1. Introduction

This Privacy Policy describes how The Healing Ring, A Professional Corporation (the "Practice"), and The Healing Ring, LLC, which provides administrative and non-clinical business support services to the Practice ("Manager") (together, "The Healing Ring," "we," "us," or "our"), collect, use, and share information when you visit www.myhealingring.com (the "Site"), submit a request through the Site, create an account, or otherwise communicate with us through the Site. It also explains the choices you have about your information.

By using the Site, you agree to the collection, use, and sharing of your information as described in this Privacy Policy. If you do not agree, please do not use the Site. This Privacy Policy is incorporated into our Terms and Conditions, which also govern your use of the Site.

2. Scope; Medical Information

This Privacy Policy applies to information we collect through the Site. It does not apply to the medical information we create or receive when you become a patient of the Practice. That information is governed by the Practice's Notice of Privacy Practices, by the California Confidentiality of Medical Information Act, Civil Code Section 56 and following ("CMIA"), and, to the extent applicable, by the Health Insurance Portability and Accountability Act ("HIPAA"). The Practice's Notice of Privacy Practices is provided to patients at intake and is available on request by contacting us at the address in Section 15.

The Site's contact form is a general inquiry tool. It is not a secure channel for medical information and is not intended to collect your health information. Please do not include diagnoses, symptoms, medications, test results, or other sensitive health details in the contact form or in an email to us. If you nonetheless include health information in a message to us, we will treat it as confidential medical information to the extent required by CMIA and other applicable law, use it only to respond to your inquiry and, if you become a patient, to provide your care, and limit access to it to personnel who need it. Please be aware that email and standard web forms may be transmitted over connections that are not fully secure.

3. Information We Collect

A. Information you provide to us. We collect information that you choose to give us, which may include:

• your name, email address, telephone number, and the contents of any message you send us through the contact form or by email;
• your username, email address, and password when you register for a Patient Support account, and any information you enter while using that area of the Site;
• your communication preferences, including any consent you give to receive text messages or marketing emails; and
• any other information you provide when you communicate with us.

B. Information collected automatically. When you visit the Site, we and our service providers automatically collect certain information from your browser or device, which may include:

• your IP address and the approximate geographic location derived from it;
• your browser type and version, operating system, device type, screen resolution, and language settings;
• the pages you view, the links you click, the date and time of your visit, how long you stay on each page, and the website you came from or go to next; and
• information collected through cookies, pixels, and similar technologies, as described in Section 5.

C. Information from other sources. We may receive information about you from service providers that help us operate the Site and communicate with you; from social media platforms when you interact with our pages or content on those platforms, subject to your settings and the platform's privacy policy; and from other third parties as permitted by law.

4. How We Use Information

We use the information we collect to:

• respond to your inquiries and consultation requests and communicate with you;
• schedule and confirm appointments and send related reminders;
• create and administer Patient Support accounts and provide the resources available in that area of the Site;
• send you information about our services, events, and promotions where permitted by law and consistent with your choices;
• operate, maintain, secure, and improve the Site, including by understanding how visitors use it;
• detect, prevent, and respond to fraud, abuse, security incidents, and other harmful activity;
• comply with our legal obligations and enforce our Terms and Conditions; and
• fulfill any other purpose described to you at the time of collection or to which you consent.

5. Cookies, Analytics, and Similar Technologies

We and our service providers use cookies, web beacons, and similar technologies to operate the Site and to understand how it is used. Cookies are small text files stored on your device by your browser. We use the following types of cookies and technologies:

• Strictly necessary cookies, which are required for the Site to function, such as cookies that keep you logged in to a Patient Support account and that help protect the Site against security threats.
• Analytics cookies, such as those used by Google Analytics, which help us understand how visitors reach and use the Site. Google Analytics collects information such as your IP address, device and browser information, and the pages you visit, and provides us with aggregated reports. You can learn more about how Google uses data from sites that use its services at policies.google.com/technologies/partner-sites, and you can opt out of Google Analytics by installing the browser add-on available at tools.google.com/dlpage/gaoptout.
• Functionality cookies set by embedded content, such as video players and social media features, which may collect information about your interaction with that content in accordance with the provider's own privacy policy.

We do not currently use advertising cookies or pixels that track your activity across other websites for the purpose of targeted advertising. If that changes, we will update this Privacy Policy and provide any notices and choices required by law.

You can control cookies through your browser settings, including by deleting existing cookies and blocking new ones. If you disable cookies, some features of the Site may not work properly.

Do Not Track and opt-out preference signals. The Site does not currently respond to "Do Not Track" browser signals, for which no uniform industry standard has been adopted. Because we do not sell personal information and do not share it for cross-context behavioral advertising, there is currently no sale or sharing of personal information for you to opt out of. If that changes, we will honor opt-out preference signals, such as the Global Privacy Control, as required by law.

6. How We Share Information

We do not sell your personal information, and we do not share it with third parties for their own direct marketing purposes or for cross-context behavioral advertising. We share information only in the following circumstances:

• Between the Practice and Manager. The Practice and Manager share information as needed to operate the Site, respond to inquiries, schedule and coordinate services, and administer the business of the Practice, consistent with this Privacy Policy and with the Practice's privacy obligations. Manager does not use patient information for any purpose other than supporting the Practice.
• Service providers. We share information with vendors that perform services on our behalf, such as website hosting and development, information technology and security, analytics, email and text message delivery, scheduling, payment processing, and customer support. These vendors are permitted to use your information only to perform services for us and are required to protect it. Where a vendor will receive protected health information, we enter into a business associate agreement to the extent required by HIPAA.
• Legal requirements and safety. We may disclose information when we believe in good faith that disclosure is required by law, subpoena, court order, or governmental request; to establish or exercise our legal rights or to defend against legal claims; or to protect the rights, property, or safety of The Healing Ring, our patients, our personnel, or others.
• Business transfers. If we are involved in a merger, acquisition, reorganization, financing, or sale of all or part of our business or assets, information may be transferred as part of that transaction, subject to applicable law, to the restrictions in this Privacy Policy, and to the Practice's Notice of Privacy Practices.
• With your consent. We may share information for other purposes with your consent or at your direction.

We may also share aggregated or de-identified information that cannot reasonably be used to identify you.

7. Email and Text Message Communications

If you provide your email address or telephone number, we may contact you about your inquiry, your appointments, and your care. We send marketing emails only where permitted by law, and every marketing email we send includes an unsubscribe link. We send marketing text messages only with your prior express written consent. Consent to receive marketing text messages is not a condition of purchasing any goods or services. Message frequency varies, and message and data rates may apply. You can reply STOP at any time to opt out of text messages, or reply HELP for assistance. We do not share your mobile telephone number or your text-messaging consent with third parties or affiliates for their own marketing purposes.

8. Your Choices and Rights

Communications. You may unsubscribe from marketing emails by using the link in any marketing message, and you may opt out of text messages by replying STOP. You may continue to receive non-marketing messages about your appointments and care.

Accounts. You may review and update your Patient Support account information by logging in to your account, and you may ask us to deactivate or delete your account by contacting us.

Cookies and analytics. See Section 5 for how to manage cookies and opt out of Google Analytics.

California residents. To the extent the California Consumer Privacy Act, as amended by the California Privacy Rights Act (the "CCPA"), applies to us, California residents have the right to:

• request to know the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected it, the purposes for which we collected it, and the categories of third parties with whom we have shared it;
• request that we delete personal information we have collected from you, subject to certain exceptions;
• request that we correct inaccurate personal information we maintain about you;
• opt out of the sale or sharing of your personal information (we do not sell or share personal information as those terms are defined under California law); and
• not be discriminated against for exercising any of these rights.

Medical information that is governed by CMIA or HIPAA is exempt from these rights and is instead subject to those laws and to the Practice's Notice of Privacy Practices. To exercise any of the rights described above, contact us at info@myhealingring.com or (310) 954-2010. We will need to verify your identity before responding to your request, which may include matching information you provide with information we already have. You may designate an authorized agent to make a request on your behalf; we may require proof of the agent's authority and verification of your identity. We will respond within the time required by law.

California "Shine the Light" law. Under California Civil Code Section 1798.83, California residents may ask businesses about personal information shared with third parties for the third parties' direct marketing purposes. We do not disclose personal information to third parties for their direct marketing purposes.

9. Data Retention

We retain information collected through the Site for as long as needed to fulfill the purposes described in this Privacy Policy; to comply with our legal, regulatory, and professional obligations, including medical record retention requirements where applicable; to resolve disputes; and to enforce our agreements. Contact form submissions and account information are generally retained for as long as you have an active relationship with us and for a reasonable period afterward. Analytics data is retained in accordance with the settings of our analytics service providers.

10. Security

We use reasonable administrative, technical, and physical safeguards designed to protect the information we collect through the Site, including secure (HTTPS) connections, access controls, and contractual protections with our service providers. However, no website, internet transmission, or storage system can be guaranteed to be completely secure, and we cannot guarantee the security of information you send to us over the internet. Please use caution when sending sensitive information by email or through online forms, and contact us if you prefer to communicate in a different way.

11. Children's Privacy

The Site is not directed to children under 13, and we do not knowingly collect personal information online from children under 13. If you believe that a child under 13 has provided personal information through the Site, please contact us so that we can delete it. Visitors under 18 should use the Site only with the involvement of a parent or legal guardian.

12. Third-Party Websites and Social Media

The Site may contain links to third-party websites and services, including social media platforms such as Facebook, Instagram, and LinkedIn, video hosting services, scheduling or payment tools, and product vendors. We are not responsible for the privacy practices of those third parties, and this Privacy Policy does not apply to information they collect. We encourage you to review their privacy policies. If you interact with us on social media, the platform may collect information about you in accordance with its own policies, and anything you post publicly may be seen by others.

13. Visitors Outside California and the United States

The Site is operated from California and is intended for individuals located in the United States. If you access the Site from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States, where privacy laws may differ from those of your location.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will post the revised Privacy Policy on the Site and update the Effective Date at the top of this page. If we make material changes, we will provide any additional notice required by law, such as a notice on the Site's home page or an email to the address associated with your account. Your continued use of the Site after a revised Privacy Policy is posted means that you accept the changes.

15. Contact Us

If you have questions or concerns about this Privacy Policy or our privacy practices, or if you wish to exercise any of your rights, please contact us:

The Healing Ring

Attn: Privacy Officer

501 E. Hardy Street, Suite 160

Inglewood, California 90301

Email: info@myhealingring.com

Phone: (310) 954-2010

Medical services are provided by The Healing Ring, A Professional Corporation. Administrative and business services are provided by The Healing Ring, LLC.