Privacy Policy

1. Introduction

BrainRevive Clinics LLC ("Company", "we," "our," or "us") is committed to protecting your privacy and maintaining the confidentiality of your personal and protected health information ("PHI"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

Our registered office is located at 732 S 6th ST, STE N, Las Vegas, NV 89101, USA.

We are committed to compliance with the Health Insurance Portability and Accountability Act (HIPAA), the Health Information Technology for Economic and Clinical Health Act (HITECH), and other applicable federal and state privacy laws. This Privacy Policy should be read in conjunction with our Notice of Privacy Practices, which provides additional information about how we handle protected health information.

Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the site or use our services.

2. Definitions

For purposes of this Privacy Policy:

• "Personal Information" means information that identifies, relates to, describes, or could reasonably be linked with a particular individual or household.
• "Protected Health Information" or "PHI" means individually identifiable health information transmitted or maintained in any form or medium by us, including demographic information that relates to the past, present, or future physical or mental health or condition of an individual, the provision of health care to an individual, or the past, present, or future payment for the provision of health care to an individual.
• "De-identified Information" means information that does not identify an individual and for which there is no reasonable basis to believe it can be used to identify an individual.
• "Site" refers to our website and any mobile applications we operate.

3. IMPORTANT NOTICE REGARDING TEXT MESSAGING DATA

BrainRevive Clinics LLC DOES NOT share customer opt-in information, including phone numbers and consent records, with any affiliates or third parties for marketing, promotional, or any other purposes unrelated to providing our direct services. All text messaging originator opt-in data is kept strictly confidential.

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Information sharing to subcontractors in support services (such as customer service, SMS aggregators and providers solely for delivering messages you've consented to receive) is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

We implement strict data protection measures to safeguard your SMS opt-in information and consent records.

4. Information We Collect

4.1 Personal Identification Information

We collect personal information that you voluntarily provide to us when you:

• Register for an account on our Site
• Schedule an appointment or inquiry about services
• Fill out forms or surveys
• Contact us with questions or requests
• Sign up for newsletters or marketing communications

This information may include:

• Full name and preferred name
• Date of birth and age
• Gender and pronouns
• Mailing address, email address, and telephone number
• Emergency contact information
• Social Security number (when required for billing or insurance purposes)
• Driver's license or state identification number
• Payment information (credit card, debit card, or bank account details)

4.2 Protected Health Information

When you become a patient or client, we collect health-related information necessary to provide our services, including:

• Complete medical history, including past diagnoses and treatments
• Current health conditions and symptoms
• Current medications, supplements, and dosages
• Known allergies and adverse reactions
• Family medical history
• Lifestyle information (exercise, diet, sleep patterns, substance use)
• Brain mapping assessment data and results
• Treatment records, clinical notes, and progress reports
• Hyperbaric oxygen therapy session records
• Vital signs and biometric data
• Diagnostic test results and imaging
• Referrals to and from other healthcare providers
• Health insurance information and claims data

4.3 SMS/Text Messaging Information

When you opt into our SMS messaging services, we collect:

• Mobile phone number
• Opt-in records and timestamps for SMS consent
• SMS communication preferences
• Message delivery status and engagement data
• Opt-out requests and dates

This information is used solely for providing appointment reminders, service notifications, and customer support communications that you have explicitly consented to receive. We comply with the Telephone Consumer Protection Act (TCPA) and maintain timestamped records of all opt-in and opt-out actions.

4.4 Automatically Collected Information

When you visit our Site, we automatically collect certain information about your device and browsing actions, including:

• IP address and geographic location
• Browser type and version
• Operating system and device type
• Pages visited, time spent on pages, and navigation paths
• Referring/exit pages and URLs
• Date and time stamps
• Clickstream data

We collect this information through cookies, web beacons, and similar tracking technologies. For more information, see Section 8 below.

