PRIVACY POLICY

Integral Health
Effective Date: August 28, 2026
Last Updated: August 28, 2026

Integral Health (“Integral Health,” “we,” “us,” or “our”) respects your privacy and is committed to protecting information collected through our website and related online services.

This Privacy Policy explains how we collect, use, disclose, and protect information when you visit the Integral Health website, submit online forms, request appointments, communicate with us electronically, or otherwise interact with our online services (collectively, the “Website”).

This Privacy Policy applies to information collected through the Website. It does not replace Integral Health’s Notice of Privacy Practices, which describes how protected health information (“PHI”) subject to the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) may be used and disclosed in connection with healthcare services.

By using the Website, you acknowledge the practices described in this Privacy Policy.

1. INFORMATION WE MAY COLLECT

The information we collect depends on how you interact with the Website.

Information You Provide Directly

You may provide information such as:

• Name;

• Date of birth;

• Email address;

• Telephone number;

• Mailing or shipping address;

• Appointment preferences;

• Demographic information;

• Insurance information, when applicable;

• Medical history;

• Current medications;

• Allergies;

• Symptoms or health concerns;

• Laboratory or treatment information;

• Weight-management or wellness information;

• Information submitted through intake forms, questionnaires, eligibility forms, or contact forms;

• Billing or payment-related information;

• Communications you send to us; and

• Other information you voluntarily provide.

Information you provide in connection with treatment or healthcare services may constitute protected health information and may be subject to HIPAA and other applicable healthcare privacy laws.

2. INFORMATION COLLECTED AUTOMATICALLY

When you use the Website, certain technical information may be collected automatically, including:

• Internet Protocol (“IP”) address;

• Browser type;

• Device type;

• Operating system;

• Referring website;

• Pages viewed;

• Links clicked;

• Date and time of visits;

• Approximate geographic location derived from an IP address;

• Website interaction information; and

• Cookie, pixel, or similar technology identifiers.

This information may be used to operate, secure, maintain, and improve the Website.

3. COOKIES AND SIMILAR TECHNOLOGIES

The Website may use cookies, pixels, analytics technologies, and similar tools.

Cookies are small data files stored on your browser or device. They may help us:

• Maintain Website functionality;

• Understand how visitors use the Website;

• Measure Website performance;

• Remember certain preferences;

• Identify technical problems;

• Improve navigation and content; and

• Evaluate the effectiveness of permitted marketing activities.

Your browser may allow you to reject or delete cookies. Some Website functionality may not work properly if certain cookies are disabled.

Where required by applicable law, we will obtain consent before using certain non-essential cookies or similar technologies.

4. HEALTH INFORMATION AND TRACKING TECHNOLOGIES

Integral Health recognizes that information concerning an individual's healthcare interests, symptoms, treatment, medications, appointment activity, or medical conditions can be particularly sensitive.

We intend to limit the use of tracking and advertising technologies in areas of the Website where their use could improperly disclose protected or sensitive health information.

We do not authorize third-party advertising platforms to use protected health information for targeted advertising in violation of applicable law.

Information submitted through patient intake forms, clinical questionnaires, patient portals, telehealth platforms, or other healthcare-related systems may be subject to additional privacy and security protections.

5. HOW WE USE INFORMATION

We may use information collected through the Website to:

• Respond to inquiries;

• Schedule, confirm, or manage appointments;

• Determine whether a requested healthcare service may be available;

• Facilitate patient intake and registration;

• Communicate with patients and prospective patients;

• Provide healthcare and related administrative services;

• Process payments;

• Coordinate laboratory, pharmacy, or other healthcare-related services;

• Provide requested educational information;

• Improve our Website and services;

• Maintain Website security;

• Detect fraudulent or unauthorized activity;

• Comply with legal, regulatory, licensing, and professional obligations;

• Maintain appropriate business and clinical records; and

• Perform other activities permitted by applicable law.

We may also use information for purposes disclosed to you at the time the information is collected.

6. PROTECTED HEALTH INFORMATION

When Integral Health receives or maintains information in connection with providing healthcare services, that information may constitute protected health information under HIPAA.

Uses and disclosures of PHI are governed by HIPAA and Integral Health's Notice of Privacy Practices, rather than solely by this Privacy Policy.

