A. Information You Provide Directly

We collect information you provide when you:

• Complete intake forms, health questionnaires, or registration materials
• Schedule appointments or inquire about services by phone, email, or web form
• Purchase products or services through our clinic
• Communicate with our staff via phone, email, or SMS

This may include your name, date of birth, address, phone number, email address, health history, insurance information, and payment details.

B. Protected Health Information (PHI)

As a healthcare provider, we collect and maintain protected health information (PHI) as defined under the Health Insurance Portability and Accountability Act (HIPAA). The collection and use of PHI is governed by our separate Notice of Privacy Practices, which is provided to all patients at the time of service and is available upon request.

C. Information Collected Automatically

When you visit our website, we may automatically collect certain technical information, including:

• IP address and browser type
• Pages visited and time spent on each page
• Referring URLs and navigation behavior
• Device type and operating system

This information is collected through cookies and similar tracking technologies and is used to improve website functionality and user experience.

We use the information we collect for the following purposes:

• To provide, coordinate, and manage your clinical care
• To communicate with you regarding appointments, treatment plans, and follow-up care
• To process payments and manage billing
• To respond to inquiries and provide customer support
• To send health-related communications, promotions, or updates (with your consent)
• To comply with applicable federal, state, and local laws and regulations
• To improve our website, services, and patient experience
• To protect the security and integrity of our systems and data

The Diamond Standard complies with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and its implementing regulations. PHI is used and disclosed only as permitted or required under HIPAA, including for purposes of treatment, payment, and healthcare operations.

A full description of your rights regarding your PHI—including the right to access, amend, and restrict the use of your health information—is set forth in our Notice of Privacy Practices, available at our clinic and upon request at info@diamondstandardhealth.com.

We do not sell, rent, or trade your personal information. We may share your information only in the following limited circumstances:

A. Healthcare Operations and Treatment

We may share your information with other healthcare providers, laboratories, pharmacies, or specialists involved in your care, consistent with HIPAA requirements.

B. Service Providers and Business Associates

We may share your information with trusted third-party vendors and business associates who perform services on our behalf (e.g., electronic health record systems, payment processors, billing services). These parties are contractually obligated to protect your information and use it only for the purposes for which it was disclosed.

C. Legal Requirements

We may disclose your information when required by law, court order, subpoena, or other legal process, or when disclosure is necessary to protect the health, safety, or rights of any individual.

D. With Your Consent

We may share your information for any other purpose with your explicit written consent.

Our website may use cookies, web beacons, and similar technologies to enhance your browsing experience. You may configure your browser to refuse cookies; however, doing so may affect certain features of our website. We do not currently respond to "Do Not Track" browser signals.

If you provide your phone number or email address, you may receive appointment reminders, clinical updates, or promotional communications from us. You may opt out of marketing communications at any time by contacting us at info@diamondstandardhealth.com or by following the unsubscribe instructions in any email we send. Standard message and data rates may apply to SMS communications.

We implement appropriate administrative, technical, and physical safeguards to protect your personal and health information against unauthorized access, disclosure, alteration, or destruction. Our electronic health records system is HIPAA-compliant, and staff access to patient information is restricted on a need-to-know basis.

While we take reasonable precautions to protect your information, no method of electronic transmission or storage is 100% secure. In the event of a data breach affecting your PHI, we will notify you as required under HIPAA and applicable law.

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party websites you visit.

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors without verifiable parental consent. If you believe we have inadvertently collected information from a minor, please contact us immediately so we may take appropriate action.

Depending on your state of residence and applicable law, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your personal information (subject to legal and clinical retention requirements)
• Opt out of marketing communications
• File a complaint with us or with the applicable regulatory authority

To exercise any of these rights, please contact us using the information below. Requests related to your protected health information are governed by HIPAA and our Notice of Privacy Practices.

The Diamond Standard operates in the State of Arizona. We comply with Arizona Revised Statutes governing medical records, including the requirement to retain patient records for a minimum of six years from the date of service or from the date of majority for minor patients, whichever is later. Arizona patients may request access to their medical records by contacting us directly. The Diamond Standard currently offers telemedicine services exclusively to patients located in the State of Arizona at the time of their appointment. We do not provide telemedicine services to patients located outside of Arizona.

We reserve the right to update or modify this Privacy Policy at any time. Changes will be posted to this page with a revised effective date. We encourage you to review this policy periodically. Continued use of our website or services after changes are posted constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: