PRIVACY POLICY

Effective Date: September 2, 2026

Thank you for visiting https://ladairmentalhealthpractice.com (the "Website"). Your privacy is important to us. This Privacy Policy (the "Policy") describes the types of information LADAIR INTEGRATED HEALTH PLLC (the "Company", "us", "we", or "our") may collect from you or that you may provide when you visit the Website and the products, features, materials, and services we offer (collectively with the Website, the "Services"). This Policy also describes our policies and procedures for collecting, using, maintaining, protecting, and disclosing that information.

This Policy applies to information we collect on the Website and through your use of the Services generally, and through communications between you and the Website (including email, text, and other electronic messages).

This Policy does not apply to information collected by third parties, including any websites, services, and applications that you elect to access through the Services.

Relationship to HIPAA. Protected health information created or received in the course of providing clinical care is governed by the Health Insurance Portability and Accountability Act (HIPAA) and our Notice of Privacy Practices, which is provided to you at intake and available on request. Where HIPAA affords you greater protection than this Policy, HIPAA controls.

Please review this Policy carefully. By checking the optional SMS consent disclosures and clicking "Submit," or by accessing or using the Services, you agree to the terms of this Policy on behalf of yourself or the entity or organization that you represent. If you do not agree to any term in this Policy, you should refrain from further use of our Services.

SMS / MOBILE INFORMATION PRIVACY

How we collect your mobile number and consent. LADAIR INTEGRATED HEALTH PLLC collects your mobile phone number only when you voluntarily provide it — by entering it on the appointment request form at https://ladairmentalhealthpractice.com/schedule-an-appointment and checking the optional SMS consent box, or by giving verbal consent during a scheduling or intake call. The consent checkbox is unchecked by default and is never required to submit the form or to receive services from us. We do not purchase, rent, or import mobile phone numbers from any third-party list.

Types of messages we send. If you opt in, you may receive appointment confirmations, appointment reminders, rescheduling and cancellation notices, intake and paperwork reminders, billing and insurance follow-ups, and replies to questions you initiate. If you separately opt in to our optional marketing messages, you may also receive practice news, wellness information, and service announcements.

Message frequency. Message frequency varies based on your appointment and scheduling activity. You can generally expect approximately 2 to 5 messages per month.

Message and data rates. Message and data rates may apply. Standard messaging rates from your mobile carrier will apply to messages sent to and from us.

How to opt out. You may cancel SMS messages at any time by replying STOP to any message you receive from us. We will send a confirmation message and you will receive no further texts. Reply HELP to any message for assistance, or contact us at [email protected] or 972-698-5824.

How we use your mobile information. Your mobile number and SMS consent data are used solely to communicate with you about your care, scheduling, and account. We use Twilio as our messaging service provider strictly to deliver these messages on our behalf under a written agreement; Twilio is prohibited from using your information for its own purposes.

No sharing. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All the categories of information sharing described elsewhere in this Policy exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. Text messaging originator opt-in data and consent are not sold, rented, shared, or disclosed to any third party, including subcontractors or affiliates, other than the aggregators and messaging service providers strictly necessary to transmit the messages you have requested.

Security of text messages. Text messages are not a fully secure channel. We limit the clinical detail included in SMS communications and do not include sensitive diagnostic information unless you have expressly authorized it. Do not use SMS for urgent or crisis needs. If you are experiencing a mental health crisis, call or text 988. If you are experiencing a medical emergency, call 911.

CHANGES TO OUR PRIVACY POLICY

This Policy was last revised on the date noted at the top of this page. We may update this Policy from time to time. If we make material changes, we will post the updated Policy on this page and notify you of such changes by means of an email to the email address on file, a message on the Services, or through a notice on the Website home page. Your continued use of the Services after we make changes is deemed to be acceptance of those changes, so please check the Policy periodically for updates.

INFORMATION WE COLLECT

We receive several types of information about you from various sources, including (A) information and content that you give us; (B) automatically collected information; and (C) aggregate information. Each is described below.

INFORMATION AND CONTENT THAT YOU GIVE US

We collect personal information that you knowingly choose to disclose. This may include:

Personal Information. Your name, date of birth, address, email address, phone number, and any other information you directly provide us on or through the Services. This includes information you provide when you submit an appointment request, complete intake paperwork, or make a request for support.

Insurance and Payment Information. Your insurance carrier, member identification, and billing details necessary to verify benefits and process payment for services.

Correspondences. Records and copies of your email messages together with your email address and our responses, if you choose to correspond with us through email, and records of your phone number, phone calls with us, and voice messages, if you choose to correspond with us via phone.

Clinical Information. Information you provide about your health, symptoms, history, and treatment. This information is protected health information and is handled in accordance with HIPAA and our Notice of Privacy Practices.

