PRIVACY NOTICE

Last Updated: June 15, 2026

This Privacy Notice for TheraPride, PLLC (doing business as TheraPride Counseling and Wellness) (“we,” “us,” or “our“), describes how and why we might access, collect, store, use, and/or share (“process“) your personal information when you use our services (“Services“), including when you:

• Visit our website at https://therapride.com, or any website of ours that links to this Privacy Notice.

• Use Professional Counseling, Wellness, and Mental Health Services. We are an inclusive counseling and wellness practice offering quality, affirming, evidence-based therapy for teens, adults, couples, families, and groups in Colorado, Maine, and Texas. Our caring, collaborative, and holistic approach encourages clients on their life journeys. We focus on accessible mental health therapy for the LGBTQIA+ community, allies, and marginalized individuals who seek to be seen and valued. We believe everyone has unique worth and deserves kindness, dignity, and respect. You are welcome here!

• Engage with us in other related ways, including any administrative, sales, billing, or inquiry channels.

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at hello@therapride.com.

SUMMARY OF KEY POINTS

This summary provides key points from our Privacy Notice, but you can find out more details about any of these topics by using our table of contents below to find the section you are looking for.

• What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us, the choices you make, and the features you use. Learn more about personal information you disclose to us.

• Do we process any sensitive personal information? Because we provide outpatient mental health counseling, we process Protected Health Information (PHI) and clinical records, which are strictly protected by HIPAA and state laws. We also may process demographic sensitive personal information (such as sexual orientation or gender identity) with your express clinical consent to deliver affirming care. Learn more about sensitive information we process.

• Do we collect any information from third parties? We may collect limited administrative or referral data from outside sources or joint marketing systems. Learn more about information collected from other sources.

• How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, ensure technical security, and comply with state and federal healthcare laws. Learn more about how we process your information.

• In what situations and with which types of parties do we share personal information? We share information only with trusted, HIPAA-compliant service providers (under Business Associate Agreements) to deliver our services, and never for third-party marketing. Learn more about when and with whom we share your personal information.

• How do we keep your information safe? We maintain stringent physical, technical, and administrative safeguards designed to meet or exceed HIPAA security regulations. However, no electronic transmission over the internet can be guaranteed to be 100% secure. Learn more about how we keep your information safe.

• What are your rights? Depending on where you are located geographically, your state’s laws and federal regulations (HIPAA/HITECH) govern your clinical access, modification, and data deletion rights. Learn more about your privacy rights.

• How do you exercise your rights? The easiest way to exercise your rights is by visiting https://therapride.com/contact-us or by emailing us at hello@therapride.com.

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us, our products, or our clinical Services, when you participate in activities on the Services, or otherwise when you contact us.

• Personal Information Provided by You: The personal information we collect depends on the context of your interactions with us, the choices you make, and the features you use. This may include:

  • Names

  • Phone numbers (for clinical coordination, reminders, and administration)

  • Email addresses

  • Contact preferences

  • Debit/credit card numbers (processed securely)

  • Billing addresses

  • Contact or authentication data

  • Mailing addresses

• Sensitive Information: When necessary, with your explicit written consent, or as permitted or required under applicable medical regulations, we process the following categories of sensitive information:

  • Health Data (Protected Health Information / PHI): Including clinical intake documents, medical diagnoses, treatment plans, and session records, managed strictly in compliance with HIPAA.

  • Financial Data: Card details collected exclusively for payment processing.

• Payment Data: We collect data necessary to process your payments if you purchase services or materials. All payment data is handled securely by our integrated clinical payment networks and processors. You may find their privacy policies here: Stripe Privacy Policy and Sessions Health Privacy Policy.

• Social Media Login Data: We may provide you with the option to register or connect with us using your existing social media accounts (e.g., Facebook or X). If you choose to register this way, we collect profile details as described in Section 5.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

Information automatically collected

In Short: Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, and information about how and when you use our Services. This is needed to maintain the technical security, operation, and diagnostic integrity of our Services, and for internal reporting.

Like many businesses, we also collect information through cookies and similar technologies. You can find out more about this in our Cookie Notice: https://www.therapride.com/cookies.

The information we collect includes:

• Log and Usage Data: Diagnostic and performance information our servers automatically collect when you access the Site, recorded in log files.

• Device Data: Information about your computer, phone, tablet, or other device used to access the Services, including IP address, browser type, and mobile carrier details.

• Location Data: Geolocation data (either precise or imprecise) indicating where your device is located. You can opt out of location collection by disabling location settings on your mobile device.

Google API

Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Information collected from other sources

In Short: We may collect limited data from public databases, referral sources, social media platforms, and other outside platforms.

In order to enhance our ability to provide relevant services, wellness information, and updates, we may obtain information about you from outside sources, such as public databases, clinical referral partners, social media platforms, or joint programs. If you interact with us on social media, we may collect profile information based on your platform-specific privacy settings.

2. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, ensure HIPAA compliance, maintain physical and technical security, prevent fraud, and comply with state/federal laws. We do not use clinical health data for marketing purposes.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

• To facilitate clinical intake and authentication: Managing your access to our secure client portals and keeping clinical profiles in secure working order.

• To deliver and facilitate delivery of therapeutic services: Processing your demographic and administrative data to coordinate counseling, therapy, and group sessions.

• To respond to inquiries and provide administrative support: Addressing administrative queries, billing updates, or portal accessibility requests.

• To send scheduling and administrative communications: Delivering administrative information, practice notices, scheduling updates, or changes to our legal terms.

• To coordinate SMS / text reminders (10DLC Compliant): Using your provided mobile telephone number to send appointment confirmations, automated scheduling reminders, billing invoices, and responsive customer care texts.

• To evaluate and improve our Services: Identifying usage trends to enhance accessibility and user experience across our digital touchpoints.

3. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION? (BAA & SERVICE PROVIDERS)

In Short: We may share your data with third-party vendors and service providers who perform critical business operations for us. When sharing clinical or Protected Health Information (PHI), we strictly limit disclosures to partners with whom we have executed a Business Associate Agreement (BAA) in compliance with HIPAA.

We have contracts and data protection agreements in place with our third-party partners. This means they cannot do anything with your personal information unless we have contractually instructed them to do so. They commit to securing the data they hold on our behalf and retaining it only for the periods we dictate.

A. HIPAA-Compliant Partners (Signed BAAs)

For clinical operations, communications, and Electronic Health Records (EHR) management, we share Protected Health Information (PHI) and administrative metadata strictly with the following HIPAA-compliant partners under fully executed Business Associate Agreements (BAAs):

1. Sessions Health (Electronic Health Records & Client Portal)

   • Purpose: Clinical record keeping, billing management, treatment plans, clinical intake forms, and secure client communication portal.

   • Privacy Policy: Sessions Health Privacy Policy

2. Telzio (VoIP and SMS Telecommunications Vendor)

   • Purpose: Standard telecommunication, administrative VoIP calls, and compliant SMS text transmissions (appointment reminders, scheduling, and client support messaging).

   • Privacy Policy: Telzio Privacy Policy

3. Google Workspace (Business & Administrative Infrastructure)

   • Purpose: HIPAA-secure professional email (hello@therapride.com), cloud file storage, and encrypted administrative calendar coordination.

   • Privacy Policy: Google Privacy & Terms Policy

B. Non-Clinical Service Providers (No PHI Shared)

We utilize the following third-party partners for website design, hosting, e-commerce, and branded merchandise fulfillment. We strictly prohibit the transmission, storage, or processing of any Protected Health Information (PHI) or sensitive medical data within these non-clinical systems:

1. WP Engine (WordPress Engine – Website Hosting Provider)

   • Purpose: Fully managed, high-performance hosting for our public website infrastructure.

   • Privacy Policy: WP Engine Privacy Policy

2. Wix (Website Design & Operational Infrastructure)

   • Purpose: Graphical design interface, back-office administration, and generic public web forms.

   • Privacy Policy: Wix Privacy Policy

3. Printify (Branded Merchandise & E-Commerce Fulfillment)

   • Purpose: Production and print-on-demand fulfillment for TheraPride branded wellness apparel and promotional merchandise.

   • Privacy Policy: Printify Privacy Policy

C. SMS Non-Sharing and Carrier Protection Clause (10DLC Compliance)

To maintain complete compliance with telecommunication carrier policies and The Campaign Registry (TCR) expectations, TheraPride establishes the following absolute data protection rule:

• Strict Opt-In Exclusion: Mobile telephone numbers, opt-in data, consent records, and SMS messaging originator data will never be shared, sold, rented, leased, or disclosed to any third parties, affiliates, or advertising networks for marketing, commercial, or promotional purposes under any circumstances.

• This exclusion applies to all text messaging originator opt-in data and consent; this specific category of information is completely excluded from any third-party sharing.

We also may need to share your personal information in the following non-marketing situations:

• Business Transfers: In connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our clinical practice to another legally registered healthcare entity.

• Affiliates: With professional affiliates under common corporate control, in which case we require them to strictly honor this Privacy Notice.

