Privacy Policy

Last Updated: April 20, 2026
Effective Date: [TO BE SET BY ATTORNEY]

Elevate BioWellness (“Elevate BioWellness,” “we,” “our,” or “us“) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect information about you when you visit our website at elevatebiowellness.com (the “Site”), visit our facility at 25115 Gosling Road, Suite 102, Spring, TX 77389, or otherwise use our services (collectively, the “Services”).

Please read this Policy carefully. By using the Services, you agree to the collection and use of information as described in this Policy. If you do not agree, please do not use the Services.

1. Scope of This Policy

This Policy applies to:

• Visitors to our Site and online forms;
• Prospective and current clients/members of our Spring, Texas facility;
• Recipients of our marketing communications (email, SMS); and
• Individuals who contact us by phone, email, or in person.

Certain health information collected in connection with wellness services that fall under the federal Health Insurance Portability and Accountability Act (“HIPAA“) is also governed by our separate Notice of Privacy Practices (provided at intake). Where this Policy and the Notice of Privacy Practices conflict with respect to Protected Health Information (“PHI“), the Notice of Privacy Practices controls.

2. Information We Collect

2.1 Information You Provide Directly

• Contact information: name, email address, phone number, postal address, emergency contact.
• Account and booking information: appointment history, membership status, preferences.
• Health and intake information: medical history, current medications, allergies, conditions, reasons for visit, consent forms, and information collected during service delivery. This category may include PHI as defined under HIPAA.
• Payment information: credit/debit card, billing address. Card data is processed by a PCI-DSS-compliant third-party processor; we do not store full card numbers on our systems.
• Communications: messages you send us via email, SMS, web forms, or chat.
• Marketing preferences: opt-in status for email and SMS.

2.2 Information Collected Automatically

• Device and usage data: IP address, browser type, device type, operating system, referring URLs, pages viewed, timestamps, and clickstream data.
• Cookies and similar technologies: see Section 7.
• Analytics: Google Analytics, Meta Pixel, and similar tools measure Site performance and advertising effectiveness.

2.3 Information from Third Parties

• Referring providers (with your authorization where required).
• Advertising and analytics partners (e.g., Google Ads, Meta).
• CRM and booking platforms we use to operate the Services (e.g., GoHighLevel).

3. How We Use Information

We use the information we collect to:

• Provide, schedule, and deliver the Services;
• Process payments and administer memberships;
• Respond to inquiries and provide customer support;
• Send appointment reminders, service updates, and transactional messages;
• Send marketing communications (only with your consent where required);
• Personalize your experience and recommend services;
• Improve, secure, and troubleshoot the Site and Services;
• Comply with legal obligations, including health, safety, tax, and accounting requirements;
• Establish, exercise, or defend legal claims; and
• Any other purpose disclosed to you at the time of collection.

4. HIPAA and Protected Health Information

To the extent Elevate BioWellness functions as a “covered entity” or “business associate” under HIPAA, we handle PHI in accordance with HIPAA’s Privacy, Security, and Breach Notification Rules (45 C.F.R. Parts 160 and 164) and applicable Texas law, including the Texas Medical Records Privacy Act (Tex. Health & Safety Code Ch. 181, “HB 300“).

Key points:

• We maintain administrative, physical, and technical safeguards to protect PHI.
• We use and disclose PHI for treatment, payment, and health care operations as permitted by law.
• We do not sell PHI.
• We do not use or disclose PHI for marketing without your written authorization, except as permitted by 45 C.F.R. § 164.508.
• You have rights regarding your PHI, including the right to inspect and copy, request amendment, request an accounting of disclosures, and request restrictions on use or disclosure. These rights are described in full in our Notice of Privacy Practices, available at our facility and upon request.
• In the event of a breach affecting PHI, we will notify affected individuals as required by 45 C.F.R. §§ 164.400–414 and Tex. Bus. & Com. Code § 521.053.

To exercise HIPAA rights, contact our Privacy Officer (Section 14). A separate written authorization is required for uses and disclosures not permitted by HIPAA.

5. How We Share Information

We may share information:

• With service providers that support our operations (hosting, CRM, payment processing, SMS/email delivery, analytics) under written agreements requiring confidentiality and, where applicable, HIPAA Business Associate Agreements (“BAAs”).
• With your consent or at your direction (for example, when you ask us to share information with a referring provider).
• For legal reasons, including to comply with subpoenas, court orders, or other legal process; to protect our rights, property, or safety, or that of our clients, staff, or the public; and to investigate fraud or violations of our Terms.
• In a business transfer, such as a merger, acquisition, financing, or sale of assets, subject to the recipient’s obligation to honor this Policy and applicable law.

We do not sell personal information, and we do not share PHI with advertising networks.

6. Text Messages (SMS) and Email

6.1 SMS Program Overview

Elevate BioWellness operates an SMS program for customer communications. By opting in, you consent to receive automated text messages from Elevate BioWellness at the mobile number you provide.

6.2 Types of SMS Messages You May Receive

• Transactional / informational: appointment confirmations, reminders, reschedules, post-visit follow-ups, service updates.
• Account and membership: billing alerts, membership renewal notices, account changes.
• Marketing and promotional: special offers, new services, seasonal promotions, reactivation outreach (only with your express consent).
• Customer care: responses to questions and customer support follow-up.

