This policy applies to this website, our contact and inquiry forms, our secure Healthie patient portal, our telehealth visits, and any email or text communication you exchange with our clinical team. Where a third-party partner such as Healthie, Fullscript, Quest Diagnostics or Labcorp handles your information, their own privacy practices also apply to that activity.

Protected health information created or maintained in the course of treatment is additionally governed by our HIPAA Notice of Privacy Practices.

• Information you provide. Name, contact details, date of birth, appointment preferences, the content of inquiry forms, health history, symptoms, medications and lifestyle information you share during intake or visits.
• Clinical information. Laboratory results, diagnostic reports, prescriptions, clinical notes and care plans generated through your treatment.
• Payment information. Card, HSA or FSA details are entered directly into our encrypted payment processor. We do not store full card numbers on our systems.
• Technical information. Device type, browser, approximate region and pages viewed, collected to keep the site secure and functioning properly.

• To evaluate, diagnose, treat and monitor your health.
• To coordinate laboratory testing, compounded prescriptions and supplement recommendations.
• To schedule appointments, send reminders and respond to your inquiries.
• To process payments and maintain accurate financial records.
• To meet legal, regulatory, licensure and professional recordkeeping obligations.
• To send practice updates or educational material — only where you have opted in, and you may withdraw at any time.

We never sell your personal or health information. We share it only as needed to deliver your care or as required by law — with licensed 503A compounding pharmacies fulfilling your prescriptions, with laboratory partners performing your testing, with our HIPAA-compliant technology vendors operating under business associate agreements, and with regulators or courts where legally compelled.

Because we are a cash-pay practice, we do not transmit your clinical information to health insurance carriers.

Our website may use essential cookies for security and session management, and limited analytics to understand which pages patients find useful. These tools are not used to identify you personally or to build advertising profiles from health information. You can block or delete cookies through your browser settings; essential functions may behave differently if you do.

We use encrypted transmission, access controls limited to authorized clinical personnel, HIPAA-compliant platforms for telehealth and messaging, and routine review of our vendors' security posture. No system can be guaranteed completely secure, so we also ask patients to use strong, unique portal passwords and to avoid sending sensitive medical detail through ordinary email or website forms.

Clinical records are retained for the period required by Texas law and professional standards. Non-clinical inquiries are retained only as long as needed to respond and to maintain a reasonable record of communication, then securely disposed of.

• Request access to, or a copy of, the records we maintain about you.
• Request correction of information you believe is inaccurate or incomplete.
• Request restrictions on certain uses or disclosures.
• Ask how your information has been disclosed outside of treatment and payment.
• Unsubscribe from non-clinical email communication at any time.

Our services are intended for adults. We do not knowingly collect information from anyone under 18 through this website. If you believe a minor has submitted information, contact us and we will remove it.

We may update this policy as our practice, technology partners or legal obligations change. The revision date at the top of this page always reflects the current version, and material changes will be communicated through the patient portal.