Website Privacy Policy

How We Use Information

We may use information to:

• Respond to inquiries
• Schedule or manage appointments
• Send appointment confirmations and reminders
• Create or administer accounts
• Provide requested information
• Process payments
• Communicate about services
• Coordinate requested services
• Improve the website and user experience
• Understand website traffic
• Detect errors, misuse, or security threats
• Maintain business and transaction records
• Meet legal, licensing, tax, accounting, and regulatory obligations
• Protect the rights and safety of Aevum, its patients, staff, and others
• Send administrative or transactional communications
• Send marketing communications when authorized; and
• Fulfill another purpose disclosed when information is collected

Protected health information will be used and disclosed as described in Aevum’s Notice of Privacy Practices and applicable law.

How We May Share Information

We may share information in the following circumstances.

Service Providers

We may share information with vendors that support our operations, such as:

• Webflow or other website-hosting providers
• Jane App or other appointment-scheduling systems
• Patient-portal providers
• Payment processors
• Email and text-message providers
• Telephone providers
• Cloud-storage providers
• Analytics providers
• Cybersecurity vendors
• Accounting professionals
• Attorneys; and
• Other operational service providers

These providers may access information only as reasonably necessary to perform services on our behalf.

Healthcare-Related Services

When legally permitted and appropriate, information may be shared with:

• Aevum clinicians and staff
• Laboratories
• Pharmacies
• Medical consultants; and
• Other parties involved in arranging or providing requested care

Protected health information is subject to additional requirements under applicable privacy law and Aevum’s Notice of Privacy Practices.

Legal and Safety Reasons

We may disclose information when reasonably necessary to:

• Comply with applicable law
• Respond to a subpoena, court order, or lawful government request
• Prevent fraud or unlawful conduct
• Investigate a security incident
• Protect the safety or rights of Aevum, its patients, employees, or others
• Enforce our agreements; or
• Establish, exercise, or defend legal claims

Business Transactions

Information may be transferred as part of a merger, acquisition, financing, affiliation, sale of assets, restructuring, or similar business transaction, subject to applicable privacy and confidentiality requirements.

With Your Authorization

We may share information when you request, direct, authorize, or consent to the disclosure.

Deidentified Information

We may use or disclose information that has been aggregated or deidentified so that it does not reasonably identify you.

Cookies and Similar Technologies

The website may use cookies, pixels, tags, scripts, local storage, and similar technologies.

These technologies may be used to:

• Operate website features
• Maintain security
• Remember preferences
• Measure website traffic
• Identify technical problems
• Understand how visitors use the website; and
• Measure advertising performance where permitted

You may adjust your browser settings to block or delete cookies. Some website features may not work correctly if cookies are disabled.

Analytics and Advertising

Aevum may use analytics or advertising services such as:

• Google Analytics
• Google Ads
• Meta advertising tools
• Microsoft Clarity; or
• Similar website-measurement services

These technologies may collect device, browser, cookie, and website-activity information.

Aevum does not intend to use website tracking technologies to disclose protected health information for unauthorized advertising purposes.

Do not enter sensitive medical information into a general website form or public advertising form unless it is clearly identified as secure and intended for that purpose.

Appointment and Patient-Portal Platforms

Our website may link to or integrate with independent platforms used for:

• Appointment scheduling
• Patient registration
• Medical forms
• Secure messaging
• Payments; and
• Patient-portal access

When you use an independent platform, that provider’s privacy policy and terms may also apply.

Where a vendor handles protected health information on Aevum’s behalf and qualifies as a HIPAA business associate, Aevum will maintain the agreements required by applicable law.

Payment Information

Payments may be processed by an independent payment processor.

The processor may collect your full payment-card information directly. Aevum may receive limited information such as:

• Card type
• Last four digits of the card
• Billing name
• Transaction amount
• Payment status; and
• Transaction date

Payment information is also subject to the payment processor’s privacy policy and terms.

Email and Text Messages

Email and standard text messages may not be completely secure. Information sent through these methods could be intercepted, misdirected, or viewed by someone with access to your account or device.

We may send:

• Appointment confirmations
• Appointment reminders
• Forms
• Billing notices
• Responses to inquiries
• Patient-service information
• Administrative notices; and
• Marketing messages when authorized

You may opt out of promotional emails by using the unsubscribe link. You may opt out of promotional texts by following the instructions in the message.

Opting out of promotional communications does not prevent us from sending appointment, billing, safety, or other necessary messages.

Message and data rates may apply.

Sale of Personal Information

Aevum does not sell personal information for money.

If Aevum engages in an activity that applicable law defines as a sale of personal data or use of personal data for targeted advertising, we will provide any legally required notice and opt-out method.

Data Retention

We retain information for as long as reasonably necessary to:

• Fulfill the purpose for which it was collected
• Provide requested services
• Maintain medical, financial, and business records
• Meet legal and regulatory obligations
• Resolve disputes
• Prevent fraud; and
• Enforce agreements

Medical records may be subject to retention requirements that differ from those governing ordinary website information.

Texas Privacy Rights

Texas residents may have rights under the Texas Data Privacy and Security Act, subject to its scope, exceptions, and exemptions.

Certain healthcare entities and certain health information regulated by HIPAA or other health-privacy laws may be exempt from portions of general consumer privacy laws.

Eligible Texas residents may have rights relating to access, correction, deletion, data portability, and certain opt-outs.

Privacy requests may be submitted using the contact information above.

Children’s Privacy

This website is not directed to children younger than 13, and we do not knowingly collect personal information online directly from children younger than 13 without appropriate authorization.

When services are provided to minors, parental or legal-guardian involvement and consent may be required.

Contact us if you believe a child has improperly submitted information through the website.

Social Media

Information posted through a third-party social-media platform is subject to that platform’s privacy practices.

Do not post confidential medical information in a public comment or public social-media message.

Social-media communications are not intended for emergencies, diagnosis, or individualized medical advice.

Third-Party Links

The website may contain links to independent websites, including pharmacies, laboratories, booking platforms, maps, payment services, social-media platforms, and educational resources.

This Privacy Policy does not govern independent third-party websites. Review their policies before providing personal information.

Visitors From Outside Texas

Aevum is located in Texas and primarily provides medical services in jurisdictions where its clinicians are legally authorized to practice.

Accessing the website from another state or country does not mean that Aevum offers medical services in that jurisdiction.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, services, or legal obligations.

The revised policy will be posted on the website with an updated effective date.

You will not be retaliated against for submitting a good-faith privacy concern.