If there is a conflict between this Privacy Policy and the Notice of Privacy Practices regarding PHI, the Notice of Privacy Practices and applicable healthcare privacy law will control.

7. HOW WE MAY SHARE INFORMATION

We may disclose information when reasonably necessary to operate our practice, provide requested services, or comply with applicable law.

Recipients may include:

• Healthcare providers involved in your care;

• Pharmacies;

• Laboratories;

• Imaging providers;

• Healthcare facilities;

• Specialists;

• Insurance companies or benefit administrators, when applicable;

• Payment processors;

• Scheduling providers;

• Website hosting providers;

• Telehealth technology providers;

• Electronic health record providers;

• Secure communication vendors;

• Information technology and cybersecurity providers;

• Shipping and delivery providers;

• Professional advisors, such as attorneys and accountants; and

• Other vendors that assist with legitimate business or healthcare operations.

Where required by HIPAA, service providers that handle protected health information on our behalf are subject to appropriate contractual and privacy obligations.

We may also disclose information when required or permitted by law, including in response to valid legal process, regulatory requirements, public-health obligations, licensing requirements, or circumstances involving health or safety.

8. WE DO NOT SELL PROTECTED HEALTH INFORMATION

Integral Health does not sell protected health information for commercial marketing purposes.

We do not authorize the sale of PHI in violation of HIPAA or other applicable healthcare privacy laws.

Any use of patient information for marketing that requires authorization under applicable law will be handled in accordance with those requirements.

9. PAYMENT INFORMATION

If payments are accepted through the Website or an associated online platform, payment-card information may be collected and processed by a third-party payment processor.

Integral Health may not directly receive or store complete payment-card information when transactions are handled entirely through a third-party processor.

Payment processors maintain their own privacy and security practices.

10. APPOINTMENT SCHEDULING AND ONLINE FORMS

The Website may use third-party platforms for scheduling, questionnaires, intake forms, consent documents, or other administrative functions.

Information submitted through those platforms may be transmitted to Integral Health and may also be processed by the applicable service provider.

Users should avoid submitting unnecessary medical information through general contact forms, social media messages, or other communication channels not designated for clinical information.

11. EMAIL AND TEXT MESSAGING

Integral Health may communicate through email or text messaging for purposes such as:

• Appointment reminders;

• Scheduling;

• Administrative communications;

• Billing;

• Follow-up instructions;

• Patient-requested communications; and

• Other permitted communications.

Email and standard SMS text messaging may not always be encrypted and can carry privacy risks.

By providing your contact information and requesting or consenting to electronic communication, you acknowledge those inherent limitations.

Where required, marketing communications will include applicable consent and opt-out mechanisms.

12. MARKETING COMMUNICATIONS

If you voluntarily subscribe to newsletters, promotional communications, educational updates, or marketing messages, we may use your contact information for those purposes consistent with applicable law.

You may unsubscribe from promotional emails using the unsubscribe mechanism provided in the message.

Where text-message marketing is used, additional consent requirements may apply.

Opting out of marketing does not prevent Integral Health from sending necessary healthcare, appointment, billing, safety, or administrative communications.

13. ANALYTICS

Integral Health may use analytics tools to understand general Website performance and usage.

Analytics information may include:

• Page views;

• Website traffic sources;

• Device and browser information;

• Approximate location;

• Session duration; and

• Website interaction patterns.

We seek to configure analytics technologies in a manner appropriate for a healthcare website and to avoid impermissible disclosure of protected health information.

14. THIRD-PARTY WEBSITES AND SERVICES

The Website may link to third-party websites or services.

Integral Health does not control the privacy practices, security measures, or content of third-party websites.

A link to an external website does not mean that Integral Health is responsible for that website's privacy practices.

You should review the privacy policies of third-party websites before providing personal information.

15. SOCIAL MEDIA

Integral Health may maintain social media accounts.

Information you voluntarily post or submit through public social media platforms may be visible to others and may be governed by the privacy policies of those platforms.

Social media should not be used to communicate urgent medical concerns or confidential medical information.

A social media interaction does not establish a provider-patient relationship.

16. DATA SECURITY

Integral Health uses reasonable administrative, technical, and physical safeguards designed to protect information against unauthorized access, disclosure, alteration, destruction, or misuse.

