Effective Date: August 11, 2026

Cedar Creek Cosmo ("Cedar Creek Cosmo," "we," "us," or "our") respects your privacy and is committed to protecting the personal and health information you share with us. This Privacy Policy explains what information we collect, how we use and protect it, and your rights regarding that information, in compliance with applicable federal and Texas state law.

This policy applies to information collected through our website (cedarcreekcosmo.com), our online booking system, our telehealth services, and in connection with your care at our Gun Barrel City, Texas location.

1. Information We Collect

We may collect the following types of information:

• Contact information: name, phone number, email address, mailing address, submitted through our website contact form or booking system.

• Health information: medical history, health conditions, medications, treatment goals, and other clinical information you provide during intake, consultations, telehealth visits, or in-clinic appointments.

• Scheduling and account information: appointment history and preferences, collected through our booking platform, Zenoti.

• Website usage information: basic technical data such as browser type and device information, collected automatically when you visit our website.

2. How We Use Your Information

We use the information we collect to:

• Schedule and manage appointments

• Provide medical weight loss, hormone therapy, aesthetic, and other services you request

• Communicate with you about your care, appointments, and account

• Process billing and payment

• Comply with legal, regulatory, and professional obligations

• Improve our website and services

We do not sell your personal or health information.

3. Protected Health Information (PHI) and HIPAA

Cedar Creek Cosmo is a healthcare provider, and certain information we collect and maintain as part of your care constitutes Protected Health Information (PHI) under the Health Insurance Portability and Accountability Act (HIPAA). We maintain administrative, physical, and technical safeguards designed to protect the confidentiality, integrity, and security of your PHI, consistent with HIPAA's Privacy and Security Rules.

Our full Notice of Privacy Practices, which describes in detail how we may use and disclose your PHI and your rights under HIPAA, is provided to patients at intake and is available upon request at our office or by contacting us using the information in Section 8 below.

4. Texas Medical Records Privacy

In addition to HIPAA, Cedar Creek Cosmo complies with the Texas Medical Records Privacy Act (Texas Health & Safety Code, Chapter 181), which imposes privacy and security obligations on covered entities in Texas that meet or exceed federal requirements. This includes limits on the use and disclosure of your health information and workforce training on the safeguarding of patient information.

5. Third-Party Service Providers

We use trusted third-party vendors to help operate our practice, including:

• Zenoti — our appointment scheduling and booking platform. Zenoti processes scheduling-related information on our behalf. You can review Zenoti's own privacy notice at zenoti.com/trust/privacy-notice for information about how Zenoti handles data as our processor — this is in addition to, not a substitute for, this policy.

• Zenoti — our clinical documentation and telehealth platform, used to securely store and manage your clinical records.

This vendor are contractually and/or by policy required to safeguard your information and may only use it to provide services on our behalf.

6. Cookies and Website Data

Our website may use basic cookies or similar technologies to support site functionality and understand general site usage. You can control cookies through your browser settings; disabling cookies may affect some website features.

7. Your Rights

You have the right to:

• Request access to the personal and health information we maintain about you

• Request correction of inaccurate information

• Request restrictions on certain uses or disclosures of your PHI, as described in our Notice of Privacy Practices

• Request a copy of your medical records, consistent with Texas law and our records policies

To exercise any of these rights, please contact us using the information below.

8. Contact Us

If you have questions about this Privacy Policy or how we handle your information, please contact us:

Cedar Creek Cosmo 426 S. Gun Barrel Lane, Suite B Gun Barrel City, TX 75156 Phone: 903-802-5130 Email: cedarcreekcosmo@gmail.com

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised effective date.