Website Privacy, Cookie & SMS Policy

Effective Date: October 8, 2026

Spiras Health, Inc. (“Spiras,” “we,” “us,” or “our”) respects your privacy and is committed to protecting information collected through our websites and online services.

This Website Privacy, Cookie & SMS Policy explains how information may be collected and used when you visit our websites or interact with our online services and text-message programs.

This policy does not replace our HIPAA Notice of Privacy Practices.

1. Information We May Collect

Depending on how you interact with our websites and services, we may collect:

If you submit health information through a patient portal, secure intake process, or other system specifically designed to receive PHI, that information may be subject to HIPAA and our Notice of Privacy Practices.

2. Cookies

Our websites may use cookies and similar technologies.

Cookies are small files or identifiers that help websites remember information about visitors and operate properly.

We may use cookies for:

3. Strictly Necessary Cookies

Strictly necessary cookies may be required for website functionality.

These may support security, authentication, session management, navigation, and privacy preferences.

Where a cookie is necessary for the website to function, disabling it may affect website functionality.

4. Functional Cookies

Functional cookies may allow our website to remember choices and provide enhanced functionality.

5. Analytics

We may use analytics technologies to understand how visitors use our website and to improve website performance.

Before deploying an analytics technology, Spiras will evaluate the information it collects and where that information is sent.

Spiras does not authorize analytics or tracking technologies to collect or transmit PHI in violation of applicable law.

6. Advertising and Marketing Technologies

Spiras will evaluate advertising pixels, retargeting technologies, social-media pixels, session-replay technologies, and similar technologies before deployment.

Such technologies will not be used in a manner that results in an impermissible disclosure of PHI.

7. Website Tracking and Health Information

Because Spiras is a health care organization, information collected through our websites may, depending on the circumstances, relate to an individual’s health care.

We therefore take additional precautions concerning online tracking technologies.

A cookie banner or acceptance of this policy does not by itself authorize a disclosure of PHI when applicable law requires a separate authorization or other legal permission.

8. Third-Party Service Providers

We may use third-party companies to provide website hosting, security, communications, scheduling, technology, analytics, or other services.

Where a third party is a HIPAA business associate, Spiras will enter into an appropriate Business Associate Agreement when required by law.

Third-party websites and services may have their own privacy policies.

9. Information Sharing

We may disclose information:

We do not sell PHI.

10. Your Cookie Choices

Depending on the technologies used on a particular website, you may be able to control certain cookies through your browser settings or a cookie-preference tool.

You may be able to:

Disabling certain cookies may affect website functionality.

11. Do Not Track

Some browsers provide a “Do Not Track” setting.

Because there is not a uniform technical standard governing all Do Not Track signals, our websites may not respond to every such signal.

12. Security

We use reasonable administrative, technical, and physical safeguards appropriate to the information we maintain.

No website, electronic transmission, or storage system can be guaranteed to be completely secure.

Do not submit sensitive health information through a general website form unless the form is specifically designed and intended to receive such information.

13. Text Messaging / SMS

If you voluntarily provide your telephone number and separately opt in to receive text messages from Spiras, we may send text messages concerning your health care services.

Depending on the program in which you enroll, messages may include:

Message frequency will vary depending on your interaction with Spiras.

Message and data rates may apply.

Opting Out

You may opt out of non-emergency text messages at any time by replying STOP to a Spiras text message.

After receiving a STOP request, Spiras will take appropriate steps to stop applicable SMS communications.

You may also contact Spiras using the information below to request that text communications stop.

Help

For assistance with Spiras text messaging, contact:

Spiras Health, Inc.
Phone: (629) 204-5840
Email: privacy@spirashealth.com

Privacy

Spiras takes reasonable steps to protect information transmitted through its approved communication systems.

Text messaging is not a completely secure method of communication. Depending on the content of a message and the patient’s communication preferences, text messages may contain limited health-related information.

14. Third-Party Links

Our websites may contain links to websites operated by third parties.

Spiras is not responsible for the privacy or security practices of third-party websites.

15. Children

Our websites are not intended to knowingly collect information from children in circumstances where parental consent is required by applicable law.

16. State Privacy Rights

Spiras provides health care services in Tennessee, Kentucky, and Maryland.

Applicable state privacy and health-information laws may provide additional rights or protections.

Nothing in this policy is intended to limit rights provided by applicable law.

17. Changes to This Policy

We may update this policy from time to time.

When material changes are made, we will update the effective date and provide additional notice when appropriate.

18. Contact Us

Spiras Health, Inc.
111 Westwood Place, Suite 100
Brentwood, Tennessee 37027
Phone: (629) 204-5840
Email: privacy@spirashealth.com
Website: www.spirashealth.com