Request for Lab Results & Authorization for Laboratory Services

Craft Peptides may obtain your laboratory results through one or more of the following methods:

• Labs ordered by Craft Peptides — Your clinician may order bloodwork or biomarker testing on your behalf through third-party laboratory ordering platforms and clinical laboratories. These may include, but are not limited to, services such as Rupa Health, SiPhox Health, Function Health, Quest Diagnostics, Labcorp, and other laboratory partners we may use from time to time.
• Labs uploaded by you — You may upload your own lab results from any healthcare provider, laboratory, or testing service directly through the Craft Peptides patient portal. This includes results from your primary care physician, specialist, or any direct-to-consumer lab testing service.
• Labs received from third parties — With your consent, we may request and receive lab results directly from third-party healthcare providers, laboratories, or testing platforms on your behalf.

When Craft Peptides orders labs on your behalf, we may share the following information with the laboratory or ordering platform as necessary to process your order:

• Demographic information — your name, date of birth, biological sex, address, phone number, and email
• Clinical information — the specific tests ordered by your clinician and any relevant clinical context required by the laboratory (such as diagnosis codes or fasting status)
• Insurance information — not applicable; Craft Peptides is a self-pay practice and does not submit claims to insurance carriers

We share only the minimum information necessary to fulfill the lab order. We do not share your full medical history, treatment plans, or other health records with laboratory partners beyond what is required to process the ordered tests.

Your lab results will be used for the following purposes:

• Clinical evaluation — Your clinician will review your lab results to assess your current health status, identify potential contraindications, and determine whether peptide therapy or other treatments are appropriate for you.
• Treatment planning — Lab results inform your personalized protocol, including medication selection, dosing, and monitoring schedules.
• Ongoing monitoring — Follow-up lab work may be ordered to monitor your response to treatment, adjust dosages, and ensure patient safety.
• Care coordination — Lab results may be shared with your Craft Peptides clinician and, where clinically necessary, with compounding pharmacies to ensure safe dispensing of your prescribed medications.

We will not use your lab results for marketing purposes, sell your lab data, or share your results with any party not described in this authorization or our Privacy Policy & Notice of Privacy Practices.

Your lab results are stored securely on our HIPAA-compliant platform infrastructure. We retain lab results for a minimum of seven (7) years following the last date of service, or longer if required by applicable law, consistent with medical record retention requirements.

Lab results are encrypted at rest using AES-256 bit encryption and in transit using TLS. Access to lab results is restricted to your assigned clinician and authorized Craft Peptides personnel on a need-to-know basis.

You have the following rights with respect to your lab results:

• Right to access — You may view your lab results at any time through your Craft Peptides patient portal under the Care Plan & Labs section.
• Right to a copy — You may download or request a copy of your lab results at any time.
• Right to request amendment — If you believe your lab results contain an error, you may request a correction by contacting your clinician or our Privacy Officer.
• Right to restrict disclosure — You may request that we limit how your lab results are shared, though this may affect your clinician’s ability to provide treatment.
• Right to an accounting of disclosures — You may request a list of parties to whom your lab results have been disclosed.

When you upload lab results to the Craft Peptides portal:

• You represent that the uploaded results are your own and are accurate to the best of your knowledge.
• You understand that your clinician will rely on the accuracy of the results you upload when making treatment decisions. Uploading falsified, altered, or another person’s lab results may result in inappropriate treatment recommendations and could endanger your health.
• You acknowledge that Craft Peptides is not responsible for verifying the accuracy or authenticity of lab results you upload from external sources.
• Your clinician may require additional or repeat lab work ordered through our platform before prescribing, regardless of uploaded results, if they determine it is clinically necessary.

When your clinician orders labs through Craft Peptides:

• You consent to Craft Peptides sharing the necessary demographic and clinical information with our laboratory partners to process the order.
• You understand that lab fees are non-refundable once submitted to the laboratory, as described in our Return & Refund Policy.
• Results will be delivered to your Craft Peptides portal once processed. We do not control the turnaround time of third-party laboratories.
• You will be notified when results are available. Your clinician will review the results and may contact you to discuss findings or adjust your treatment plan.

Each laboratory and ordering platform we partner with may have its own terms of service, privacy policy, and consent requirements. When labs are ordered through a third-party platform, you may be asked to agree to that platform’s terms separately. Craft Peptides is not responsible for the terms, policies, or practices of third-party laboratory providers.

We select laboratory partners that maintain appropriate quality standards, certifications (such as CLIA and CAP), and privacy protections. However, once your information is shared with a laboratory partner for order processing, that partner’s own privacy policies govern their handling of your data.

You may revoke this authorization at any time by submitting a written request to our Privacy Officer. Revocation will be effective upon receipt, except to the extent that Craft Peptides or its laboratory partners have already taken action in reliance on the authorization.

If you revoke this authorization, your clinician may not be able to order labs on your behalf or interpret uploaded results, which may affect your ability to receive treatment through the Craft Peptides platform.

If you have questions about this authorization, your lab results, or your privacy rights, please contact: