This Privacy Policy explains how information may be processed when you visit OrliLab at https://orlilab.com, use its editorial contact form or follow links to external services. OrliLab publishes U.S.-focused educational content about orlistat and weight-management medications; it is not a patient portal, pharmacy or medical service. This policy describes website-related information practices and the choices available under applicable privacy laws.
Last updated: October 14, 2026
This policy applies to OrliLab at https://orlilab.com/, including the articles, trust pages and contact form available on this domain. It concerns personal information that visitors voluntarily submit and technical data that may be processed to make the website available.
Third-party pharmacies, healthcare professionals, telehealth platforms, insurers, advertising providers and other linked services operate under their own privacy practices. OrliLab does not control those external privacy notices or payment, prescription and patient-record systems.
When you use the Contact form, it requests an email address, a message and a topic. You may also choose to provide your name, the relevant OrliLab article URL and a public supporting-source URL. The acknowledgement checkbox confirms that you understand the form is for website matters, not individual healthcare.
We may use submitted information to read and address editorial feedback, assess source suggestions, investigate technical issues, respond to privacy requests and communicate about the inquiry. Submission does not create a medical relationship or guarantee a reply.
OrliLab is not designed to receive or store personal medical records. Do not send diagnoses, detailed health histories, prescriptions, clinical photographs, test results, government identification, insurance account numbers, payment-card details or another person’s sensitive information through its form.
For a content correction, the article URL and a source are ordinarily sufficient. Questions about individual symptoms, prescriptions or medicine safety should go to a qualified healthcare professional or the relevant provider.
Hosting, web-server, security and content-delivery systems may process IP addresses, browser or device characteristics, access timestamps, visited paths, referring pages, response codes and diagnostic logs. These records can be necessary to provide the website, detect faults and protect it against abuse.
Visiting a page about a medicine may indicate an interest in the subject, but it does not establish a diagnosis or that the visitor uses the medicine. Technical data should not be interpreted as a verified clinical record.
Actual information collected depends on the features and hosting services in use. OrliLab does not request a credit card or a medical history for its educational content.
Information should be used only for appropriate website purposes and handled consistently with applicable privacy obligations.
| Category | Examples | Potential purpose |
|---|---|---|
| Contact details | Name if supplied, email address | Respond to website-related inquiries |
| Editorial feedback | Topic, message, article URL and source URL | Check corrections and source suggestions |
| Technical records | IP, browser, time, requested page, status code | Deliver, maintain and secure the site |
| Cookies and preferences | Technical session or consent preferences if enabled | Functionality, security and saved choices |
| Optional analytics | Page events and identifiers if analytics is configured | Understand usage and site performance |
| Third-party referral context | Link clicks or referral identifiers where applicable | Operate and disclose affiliate relationships |
Information may be processed to operate the website, diagnose errors, prevent misuse, review factual corrections, respond to a message, improve accessibility and satisfy applicable legal requirements. Where a processing purpose is optional, appropriate notice and choice should be provided when legally required.
We do not use a contact-form message to make a medical diagnosis or sell a treatment plan. A visitor’s inquiry should not be represented as a professional medical consultation.
Cookies or related browser storage may be used by technical components to support website functions, security, preferences and any enabled analytics. The kinds of cookies used depend on what is actually deployed on the live site.
Non-essential advertising or analytics technologies may require consent in certain jurisdictions. Where consent is legally required, the website should provide a corresponding choice and honor the visitor’s selection. This policy does not assert that any specific tracking platform is installed.
If analytics is used, it may measure aggregate visits, navigation patterns and technical performance through events, identifiers or other information described by the provider. Exact retention, cookies and opt-out options depend on the implementation.
Analytics should be configured consistently with applicable privacy and consent requirements. A visitor should not assume that a page-view record proves medication use, medical status or a purchasing decision.
A submitted contact form may be delivered to a website-controlled server or configured message-processing service. Information entered in the form should be treated as website correspondence, with access limited to people or providers who need it to evaluate and respond to the request.
The form is not intended to carry protected healthcare messages or confidential prescription details. If contact processing is unavailable, submitting the form may not deliver a message; visitors should not treat an attempted submission as confirmation of receipt.
Depending on the jurisdiction and processing activity, relevant legal bases may include a legitimate interest in running and securing a website, steps necessary to respond to requested communications, legal obligations and consent for optional activities where required.
Which legal basis applies must reflect the actual activity. Consent should not be claimed where no valid mechanism exists, and optional tracking should not be presumed essential simply because a service could use it.
Infrastructure providers may process limited technical information to host pages, deliver content, protect against attacks and diagnose service problems. A contact-form processor may handle voluntary message data if such a service is configured.
Providers and processing arrangements can change, and OrliLab does not name an unverified hosting or analytics vendor as a current contractor. Any production configuration should maintain appropriate access and security controls.
OrliLab links to official regulators, reference resources and independent commercial services. When you follow an external link, that destination may receive information about your visit and apply its own cookies, logs and privacy rules.
Before entering health, identity, payment or prescription information on a third-party website, review the actual provider’s privacy notice and verify its legitimacy. OrliLab is not responsible for the data practices of independent operators.
Some links may be affiliate or sponsored referrals. A destination website or referral technology may receive a referral identifier or related click information to attribute activity. That attribution process is separate from OrliLab’s editorial assessment of medication safety.
We do not guarantee that referral links lead to an approved prescription, licensed dispensing service, active promotion or stocked product. Visitors should read relevant third-party disclosures before completing any transaction.
Information may be disclosed when necessary to deliver requested services, investigate abusive activity, respond to valid legal obligations or use authorized processing providers. Data should not be shared beyond an appropriate purpose without a lawful basis.
This policy is not an assurance that a particular commercial or analytics provider has access to every visitor’s data. Actual recipients depend on the technologies enabled and the sites voluntarily visited through external links.
OrliLab is U.S.-focused, but visitors may access it from other countries. Internet infrastructure and external providers may operate across borders, potentially involving international data transfers.
Where a transfer mechanism or disclosure is required by applicable law, the actual operational arrangements should satisfy that requirement. We do not claim a particular contractual safeguard is in place without evidence of its use.
Contact messages and technical records should be retained only as reasonably needed for their legitimate purposes, such as handling an inquiry, maintaining security or meeting a legal obligation. The necessary period may vary by type of record and the services involved.
This policy does not promise an invented universal retention schedule. Legitimate requests for deletion or other applicable rights can be submitted through the Contact form.
Protecting website data involves proportionate technical and organizational safeguards, such as controlling access to messages, maintaining software and using appropriate secure connections. No online system can be guaranteed completely immune to unauthorized access or technical failures.
Visitors should avoid including unnecessary sensitive data in ordinary website communications. If a suspicious site requests medical or financial information while claiming to represent OrliLab, verify its identity before proceeding.
Depending on applicable law and your location, rights may include requesting access to personal data, correction, deletion, restriction, portability where relevant, objection to certain processing and withdrawal of consent where processing is based on consent.
Some rights have exceptions or verification requirements. We may need enough information to understand and lawfully process a privacy request without collecting unrelated sensitive details.
To ask about information submitted to OrliLab, choose “Privacy-related request” on the Contact form. Identify the request and the email address used for the earlier message when relevant. Do not include identity-document images unless a legitimate, secure verification process specifically requires them.
Privacy inquiries are separate from pharmacy, telehealth, insurer and merchant records. For information held by an external provider, contact that provider under its own privacy notice.
Visitors may have the ability to raise privacy concerns with the appropriate data protection or consumer-protection authority under laws applicable to them. This policy does not limit rights that cannot lawfully be excluded.
When possible, providing OrliLab with a specific description of the concern may help clarify which website activity is involved. Third-party transactions should generally be raised with the organization that actually processed them.
OrliLab is intended as a general informational resource and is not directed at children or designed to solicit personal information from them. OTC Alli labeling has its own adult-use limits, which are medical product rules rather than a website age-verification mechanism.
Anyone concerned that a child submitted personal details through the site may send a privacy request using Contact without disclosing additional sensitive information.
Website articles and form fields are not an automated decision about who qualifies for medicine, a diagnosis, a prescribed dose or an insurance benefit. No statement on OrliLab should be treated as a personal algorithmic treatment determination.
External pharmacies, care platforms or advertising services may use their own automated systems and must explain them under their applicable notices.
We may revise this policy when the website changes, legal requirements evolve or data-handling arrangements become clearer. The updated page should describe meaningful changes accurately and carry a revised date.
Continued access to an article does not mean a visitor has agreed to unrelated optional tracking where legally required consent has not been obtained.
For website data questions use Contact OrliLab. Our Editorial Policy describes evidence and commercial independence, while Terms of Use explains the limitations of our medical information and external links.
OrliLab is an educational publisher, not a healthcare organization that can retrieve or amend a pharmacy’s records or a third party’s patient data.