WEBSITE PRIVACY POLICY

Effective Date: July 22, 2026
Last Updated: July 22, 2026

1. Introduction

SiLou Health (“Practice,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information you provide when you visit www.silouhealth.com, communicate with our office, request an appointment, subscribe to communications, or use other services available through our website.

This Website Privacy Policy explains:

• The information we collect;

• How we use that information;

• When we may disclose information;

• How cookies and analytics technologies are used;

• Your privacy choices and rights; and

• How you can contact us about privacy concerns.

By accessing or using our website, you acknowledge the practices described in this Website Privacy Policy.

2. Relationship to Our HIPAA Notice of Privacy Practices

This Website Privacy Policy applies primarily to information collected through our public website and related online services.

When information is created, received, maintained, or transmitted by the Practice and qualifies as protected health information under the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations (“HIPAA”), that information is governed by our HIPAA Notice of Privacy Practices and other applicable healthcare privacy laws.

Our HIPAA Notice of Privacy Practices describes how we may use and disclose protected health information, your rights regarding that information, and how you may submit a HIPAA-related complaint.

Please request our HIPAA Notice of Privacy Practices from our office.

If there is a conflict between this Website Privacy Policy and our HIPAA Notice of Privacy Practices regarding protected health information, the HIPAA Notice of Privacy Practices and applicable law will control.

3. Information We Collect

Depending on how you use our website, we may collect the following categories of information.

A. Contact and Identifying Information

We may collect:

• First and last name;

• Email address;

• Telephone number;

• Mailing address;

• Date of birth;

• Preferred contact method;

• State of residence;

• Parent, guardian, or authorized representative information; and

• Other information you voluntarily provide.

B. Appointment and Service Request Information

When you request an appointment or information about our services, we may collect:

• Requested service;

• Appointment preferences;

• Availability;

• Insurance information;

• Referral information;

• General reason for seeking services;

• Current provider information; and

• Information needed to determine whether our office can provide the requested service.

Please do not include detailed medical, psychiatric, medication, or other highly sensitive information in a general website contact form unless the form is specifically identified as a secure method for submitting such information.

Submitting an appointment request does not establish a provider-patient relationship and does not guarantee that an appointment will be available or accepted.

C. Communications

We may collect information contained in communications you send to us through:

• Website contact forms;

• Appointment request forms;

• Email;

• SMS or text messaging;

• Telephone calls;

• Voicemail;

• Secure patient portals; and

• Other communication tools.

D. Email and SMS Enrollment Information

When you subscribe to email or text communications, we may collect:

• Your name;

• Email address;

• Mobile telephone number;

• Communication preferences;

• Date and time of enrollment;

• Consent records;

• Messages exchanged with our office; and

• Opt-out or unsubscribe requests.

E. Payment and Transaction Information

When you make an online payment, payment information may be collected directly by a third-party payment processor.

Depending on the payment service used, we may receive limited transaction information, such as:

• Your name;

• Billing address;

• Payment amount;

• Payment date;

• Transaction status;

• Payment method type; and

• Limited payment account details, such as the last four digits of a card.

We generally do not directly store complete payment-card numbers or card security codes when payments are processed through an independent payment processor.

F. Device and Website Usage Information

When you access our website, our service providers or we may automatically collect:

• Internet Protocol address;

• Browser type;

• Device type;

• Operating system;

• Pages viewed;

• Links selected;

• Date and time of access;

• Referring website;

• Approximate location derived from an Internet Protocol address;

• Session information;

• Website performance information; and

• Cookie or similar technology identifiers.

G. Information From Third Parties

We may receive information from third parties, including:

• Scheduling platforms;

• Patient portal providers;

• Payment processors;

• Referral sources;

• Insurance companies;

• Analytics providers;

• Communications vendors;

• Authorized family members or representatives; and

• Other individuals or organizations acting with your authorization or as permitted by law.

4. How We Use Information

We may use personal information to:

• Respond to questions and inquiries;

• Process appointment requests;

• Determine whether we provide services in your state;

• Contact you about scheduling or office matters;

• Confirm, remind, reschedule, or cancel appointments;

• Provide requested healthcare or administrative services;

• Verify insurance or payment information;

• Process payments and maintain transaction records;

• Send requested email or SMS communications;

• Provide patient portal access;

• Maintain records required for operational, clinical, billing, or legal purposes;

• Improve our website, services, and user experience;

• Measure website traffic and performance;

• Detect, investigate, and prevent fraud, misuse, or security incidents;

• Protect the rights, safety, and property of patients, visitors, personnel, and others;

• Comply with legal, regulatory, licensing, insurance, and professional obligations; and

• Enforce our website terms, office policies, or contractual rights.

We may also use information that has been aggregated or de-identified so that it cannot reasonably identify an individual.

5. HIPAA and Sensitive Health Information

Information submitted through a website is not automatically protected health information in every circumstance. However, information may become protected health information when it is received or maintained by the Practice in connection with treatment, payment, or healthcare operations.

To the extent website information constitutes protected health information, we will use and disclose it only as permitted or required by HIPAA and other applicable laws.

We do not knowingly use or disclose protected health information for targeted online advertising.

Visitors should use the secure patient portal or another method approved by the Practice when sending detailed clinical information, medical records, medication information, or other sensitive health information.

6. Cookies and Similar Technologies

Our website may use cookies, pixels, scripts, local storage, and similar technologies.

Cookies are small files placed on a browser or device that may help a website function, remember preferences, measure performance, and understand how visitors interact with the website.

We may use the following types of technologies:

Essential Cookies

These technologies support core website functions, security, navigation, form operation, accessibility, and fraud prevention.

Preference Cookies

These technologies remember choices such as language, display, or communication preferences.

Analytics Cookies

These technologies help us understand website traffic, page usage, navigation patterns, errors, and website performance.

We seek to configure website analytics tools to minimize the collection of sensitive information. We do not knowingly permit analytics tools to collect information entered into secure patient portal pages or protected health information submitted through secure clinical systems unless the use is permitted by applicable law and appropriate contractual protections are in place.

You may be able to manage nonessential cookies through:

• A cookie-consent tool displayed on our website;

• Your browser settings;

• Device privacy settings; or

• A legally recognized browser-based opt-out preference signal.

Disabling cookies may affect the operation of certain website features.

7. Online Tracking and Advertising

We do not sell protected health information.

We do not knowingly disclose protected health information to advertising companies for behavioral advertising.

Our website may use analytics and measurement tools that receive limited device and website usage information. We do not authorize analytics providers to use information collected for purposes unrelated to providing services to us except as permitted by law and the applicable service agreement.

Where required by law, we will provide an opportunity to opt out of the sale or sharing of personal information, targeted advertising, or qualifying profiling activities.

8. SMS and Text Messaging

SMS Consent Communication:  

The information obtained as part of the SMS consent process will not be shared with third parties for marketing purposes.   

Types of SMS Communications:  

If you have consented to receive text messages from SiLou Health, you may receive conversational messages related to the following:  

Appointment reminders  
Follow-up messages  
Scheduling Updates  
Promotional or Marketing Messaging

Message Frequency: Message frequency may vary. You may receive up to 2 SMS messages per week regarding your appointments or account status. 

Potential Fees for SMS Messaging: Standard message and data rates may apply, depending on your mobile carrier’s pricing plan. These fees may vary if the message is sent domestically or internationally.    

Opt-In Method: You may opt in to receive SMS messages by submitting an online form and selecting the SMS consent checkbox.

Opt-Out Method:  You can opt out of receiving SMS messages at any time. To do so, reply "STOP" to any SMS message you receive. Alternatively, you can contact us directly to request removal from our messaging list.  

Help: Reply HELP for assistance or contact us at (401) 602 - 9226 or visit our Contact Us page. 

Additional Options:  If you do not wish to receive SMS messages, you can choose not to check the SMS consent box on our forms.   

• Standard Messaging Disclosures: 
   
  . Message and data rates may apply.
  . Message frequency may vary.
  . Reply STOP to opt out at any time.
  . Reply HELP for assistance or visit our Privacy Policy and Terms & Conditions pages.

Text messaging may not always be encrypted. Do not send urgent, emergency, or highly sensitive clinical information by text message.

9. Email Communications

When you enroll in email communications, we may send administrative, educational, service-related, or promotional messages based on your request and preferences.

You may unsubscribe from promotional emails by using the unsubscribe link included in the email or by contacting our office.

Unsubscribing from promotional messages will not necessarily prevent us from sending nonpromotional communications related to appointments, treatment, payments, legal notices, security, or an existing patient relationship.

Email may not always be encrypted. Do not use ordinary email to send urgent or highly sensitive clinical information unless specifically instructed by the Practice.

10. How We Disclose Information

We may disclose personal information in the following circumstances.

A. Service Providers

We may disclose information to vendors that provide services such as:

• Website hosting;

• Secure forms;

• Appointment scheduling;

• Electronic health records;

• Patient portals;

• Payment processing;

• Billing;

• Email delivery;

• SMS messaging;

• Telephone services;

• Cloud storage;

• Cybersecurity;

• Data backup;

• Analytics; and

• Technical support.

When a vendor receives protected health information on our behalf, we require appropriate HIPAA business-associate protections when required by law.

B. Healthcare and Administrative Purposes

We may disclose information to healthcare providers, insurance companies, billing services, laboratories, pharmacies, facilities, referral sources, or other parties when authorized or permitted for treatment, payment, healthcare operations, or other lawful purposes.

C. Legal and Safety Purposes

We may disclose information when we reasonably believe disclosure is necessary to:

• Comply with a law, court order, subpoena, warrant, or regulatory request;

• Respond to licensing, insurance, or government authorities;

• Report suspected abuse, neglect, exploitation, or threats as required by law;

• Prevent or respond to a serious safety concern;

• Protect our legal rights;

• Detect fraud or security incidents; or

• Investigate misuse of our website or services.

