Privacy Policy

This privacy policy (“Policy”) describes how Website Operator (“Website Operator”, “we”, “us” or “our”) collects, protects and uses the personally identifiable information (“Personal Information”) you (“User”, “you” or “your”) may provide on the website and any of its products or services (collectively, “Website” or “Services”). It also describes the choices available to you regarding our use of your Personal Information and how you can access and update this information. This Policy does not apply to the practices of companies that we do not own or control, or to individuals that we do not employ or manage.“Website Operator,” “we,” “us,” or “our” means ReNew U Therapy & Wellness, LLC, its affiliates, subsidiaries, providers, workforce members, service providers, contractors, successors, and assigns. “Website” and “Services” include public website pages, landing pages, online forms, appointment-request tools, patient portals, bill-pay portals, telehealth links, chat, call-tracking, text messaging, email, advertising, analytics, mobile functions, and other online or offline services that link to or incorporate this Policy. This Policy should be read together with any applicable HIPAA Notice of Privacy Practices, patient portal terms, telehealth consent, cookie notice, consent-management tools, and feature-specific notices.

Collection of Personal Information

We receive and store any information you knowingly provide to us when you create an account, fill any online forms on the Website. When required this information may include your email address, name, or other Personal Information. You can choose not to provide us with certain information, but then you may not be able to take advantage of some of the Website’s features. Users who are uncertain about what information is mandatory are welcome to contact us. Depending on the Website, Services, features, forms, and your interaction with us, we may collect the following categories of Personal Information:

We ask that you not provide sensitive information unless the feature expressly requests it and you have authority to provide it. If you submit information about another person, you represent that you have authority to do so and that you have provided all legally required notices and obtained all legally required consents or authorizations.

Healthcare-specific note: Information submitted through authenticated portals, secure forms, patient-intake tools, appointment-request tools, bill-pay tools, telehealth tools, or provider communication channels may constitute Protected Health Information (“PHI”) or other protected health, medical, or sensitive information under HIPAA or state law depending on the client’s status, the feature used, and the purpose of processing. If a HIPAA Notice of Privacy Practices applies to PHI, that Notice governs uses and disclosures of PHI to the extent it conflicts with this Policy.

Collection of Non-Personal Information and Automatic Data

When you visit the Website our servers automatically record information that your browser sends. This data may include information such as your device’s IP address, browser type and version, operating system type and version, language preferences or the webpage you were visiting before you came to our Website, pages of our Website that you visit, the time spent on those pages, information you search for on our Website, access times and dates, and other statistics. We may also collect information through cookies, pixels, tags, web beacons, local storage, software development kits, APIs, server logs, consent-management tools, analytics tools, advertising technologies, session-replay tools, heat-mapping tools, call-tracking tools, chatbots, and similar technologies (“Tracking Technologies”). Depending on how these technologies are configured and applicable law, some data historically described as non-personal information may be treated as Personal Information, personal data, sensitive personal information, or regulated health information.

We do not authorize third-party advertising, analytics, tracking, session-replay, call-tracking, chatbot, or similar vendors to collect, use, or disclose PHI for their independent advertising, profiling, model-training, resale, or unrelated purposes. We will not intentionally deploy third-party advertising pixels, analytics tags, session-replay tools, or similar Tracking Technologies in authenticated patient areas or areas where PHI is reasonably expected to be submitted or viewed unless legally sufficient authorization, consent, masking, suppression, business associate agreements where required, contractual safeguards, or other measures required by law have been implemented.

Use and Processing of Collected Information

Any of the information we collect from you may be used to personalize your experience; improve our Website; improve customer service and respond to queries and emails of our customers; send notification emails such as password reminders, updates, etc; run and operate our Website and Services. Non-Personal Information collected is used only to identify potential cases of abuse and establish statistical information regarding Website usage. This statistical information is not otherwise aggregated in such a way that would identify any particular user of the system. We also may use Personal Information to provide, operate, maintain, personalize, secure, debug, measure, and improve the Website and Services; provide accounts, portals, transactions, forms, appointments, reminders, bill-pay, customer service, and support; communicate with you; maintain records; prevent fraud, spam, misuse, security incidents, and unlawful activity; conduct analytics, attribution, advertising measurement, market research, quality assurance, product development, and business intelligence; comply with legal, contractual, insurance, professional, regulatory, and security obligations; enforce rights and agreements; and for any other purpose disclosed when information is collected or with your consent.

Healthcare clients may use or disclose PHI for treatment, payment, healthcare operations, patient engagement, care coordination, appointment scheduling, billing, quality assurance, public-health reporting, legal compliance, and other purposes permitted by HIPAA, state health-privacy laws, the applicable Notice of Privacy Practices, consent, authorization, or other governing law.

