1. Introduction

Welcome to Hormone Balance Centers. This Privacy Policy explains how Hormone Balance Centers (“Company,” “we,” “us,” or “our”) collects, uses, discloses, and protects your information when you visit our website www.hormonebalancecenters.com (the “Website”), including any other media form, media channel, mobile website, or mobile application related or connected thereto. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.

Your privacy and the security of your Protected Health Information (PHI) are critically important to us. We are committed to complying with the Health Insurance Portability and Accountability Act (HIPAA) and applicable state laws.

2. Information We Collect

We may collect information about you in a variety of ways. The information we may collect on the Website includes:

• Personal Data: Personally identifiable information, such as your name, shipping address, email address, telephone number, and demographic information (such as your age, gender, hometown, and interests) that you voluntarily give to us when you request information, fill out forms (like the consultation request form potentially processed via SimplePractice), or when you otherwise interact with the Website.

• Protected Health Information (PHI): Information related to your past, present, or future physical or mental health condition, the provision of health care to you, or payment for that health care, collected through secure means such as our patient portal (SimplePractice) during consultations or intake processes. The collection and use of PHI are strictly governed by HIPAA.

• Derivative Data: Information our servers automatically collect when you access the Website, such as your IP address, browser type, operating system, access times, and the pages you have viewed directly before and after accessing the Website.

• Data From Third Parties: We utilize SimplePractice for our patient portal, scheduling, and electronic health records. Information you provide directly to SimplePractice is governed by their Privacy Policy and Terms of Service, in addition to this policy and HIPAA regulations.

3. How We Use Your Information

Having accurate information permits us to provide you with a smooth, efficient, and customized experience. Specifically, we may use information collected about you via the Website or our patient portal to:

• Schedule and manage appointments.

• Provide telehealth consultations and treatment.

• Process payments and manage billing.

• Create and manage your account within our secure patient portal (SimplePractice).

• Communicate with you regarding your care, appointments, or inquiries.

• Send you requested information about our services.

• Comply with legal and regulatory requirements, including HIPAA.

• Monitor and analyze usage and trends to improve your experience with the Website.

4. How We Share Your Information

We do not sell your personal information or PHI. We may share information we have collected about you in certain situations:

• By Law or to Protect Rights: If we believe the release of information about you is necessary to respond to legal process, investigate or remedy potential violations of our policies, or protect the rights, property, and safety of others, we may share your information as permitted or required by any applicable law, rule, or regulation, including HIPAA.

• Third-Party Service Providers: We share necessary information with third-party vendors who perform services for us or on our behalf, requiring access to such information to do that work. This primarily includes SimplePractice (our telehealth and EHR platform) and potentially lab testing facilities or compounding pharmacies involved in your care. These providers are bound by contractual agreements (Business Associate Agreements under HIPAA where applicable) to maintain the confidentiality and security of your information.

• With Your Consent: We may disclose your personal information or PHI for any other purpose with your explicit consent.

5. Data Security

We use administrative, technical, and physical security measures designed to protect your personal information and PHI. This includes utilizing HIPAA-compliant platforms like SimplePractice, employing encryption for data transmission and storage where appropriate, and limiting access to your information to authorized personnel.

While we have taken reasonable steps to secure the information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against