D. Business Transactions

Information may be disclosed as part of a merger, acquisition, financing, reorganization, sale of assets, or similar business transaction, subject to applicable healthcare privacy laws and confidentiality requirements.

E. With Your Direction or Authorization

We may disclose information when you request, direct, or authorize us to do so.

11. We Do Not Sell Personal Information

We do not sell personal information for monetary compensation.

We do not sell protected health information.

We do not share mobile opt-in information with third parties for their independent marketing purposes.

This statement does not prevent us from using service providers that process information on our behalf to operate the website, schedule appointments, process payments, send communications, maintain security, or provide other requested services.

12. Data Retention

We retain personal information for only as long as reasonably necessary for the purposes described in this policy, including:

• Responding to inquiries;

• Providing services;

• Maintaining clinical or billing records;

• Documenting consent;

• Processing transactions;

• Meeting insurance, licensing, contractual, legal, or regulatory requirements;

• Resolving disputes;

• Preventing fraud; and

• Protecting our legal rights.

When website information becomes part of a patient’s medical or billing record, it may be retained according to medical-record retention requirements and our record-management policies.

We may delete, de-identify, or securely destroy information when it is no longer required, subject to applicable law and technical limitations.

13. Security

We use reasonable administrative, physical, and technical safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

These safeguards may include:

• Access controls;

• Password protections;

• Encryption where appropriate;

• Secure systems;

• Workforce training;

• Vendor oversight;

• Monitoring;

• Data backup;

• Incident-response procedures; and

• Policies limiting access to individuals with a legitimate need for the information.

No website, electronic transmission, storage system, email system, or text-message service can be guaranteed to be completely secure. You should use caution when sending information electronically.

14. Your Privacy Rights

Depending on your state of residence, the type of information involved, and the law that applies, you may have the right to:

• Confirm whether we process your personal information;

• Request access to personal information;

• Request correction of inaccurate information;

• Request deletion of certain information;

• Obtain a portable copy of certain information;

• Withdraw consent where processing is based on consent;

• Opt out of the sale of personal information;

• Opt out of targeted advertising;

• Opt out of certain automated profiling activities;

• Limit certain uses of sensitive information;

• Designate an authorized agent;

• Appeal the denial of a privacy request; and

• Exercise privacy rights without unlawful discrimination.

These rights are subject to legal exceptions. For example, we may be required to retain information contained in medical, billing, consent, insurance, legal, or compliance records.

Requests involving protected health information will be processed according to our HIPAA Notice of Privacy Practices.

15. How to Submit a Privacy Request

To submit a privacy request, contact:

SiLou Health
Attention: Office Manager
Address: 126 Prospect St, Suite 103, Pawtucket RI 02860
Telephone: 401-6029226
Email: officemanager@silouhealth.com
Website: www.silouhealth.com

Please write “Privacy Request” in the subject line or state that you are making a privacy request.

We may need to verify your identity before processing a request. Verification may require information reasonably necessary to confirm that you are the person associated with the information.

Authorized agents may be required to provide proof of authorization. We may also contact the individual directly to verify the request.

We will respond within the period required by applicable law. When permitted, we may extend the response period and will provide notice of the extension.

When a right to appeal applies, you may appeal a denied request by contacting us and writing “Privacy Appeal.”

16. Children’s Privacy

Our public website is not directed to children under 13, and we do not knowingly collect personal information directly from children under 13 through the public website without appropriate authorization.

When services are requested for a minor, information should be submitted by a parent, legal guardian, or other legally authorized representative, except where applicable law permits the minor to act independently.

If you believe a child has submitted information improperly, contact us so that we may review the matter.

17. Third-Party Websites and Services

Our website may contain links to or integrations with third-party websites, scheduling systems, payment platforms, patient portals, maps, social-media pages, or other services.

Those services may have their own privacy policies and security practices. This Website Privacy Policy applies to our practices and does not control the independent practices of third parties.

You should review the privacy policy of a third-party service before submitting information through that service.

18. Emergency and Crisis Communications

The website, contact forms, email accounts, and text-message systems are not continuously monitored and must not be used for emergencies.

If you or another person may be in immediate danger, call 911 or go to the nearest emergency department.

For mental-health or suicide-related crisis support in the United States, call or text 988.

19. Changes to This Policy

We may update this Website Privacy Policy periodically to reflect changes in our services, technologies, vendors, legal obligations, or privacy practices.

The revised policy will be posted on this page with an updated “Last Updated” date. Material changes may also be communicated through an additional notice when appropriate.

Your continued use of the website after an updated policy is posted is subject to the revised policy.

20. Contact Us

Questions, complaints, or concerns about this Website Privacy Policy may be directed to:

SiLou Health
Attention: Office Manager
Address: 126 Prospect St, Suite 103, Pawtucket RI 02860
Telephone: 401-6029226
Email: officemanager@silouhealth.com
Website: www.silouhealth.com

For complaints specifically involving protected health information, please refer to the complaint procedures in our HIPAA Notice of Privacy Practices.