collect consumer health data only with your consent, obtained separately from this Policy (for example, an in-app consent screen before your first upload or scale sync), except where needed to provide a feature you request. We share it only with a second, separate consent. We never sell it.
Your health data rights. You may:
- confirm whether we collect, share or sell your consumer health data, and access it, including a list of third parties and affiliates we shared it with and their contact information;
- withdraw consent to collection and sharing at any time;
- delete your consumer health data, including from our processors, archives and backups, within the time periods required by law;
- appeal a denied request (see Section 8).
We will not discriminate against you for exercising these rights.
Geofencing. We do not use geofences around health care facilities to identify, track, or send messages or ads to people.
7. Your Privacy Rights
Depending on where you live, you have some or all of these rights. We extend them to all U.S. users where practical.
| Right | What it means |
|---|---|
| Know / access | Confirm whether we process your data and learn how we use and share it |
| Portability | Get a copy of your data in a portable format, and ask us to transfer it to another party where the law allows |
| Correct | Fix inaccurate personal information |
| Delete | Delete personal information we collected from or about you |
| Opt out of sale, sharing and targeted advertising | Stop sale or sharing of your data and ads based on your activity (also via GPC) |
| Opt out of profiling | Stop automated profiling that produces legal or similarly significant effects (we do not do this) |
| Limit or consent to sensitive data | We process sensitive data, including health data, only with your opt-in consent; California residents may limit its use to what is necessary to provide the Services |
| Restrict processing | Ask us to stop or restrict processing of your personal information |
| Withdraw consent | Withdraw any consent you gave us, at any time, without affecting earlier processing |
| List of third parties | Some states (e.g., Oregon, Minnesota) let you request the specific third parties we disclosed your data to |
| Non-discrimination | We will not deny services or charge different prices because you exercised a right |
States covered. These rights apply to residents of states with comprehensive privacy laws, including California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia, as well as Washington and Nevada for consumer health data.
8. How to Exercise Your Rights
- Submit a request: email contact@dexascan.com with "Privacy Request" in the subject line, or use the privacy settings in the DEXASCAN.COM app where available.
- Opt out of sale, sharing and targeted ads: use the "Your Privacy Choices" link in our website footer or turn on Global Privacy Control in your browser.
- Verification: we verify your identity by matching information we already hold (for example, your account email). We do not require an account to opt out.
- Authorized agents: an agent may submit a request with your signed permission; we may ask you to verify your identity directly.
- Timing: we respond within 45 days, and may extend once by 45 more days where the law allows, with notice.
- Appeals: if we deny your request, you may appeal by replying to our decision or emailing contact@dexascan.com with "Privacy Appeal" in the subject. We will respond within the time required by your state's law (generally 45–60 days). If you disagree with the result, you may contact your state Attorney General.
California notice at collection and "Shine the Light." The categories in Section 2, purposes in Section 3, and disclosures in Section 4 are our notice at collection. We retain each category as described in Section 10. We do not use or disclose sensitive personal information to infer characteristics about you. We do not disclose personal information to third parties for their own direct marketing without your consent.
In the past 12 months, we disclosed the following categories of personal information (sensitive personal information marked *):
| Category | Categories of recipients |
|---|---|
| Identifiers (contact, order and account details) | Service providers; contest judges and prize fulfillment; business and marketing partners (opt-out available) |
| Commercial information (purchases, shopping and support records) | Service providers; business and marketing partners (opt-out available) |
| Internet or network activity (Usage Data from non-health pages) | Service providers; advertising and analytics partners (opt-out available) |
| *Consumer health data (scan results, scale readings, contest results) | Service providers only; contest judges and scan facilities for verification, with your consent. Never sold or shared for advertising |
| *Precise location (if enabled) | Service providers only, to show nearby providers |
Complaints. If you have a complaint about how we handle your personal information, contact us using the details in Section 16. If you are not satisfied with our response, you may appeal as described above or contact your state Attorney General.
9. Children and Teens
The Services are intended for adults 18 and older. We do not knowingly collect personal information from children under 13, or sell, share or use for targeted advertising the data of anyone under 18. If you believe a minor has given us information, contact us and we will delete it.
10. Data Retention
We keep personal information only as long as needed for the purposes in this Policy:
| Data | Retention |
|---|---|
| Account and app health data | While your account is active; deleted within 90 days after you close your account, unless you ask sooner |
| Order and payment records | 7 years, for tax and accounting |
| Contest data | 2 years after the contest ends; winners' tax records as required by law |
| Marketing preferences | Until you unsubscribe, plus a suppression record so we honor the opt-out |
| Device and usage data | 26 months or less |
11. Data Security and Breach Notification
We use administrative, technical and physical safeguards, including encryption in transit and at rest for health data, access controls, and vendor security reviews. No system is perfectly secure. If a breach affects your information, including an unauthorized disclosure of health data, we will notify you, regulators (including the Federal Trade Commission under its Health Breach Notification Rule, where it applies) and others as required by law, without unreasonable delay.
12. Emails and Text Messages
You can unsubscribe from marketing emails using the link in any email. We send marketing texts only with your prior express written consent; reply STOP to opt out or HELP for help. Message and data rates may apply. Consent to texts is not a condition of purchase. We do not share mobile numbers or text-messaging consent with third parties for their marketing.
13. Third-Party Sites and Providers
Our Services link to scan facilities, provider booking pages, social media and other sites we do not control. Their privacy and security practices are governed by their own policies, and a link does not mean we endorse them. Information you share on social media platforms may be visible to other users of those platforms.
Reviews and user-generated content. If you post a product review, testimonial or other content in a public area of the Services, it will be visible to anyone. Do not include health details or scan results in public posts unless you want them to be public. We are not responsible for how others use information you choose to make public. We will publish your before-and-after results or photos only with your separate written consent.
14. Where We Process Data
We are based in the United States and process data in the U.S. The Services are intended for U.S. residents.
15. Changes to This Policy
We will post updates here and change the "Last updated" date. For material changes, especially to how we use health data, we will notify you by email or in the app, and get your consent where the law requires.
16. Contact Us
Practice Solution Providers, LLC d/b/a DEXASCAN.COM
141 Peyerk Ct., Unit D, Romeo, MI 48065
Email: contact@dexascan.com