Privacy Policy

Effective Date: October 31, 2025

This privacy policy (“Policy”) describes how ReNew U Therapy & Wellness, LLC (“ReNew U,” “we,” “us,” or “our”) collects, protects, and uses the personally identifiable information (“Personal Information”) and Protected Health Information (PHI) you (“User,” “you,” or “your”) may provide on our website and through any of its products or services (collectively, the “Website” or “Services”). It also describes your choices regarding our use of your information and how you can access or update it.

This Policy incorporates the standards of the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and its implementing regulations, ensuring that all PHI is collected, used, stored, and disclosed in compliance with federal and state privacy laws.

This Policy does not apply to practices of companies we do not own or control or to individuals we do not employ or manage.

---

Collection of Personal and Health Information

We may collect both Personal Information and PHI when you:

• Create an account or complete online forms;

• Request services, schedule an appointment, or communicate with our staff;

• Use our telehealth or electronic-communication platforms.

Examples include your name, address, email, phone number, date of birth, health-related information you share for treatment or payment purposes, and any other information required to provide care.

We also automatically record non-personal data such as your IP address, browser type, device information, and usage statistics to improve the Website and Services.

---

Use and Processing of Collected Information

We may use the information we collect to:

• Provide treatment and coordinate care;

• Process payment and insurance claims;

• Conduct healthcare operations such as quality assessment, staff training, and compliance reviews;

• Improve Website functionality and customer experience;

• Respond to inquiries and send transactional notifications;

• Comply with legal or regulatory obligations.

We will not use or disclose PHI for marketing or any purpose not permitted by HIPAA unless you provide written authorization.

---

Information Security and HIPAA Compliance

We maintain administrative, technical, and physical safeguards to protect Personal Information and PHI from unauthorized access, use, or disclosure, including:

• Encryption of electronic PHI and transmission using Secure Socket Layer (SSL) or equivalent secure protocols;

• Access limited to authorized personnel who require it for legitimate healthcare or administrative functions;

• Secure log-in credentials for telehealth and EHR systems;

• Locked, access-controlled storage for physical records;

• Regular system backups and breach-notification procedures consistent with the HIPAA Security Rule and HITECH Act.

While no method of transmission is 100 percent secure, we continuously monitor and update our safeguards to meet or exceed industry standards.

---

Disclosure of Information to Third Parties

We may disclose PHI only as permitted or required by HIPAA, including:

• To business associates (billing, EHR, telehealth, or compliance vendors) under written Business Associate Agreements (BAAs);

• For payment, healthcare operations, or treatment coordination;

• When required by law, court order, or public-health reporting;

• With your written authorization for any other disclosures.

We do not sell or share PHI or Personal Information for advertising, lead generation, or unrelated commercial purposes.

---

Your Rights Under HIPAA and Privacy Law

You have the right to:

• Access and obtain copies of your health record;

• Request corrections to inaccurate or incomplete information;

• Receive an accounting of certain disclosures;

• Request restrictions on certain uses or disclosures;

• Request confidential communications by alternate means;

• File a complaint if you believe your privacy rights have been violated.

Requests may be submitted in writing to our Privacy Officer (see contact below). We will respond within the timeframes required by law.

---

Data Retention and Destruction

We retain records for the period required by federal and state law. When records are no longer needed, they are securely destroyed in accordance with HIPAA and our internal retention policy.

---

Children’s Privacy

We do not knowingly collect Personal Information from children under 13. If you believe a child has provided information to us, please contact us immediately so we may remove it.

---

Cookies and Analytics

Our Website uses cookies and similar technologies to personalize your experience and gather analytics. You may refuse cookies, though some features may not function properly if you do.

---

Data Breach Notification

If a breach of unsecured Personal Information or PHI occurs, we will promptly investigate, mitigate potential harm, and provide notifications in accordance with the HIPAA Breach Notification Rule and applicable law.

---

Changes and Amendments

We may update this Policy from time to time to reflect legal, operational, or technological changes. Updates will be posted here with a revised “Effective Date.” Continued use of our Website or Services after any update constitutes acceptance.

---

Contacting Us

Privacy Officer
ReNew U Therapy & Wellness, LLC
2125 Glenwood Avenue
Youngstown, OH 44511
Email: privacy@renewutw.com
Phone: (855) 393-5275

If you have any questions about this Policy or your privacy rights, please contact us.