We may process Personal Information related to you if one of the following applies: (i) You have given their consent for one or more specific purposes. Note that under some legislations we may be allowed to process information until you object to such processing (by opting out), without having to rely on consent or any other of the following legal bases below. This, however, does not apply, whenever the processing of Personal Information is subject to European data protection law; (ii) Provision of information is necessary for the performance of an agreement with you and/or for any pre-contractual obligations thereof; (ii) Processing is necessary for compliance with a legal obligation to which you are subject; (iv) Processing is related to a task that is carried out in the public interest or in the exercise of official authority vested in us; (v) Processing is necessary for the purposes of the legitimate interests pursued by us or by a third party. Additional legal bases may apply depending on the jurisdiction, including consent, contract, legal obligation, legitimate interests, vital interests, public interest, authorization, healthcare operations, treatment, payment, or another lawful basis. We do not rely on consent where a different legal basis applies unless required by law or by a feature-specific notice.

Artificial Intelligence and Automated Tools

The Website or Services may include or support automated tools, machine-learning systems, generative artificial-intelligence functionality, conversational agents, chatbots, decision-support tools, content-assistance tools, transcription tools, scheduling tools, fraud-detection tools, analytics tools, or other AI-assisted features (“AI Tools”). AI Tools may process inputs, prompts, outputs, logs, metadata, and related information to operate and improve the Website and Services, maintain security, troubleshoot errors, conduct quality assurance, respond to inquiries, and satisfy legal, contractual, security, and compliance obligations.

AI Tools are not intended to provide medical advice, diagnosis, treatment, emergency assistance, or professional clinical judgment. Users should not enter emergency information or information requiring immediate clinical attention into AI Tools. AI-generated content may be inaccurate, incomplete, outdated, biased, misleading, or inappropriate and must not be relied on as a substitute for professional healthcare advice. We do not intentionally use identifiable PHI to train a third-party general-purpose AI model unless permitted by law, governed by appropriate contractual safeguards, or authorized by the applicable user or customer.

Information Transfer and Storage

Depending on your location, data transfers may involve transferring and storing your information in a country other than your own. You are entitled to learn about the legal basis of information transfers to a country outside the European Union or to any international organization governed by public international law or set up by two or more countries, such as the UN, and about the security measures taken by us to safeguard your information. If any such transfer takes place, you can find out more by checking the relevant sections of this document or inquire with us using the information provided in the contact section. We are based in the United States, and the Website is intended primarily for users located in the United States. If you access the Website from outside the United States, your information may be processed in the United States and other jurisdictions that may not provide the same level of data protection as your jurisdiction. Where required, we use appropriate safeguards for cross-border transfers, which may include contractual terms, transfer assessments, consent, or other lawful mechanisms.

Disclosure of Personal Information

We may disclose Personal Information to affiliates, subsidiaries, related companies, service providers, contractors, vendors, hosting providers, cloud providers, security vendors, analytics providers, advertising partners, CRM providers, communications providers, payment processors, call-tracking providers, cookie/consent-management providers, professional advisors, insurers, auditors, regulators, courts, law enforcement, government authorities, purchasers or parties to business transactions, and other parties with your consent or at your direction. Where required by law, service providers must process information only for authorized purposes and subject to appropriate contractual restrictions.

Where PHI or other Protected Information is involved, we use vendors and service providers in accordance with applicable law and any required business associate agreement, data processing terms, confidentiality obligations, or other contractual safeguards. We do not authorize third-party service providers to use PHI for their own independent advertising, profiling, model-training, resale, or unrelated purposes except as permitted by law, contractual terms, or legally sufficient authorization.

We may disclose information to comply with law, legal process, subpoenas, court orders, law enforcement requests, regulatory requests, professional obligations, insurance requirements, security incidents, fraud prevention, protection of rights, business transactions, or enforcement of our terms and policies. We may disclose de-identified, aggregated, anonymized, or otherwise non-identifiable information for any lawful purpose, subject to applicable law and contractual restrictions.

Cookies, Tracking Technologies, and Privacy Choices

The Website uses “cookies” to help personalize your online experience. A cookie is a text file that is placed on your hard disk by a web page server. Cookies cannot be used to run programs or deliver viruses to your computer. Cookies are uniquely assigned to you, and can only be read by a web server in the domain that issued the cookie to you. We may use cookies to collect, store, and track information for statistical purposes to operate our Website and Services. You have the ability to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. If you choose to decline cookies, you may not be able to fully experience the features of the Website and Services. Depending on the Website, we may use essential cookies, preference cookies, analytics cookies, advertising cookies, pixels, tags, web beacons, session-replay tools, heat-mapping tools, call-tracking tools, chat tools, and similar technologies. We may use a cookie banner, preference center, consent-management platform, browser controls, Global Privacy Control or similar opt-out preference signals, and other tools to present, record, and honor privacy choices where required by law. Cookie choices may be browser- and device-specific and may not affect non-cookie disclosures or information processed in other contexts.

Sale, Sharing, Targeted Advertising, and Global Privacy Control

We do not sell Personal Information for money. However, certain disclosures to advertising, analytics, measurement, social-media, or marketing-technology partners may be considered a “sale,” “sharing,” targeted advertising, or cross-context behavioral advertising under some privacy laws. Where required, you may opt out through a “Your Privacy Choices,” “Do Not Sell or Share My Personal Information,” cookie-preference, or similar mechanism, or by contacting us using the contact information below. Where required by law, we will recognize Global Privacy Control or other legally required opt-out preference signals as an opt-out request for the browser or device through which the signal is sent.

We do not sell PHI as that term is defined under HIPAA. We do not authorize PHI to be used for targeted advertising or cross-context behavioral advertising without legally sufficient authorization or another legally permitted basis. Some public Website activity unrelated to PHI may still involve advertising or analytics technologies subject to applicable opt-out rights.

The Rights of Users / State-Law Privacy Rights

You may exercise certain rights regarding your information processed by us. In particular, you have the right to do the following: (i) you have the right to withdraw consent where you have previously given your consent to the processing of your information; (ii) you have the right to object to the processing of your information if the processing is carried out on a legal basis other than consent; (iii) you have the right to learn if information is being processed by us, obtain disclosure regarding certain aspects of the processing and obtain a copy of the information undergoing processing; (iv) you have the right to verify the accuracy of your information and ask for it to be updated or corrected; (v) you have the right, under certain circumstances, to restrict the processing of your information, in which case, we will not process your information for any purpose other than storing it; (vi) you have the right, under certain circumstances, to obtain the erasure of your Personal Information from us; (vii) you have the right to receive your information in a structured, commonly used and machine readable format and, if technically feasible, to have it transmitted to another controller without any hindrance. Depending on your state or country of residence and the nature of your relationship with us, you may have additional rights to know, access, confirm processing, obtain a portable copy, correct, delete, opt out of sale, sharing, targeted advertising, or certain profiling, limit the use or disclosure of sensitive personal information where applicable, withdraw consent, appeal a denial of a request, and not be discriminated against for exercising privacy rights.

Healthcare-specific rights: HIPAA and state health-privacy laws may give patients rights to request access to, amendment of, restrictions on, confidential communications regarding, or an accounting of disclosures of PHI, subject to legal exceptions and procedures in the applicable Notice of Privacy Practices. Requests involving PHI may need to be submitted through secure patient channels or to the designated healthcare privacy office rather than through a general marketing or website contact form.

Any requests to exercise User rights can be directed to the Owner through the contact details provided in this document. These requests can be exercised free of charge and will be addressed by the Owner as early as possible and always within one month. To make a request, contact us at info@renewutw.com, (855) 393-5275 or 2125 Glenwood Avenue Youngstown, OH 44511. We may ask you to verify your identity or authority. Authorized agents may submit requests where permitted by law, but we may require proof of authorization and may ask the consumer to verify identity directly. If we deny a request and applicable law provides an appeal right, you may appeal by contacting us and stating “Privacy Appeal” in the subject line.

Sensitive Personal Information

We ask that you not provide sensitive personal information unless necessary for the Services or specifically requested. Sensitive personal information may include precise geolocation, government identifiers, account credentials, financial account information, racial or ethnic origin, religious beliefs, health information, biometric data, union membership, citizenship or immigration status, contents of private communications, information about children, and similar information. We process sensitive personal information only as reasonably necessary for disclosed purposes, consented features, security, legal obligations, healthcare operations where applicable, or as otherwise permitted by law.

Privacy of Children

We do not knowingly collect any Personal Information from children under the age of 13. If you are under the age of 13, please do not submit any Personal Information through our Website or Service. We encourage parents and legal guardians to monitor their children’s Internet usage and to help enforce this Policy by instructing their children never to provide Personal Information through our Website or Service without their permission. If you have reason to believe that a child under the age of 13 has provided Personal Information to us through our Website or Service, please contact us. If the Website is directed to or knowingly collects information from minors, additional COPPA, state minor-privacy, parental-consent, verification, and deletion procedures may apply and should be addressed in a client-specific supplement.