D. Social Media Outreach and Public Relations (Meta, TikTok, LinkedIn — Absolute PHI Isolation)

We maintain professional, non-clinical outreach profiles on social media networks including Meta (Facebook & Instagram), TikTok, and LinkedIn. These profiles are used exclusively to share educational resources, mental health advocacy content, and general clinical news.

• Strict HIPAA Protection and Tracking Pixel Restriction: In accordance with federal guidelines established under the HIPAA Privacy Rule regarding the use of online tracking technologies, we do not use any marketing pixels, tracking beacons, or conversion APIs (such as the Meta Pixel, TikTok Pixel, or LinkedIn Insight Tag) on any webpage, portal, or form where Protected Health Information (PHI) is processed, or where scheduling, intake, or billing transactions occur. All patient portals, intake forms, and clinical booking mechanisms are technically isolated from these third-party social analytics tools to ensure complete data security.

• No Database Matching: We do not disclose, upload, or sync clinical records, patient lists, email addresses, or mobile numbers with these social networks to generate targeted custom audiences or promotional lookalike profiles.

• Public Interaction Disclaimer: Any direct messages (DMs), comments, or public interactions on Meta, TikTok, or LinkedIn are non-confidential. Clients are strictly prohibited from sharing personal therapeutic details or clinical records requests on these public platforms. To protect your clinical safety, all coordination must be conducted via our secure client portal.

• Third-Party Privacy Disclosures: For details on how these platforms manage user data, please review their corresponding privacy policy pages below:

  • Meta (Facebook & Instagram): Meta Privacy Policy

  • TikTok: TikTok Privacy Policy

  • LinkedIn: LinkedIn Privacy Policy

4. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In Short: We may use cookies and other tracking technologies to collect and store your administrative information.

We may use cookies and similar tracking technologies (like web beacons and pixels) to gather information when you interact with our public website. These technologies help us maintain the security of our Services, prevent crashes, save preferences, and assist with basic site functions.

To the extent these online tracking technologies are deemed to be a “sale” or “sharing” of personal data under applicable US state laws, you can opt out of these technologies by submitting a request as described below under Section 10. For detailed parameters, please review our Cookie Notice: https://www.therapride.com/cookies.

Google Analytics

We may share your non-clinical, aggregated web traffic information with Google Analytics to track and analyze the use of the Services. To opt out of being tracked by Google Analytics across our digital services, please visit Google Analytics Opt-Out Browser Add-on.

Ad Network Tracking Exclusions

In alignment with our strict HIPAA compliance program, we prohibit the execution of third-party advertising tracking scripts (including the Meta Pixel, TikTok Pixel, and LinkedIn Insight Tag) on any page of our website that captures clinical intakes, collects billing information, or allows clients to coordinate scheduling. General, aggregated, non-clinical website visitor data processed on our public informational pages is secured to prevent linkage to any individual’s health status or identity.

5. HOW DO WE HANDLE YOUR SOCIAL LOGINS?

In Short: If you choose to register or log in to our Services using a social media account, we may have access to certain profile information about you.

Our Services may offer you the ability to register or log in using third-party social media accounts. When you do so, we receive public profile details (such as your name, email address, profile picture, and lists) from your social provider. We use this information solely for the purposes described in this Privacy Notice. We do not control, and are not responsible for, how third-party social media platforms handle your data, and we recommend reviewing their specific privacy policies.

6. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Notice, or as explicitly mandated by healthcare regulations and state licensing board retention laws.

• Clinical Records Retention (HIPAA & State Laws): Protected Health Information (PHI) and clinical patient records are retained in compliance with Texas, Colorado, and Maine state licensing laws, which typically mandate a minimum retention period of seven (7) years from the date of the last clinical service encounter, or, in the case of a minor, up to seven (7) years after the client reaches the age of majority (18), whichever is longer.

• Non-Clinical Data: General administrative data, portal registration details, and website analytics are retained only for as long as your user account remains active, or as required for accounting or legal validation.

When we have no ongoing legitimate business or statutory clinical need to process your personal information, we will either delete or anonymize such information.

7. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short: We aim to protect your personal information through a robust framework of administrative, physical, and technical security measures.

We have implemented extensive and appropriate security measures designed to protect the safety of any personal information we process. These include encrypted server systems, multi-factor authentication (MFA) protocols on all administrative portals, physical door/file locks, secure document shredding, and strictly segmented employee access parameters.

Despite these safeguards, no electronic transmission over the internet or storage system can be guaranteed 100% secure. Although we perform routine security audits and maintain active firewalls, transmission of data to and from our Services is at your own risk. You should only access clinical portals or complete intake tasks within a secure, private digital environment.

8. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: You may review, change, or terminate your administrative portal account at any time. Your clinical medical records are governed by specific federal HIPAA access and amendment standards.

• Withdrawing Your Consent: If we rely on your consent to process personal or demographic information, you have the right to withdraw your consent at any time by contacting us directly. This will not affect the lawfulness of processing conducted prior to withdrawal.

• Opting Out of Marketing & SMS Reminders: You can unsubscribe from our newsletters, billing notifications, or SMS reminders at any time:

  • For emails: Click the “Unsubscribe” link included at the bottom of the message.

  • For SMS: Reply STOP directly to any text message received from our office. You can also reply HELP for assistant updates.

  • Please note: Opting out of administrative SMS text reminders will not impact your access to therapy or clinical services. We will coordinate necessary reminders through alternative, HIPAA-secure methods.

• Clinical Records Portability and Access (HIPAA): Pursuant to the HIPAA Privacy Rule, you have the right to inspect and obtain copies of your medical and billing records maintained in our designated record set, subject to narrow legal exceptions (such as raw psychotherapy notes or records compiled in reasonable anticipation of legal proceedings).

9. CONTROLS FOR DO-NOT-TRACK FEATURES

Most web browsers and some mobile operating systems include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference. At this stage, no uniform global industry standard for DNT recognition has been finalized. As such, we do not currently respond to automated DNT browser signals.

10. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, or Virginia, you have specific consumer privacy rights regarding access, deletion, and data portability. However, federal HIPAA regulations preempt state consumer laws regarding your protected health and medical records.

Categories of Personal Information We Collect

We have collected the following categories of personal information in the past twelve (12) months:

Sources of Personal Information

We collect personal information directly from your submissions on our website, from our secure client intake portal, from telecommunication interactions, and from automatically collected diagnostic metadata.

How We Use and Share Personal Information

We do not sell, share, rent, or lease your personal information for targeted third-party advertising or commercial advantage. We disclose personal information strictly to our service providers and clinical partners pursuant to written contracts and HIPAA-compliant BAAs.

Your Consumer Rights

Depending on your state of residence, you may have the right to:

1. Confirm whether or not we are processing your personal data.

2. Access and obtain a portable copy of the personal data we maintain about you.

3. Correct inaccuracies in your personal details.

4. Request the deletion of your personal data.

5. Limit the use and disclosure of your sensitive personal information.

6. Opt out of targeted advertising cookies or profiling systems.

How to Exercise Your Rights

To submit a verifiable consumer request, please contact our administrative office:

• Online: https://therapride.com/contact-us

• Email: hello@therapride.com

• Post: TheraPride, PLLC, Attn: Data Privacy, 207 W. Hickory St. Suite 203, Denton, TX 76201

We will verify your identity using securely established portal login criteria, or by cross-referencing your legal name, billing address, and date of birth. We will respond to your request within forty-five (45) days of receipt.

11. TWIPLA WEB ANALYTICS

TWIPLA is a privacy-first website analytics service that measures traffic on our website and collects non-personally identifiable behavioral metrics from our visitors. We use TWIPLA statistics strictly to improve our web presentation and user accessibility. TWIPLA does not use cookies for reach measurement, does not identify individual visitors, and does not merge web traffic logs with any other personal databases.

12. DO WE MAKE UPDATES TO THIS NOTICE?

In Short: Yes, we will update this notice as necessary to stay compliant with state licensing boards, federal HIPAA guidelines, and carrier communication rules.

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated “Revised” date at the top of this document. If we make material changes, we will notify you by prominently posting a notice on our website homepage or by sending a direct email to registered clients. We encourage you to review this Privacy Notice regularly.

13. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions, comments, or a privacy complaint regarding our data handling or clinical privacy practices, you can contact our Data Protection Officer (DPO):

TheraPride, PLLC

Attn: Data Protection Officer / Privacy Official

207 W. Hickory St., Suite 203

Denton, TX 76201

United States

Phone: (214) 326-0737

Email: hello@therapride.com

14. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Based on the applicable laws of your state of residence, you may request access to, correction of, or deletion of the personal information we maintain. To submit a secure request to review, update, or delete your non-clinical personal data, please visit our contact portal: https://therapride.com/contact-us or email us directly at hello@therapride.com.

To request access to or coordinate a physical copy transfer of your HIPAA-protected clinical medical records, please submit your request in writing via our secure Client Portal or contact our Privacy Official at the administrative address listed above.