Privacy Policy

1. Scope

This Privacy Policy applies to information collected through the Site, including through contact forms, appointment-request tools, telehealth inquiry pages, newsletter signup tools, payment pages, patient resources, and career pages. It does not replace Zyra's full HIPAA Notice of Privacy Practices for patients.

2. Information We Collect

3. How We Use Information

We may use information collected through the Site to:

• respond to inquiries
• schedule or attempt to schedule appointments
• verify insurance or benefits
• communicate with you about services, intake, forms, billing, and operations
• provide telehealth, portal, payment, newsletter, or recruiting functionality
• maintain, secure, debug, and improve the Site
• detect fraud, abuse, or security incidents
• comply with legal, regulatory, professional, and accreditation obligations
• establish, exercise, or defend legal claims
• carry out health care operations as permitted by applicable law

4. HIPAA and Health Information

When information submitted through the Site constitutes protected health information ("PHI") maintained by Zyra as a covered entity, Zyra will handle that information in accordance with applicable HIPAA requirements and Zyra's Notice of Privacy Practices. Not all information collected through the Site is necessarily PHI in every context.

5. How We Disclose Information

We may disclose information:

• to employees and clinicians who need it to respond to your inquiry or provide services
• to service providers that host, maintain, process, secure, transmit, or store Site data
• to business associates and their subcontractors where permitted under HIPAA and appropriate agreements are in place
• to insurers, payors, referral sources, pharmacies, laboratories, or other health care providers as permitted by law and applicable privacy notices
• in connection with payment processing, portal tools, telehealth platforms, email delivery, texting services, spam filtering, analytics or diagnostic tools, recruiting platforms, and cloud storage
• if required by law, subpoena, court order, investigation, or regulatory request
• to protect the rights, safety, and security of Zyra, our users, patients, clinicians, or the public
• in connection with a merger, acquisition, restructuring, financing, or sale of assets, subject to applicable legal requirements

6. Business Associates and Vendors

Some third parties that receive PHI on Zyra's behalf may act as business associates under HIPAA. Where required, Zyra will seek to maintain appropriate business associate agreements. Other vendors may process non-PHI website data under contractual confidentiality and security restrictions.

7. Email, Text, and Call Communications

If you provide contact information, Zyra may communicate with you by email, phone, or text regarding your inquiry, scheduling, insurance, services, forms, billing, and related matters. Message and data rates may apply to text messages depending on your carrier plan. You may opt out of non-essential text communications by replying STOP where available or by contacting Zyra. Opting out of certain communications may affect Zyra's ability to respond to or manage your request.

8. Data Retention

Zyra retains information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to respond to inquiries, maintain patient and business records, comply with legal obligations, resolve disputes, enforce agreements, and protect against fraud and abuse. Retention periods may vary depending on the nature of the information and whether you become a patient.

9. Security

Zyra uses administrative, technical, and physical safeguards designed to protect information appropriate to the nature of the information and applicable law. No website, email system, mobile communication channel, or internet transmission is completely secure, and Zyra cannot guarantee absolute security.

10. Your Choices

You may contact Zyra to update your contact information or request that Zyra stop certain communications. Depending on the nature of the information and applicable law, Zyra may retain certain records despite a deletion request. If you become a patient, additional rights may apply under HIPAA and Zyra's Notice of Privacy Practices.

11. Third-Party Sites and Embedded Services

The Site may contain links to third-party websites, maps, payment pages, patient portals, telehealth platforms, or job application services. Zyra is not responsible for the privacy or security practices of third parties, and you should review their separate notices.

12. Children

The Site is intended for adults only and is not directed to children under 13 or minors under 18. Zyra does not knowingly collect personal information through the Site from children under 13.

13. Changes to This Privacy Policy

Zyra may update this Privacy Policy from time to time. If we make material changes, we will post the revised policy with an updated effective date. Continued use of the Site after changes become effective constitutes acceptance of the revised policy.

14. Contact