4.5 Information from Third Parties

We may receive information about you from third parties, including:

• Healthcare providers who refer you to our services or to whom we refer you
• Insurance companies and benefits administrators
• Laboratories and diagnostic facilities
• Family members or authorized representatives acting on your behalf
• Public databases and records (when legally permitted)
• Marketing and analytics service providers

5. How We Use Your Information

5.1 Treatment, Payment, and Healthcare Operations

We use your PHI for treatment, payment, and healthcare operations as permitted by HIPAA, including:

• Treatment: Providing, coordinating, and managing your healthcare services; consulting with other healthcare providers; referring you to specialists; maintaining treatment records
• Payment: Billing for services; processing payments; verifying insurance coverage; submitting insurance claims; collecting outstanding balances; responding to payment disputes
• Healthcare Operations: Quality assessment and improvement activities; competency assurance activities; training programs; accreditation, certification, or licensing activities; business planning and management; customer service

5.2 Communication and Appointment Management

We use your information to:

• Schedule, confirm, and remind you of appointments
• Communicate about your treatment and follow-up care
• Respond to your inquiries and provide customer support
• Send administrative information about services, policies, or terms
• Notify you of changes to our services or policies

5.3 Marketing and Communications (With Your Consent)

With your express written authorization, we may use your information to:

• Send newsletters, promotional materials, and special offers
• Inform you about new services, treatments, or programs
• Invite you to events, webinars, or educational seminars
• Request feedback through surveys or testimonials

You may opt out of marketing communications at any time by following the unsubscribe instructions in our emails or contacting us directly.

5.4 Legal Compliance and Protection

We may use your information to:

• Comply with applicable laws, regulations, and legal processes
• Respond to lawful requests from public authorities
• Enforce our Terms of Service and other agreements
• Protect our rights, privacy, safety, or property
• Protect the rights, privacy, safety, or property of others
• Detect, prevent, or investigate fraud, security breaches, or illegal activities

5.5 Research and Quality Improvement

We may use de-identified or aggregated information for research, quality improvement, and statistical analysis purposes. Such information cannot be used to identify you individually.

5.6 Site Improvement and Analytics

We use automatically collected information to:

• Improve and optimize our Site and services
• Analyze usage patterns and trends
• Personalize user experience
• Diagnose technical problems
• Monitor and prevent security threats

6. How We Share Your Information

We do not sell, rent, or trade your personal information or PHI.

We may share your information in the following circumstances:

6.1 With Your Authorization

We will obtain your written authorization before using or disclosing your PHI for purposes other than treatment, payment, healthcare operations, or as otherwise permitted by law. You may revoke your authorization at any time by providing written notice to us.

6.2 Healthcare Providers and Coordination of Care

We may share your PHI with:

• Your primary care physician or referring provider
• Specialists to whom we refer you
• Other healthcare professionals involved in your care
• Healthcare facilities where you receive services

6.3 Business Associates and Service Providers

We may share your information with third-party vendors, service providers, contractors, or agents who perform services on our behalf, such as:

• Medical billing and coding services
• Claims processing and collections agencies
• IT services and cloud storage providers
• Legal, accounting, and consulting services
• Marketing and communications platforms (with your consent)
• Payment processors

These third parties are contractually required to use appropriate safeguards to protect your information and may use your information only as directed by us in compliance with this Privacy Policy and applicable law, including Business Associate Agreements as required by HIPAA.

6.4 Insurance and Payment

We may disclose your PHI to:

• Your health insurance company or plan for coverage verification, pre-authorization, claims processing, and payment
• Healthcare clearinghouses that facilitate claims processing
• Benefits administrators and third-party payers

6.5 Legal Requirements and Public Health

We may disclose your information when required or permitted by law, including:

• In response to a court order, subpoena, warrant, or other legal process
• To comply with federal, state, or local laws and regulations
• To public health authorities for disease prevention and control
• To report abuse, neglect, or domestic violence as required by law
• To the Food and Drug Administration regarding adverse events or product defects
• To law enforcement for specified law enforcement purposes
• To coroners, medical examiners, or funeral directors as necessary
• For workers' compensation claims and proceedings
• To military authorities if you are a member of the armed forces
• To authorized government officials for national security purposes

6.6 Health and Safety Emergencies

We may disclose your PHI when necessary to prevent or lessen a serious and imminent threat to your health or safety or the health or safety of others. Such disclosures will be made only to persons reasonably able to prevent or lessen the threat.