6.3 Message Frequency

Message frequency varies by message type and your interaction with our Services. Most clients receive 2-8 messages per month across all categories. You can opt out at any time.

6.4 Message and Data Rates

Message and data rates may apply. The cost of any text messages or data usage is determined by your wireless carrier and is your responsibility. Elevate BioWellness does not charge a fee to receive SMS, but standard messaging rates from your carrier apply.

6.5 How to Opt In

You may opt in to receive SMS from Elevate BioWellness by: (a) checking the SMS consent checkbox on a web form on our Site; (b) signing an in-store paper consent form; (c) verbally consenting at the time of booking and confirming via SMS reply; or (d) replying START, YES, or BOOK to one of our SMS messages. SMS consent is never a condition of purchasing any product or service.

6.6 How to Opt Out

You may opt out of any non-transactional SMS at any time by replying STOP, UNSUBSCRIBE, CANCEL, END, or QUIT to any message we send. We will send a final confirmation that you have been unsubscribed. After opt-out, you will no longer receive marketing SMS, although you may continue to receive transactional messages tied to existing appointments or membership obligations as required.

6.7 How to Get Help

Reply HELP or INFO to any of our SMS messages to receive contact information and assistance. You can also email support@elevatebiowellness.com or call (346) 331-4122 for help with our SMS program.

6.8 Mobile Information and Third-Party Sharing

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing related to SMS consent is limited to subcontractors and service providers (such as our SMS delivery platform and CRM) that support our messaging operations under written agreements requiring confidentiality. Mobile opt-in data and consent records are not sold, rented, or shared for the marketing purposes of any third party. This Section 6.8 specifically reaffirms the broader limitations described in Section 5 (“How We Share Information”) with respect to mobile phone numbers and SMS opt-in data.

6.9 Carrier Liability

Wireless carriers (including but not limited to AT&T, T-Mobile, Verizon, US Cellular, and their affiliates) are not liable for delayed or undelivered SMS messages. Elevate BioWellness uses commercially reasonable efforts to deliver SMS, but does not guarantee delivery, and is not responsible for issues caused by your carrier, device, or network conditions.

6.10 Age Restriction

You must be at least 18 years old to opt in to our SMS program. We do not knowingly accept SMS opt-in from minors. If we learn that we have collected SMS consent from a minor, we will remove the number from our SMS program promptly.

6.11 TCPA Compliance

Our SMS program is operated in compliance with the Telephone Consumer Protection Act (TCPA), CTIA Messaging Principles and Best Practices, and applicable carrier requirements. We obtain prior express written consent before sending any marketing or promotional SMS.

6.12 Email

You can opt out of marketing email at any time using the “unsubscribe” link in any marketing email, or by contacting us at support@elevatebiowellness.com. Transactional email tied to existing appointments or membership obligations may still be sent as required.

7. Cookies, Analytics, and Advertising

We use cookies, pixels, and similar technologies to operate the Site, measure performance, and deliver advertising. Categories include:

• Strictly necessary (required for the Site to function);
• Analytics (e.g., Google Analytics);
• Advertising (e.g., Google Ads, Meta Pixel); and
• Functional (remember preferences).

You can control cookies through your browser settings. Disabling cookies may affect Site functionality. We honor Global Privacy Control (“GPC”) signals where required by law.

8. Your Choices

• Access and update: you may request access to or correction of your contact information by emailing support@elevatebiowellness.com.
• Marketing opt-out: follow the unsubscribe instructions in any marketing communication, or contact us.
• SMS opt-out: reply STOP.
• Do Not Track: we do not currently respond to browser DNT signals.
• HIPAA rights: see Section 4 and the Notice of Privacy Practices.

9. Data Retention

We retain personal information for as long as necessary to provide the Services, comply with our legal obligations (including medical record retention requirements), resolve disputes, and enforce our agreements. Texas medical and health records are retained in accordance with applicable regulations. When information is no longer needed, we dispose of it securely.

10. Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. If you believe your information has been compromised, contact us immediately.

11. Children’s Privacy

The Site is not directed to children under 13, and we do not knowingly collect personal information from children under 13 online. Services for minors are provided only with parental or legal guardian consent in accordance with applicable law.

12. Out-of-State and International Visitors

The Services are operated from the United States. If you access the Services from outside the United States, you consent to the transfer and processing of your information in the United States, which may have different data protection laws than your jurisdiction.

13. Changes to This Policy

We may update this Policy from time to time. The “Last Updated” date reflects the most recent changes. Material changes will be communicated through the Site or by other reasonable means. Your continued use of the Services after the effective date of the updated Policy constitutes acceptance of the changes.

14. Contact Us / Privacy Officer

Questions, requests, or complaints about this Policy or our privacy practices (including HIPAA requests) should be directed to:

Elevate BioWellness – Privacy Officer
25115 Gosling Road, Suite 102
Spring, TX 77389
Email: support@elevatebiowellness.com
Phone: (346) 331-4122

You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights. We will not retaliate against you for filing a complaint.