INFORMATION WE COLLECT AUTOMATICALLY

We may use a variety of technologies to collect certain information about your equipment, browsing actions, and patterns whenever you interact with the Services, including:

Activity Information. Details of your visits to our Services, including the pages you view, the features you use, the actions you take, and the time, frequency, and duration of your activities.

Equipment Information. Information about your computer and internet connection, including your operating system, IP address, browser type, and browser language.

The technologies we use for this automatic data collection may include:

Cookies. A cookie is a small data file stored on your device either for only the duration of your visit ("session cookies") or for a fixed period ("persistent cookies"). We may use cookies to provide you with a more functional experience on the Services.

Web Beacons. Web beacons are small files embedded in webpages and emails that allow us, for example, to track whether an email has been opened and to compile related website statistics.

JavaScripts. JavaScripts are code snippets embedded in websites that facilitate a variety of operations including page functionality and form submission.

HTML5 Local Storage. HTML5 local storage allows data from websites to be stored within your browser to store and retrieve data when the website is revisited.

This Policy does not cover the use of tracking technologies by third parties. The Services may contain links or references to other websites operated by third parties. Please be aware that we do not control these third parties' tracking technologies or when and how they may be used. We encourage you to read the privacy statements and terms of any linked websites you enter.

AGGREGATE INFORMATION

We may collect statistical or aggregate information that is about you, but individually does not identify you. Some of this information may be derived from personal information, but it is not personal information and cannot be tied back to you.

INFORMATION FROM OTHER SOURCES

We may receive information about you from other sources and add it to our records, including from referring providers, insurance carriers, and other healthcare entities involved in your care, in each case consistent with HIPAA. We do not obtain mobile phone numbers or SMS consent from any third-party source.

HOW WE USE YOUR INFORMATION

We may use the information we collect about you in the following ways:

- to provide the Services and its content to you;

- to schedule, confirm, reschedule, and remind you of appointments;

- to provide clinical care and coordinate your treatment;

- to respond to comments and questions, and provide patient support;

- to verify insurance benefits, bill for services, and collect payment;

- to fulfill the purpose for which you provide such information, or fulfill any other purpose disclosed by us when you provide the information;

- to inform you about important changes to, or other news about, the Services;

- to operate, maintain, improve, and analyze the Services;

- to detect, prevent, or investigate security breaches, fraud, and other unauthorized or illegal activity;

- to carry out our obligations and enforce our rights, including for billing and collection;

- to maintain appropriate records for internal administrative and legal compliance purposes;

- to send optional practice communications, if you have separately opted in to receive them; and

- for any other purpose with your consent.

We do not use protected health information for marketing purposes without your separate written authorization as required by HIPAA. We do not sell personal information.

HOW WE SHARE YOUR INFORMATION

We may disclose aggregated or anonymized information about our users without restriction. We will not share your personal information that we collect or you provide except in the following circumstances:

For treatment, payment, and healthcare operations. With other healthcare providers, insurance carriers, clearinghouses, and business associates as permitted by HIPAA to provide and coordinate your care and to obtain payment for services.

When we work with service providers. To service providers, professional advisors, contractors, and other third parties that provide us with support services, such as payment processing, website hosting, practice management software, information technology, secure messaging, and email delivery, and who are bound by contractual obligations — including HIPAA business associate agreements where applicable — to keep your information confidential and use it only for the purposes for which we disclose it to them.

When we become involved in a sale or transfer of the Company. If we become involved with a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of the Company's assets, to business entities or people involved in the negotiation or transfer, subject to applicable healthcare privacy law.

When we are required by law. To comply with any court order, law, or legal process, including to respond to any government or regulatory request, and to make reports required or permitted by law.

When we enforce our rights. To enforce or apply this Policy, our Terms of Use (https://ladairmentalhealthpractice.com/terms), and other agreements, including for billing and collection purposes.

To help protect lawful interests. If we believe disclosure is necessary to protect the rights, property, or safety of the Company, our patients, or others, including as permitted or required by law in situations involving a serious and imminent threat to health or safety.

To fulfill the purpose for that information or with your consent. To fulfill the purpose for which you provide the information, for any other purpose disclosed by us when you provide the information, or with your consent.

We do not share personal information with marketing service providers, advertising networks, data brokers, or strategic marketing partners. We do not sell or rent your personal information to anyone.

SMS carve-out. Every category of sharing described above excludes text messaging originator opt-in data and consent. That information is disclosed only to the messaging aggregators and service providers strictly necessary to deliver the messages you have requested, and is never shared for marketing, promotional, or advertising purposes.

DETAILED INFORMATION ON THE PERSONAL INFORMATION WE COLLECT

Personal information is collected for the following purposes and using the following services:

Practice and patient communication platform

We use a hosted patient engagement and practice communication platform to manage appointment requests, scheduling communications, and patient records related to those communications.

- Personal information processed: identifiers, contact details, appointment and scheduling data.

- Place of processing: United States.

- Category under CCPA: identifiers.

- The platform vendor acts solely as a service provider and, where applicable, a HIPAA business associate under a written contract. This processing does not constitute a sale or sharing of personal information.

Twilio (Twilio Inc.)

Twilio is a phone number management and communication service provided by Twilio, Inc., used to deliver SMS messages you have consented to receive.

- Personal information processed: phone number, message content.

- Place of processing: United States.

- Category under CCPA: identifiers.

- Twilio acts solely as a service provider under a written contract that meets CPRA requirements. This processing does not constitute a sale or sharing of personal information. Text messaging originator opt-in data and consent are not sold, shared, or disclosed to any third party.

Payment processing

Unless otherwise specified, we process payments via external payment service providers. Users are requested to provide payment details directly to such providers. The Website is not involved in the collection and processing of payment card information; it only receives a notification as to whether payment has been successfully completed.

- Personal information processed: as specified in the privacy policy of the payment service provider.

- Place of processing: United States.

- Category under CCPA: identifiers, commercial information.

- This processing does not constitute a sale or sharing of personal information.

Website analytics

We may use basic website analytics to understand aggregate traffic patterns and improve the Website.

- Personal information processed: usage data, IP address.

- Place of processing: United States.

- Category under CCPA: internet information.

- We have configured analytics so that it is not used for cross-context behavioral advertising. We do not run advertising pixels, remarketing tags, or lookalike audience tools on pages that collect patient information.

YOUR CHOICES

Mechanisms to Control Your Information.

Cookies and Other Tracking Technologies. You may be able to set your browser to reject cookies and certain other technologies by adjusting the appropriate settings in your browser. Each browser is different, but many common browsers have preferences that may be adjusted to allow you to accept or reject cookies. If you disable or refuse cookies, please note that some parts of the Services may become inaccessible or may not function properly.

SMS Messages. You may opt out of SMS messages at any time by replying STOP, as described in the SMS / Mobile Information Privacy section above. Opting out of SMS does not affect your ability to receive care or to be contacted by phone, mail, or email regarding your appointments.

Optional Practice Communications. If you do not wish to receive optional practice news or non-clinical communications, you can opt out by (i) leaving the optional marketing consent box unchecked when you complete a form; (ii) following the opt-out instructions in the communications we send you; or (iii) contacting us at [email protected]. If you opt out, we may still send you transactional communications relating to your appointments, care, and account.

Do Not Track. "Do Not Track" is a privacy preference you can set in most web browsers. Please note that we currently do not respond to Do Not Track browser settings.

ACCESSING AND CORRECTING YOUR INFORMATION

You may contact us to request access to, correct, or remove personal information that you have provided to us. Requests concerning protected health information are handled under HIPAA and our Notice of Privacy Practices, which grants you the right to inspect, obtain a copy of, and request amendment of your medical record.

We may not accommodate a request to change information if we believe the change would violate any law or legal requirement, cause the information to be incorrect, or conflict with our obligation to maintain accurate and complete medical records.

Please note that we are required by law to retain certain medical and billing records for a defined period, and we may be unable to delete records subject to those retention requirements.

TEXAS PRIVACY RIGHTS

This section supplements the rest of this Policy and applies to residents of the State of Texas under the Texas Data Privacy and Security Act (TDPSA).

Subject to the exemptions in that law — including for protected health information governed by HIPAA — Texas residents have the right to:

- confirm whether we are processing their personal data and access that data;

- correct inaccuracies in their personal data;

- request deletion of their personal data;

- obtain a portable copy of their personal data; and

- opt out of the processing of their personal data for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects.

We do not sell personal data, do not process personal data for targeted advertising, and do not engage in profiling of the kind described above.

To exercise these rights, contact us at [email protected] or 972-698-5824. We will respond within 45 days of receipt, and may extend that period by an additional 45 days where reasonably necessary, with notice to you. If we decline your request, you may appeal by contacting us at the same address; we will inform you in writing of any action taken or not taken within 60 days of receipt of the appeal, and if the appeal is denied you may submit a complaint to the Texas Attorney General.

CALIFORNIA PRIVACY RIGHTS

This section supplements the rest of this Policy and applies to consumers residing in California under the California Consumer Privacy Act of 2018 (the "CCPA"), as amended by the California Privacy Rights Act (the "CPRA"). For such consumers, these provisions supersede any conflicting provisions in this Policy.

Categories of personal information collected. We have collected the following categories of personal information: identifiers, commercial information, and internet information. We also collect health information, which is treated as sensitive personal information and is used solely to provide and administer your care. We will not collect additional categories of personal information without notifying you.

Sources. We collect personal information directly from you when you submit forms or communicate with us, automatically when you navigate the Website, and from third parties involved in your care or payment.

