Privacy policy.

A note on Protected Health Information (PHI)

KieTre is a healthcare provider. Individually identifiable health information relating to your past, present, or future physical or mental health condition, treatment, or payment for treatment ("PHI") is governed by the Health Insurance Portability and Accountability Act of 1996 ("HIPAA") and our separate HIPAA Notice of Privacy Practices ("NPP"), not this Privacy Policy. If you are or become a patient of KieTre, you will be provided a copy of our NPP, which describes how we use and disclose PHI and your rights regarding that information.

This Privacy Policy governs information collected through the Site itself, such as general browsing activity and any contact information you may voluntarily submit, which may or may not constitute PHI depending on the context in which it is collected.

If you are a resident of Nevada, certain information you provide to us that does not constitute PHI may be considered "Consumer Health Data" under Nevada's consumer health data privacy law (SB 370). Section 9 below describes how that law applies to your information.

Multi-state telehealth practice

KieTre provides telehealth services to patients located in Nevada, Idaho, New Mexico, and Arizona, and in-person care in Las Vegas, Nevada. Depending on where you are located when you use the Service, additional state privacy laws beyond those described in this Policy may apply to your information. If you have questions about how a specific state's law applies to you, please contact us using the information in Section 13.

Booking appointments through our scheduling platform

The Site includes a "Book a visit" link that takes you directly to our third-party scheduling and practice management platform to request or manage an appointment. When you use that link, you leave our Site and interact directly with our scheduling platform, which operates under its own privacy policy and security practices. We encourage you to review that platform's privacy policy before submitting information. We do not host or process the scheduling form itself on our own Site. We simply link you to it.

After scheduling, you may also receive an invitation to join our separate patient portal to complete intake forms ahead of your visit. Our scheduling platform and patient portal are HIPAA-compliant systems. Where these vendors create, receive, maintain, or transmit PHI on our behalf, we maintain a Business Associate Agreement (BAA) with them as required by HIPAA.

Information you submit through our scheduling platform or patient portal to request or manage care, such as your name, contact information, insurance details, and reason for visit, is generally handled as part of your medical record and governed by our HIPAA Notice of Privacy Practices, not this Privacy Policy.

Information we collect

Information you provide directly

If you contact us through the Site, for example by submitting our contact form, sending an email, or calling a number listed on the Site, we may collect information you choose to provide, such as:

• Your name and contact information (email address, phone number)
• The content of your message or inquiry
• Any other information you choose to include when contacting us

Our contact form is protected by Google reCAPTCHA to help prevent spam and abuse. Use of reCAPTCHA is subject to the Google Privacy Policy and Google Terms of Service.

Information collected automatically

Like most websites, our Site may automatically collect certain technical information when you visit, such as your IP address, browser type, device type, operating system, referring and exit pages, and general usage activity such as pages viewed and time spent on a page. This information is typically collected through cookies or similar tracking technologies, including those used by our website hosting platform to operate and secure the Site.

We may use standard analytics tools, such as Google Analytics, to understand how visitors use the Site, and we may in the future use advertising or social media tracking tools, such as a Meta or Facebook Pixel. If and when such tools are in use, they may collect information about your visit consistent with their own privacy policies. We do not currently use these tracking technologies to target advertising based on PHI, and we do not permit any third-party tracking technology to access PHI except as authorized under HIPAA and our NPP.

You can control cookies through your browser settings. Blocking or deleting cookies may affect how parts of the Site function.

Information from third parties

We may receive limited information about you from third parties, such as insurance companies, referring providers, or vendors who assist us in operating our practice, where relevant to your care or our business operations.

How we use information

We use information collected through the Site for purposes such as:

• Responding to your inquiries and communicating with you
• Operating, maintaining, and improving the Site
• Understanding how visitors use the Site (analytics)
• Complying with applicable laws, regulations, and legal process
• Protecting the rights, property, or safety of KieTre, our patients, or others

We do not sell personal information collected through the Site to third parties, and we do not use PHI for marketing purposes except as permitted under HIPAA and described in our NPP.

How we disclose information

We may disclose information collected through the Site to:

• Vendors and service providers who help us operate the Site, such as website hosting, IT support, email delivery, and spam protection
• Our scheduling platform and patient portal, when you use the "Book a visit" link or complete intake forms
• Professional advisors, such as legal and accounting, as necessary for our business operations
• Government authorities or other parties when required by law, court order, or legal process
• A successor entity in the event of a merger, acquisition, or sale of some or all of our business

We do not disclose PHI to third parties for marketing or advertising purposes except as permitted by HIPAA and described in our NPP.

Data retention

We retain information collected through the Site for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with our legal obligations, resolve disputes, and enforce our agreements. Retention of PHI is governed separately by applicable law and our record-retention policies as described in our NPP.

Children's privacy

The Site is not directed to, and is not intended for use by, children under the age of eighteen (18). We do not knowingly collect personal information through the Site from children under 13. If we learn that we have inadvertently collected such information, we will take reasonable steps to delete it.

Nevada consumer health data

Nevada Senate Bill 370 (the "Consumer Health Data Privacy Law") regulates certain "Consumer Health Data" that is not otherwise regulated as PHI under HIPAA. To the extent this law applies to information you provide through the Site as a Nevada resident, you may have the right to:

• Confirm whether we are collecting your Consumer Health Data and access that data
• Withdraw consent for the collection or sharing of your Consumer Health Data
• Request deletion of your Consumer Health Data

To exercise these rights, please contact us using the information in Section 13 below. We will respond consistent with applicable law. Information that constitutes PHI under HIPAA is governed by our NPP, not this section.

Payment information

We do not collect or process payment information through the Site. If you have insurance, we bill your insurance carrier directly following your visit. If you are a self-pay patient, or if a co-pay, deductible, or other balance applies, that payment is collected directly by our practice, typically through our scheduling platform or patient portal, at or before your appointment, not through this website.

Third-party links

The Site may contain links to third-party websites or platforms, including our scheduling platform, our patient portal, and any social media pages we maintain. This Privacy Policy does not apply to those third-party sites, and we are not responsible for their privacy practices. We encourage you to review the privacy policy of any third-party site before providing information.

Security

This section describes the safeguards we use to protect information collected directly through the Site itself, such as messages sent through our contact form. PHI handled through our scheduling platform and patient portal is separately protected under HIPAA's Security Rule and governed by our Business Associate Agreements with those vendors, as described in Section 3.

We use reasonable administrative, technical, and physical safeguards designed to protect information under our control. No method of transmission or storage is ever completely without risk, which is why we maintain layered protections and BAAs with vendors handling PHI rather than relying on any single safeguard. If you believe your information has been compromised, please contact us immediately using the information below.

Contacting us

If you have questions about this Privacy Policy or how we handle your information, please contact us:

KieTre Medical and Behavioral Clinic, PLLC
5710 Simmons Street, Suite #3
North Las Vegas, NV 89031
Phone: 725-527-7307
Email: frontdesk@kietrembc.com

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this page periodically.