However, no Internet transmission, electronic communication, website, or information-storage system can be guaranteed to be completely secure.

Users should use caution when transmitting confidential information electronically and should use secure patient communication methods when available.

17. DATA RETENTION

We may retain information for as long as reasonably necessary to:

• Provide healthcare services;

• Maintain legally required medical and business records;

• Fulfill the purposes for which information was collected;

• Resolve disputes;

• Enforce agreements;

• Meet legal, regulatory, tax, accounting, or licensing obligations; and

• Protect the security and integrity of our systems.

Medical records and protected health information may be subject to specific federal and state record-retention requirements.

18. YOUR PRIVACY RIGHTS

Depending on the type of information involved and applicable law, you may have rights concerning your personal information.

These rights may include the ability to:

• Request information regarding certain data practices;

• Request access to certain information;

• Request correction of inaccurate information;

• Request deletion of certain information when legally permissible;

• Opt out of certain marketing communications; and

• Exercise rights relating to protected health information under HIPAA.

Certain information cannot be deleted or modified when Integral Health is legally required to retain it, including portions of a medical record.

HIPAA rights relating to protected health information are described in greater detail in Integral Health's Notice of Privacy Practices.

19. CHILDREN'S PRIVACY

The Website is not intended to independently collect personal information from children in violation of applicable law.

Healthcare information relating to minors may be collected when provided by a parent, legal guardian, authorized representative, or as otherwise permitted by applicable law.

Rights concerning a minor's medical information may vary depending on the minor's age, type of healthcare service, state law, consent status, and other circumstances.

20. STATE-SPECIFIC PRIVACY RIGHTS

Privacy rights may vary by state.

Integral Health will respond to valid privacy requests as required by applicable federal and state law.

Certain state consumer privacy laws contain exemptions or different requirements for information governed by HIPAA, medical records laws, or other healthcare privacy statutes.

Nothing in this Privacy Policy is intended to limit rights provided under applicable law.

21. DO NOT TRACK AND GLOBAL PRIVACY CONTROLS

Some browsers and devices provide “Do Not Track” or other privacy preference signals.

The legal and technical standards governing these signals continue to develop.

Where required by applicable law and technically supported, Integral Health will honor legally recognized privacy preference mechanisms.

22. INTERNATIONAL USERS

Integral Health is based in the United States and provides healthcare services subject to applicable United States federal and state laws.

If you access the Website from outside the United States, information may be processed or stored in the United States.

The Website is not intended to establish that Integral Health is authorized to provide healthcare services in jurisdictions outside those in which its providers are legally authorized to practice.

23. BUSINESS TRANSFERS

If Integral Health undergoes a merger, acquisition, reorganization, sale of assets, or similar business transaction, information may be transferred as part of that transaction to the extent permitted by applicable law.

Protected health information will continue to be subject to applicable healthcare privacy requirements.

24. LEGAL AND SAFETY DISCLOSURES

We may use or disclose information when we reasonably believe doing so is necessary to:

• Comply with applicable law;

• Respond to a lawful subpoena, court order, or government request;

• Meet licensing or regulatory requirements;

• Protect the rights, property, or security of Integral Health;

• Detect or prevent fraud, abuse, or security threats; or

• Address circumstances involving the health or safety of an individual or the public.

Protected health information will only be disclosed as permitted or required by applicable healthcare privacy law.

25. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy periodically to reflect changes in our services, technologies, legal requirements, or privacy practices.

When we revise this Privacy Policy, we will update the “Last Updated” date above.

Material changes may also be communicated through additional notice when appropriate or required by law.

26. CONTACT US

Questions regarding this Privacy Policy or privacy practices may be directed to:

Integral Health
14440 F Street
Omaha, Nebraska 68137

Additional contact information may be available through the Contact page of the Integral Health Website.

For questions specifically concerning medical records, protected health information, or HIPAA rights, please contact Integral Health using the privacy contact information identified in the applicable Notice of Privacy Practices.

IMPORTANT DISTINCTION

This Privacy Policy describes privacy practices relating primarily to the Integral Health Website and online services.

Integral Health's Notice of Privacy Practices separately describes how protected health information may be used and disclosed in connection with healthcare treatment, payment, and healthcare operations, as well as patients' rights concerning their medical information.