Purposes. We use personal information for the purposes described in the "How We Use Your Information" section. We do not retain personal information for longer than is reasonably necessary for those purposes and any applicable legal retention requirement.

Sales and sharing. Under the CCPA/CPRA, a "sale" means disclosing personal information to a third party for monetary or other valuable consideration, and "sharing" means disclosing personal information to a third party for cross-context behavioral advertising. We do not sell or share your personal information. Disclosures to service providers and contractors under written contracts that meet CPRA requirements do not constitute a sale or sharing.

Sensitive personal information. We do not use or disclose sensitive personal information for purposes other than those permitted under the CPRA without offering you the right to limit such use.

Your rights. California consumers have the right to know and access their personal information; the right to know what personal information is sold or shared and to whom (not applicable here, as we do neither); the right to request deletion; the right to correct inaccurate personal information; the right to opt out of the sale or sharing of personal information and to limit the use of sensitive personal information; and the right of no retaliation for exercising these rights.

How to exercise your rights. Submit a verifiable request by contacting us at [email protected] or 972-698-5824. Your request must provide sufficient information for us to reasonably verify that you are the person about whom we collected personal information, or an authorized representative, and must describe your request with sufficient detail for us to evaluate and respond to it. We will not respond to a request if we are unable to verify your identity. Making a request does not require you to create an account. You may submit a maximum of two requests over any 12-month period.

Timing. We will confirm receipt within 10 days and respond within 45 days of receipt. Should we need more time, we will explain why and how much more time we need; we may take up to 90 days in total. Our disclosures will cover the preceding 12-month period. If we deny your request, we will explain the reasons. We do not charge a fee unless a request is manifestly unfounded or excessive.

Note that medical information governed by HIPAA and the California Confidentiality of Medical Information Act is exempt from certain CCPA provisions and is handled under those laws instead.

VIRGINIA PRIVACY RIGHTS

This section supplements the rest of this Policy and applies to consumers residing in the Commonwealth of Virginia under the Virginia Consumer Data Protection Act (the "VCDPA").

Categories of personal data collected. We have collected the following categories of personal data: identifiers, commercial information, and internet information. Health data we hold is generally exempt from the VCDPA as protected health information under HIPAA.

Why we process your personal data. For the purposes described in the "How We Use Your Information" section. We will not process your information for unexpected purposes, or for purposes incompatible with those originally disclosed, without your consent. You may freely give, deny, or withdraw such consent at any time using the contact details in this document.

Targeted advertising and sale. We do not process personal data for targeted advertising and we do not sell personal data.

Your rights. Virginia consumers have the right to confirm whether we are processing their personal data and to access it; to correct inaccuracies; to request deletion; to obtain a portable copy; to opt out of targeted advertising, sale, or profiling; and to be free from discrimination for exercising these rights.

How to exercise your rights. Contact us at [email protected] or 972-698-5824. We need to be able to verify your identity in order to respond, and may request additional information reasonably necessary to authenticate you and your request. We will respond without undue delay and at the latest within 45 days of receipt, with a possible 45-day extension on notice to you. If we deny your request, we will explain why, and you may appeal by contacting us; within 60 days of receipt of the appeal we will inform you in writing of any action taken or not taken, including our reasons. If the appeal is denied, you may contact the Virginia Attorney General to submit a complaint. We do not charge a fee for up to two requests per year.

HOW WE PROTECT YOUR INFORMATION

We take reasonable precautions to secure your personal information. We have implemented technical, physical, and administrative security measures designed to reduce the risk of loss, misuse, unauthorized access, disclosure, or modification of your information, consistent with the HIPAA Security Rule where applicable. All information you provide to us through the Website is transmitted over encrypted connections and stored on secure servers.

The safety and security of your information also depend on you. Where you have chosen a password for access to certain parts of the Services, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

While we have employed security technologies and procedures to assist in safeguarding your personal information, no system or network can be guaranteed to be completely secure. Unauthorized entry or use, hardware or software failure, and other factors may compromise the security of user information at any time. Any transmission of personal information is at your own risk.

CHILDREN'S PRIVACY

The Website is not directed to children and we do not knowingly collect personal information from anyone under 18 through the Website. Where we provide clinical services to a minor, information is provided by and shared with a parent or legal guardian in accordance with HIPAA and applicable Texas law.

TERMS OF USE

If you choose to visit the Services, your visit and any dispute over privacy are subject to this Policy and our Terms of Use (https://ladairmentalhealthpractice.com/terms), including limitations on damages, resolution of disputes, and application of the law of the State of Texas.

CONTACT US

We welcome your questions, comments, and concerns about privacy. You can contact us at:

LADAIR INTEGRATED HEALTH PLLC

4413 Padre Court, Fort Worth, TX 76244

Phone: 972-698-5824

Email: [email protected]

________________________________________