Privacy Policy

1. Introduction & Scope

Atium Health LLC ("Atium Health," "we," "our," or "us") is committed to protecting the privacy and security of your personal information. This Privacy Policy ("Policy") describes how we collect, use, disclose, and safeguard information when you visit our website at www.atiumhealth.com (the "Site") or interact with our digital services, including scheduling tools, contact forms, and SMS/text messaging (collectively, the "Services").

This Policy applies to all visitors of the Site and all users of the Services. By accessing or using the Site or Services, you agree to the practices described in this Policy. If you do not agree, please discontinue use of the Site and Services.

We encourage you to read this Policy carefully. If you have any questions, please contact us at office@atiumhealth.com.

Notice Regarding HIPAA and Protected Health Information

This Policy does not govern "protected health information" ("PHI") as defined under the Health Insurance Portability and Accountability Act ("HIPAA") and its implementing regulations. PHI collected in connection with clinical services provided by Atium Health licensed clinicians is governed separately by our HIPAA Notice of Privacy Practices, which is provided to clients at intake and available upon request. For questions about how your clinical health information is used or disclosed, please refer to that Notice or contact us directly.

Notice Regarding Children's Privacy

Our Site and digital Services are not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13 without verified parental consent. If we learn that we have inadvertently collected personal information from a child under 13, we will take prompt steps to delete it. If you believe we may have collected information from a child, please contact us at office@atiumhealth.com.

2. Information We Collect

We collect several categories of personal information, depending on how you interact with us:

2.1 Information You Provide Directly

• Contact Information — Your name, email address, phone number, and mailing address when you submit an inquiry, schedule an appointment, or contact us through the Site.
• Appointment & Scheduling Information — Details you provide when booking or requesting services, including preferred appointment times and the nature of your inquiry.
• Employment Information — If you apply for a position with us, we collect information relevant to your application, including licensure, qualifications, and contact details.
• Communications — Records of your communications with us via email, phone, text, chat, or contact forms, including any information you choose to include in those messages.

2.2 Information Collected Automatically

When you visit our Site, we may automatically collect certain technical and usage information, including:

• Device and connection information, such as your IP address, browser type, and operating system
• Pages visited, time spent on the Site, and referring URLs
• Geolocation data at the device level, where permitted
• Interaction data collected through cookies and similar tracking technologies (see Section 4)

2.3 Information from Third Parties

We may receive information about you from third parties, such as scheduling platforms, referral partners, advertising networks, or analytics providers, to the extent permitted by applicable law.

3. How We Use Your Information

We use the personal information we collect for the following purposes:

• To provide, manage, and improve our Services, including scheduling, appointment reminders, and administrative communications
• To respond to inquiries and communicate with you about our services
• To send appointment confirmations, billing reminders, and other transactional communications necessary to deliver our services
• To send marketing communications, newsletters, or service updates, where you have provided consent or where otherwise permitted by law
• To comply with legal obligations, including HIPAA, Utah state law, CAN-SPAM, and other applicable regulations
• To protect the safety, security, and integrity of our Site, Services, staff, and clients
• To detect, investigate, and prevent fraudulent, unlawful, or harmful activity
• To process employment applications and evaluate candidates for open positions
• To facilitate a corporate transaction, such as a merger, acquisition, or sale of assets, where your information may be transferred as part of that transaction
• For any other purpose described at the time you provide the information, or for which you give your consent

We do not sell, rent, or share your personal information — including your email address or mobile phone number — for purposes unrelated to our operations.

4. Cookies & Tracking Technologies

We use cookies and similar technologies to support the functionality of our Site, remember your preferences, and improve your experience. We also use these technologies to measure the effectiveness of our outreach efforts through referral source attribution.

What We Do

• Use session cookies for core Site functionality, accessibility, and user interface preferences
• Use third-party tools such as Google Fonts, Google Maps, and analytics platforms to deliver content and measure Site performance
• Store referral source session identifiers for marketing attribution, using vendors that minimize data collection to what is necessary
• Allow select third-party advertising partners to collect limited, anonymized data to support interest-based advertising on our behalf

What We Do Not Do

• We do not use cookies for behavioral advertising on our own behalf
• We do not share cookie data about your browsing behavior with third parties for their own marketing purposes
• All systems that handle PHI are fully separate from our general website infrastructure

Your Cookie Choices

By continuing to use our Site, you consent to our use of cookies for the limited purposes described above. You may manage your preferences by:

• Adjusting your browser settings to disable or delete cookies — note that doing so may affect certain Site functionality
• Opting out of interest-based advertising through industry self-regulatory programs such as the Network Advertising Initiative (NAI) or Digital Advertising Alliance (DAA)
• Following provider-specific opt-out instructions for tools such as Google Analytics or Google Ads

5. Email Communications

Transactional Emails

We send transactional emails to deliver information essential to your use of our Services, including appointment confirmations and reminders, billing statements and payment notices, updates regarding provider availability or your care, and compliance-related disclosures. These communications are sent as a necessary part of service delivery and are not subject to marketing opt-out.

Marketing Emails

With your consent or as otherwise permitted by law, we may also send marketing communications, including wellness resources, service updates, and information about events or new offerings. You may opt out of marketing emails at any time by clicking the "unsubscribe" link included in any such message or by contacting us at office@atiumhealth.com.

Our Commitments

• All marketing emails are clearly identified as such
• We honor opt-out requests promptly and without penalty
• We do not share your email address with third parties for their own marketing purposes
• We comply with all applicable laws, including the CAN-SPAM Act

6. SMS & Text Messaging

Atium Health may use SMS/text messaging to send appointment reminders, scheduling updates, and other administrative communications. By providing your mobile phone number and opting in to receive text messages from us, you authorize Atium Health to contact you via SMS.