6.7 Family and Friends

With your consent or when you do not object, we may disclose relevant PHI to family members, relatives, close personal friends, or other persons you identify who are involved in your care or payment for your care. In emergency situations, we may disclose information if we determine it is in your best interest based on our professional judgment.

6.8 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred to the successor entity, subject to the terms of this Privacy Policy and applicable law.

7. Your Privacy Rights Under HIPAA

As a healthcare provider subject to HIPAA, we are required to protect your PHI and provide you with certain rights regarding your health information. You have the following rights:

7.1 Right to Access Your Health Records

You have the right to inspect and obtain a copy of your PHI maintained in our designated record sets, with limited exceptions. To request access, submit a written request to our Privacy Officer. We may charge a reasonable fee for copying and mailing costs. We will respond to your request within 30 days (or 60 days if the records are stored off-site).

7.2 Right to Request Amendments

If you believe that information in your health record is incorrect or incomplete, you have the right to request an amendment. We may deny your request if the information: (a) was not created by us; (b) is not part of our designated record set; (c) is not available for inspection as provided by law; or (d) is accurate and complete. If we deny your request, we will provide you with a written explanation and inform you of your right to submit a statement of disagreement.

7.3 Right to an Accounting of Disclosures

You have the right to receive a list of certain disclosures we have made of your PHI within the six years prior to your request (or a shorter period if you specify). This list will not include disclosures made for treatment, payment, or healthcare operations, disclosures made to you, disclosures authorized by you, and certain other disclosures. The first accounting in a 12-month period is free; we may charge a reasonable fee for additional requests.

7.4 Right to Request Restrictions

You have the right to request restrictions on how we use or disclose your PHI for treatment, payment, or healthcare operations, or to persons involved in your care. We are not required to agree to your request except in one situation: if you pay for a service or healthcare item out-of-pocket in full and you request that we not disclose PHI related solely to that item or service to your health plan for payment or healthcare operations purposes, we must honor that request unless disclosure is required by law.

7.5 Right to Request Confidential Communications

You have the right to request that we communicate with you about health matters in a certain way or at a certain location. For example, you may request that we contact you only at work or by mail. We will accommodate reasonable requests without requiring an explanation.

7.6 Right to a Paper Copy of This Notice

You have the right to receive a paper copy of this Privacy Policy at any time, even if you have agreed to receive it electronically. Contact us using the information in Section 16 to request a paper copy.

7.7 Right to Be Notified of a Breach

You have the right to be notified if there is a breach of your unsecured PHI.

7.8 Exercising Your Rights

To exercise any of these rights, submit a written request to our Privacy Officer using the contact information provided in Section 16. We may require you to complete specific forms and verify your identity before processing your request.

8. Additional Privacy Rights (State-Specific)

Depending on your state of residence, you may have additional privacy rights. If you are a resident of California, Nevada, or certain other states, you may have enhanced rights regarding your personal information. Please contact us for information about rights specific to your state.

9. Cookies and Tracking Technologies

We use cookies, web beacons, pixels, and similar tracking technologies to collect information about your browsing activities and preferences.

9.1 Types of Cookies We Use

• Essential Cookies: Necessary for the Site to function properly and cannot be disabled
• Functional Cookies: Enable personalized features and remember your preferences
• Analytics Cookies: Help us understand how visitors use our Site
• Marketing Cookies: Track visitors across websites to display relevant advertisements (used only with your consent)

9.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies or delete existing cookies. Please note that disabling cookies may affect the functionality of our Site. For more information about cookies and how to manage them, visit www.allaboutcookies.org.

9.3 Third-Party Analytics

We may use third-party analytics services (such as Google Analytics) to collect and analyze information about Site usage. These services use cookies and similar technologies to collect information such as how often users visit the Site, what pages they visit, and what other sites they used prior to coming to our Site. We use this information to improve our Site and services. These analytics services may have their own privacy policies governing how they use such information.

10. Data Security

We implement comprehensive administrative, technical, and physical safeguards designed to protect your information from unauthorized access, use, disclosure, alteration, or destruction, as required by HIPAA and other applicable laws.

10.1 Security Measures

Our security measures include:

• Technical Safeguards: Encryption of data in transit and at rest, secure socket layer (SSL) technology, firewalls, intrusion detection systems, regular security testing and monitoring
• Physical Safeguards: Secure facilities with controlled access, locked file cabinets for paper records, security cameras, visitor logs, secure disposal of records
• Administrative Safeguards: Privacy and security policies and procedures, workforce training and management, access controls and authorization procedures, incident response plans, regular risk assessments and audits

10.2 Limitations

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security. If you have reason to believe that your interaction with us is no longer secure, please notify us immediately.

10.3 Breach Notification

In the event of a breach of your unsecured PHI, we will notify you as required by law. Notification will be made without unreasonable delay and in no case later than 60 days after discovery of the breach.

11. Data Retention

We retain your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with our legal obligations, resolve disputes, and enforce our agreements.

Medical Records: We retain medical records and PHI in accordance with federal and state laws. In Nevada, medical records must be retained for at least five (5) years from the date of last treatment for adult patients and for at least five (5) years after a minor patient reaches the age of majority. We may retain records for longer periods as required by law or for legitimate business purposes.

Non-Medical Information: We retain other personal information for as long as your account is active or as needed to provide you services, and for a reasonable period thereafter for backup, archival, fraud prevention, and dispute resolution purposes.

Secure Destruction: When information is no longer needed, we securely destroy or de-identify it in accordance with applicable legal and professional standards.

12. Third-Party Websites and Services

Our Site may contain links to third-party websites, applications, or services that are not operated or controlled by us. This Privacy Policy does not apply to such third-party sites or services. We are not responsible for the privacy practices or content of third-party sites.

We encourage you to review the privacy policies of any third-party sites you visit. The inclusion of a link does not imply our endorsement of the linked site or service.

13. Children's Privacy

Our Site and services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13 without parental consent. If we learn that we have collected personal information from a child under 13 without parental consent, we will delete that information as quickly as possible.

For children under 18, we require parental or legal guardian consent before providing services or collecting PHI. Parents or legal guardians have the right to access, amend, or request deletion of their child's information, subject to legal requirements for record retention.

If you believe we have inadvertently collected information from a child under 13, please contact us immediately using the information in Section 16.

14. International Data Transfers

Our services are provided from the United States, and your information will be processed and stored in the United States. If you are accessing our Site or services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located and our central database is operated.

The data protection and privacy laws of the United States may not be as comprehensive as those in your country. By using our Site or services, you consent to the transfer of your information to the United States.

15. Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time. If we make material changes, we will notify you by:

• Posting the updated Privacy Policy on our Site with a new "Last updated" date
• Sending an email to the email address associated with your account
• Providing notice through our Site or other appropriate means

Changes to this Privacy Policy are effective when they are posted on this page unless otherwise stated. Your continued use of our Site or services after we post changes constitutes your acceptance of the revised Privacy Policy.

We are required by law to abide by the terms of the Privacy Policy currently in effect. We will not make material changes to our policies and procedures regarding uses and disclosures of your PHI without providing you with a revised Notice of Privacy Practices.

16. Your Right to File a Complaint

If you believe your privacy rights have been violated, you have the right to file a complaint with us or with the U.S. Department of Health and Human Services (HHS).

File a Complaint with Us: Contact our Privacy Officer using the information in Section 16.

File a Complaint with HHS: You may file a complaint with the Office for Civil Rights (OCR) of the U.S. Department of Health and Human Services by:

• Visiting: www.hhs.gov/ocr/privacy/hipaa/complaints/
• Calling: 1-877-696-6775 (HHS Office for Civil Rights)
• Writing to: Office for Civil Rights, U.S. Department of Health and Human Services, 200 Independence Avenue, S.W., Washington, D.C. 20201

No Retaliation: You will not be penalized, retaliated against, or denied services for filing a complaint.

17. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, or if you wish to exercise your privacy rights, please contact our Privacy Officer:

We will respond to your inquiry as promptly as possible, typically within 30 days of receipt.

18. Effective Date

This Privacy Policy is effective as of the "Last updated" date stated at the beginning of this document.