Newsletters and Marketing Communications

We may offer electronic newsletters to which you may voluntarily subscribe at any time. You may choose to stop receiving our newsletter or marketing emails by following the unsubscribe instructions included in these emails or by contacting us. However, you will continue to receive essential transactional emails. Where required, we obtain consent before sending marketing texts, automated calls, prerecorded calls, artificial-voice calls, or similar communications. Consent to marketing communications is not a condition of receiving products or services unless expressly disclosed and permitted by law. You may opt out of marketing emails by using the unsubscribe link or contacting us, and you may opt out of texts by replying STOP or following other instructions provided. We may still send transactional, administrative, legal, security, billing, treatment, payment, operations, or service-related communications where permitted by law.

Links to Other Websites

Our Website contains links to other websites that are not owned or controlled by us. Please be aware that we are not responsible for the privacy practices of such other websites or third-parties. We encourage you to be aware when you leave our Website and to read the privacy statements of each and every website that may collect Personal Information. The Website also may integrate with third-party platforms, plug-ins, social-media pages, maps, videos, analytics tools, payment processors, patient portals, scheduling tools, chatbots, advertising platforms, consent-management platforms, and other services. Their practices are governed by their own policies and terms.

Information Security

We secure information you provide on computer servers in a controlled, secure environment, protected from unauthorized access, use, or disclosure. We maintain reasonable administrative, technical, and physical safeguards in an effort to protect against unauthorized access, use, modification, and disclosure of Personal Information in its control and custody. However, no data transmission over the Internet or wireless network can be guaranteed. Therefore, while we strive to protect your Personal Information, you acknowledge that (i) there are security and privacy limitations of the Internet which are beyond our control; (ii) the security, integrity, and privacy of any and all information and data exchanged between you and our Website cannot be guaranteed; and (iii) any such information and data may be viewed or tampered with in transit by a third-party, despite best efforts. You are responsible for using secure devices, protecting passwords and account credentials, using secure communication channels for sensitive information, and notifying us promptly if you believe your interaction with us is no longer secure.

Data Retention

We retain Personal Information for as long as reasonably necessary to fulfill the purposes described in this Policy, including to provide the Website and Services, maintain records, comply with legal obligations, resolve disputes, support audits, enforce agreements, prevent fraud, preserve security, maintain backups, and satisfy tax, accounting, insurance, professional, regulatory, and legal obligations. Retention periods vary depending on the type of information, context, legal requirements, contractual requirements, and business needs.

Data Breach and Security Incident Notice

In the event we become aware that the security of the Website has been compromised or users Personal Information has been disclosed to unrelated third-parties as a result of external activity, including, but not limited to, security attacks or fraud, we reserve the right to take reasonably appropriate measures, including, but not limited to, investigation and reporting, as well as notification to and cooperation with law enforcement authorities. In the event of a data breach, we will make reasonable efforts to notify affected individuals if we believe that there is a reasonable risk of harm to the user as a result of the breach or if notice is otherwise required by law. When we do we will post a notice on the Website, send you an email. If HIPAA, state health-privacy breach laws, the FTC Health Breach Notification Rule, state data-breach laws, or other breach-notification requirements apply, we will evaluate and provide notices required by applicable law. We may require service providers to notify us of suspected or actual security incidents, unauthorized disclosures, or unauthorized access involving information processed on our behalf.

Changes and Amendments

We reserve the right to modify this privacy policy relating to the Website or Services at any time, effective upon posting of an updated version of this Policy on the Website. When we do we will revise the updated date at the bottom of this page. Continued use of the Website after any such changes shall constitute your consent to such changes. If we make material changes, we will provide notice as required by law, which may include posting an updated Policy, updating a website notice, sending an email, obtaining consent where required, or using a just-in-time notice for particular features.

Acceptance of This Policy

You acknowledge that you have read this Policy and agree to all its terms and conditions. By using the Website or its Services you agree to be bound by this Policy. If you do not agree to abide by the terms of this Policy, you are not authorized to use or access the Website and its Services. Where consent is required by law, we will request consent through an appropriate mechanism, and your use of the Website alone will not override any non-waivable legal rights.

Contacting Us

If you have any questions about this Policy, please contact us by email at info@renewutw.com, (855) 393-5275 or 2125 Glenwood Avenue Youngstown, OH 44511. If your request involves PHI or patient records, please use the contact information in the applicable Notice of Privacy Practices or patient portal instructions.

This document was last updated on October 28, 2026.