Standard message and data rates may apply. Message frequency will vary. You may opt out at any time by replying STOP, and you may request assistance by replying HELP. Opting out of SMS does not affect your ability to receive our clinical services or other forms of communication.

SMS communications are for non-clinical, administrative purposes only. Do not use text messaging to communicate urgent clinical concerns or emergency information. In an emergency, call 911 or the 988 Suicide & Crisis Lifeline.

SMS Data Sharing — Required Disclosure

The following language is required by applicable SMS compliance regulations and is incorporated into this Policy verbatim:

We will not share your opt-in to an SMS campaign with any third party for purposes unrelated to providing you with the services of that campaign. We may share your Personal Data, including your SMS opt-in or consent status, with third parties that help us provide our messaging services, including but not limited to platform providers, phone companies, and any other vendors who assist us in the delivery of text messages.

All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

7. Disclosure of Your Information

We do not sell or rent your personal information. We may disclose your personal information only in the following limited circumstances:

• With your consent, or as described at the time you provide the information
• To trusted service providers and vendors who assist us in operating our Site and delivering our Services, subject to confidentiality and data security obligations; any vendor who may access PHI on our behalf is required to execute a Business Associate Agreement (BAA)
• To enforce our Terms of Service or protect the rights, safety, or property of Atium Health, our staff, clients, or the public
• In response to a lawful subpoena, court order, legal process, or enforceable governmental request
• To investigate, detect, or prevent fraud, security incidents, or illegal activity
• In connection with a merger, acquisition, bankruptcy, or other corporate transaction in which your information may be transferred as a business asset; we will provide notice as required by law
• To any affiliate or entity under common ownership with Atium Health, for purposes consistent with this Policy

We may share aggregated, de-identified information — such as general usage statistics — with third parties without restriction, as it cannot be used to identify any individual.

8. How We Protect Your Information

We implement administrative, technical, and physical safeguards designed to protect your personal information against unauthorized access, use, alteration, or disclosure. Access to personal information is limited to authorized personnel and service providers who require it to fulfill their responsibilities, and all such parties are subject to confidentiality obligations.

HIPAA-Adjacent Systems

Systems that handle PHI are maintained separately from our general website infrastructure and are subject to HIPAA-grade security controls. Vendors who handle PHI are required to execute a Business Associate Agreement (BAA) and meet applicable security standards.

SMS Security Considerations

Text messages travel through third-party carrier networks that we do not control. For this reason, SMS should be used only for non-clinical, administrative communications. Please do not send PHI, diagnoses, or treatment details via text message.

Website & Email Security

Our Site operates over secure HTTPS connections. Emails containing service-related details are handled with care, and we avoid including sensitive clinical information in email unless secured by encryption. Data submitted through our website forms is stored securely and used only for its intended purpose.

Limitations

While we take every reasonable precaution to protect your data, no system or transmission method is completely secure. We cannot guarantee the absolute security of personal information during transmission or storage. We encourage you to contact us directly if you have any privacy concerns.

9. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, including to deliver Services, maintain accurate records, comply with legal obligations, resolve disputes, and enforce our agreements. Our general retention approach by category:

• Transactional and operational data (e.g., appointment history, billing records) — retained in accordance with applicable healthcare regulations and internal compliance policies
• Communication records (e.g., email, SMS, and form submissions) — retained to support service continuity, audit trails, and legal documentation requirements
• Marketing and website interaction data (e.g., referral attribution, cookie data) — retained only as long as necessary for attribution and performance purposes, and scrubbed of any PHI
• Employment application data — retained for the duration of the hiring process and, if applicable, for a reasonable period thereafter for future opportunities unless you request deletion

When data is no longer needed, we dispose of it securely in accordance with applicable law, including HIPAA and Utah state requirements. To request information about how long your data is retained or to request deletion of certain data, contact us at office@atiumhealth.com.

10. Your Privacy Rights

Depending on your state of residence, you may have certain rights with respect to your personal information. These may include the right to:

• Access — request a copy of the personal information we hold about you
• Correction — request that we correct inaccurate or incomplete personal information
• Deletion — request that we delete your personal information, subject to legal retention requirements
• Opt-Out — opt out of certain processing, such as marketing communications or interest-based advertising
• Non-Discrimination — we will not discriminate against you for exercising any privacy rights

To submit a privacy rights request, please contact us at office@atiumhealth.com. We may need to verify your identity before processing your request. We will respond within the timeframe required by applicable law and will notify you of our decision, including any applicable appeal process if your request is denied.

Please note that certain information may be exempt from deletion requests where retention is required by law or is necessary to complete a transaction, provide a service, or fulfill a legal obligation.

11. Third-Party Services & Links

Our Site may link to or integrate third-party services, such as online scheduling platforms, mapping tools, social media pages, or payment processors. These third parties operate under their own privacy policies and terms of service, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services you access through our Site.

We only engage third-party service providers who meet appropriate data protection standards and who are contractually obligated to use your information only as directed by us. Where a third-party vendor may access PHI, we require a signed Business Associate Agreement (BAA) before any data is shared.

12. International Users

Our Site is hosted in the United States and is intended for users located in the United States. If you are accessing our Site from outside the United States, please be aware that your information may be transferred to and processed in the United States, where data protection laws may differ from those in your country. By using our Site, you consent to such transfer as permitted by applicable law.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the "Last Updated" date at the top of this page. If we make material changes to how we handle personal information, we will notify you as required by applicable law.

We encourage you to review this Policy periodically. Your continued use of our Site or Services after any changes are posted constitutes your acceptance of the updated Policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: