Crest IV Therapy

Website Privacy Policy

Website Privacy Policy

Effective Date: October 19, 2026

Last Updated: October 19, 2026

This Website Privacy Policy describes how Crest IV Management LLC dba Crest IV Therapy ("Company," "we," "us," or "our") collects, uses, discloses, and safeguards personal consumer information when you visit, browse, or interact with our website, mobile booking portals, and digital platforms (collectively, the "Site").

This policy is designed to comply with applicable state and federal privacy statutes, including the Texas Data Privacy and Security Act (TDPSA), the Texas Identity Theft Enforcement and Protection Act, Section 5 of the Federal Trade Commission (FTC) Act, and digital advertising network policies (Google, Meta).

1. Scope & Crucial HIPAA / TMRPA Medical Carve-Out

This Privacy Policy applies solely to consumer data collected through public web pages, general contact forms, booking widgets, and digital marketing technologies.

  • Protected Health Information (PHI) & Clinical Data: Once you initiate a medical booking, complete clinical intake questionnaires, engage in a Good Faith Exam (GFE), or communicate regarding clinical care, your data transitions under the protections of federal and state medical privacy laws, including the Health Insurance Portability and Accountability Act (HIPAA) and the Texas Medical Records Privacy Act (TMRPA) (Texas Health & Safety Code Chapter 181).

  • Notice of Privacy Practices: For detailed information on how your clinical medical records and PHI are handled, please review our separate HIPAA Notice of Privacy Practices.

2. Information We Collect

In accordance with data minimization principles, we collect only the personal information necessary to fulfill your requests and maintain site operations:

A. Voluntarily Provided Information

  • Contact & Appointment Details: First and last name, email address, telephone number, physical delivery address or service location, and communication preferences.

  • Payment Data: Credit card and billing information submitted through our site. All payments are processed directly through PCI-DSS compliant third-party payment gateways (e.g., Stripe). We do not store full payment card numbers or CVV codes on our servers.

B. Automatically Collected Device & Tracking Data

When you navigate our Site, automated technologies may capture technical information, including:

  • IP address, operating system, browser type, device identifiers, and network connection data.

  • Referring URLs, page interaction metrics, duration of visit, and general geolocation data derived from IP addresses.

3. Cookies, Analytics, & Digital Advertising Pixels

We utilize cookies, web beacons, and tracking scripts (such as Google Analytics and Meta Pixels) to enhance user experience, process bookings, and analyze advertising campaign performance.

  • Essential Cookies: Required for basic site navigation, portal security, and form functionality.

  • Analytics & Performance Cookies: Track aggregate traffic patterns to optimize site speed and layout.

  • Targeting/Advertising Cookies: Used by digital advertising networks to display relevant promotions based on your browsing interests.

Universal Opt-Out Mechanisms (Global Privacy Control)

In compliance with the Texas Data Privacy and Security Act (TDPSA), our website is configured to detect and honor browser-based Universal Opt-Out Mechanisms, such as the Global Privacy Control (GPC). If your browser or device transmits a GPC signal upon visiting our Site, all non-essential advertising cookies and tracking pixels will be automatically suppressed in real time.

4. How We Use Your Information

We process non-medical consumer data for legitimate operational purposes:

  • Scheduling, confirming, and coordinating mobile service appointments.

  • Processing financial transactions and service deposits securely.

  • Measuring digital advertising performance and refining website content.

  • Maintaining website technical security, detecting fraud, and verifying compliance.

  • Complying with applicable legal obligations, subpoenas, or regulatory directives.

5. Third-Party Data Sharing & Vendor Protections

We do not sell, rent, or trade your personal consumer information to third parties. We share information only with trusted processors and software vendors under strict data processing agreements:

  • EHR & Practice Management Vendors: Secure, HIPAA-compliant platforms utilized to facilitate client bookings.

  • Payment Gateways: PCI-compliant processors handling encrypted billing transactions.

  • Analytics & Ad Partners: Trusted digital marketing networks (e.g., Google, Meta) under strict opt-out and privacy controls.

  • Legal Disclosures: We may disclose consumer information if required by law, valid court order, search warrant, or administrative subpoena.

6. Your Rights Under Texas Law (TDPSA)

Under the Texas Data Privacy and Security Act (TDPSA), Texas residents possess specific rights regarding their personal consumer data:

  • Right to Confirm & Access: Right to confirm whether we process your personal data and to access that data.

  • Right to Correct: Right to request correction of inaccuracies in your personal data.

  • Right to Delete: Right to request deletion of personal data provided by or obtained about you (subject to statutory record retention rules).

  • Right to Data Portability: Right to obtain a portable copy of your data in a readily usable format.

  • Right to Opt-Out: Right to opt out of the processing of your personal data for targeted advertising, data sales, or profiling.

How to Exercise Your Rights

To submit a consumer privacy request, please contact us via email at info@crestivtherapy.com or through our web contact portal. We will respond to authenticated requests without undue delay and no later than 45 days from receipt.

If we deny your request, you have the right to submit an appeal by replying to our written response. If your appeal is denied, you may contact the Office of the Texas Attorney General (Consumer Protection Division) at www.texasattorneygeneral.gov.

7. Children's Privacy Notice (COPPA)

Our Site and services are directed strictly to adults aged 18 and older. We do not knowingly collect or solicit personal consumer data from children under the age of 13 without verifiable parental consent in accordance with the Children’s Online Privacy Protection Act (COPPA) and TDPSA rules.

8. Data Security Measures

We implement administrative, physical, and technical safeguards—including SSL/TLS encryption, restricted access controls, and firewall defenses—to protect your personal information against unauthorized access, loss, alteration, or disclosure. However, no digital transmission over the internet can be guaranteed 100% secure.

9. Updates to This Privacy Policy

We reserve the right to modify or update this Privacy Policy at any time. Any changes will become effective immediately upon posting the updated policy on our Site. The "Last Updated" date at the top of this page indicates when the latest revisions were made.

10. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our website data practices, please contact our Privacy Coordinator:

  • Business Name: Crest IV Management LLC

  • Attn: Privacy Coordinator

  • Email: info@crestivtherapy.com

  • Phone: 936-282-5529

  • Mailing Address: 8708 Technology Forest Pl, Suite 175 PMB1063, The Woodlands, TX 77381